This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json) Hash identifier: +l/EN4ywyjlVCOlQoEZJ3Bva7SpyAF26wJR/81xQf4I= Subject key identifier: A0:F2:0B:D8:76:C5:7A:DF:B0:78:6F:DD:DE:C4:77:25:AC:12:52:FE Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590 Certificate serial: 019B3CB55EB9C7874B6F8EA02CF2C66A251D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft Manifest number: 1044 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: ZPtLsNfJTV0gi7N0LpI0hrDE8/nlsAvA2cSFNmzx6BQ=) 2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=) 3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5e:b9:c7:87:4b:6f:8e:a0:2c:f2:c6:6a:25:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590 Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=a0f20bd876c57adfb0786fdddec47725ac1252fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:7f:ed:4d:9a:5c:0f:c3:1b:5f:a2:c0:26: 2a:e1:8b:c5:e4:1f:e4:4b:96:d9:42:d8:08:b2:3d: 0d:70:35:e3:4c:51:c8:d7:3e:1f:f9:cd:1e:ee:59: 55:4c:e0:1a:19:33:ab:14:c4:58:23:64:5a:47:c4: 82:a7:9d:36:45:e3:45:1d:7c:85:63:07:dc:72:eb: 53:72:3e:6f:29:ce:2b:81:50:33:79:bf:cd:b2:14: 42:7c:ce:2e:db:e9:64:64:0f:f2:e1:b5:23:66:ca: 82:61:56:86:d4:e0:8d:bc:55:87:a8:95:6d:0a:76: 70:82:b2:b6:fc:0c:8e:34:a9:e6:ef:41:df:1a:56: 06:50:7d:aa:1f:44:24:fd:e3:a4:6d:89:35:13:b9: 32:81:f4:af:fd:2f:8f:5d:9a:e2:7a:b4:b0:0f:17: d1:ed:e5:7f:d0:2e:c4:a0:5a:ea:04:42:41:36:8c: 09:8d:a4:f4:4e:63:03:10:a7:f0:b3:c2:b0:24:bd: 00:2c:91:6d:77:2c:89:a8:77:96:79:ba:7f:21:b6: 9a:7f:23:1f:86:02:c3:66:95:21:43:aa:8b:0c:ee: cd:55:2f:1b:20:89:b7:9b:2b:d9:08:3b:40:07:fd: 31:a7:b5:e2:e8:df:49:a7:c6:3e:24:82:82:7f:fe: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:0B:D8:76:C5:7A:DF:B0:78:6F:DD:DE:C4:77:25:AC:12:52:FE X509v3 Authority Key Identifier: keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:18:50:00:12:e3:b8:27:72:84:02:d4:d2:49:22:be:71:5e: 1d:26:1a:6d:82:5e:04:d6:f5:dc:d5:6a:28:a2:f7:e2:17:61: 18:3f:56:a5:05:b5:12:ef:53:76:09:1f:cf:7c:8f:47:d8:b0: 47:6f:c1:94:1d:56:51:66:ca:10:d6:b9:5c:e0:55:ef:82:a6: 73:2f:3c:ca:ce:ae:30:04:f1:33:b2:6c:76:31:cd:13:f9:b2: 30:f4:56:e6:86:a6:ad:80:52:9f:4a:0a:ef:0a:3e:0c:8b:72: f0:ef:b5:c4:94:81:bd:e7:d7:1b:1a:b0:a8:0a:96:99:58:d1: 56:a8:df:c3:d7:94:e7:6f:ab:42:15:bd:6d:78:53:2a:20:29: 66:ca:5c:b0:55:36:a7:25:12:74:3f:9b:4d:46:3c:03:3f:1f: e7:5b:e1:0a:3d:9c:2b:33:dc:cb:03:24:25:97:fc:93:dc:bc: 1e:c8:90:2d:98:c9:2d:d6:ea:b3:68:1b:8b:17:60:51:81:3d: 4e:0c:8e:16:55:ec:cb:09:9f:56:61:b8:3a:84:29:43:07:51: 84:b8:7b:1d:8c:39:6a:33:f4:e8:7d:8c:94:20:36:d9:2c:d4: 90:dd:f3:3a:82:b7:2e:c9:fd:ae:8f:70:cc:e0:6c:3d:da:97: 3d:10:51:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV65x4dLb46gLPLGaiUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1 ODM1OTAwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD EyhhMGYyMGJkODc2YzU3YWRmYjA3ODZmZGRkZWM0NzcyNWFjMTI1MmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t5/7U2aXA/DG1+iwCYq4YvF5B/k S5bZQtgIsj0NcDXjTFHI1z4f+c0e7llVTOAaGTOrFMRYI2RaR8SCp502ReNFHXyF YwfccutTcj5vKc4rgVAzeb/NshRCfM4u2+lkZA/y4bUjZsqCYVaG1OCNvFWHqJVt CnZwgrK2/AyONKnm70HfGlYGUH2qH0Qk/eOkbYk1E7kygfSv/S+PXZrierSwDxfR 7eV/0C7EoFrqBEJBNowJjaT0TmMDEKfws8KwJL0ALJFtdyyJqHeWebp/IbaafyMf hgLDZpUhQ6qLDO7NVS8bIIm3myvZCDtAB/0xp7Xi6N9Jp8Y+JIKCf/639QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDyC9h2xXrfsHhv3d7EdyWsElL+MB8GA1UdIwQY MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3 LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhhQABLj uCdyhALU0kkivnFeHSYabYJeBNb13NVqKKL34hdhGD9WpQW1Eu9Tdgkfz3yPR9iw R2/BlB1WUWbKENa5XOBV74Kmcy88ys6uMATxM7JsdjHNE/myMPRW5oamrYBSn0oK 7wo+DIty8O+1xJSBvefXGxqwqAqWmVjRVqjfw9eU52+rQhW9bXhTKiApZspcsFU2 pyUSdD+bTUY8Az8f51vhCj2cKzPcywMkJZf8k9y8HsiQLZjJLdbqs2gbixdgUYE9 TgyOFlXsywmfVmG4OoQpQwdRhLh7HYw5ajP06H2MlCA22SzUkN3zOoK3Lsn9ro9w zOBsPdqXPRBRnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:52 2025 by rpki-client