This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json) Hash identifier: Y6oHdy+4Na5sMm6RyDQ+2ntYKdpWs8o0Bui1IKO5pQM= Subject key identifier: 17:FF:54:41:5D:F3:34:6A:65:52:D6:35:E9:0C:9F:84:3B:B8:FD:FE Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f Certificate serial: 019B6CC62DD4A86E5175C10497E295FAF105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 01:01:25 +0000 Manifest this update: Tue 30 Dec 2025 01:01:25 +0000 Manifest next update: Wed 31 Dec 2025 01:01:25 +0000 Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: YWLzq1n8DiRm6i36x4wDf4KkNPsZas25u0TmLsIGUKM=) 2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:2d:d4:a8:6e:51:75:c1:04:97:e2:95:fa:f1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f Validity Not Before: Dec 30 01:01:25 2025 GMT Not After : Dec 31 01:01:25 2025 GMT Subject: CN=17ff54415df3346a6552d635e90c9f843bb8fdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:a4:67:44:14:20:c0:51:c5:44:42:11:e8: be:12:b2:f3:73:ea:5f:ba:4d:55:44:d4:a0:87:59: 15:f2:72:ca:bd:e9:68:6d:98:81:70:6a:e1:42:86: 41:57:37:d6:84:9c:ba:ae:9b:fd:b6:9f:f8:f1:81: c4:92:db:97:87:44:49:e4:c8:d2:6d:64:ea:8a:fc: 00:62:04:54:b6:23:1c:f4:be:0e:72:4a:0e:c2:0b: 69:7b:d9:f3:46:fb:82:ba:9d:28:2c:55:36:9f:d5: d3:b4:f9:d0:b5:28:a1:02:47:ab:80:2d:bb:a0:9a: b6:8b:29:e9:c9:6d:a9:7e:77:9b:1e:6e:02:fe:78: a2:23:56:63:80:c9:ee:9e:9c:10:4c:a5:a2:37:12: 5f:31:08:b7:3e:c0:60:c3:5f:bd:b3:ef:e7:ab:8d: 10:61:5e:cb:31:f6:da:13:7f:82:df:22:cf:9f:fa: bd:8f:58:44:ed:6b:95:8f:b5:12:a5:df:ae:dd:c0: 41:28:80:47:d9:c0:95:8d:69:8b:23:65:1d:b3:a6: a0:cc:6b:10:dc:ef:6c:77:ea:18:fa:21:1c:c0:e7: e3:19:9f:65:e0:2e:bd:f3:21:05:9f:24:dd:27:95: 37:6b:33:0c:e8:9e:65:e4:b4:00:65:84:bc:31:93: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:54:41:5D:F3:34:6A:65:52:D6:35:E9:0C:9F:84:3B:B8:FD:FE X509v3 Authority Key Identifier: keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d7:ef:9c:ae:b9:9d:c3:54:7c:9e:d7:39:34:6d:2c:1b:fd: 14:ea:1d:d5:48:ab:3a:ec:9f:d1:0d:7c:38:90:97:78:af:78: e0:19:e6:4a:5a:95:b4:98:46:cc:fd:43:ad:27:c0:03:e6:c8: b2:18:c8:39:ee:55:96:ff:12:36:50:d4:d5:da:2a:43:17:c1: dc:0b:eb:84:fc:db:a8:0c:20:e4:2b:0f:3e:65:89:c9:9e:13: 26:e7:0f:ce:7e:aa:83:74:7d:8b:2e:be:30:78:5f:08:88:74: 34:fc:f7:a3:ff:64:5a:53:e7:38:4b:b9:fa:22:fa:4f:64:39: bd:b7:e1:b7:06:bf:12:6e:b4:db:a5:e8:7d:36:e2:41:7d:2c: 2d:73:cd:5f:cd:0b:f9:28:1c:c0:f7:f7:5f:0c:1e:d9:66:d8: a1:d6:f5:57:ba:c0:4f:23:3a:73:ae:06:e3:aa:fa:bb:44:56: f6:a6:a5:72:61:b7:ba:38:79:70:3e:fb:da:ba:63:87:a5:a7: 73:c1:60:04:e8:c8:b2:fb:6f:0e:bb:fc:7a:75:7f:b2:1f:41: 65:95:48:c9:a1:d5:98:09:d7:5d:ac:d7:b4:2e:a2:2a:36:b6: f4:c1:6e:59:14:b7:9b:3b:5c:38:8d:c7:a3:fb:74:ea:4c:3c: 80:b4:e5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxi3UqG5RdcEEl+KV+vEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz ODQ1MWYwHhcNMjUxMjMwMDEwMTI1WhcNMjUxMjMxMDEwMTI1WjAzMTEwLwYDVQQD EygxN2ZmNTQ0MTVkZjMzNDZhNjU1MmQ2MzVlOTBjOWY4NDNiYjhmZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom+kZ0QUIMBRxURCEei+ErLzc+pf uk1VRNSgh1kV8nLKvelobZiBcGrhQoZBVzfWhJy6rpv9tp/48YHEktuXh0RJ5MjS bWTqivwAYgRUtiMc9L4OckoOwgtpe9nzRvuCup0oLFU2n9XTtPnQtSihAkergC27 oJq2iynpyW2pfnebHm4C/niiI1ZjgMnunpwQTKWiNxJfMQi3PsBgw1+9s+/nq40Q YV7LMfbaE3+C3yLPn/q9j1hE7WuVj7USpd+u3cBBKIBH2cCVjWmLI2Uds6agzGsQ 3O9sd+oY+iEcwOfjGZ9l4C698yEFnyTdJ5U3azMM6J5l5LQAZYS8MZPcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf/VEFd8zRqZVLWNekMn4Q7uP3+MB8GA1UdIwQY MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3 LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9fvnK65 ncNUfJ7XOTRtLBv9FOod1UirOuyf0Q18OJCXeK944BnmSlqVtJhGzP1DrSfAA+bI shjIOe5Vlv8SNlDU1doqQxfB3AvrhPzbqAwg5CsPPmWJyZ4TJucPzn6qg3R9iy6+ MHhfCIh0NPz3o/9kWlPnOEu5+iL6T2Q5vbfhtwa/Em6026XofTbiQX0sLXPNX80L +SgcwPf3Xwwe2WbYodb1V7rATyM6c64G46r6u0RW9qalcmG3ujh5cD772rpjh6Wn c8FgBOjIsvtvDrv8enV/sh9BZZVIyaHVmAnXXazXtC6iKja29MFuWRS3mztcOI3H o/t06kw8gLTluw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:19:18 2025 by rpki-client