This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json) Hash identifier: XYnxI6ats6ZQLTZuEE4B1ZypVQMdCm5RSRn8XFwMuyE= Subject key identifier: 3F:CD:AF:5C:A5:C3:24:29:A0:BE:1B:AD:29:15:57:94:BD:A3:4E:75 Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb Certificate serial: 019B2BF8E9466BAFF0861425AAED5D9E7BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:01:31 +0000 Manifest this update: Wed 17 Dec 2025 11:01:31 +0000 Manifest next update: Thu 18 Dec 2025 11:01:31 +0000 Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: oyD+S29fDYehkXEKqvAeC/u72g6/KQa0LOnpbdjJycQ=) 2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:e9:46:6b:af:f0:86:14:25:aa:ed:5d:9e:7b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb Validity Not Before: Dec 17 11:01:31 2025 GMT Not After : Dec 18 11:01:31 2025 GMT Subject: CN=3fcdaf5ca5c32429a0be1bad29155794bda34e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:59:bb:ec:7d:94:0e:1f:04:d7:4d:a8:3e: 53:4a:76:1b:4a:4a:c4:9b:09:fc:72:fb:73:13:02: e2:bc:be:7b:39:4b:09:5b:ed:09:1c:59:ac:5a:60: 12:73:92:33:d5:fc:c5:b8:90:4c:8b:b5:35:cd:b6: 83:16:8a:ed:03:be:dc:8b:b1:54:35:88:17:76:5f: 09:9d:d8:50:90:ca:80:4f:ab:2d:c4:d6:84:8f:d4: 90:97:06:5a:f1:b4:6b:90:ef:ec:21:00:ed:8f:31: 38:f9:a5:3c:a7:d6:73:37:f0:f9:a9:a8:d6:b1:11: 43:26:c4:cc:7c:07:51:d4:97:11:af:c0:11:1b:ea: c9:2e:98:bc:03:8f:d0:5a:7b:68:1e:83:21:ab:ed: 38:d3:7c:5a:d8:52:9e:0f:34:0b:45:b9:42:22:b2: 32:2c:27:00:d8:c0:99:be:4b:46:e0:21:d7:5e:ea: 64:47:a8:45:2e:a2:bb:67:52:a8:0e:5f:31:8e:ac: 00:08:dc:ea:3a:93:b7:42:1e:6f:74:7c:e1:82:4e: cf:82:ca:db:e1:d2:c9:0e:2f:04:3b:cf:ee:50:ab: ed:c2:ba:5a:7b:8c:25:ee:de:32:7d:7b:88:d8:e8: f2:a7:c4:09:a4:7f:ca:36:e4:dd:9c:2c:77:ea:0c: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:AF:5C:A5:C3:24:29:A0:BE:1B:AD:29:15:57:94:BD:A3:4E:75 X509v3 Authority Key Identifier: keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:52:e3:9a:e4:50:b0:32:f7:70:cb:77:aa:23:75:df:b4:86: 9e:b1:36:0c:0f:d0:1b:ab:a1:09:08:d9:a5:d6:be:09:4f:ad: 43:b4:09:82:0a:d2:8e:95:52:5f:37:bf:18:42:dc:47:ca:d0: ab:72:72:2e:bd:ba:72:b6:64:bf:c4:35:44:2c:80:a2:d1:4f: 6a:ef:64:0e:05:10:86:92:20:10:60:cd:4d:c5:eb:c7:1a:00: cc:1f:47:18:c8:af:84:c3:b3:3e:f3:c3:4d:23:fc:e8:68:ad: fa:1d:f4:7b:95:b2:64:cc:80:e8:25:2b:66:46:c5:89:af:e3: 68:a3:e5:d8:d1:3e:47:5a:f6:ca:e3:b9:60:01:8e:16:ef:b8: 7a:a7:79:c4:81:46:ff:dd:ca:7a:fd:5e:5b:32:93:81:06:12: b2:c7:bd:6e:68:4c:e7:82:6c:68:39:a7:04:36:0e:36:78:36: 31:72:cf:89:3f:7c:2d:54:82:03:0c:b2:05:15:8e:13:ed:db: cb:37:de:70:76:be:7b:d7:92:59:7a:67:51:16:71:12:25:01: 79:99:70:c5:f1:58:14:aa:1b:c4:37:06:f3:34:c9:a7:67:c8: 34:e1:6c:88:22:d1:f7:51:b5:4f:a1:a9:24:bb:e7:1a:56:45: 88:50:69:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+OlGa6/whhQlqu1dnnvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5 YTVlZGIwHhcNMjUxMjE3MTEwMTMxWhcNMjUxMjE4MTEwMTMxWjAzMTEwLwYDVQQD EygzZmNkYWY1Y2E1YzMyNDI5YTBiZTFiYWQyOTE1NTc5NGJkYTM0ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNZu+x9lA4fBNdNqD5TSnYbSkrE mwn8cvtzEwLivL57OUsJW+0JHFmsWmASc5Iz1fzFuJBMi7U1zbaDFortA77ci7FU NYgXdl8JndhQkMqAT6stxNaEj9SQlwZa8bRrkO/sIQDtjzE4+aU8p9ZzN/D5qajW sRFDJsTMfAdR1JcRr8ARG+rJLpi8A4/QWntoHoMhq+0403xa2FKeDzQLRblCIrIy LCcA2MCZvktG4CHXXupkR6hFLqK7Z1KoDl8xjqwACNzqOpO3Qh5vdHzhgk7Pgsrb 4dLJDi8EO8/uUKvtwrpae4wl7t4yfXuI2Ojyp8QJpH/KNuTdnCx36gyVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/Nr1ylwyQpoL4brSkVV5S9o051MB8GA1UdIwQY MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1LjmuRQ sDL3cMt3qiN137SGnrE2DA/QG6uhCQjZpda+CU+tQ7QJggrSjpVSXze/GELcR8rQ q3JyLr26crZkv8Q1RCyAotFPau9kDgUQhpIgEGDNTcXrxxoAzB9HGMivhMOzPvPD TSP86Git+h30e5WyZMyA6CUrZkbFia/jaKPl2NE+R1r2yuO5YAGOFu+4eqd5xIFG /93Kev1eWzKTgQYSsse9bmhM54JsaDmnBDYONng2MXLPiT98LVSCAwyyBRWOE+3b yzfecHa+e9eSWXpnURZxEiUBeZlwxfFYFKobxDcG8zTJp2fINOFsiCLR91G1T6Gp JLvnGlZFiFBpTg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:40 2025 by rpki-client