This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json) Hash identifier: jZi0cipH1auRnZoiTQLQ4zFf8WBUMQbh6aaZ/5cJPHc= Subject key identifier: A7:EB:9E:26:1B:A0:6E:3C:C8:1E:80:AC:84:AC:48:2D:3C:07:32:97 Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019B3E6E14D040F6F3A8F32A37457BDD55BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 01:02:40 +0000 Manifest this update: Sun 21 Dec 2025 01:02:40 +0000 Manifest next update: Mon 22 Dec 2025 01:02:40 +0000 Files and hashes: 1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=) 2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: 9r9p/GeIf8kn7BU3QXTwOAdYFMN2ztNhFPxjtuxr2t4=) 3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=) 4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=) 5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=) 6: pt0lS1m3NLfN-ZlG6LR_u92_6So.roa (hash: 5VENDpQR+7VNnLE+YBum+RFRq29jqQtAdKpAJMhSuxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:14:d0:40:f6:f3:a8:f3:2a:37:45:7b:dd:55:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Dec 21 01:02:40 2025 GMT Not After : Dec 22 01:02:40 2025 GMT Subject: CN=a7eb9e261ba06e3cc81e80ac84ac482d3c073297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:df:30:6c:cd:71:66:43:8a:f7:eb:5a:34: cb:98:ac:a4:6b:05:dd:d1:d0:9a:1a:da:b4:8c:9b: e7:78:eb:93:45:92:4b:f3:29:d1:05:ea:56:b8:47: 3c:3d:59:e5:19:84:64:3e:a2:d3:e4:38:2d:af:27: 56:ba:87:ff:0a:47:f9:49:0b:e0:5e:0a:0a:4d:44: d2:df:d2:4a:5c:d7:b8:79:aa:2b:5e:82:64:27:46: e9:99:0d:41:e7:71:d4:0e:40:43:c7:30:9a:8a:3e: 2d:e4:30:ce:f0:5d:ad:8b:55:ba:ac:fc:26:0d:d2: bb:fc:62:b1:64:79:45:c9:dd:3c:ac:3a:66:ca:30: 0c:f5:db:ae:07:57:68:ad:83:54:76:81:e7:da:1a: a6:3c:a0:cb:11:1b:ae:b6:bd:a5:f8:cb:3d:f5:d3: 1f:05:90:09:64:23:55:0f:ad:6e:a7:85:2a:86:41: ca:3e:ba:26:86:ba:8c:44:58:59:5a:2b:85:11:f7: 74:f0:df:45:58:18:9a:45:36:b1:93:3d:be:22:17: b5:1c:d5:98:17:80:e2:ce:c3:81:08:b2:1b:d9:55: 72:fe:ac:f1:92:9f:99:1c:fc:32:e4:02:4e:18:54: 3c:08:ee:e3:84:fb:4b:c8:c4:d2:2b:a5:31:3d:3b: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:9E:26:1B:A0:6E:3C:C8:1E:80:AC:84:AC:48:2D:3C:07:32:97 X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:35:a3:19:76:9b:c8:13:92:ff:3f:59:d6:fc:eb:b0:10:bd: 52:de:98:60:b4:27:76:7a:4d:83:12:ef:61:5b:e2:03:cc:1f: f3:f9:d6:f3:c4:22:a5:91:1e:77:9c:b7:45:5c:f7:cc:a0:04: 07:78:c2:2d:e7:5e:c2:18:3e:0b:0b:d3:37:b2:90:2a:8f:70: 0f:ad:68:76:7a:ec:28:7e:54:29:b3:7e:75:f3:99:2a:f0:a9: c3:4e:0f:e4:2e:65:69:06:4a:69:93:50:eb:79:21:fa:9f:b1: 76:df:0e:52:8a:58:12:cc:77:07:35:18:13:0a:37:d2:15:9d: d6:53:25:a7:a0:95:67:a9:de:c6:b1:08:08:2c:c7:aa:c4:33: 35:c6:f9:4d:41:42:3c:f3:01:07:07:5a:01:b7:ab:aa:a0:ec: e5:86:12:38:b3:89:0f:b8:74:36:3e:6d:b9:41:64:36:a3:5a: 09:33:47:a4:dc:5c:ed:f2:2c:65:14:cd:ba:2d:de:c3:16:7c: 43:b2:47:91:3d:29:cf:a5:c4:7d:0a:c2:c1:04:25:9f:1c:38: 86:87:63:b6:b6:34:7c:9d:e4:6d:e2:0d:91:f9:fb:25:2e:38: 01:1b:03:15:73:57:3a:4c:f3:b2:55:d4:a2:6c:fd:e4:10:74: 66:89:54:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bhTQQPbzqPMqN0V73VW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjUxMjIxMDEwMjQwWhcNMjUxMjIyMDEwMjQwWjAzMTEwLwYDVQQD EyhhN2ViOWUyNjFiYTA2ZTNjYzgxZTgwYWM4NGFjNDgyZDNjMDczMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA477fMGzNcWZDivfrWjTLmKykawXd 0dCaGtq0jJvneOuTRZJL8ynRBepWuEc8PVnlGYRkPqLT5DgtrydWuof/Ckf5SQvg XgoKTUTS39JKXNe4eaorXoJkJ0bpmQ1B53HUDkBDxzCaij4t5DDO8F2ti1W6rPwm DdK7/GKxZHlFyd08rDpmyjAM9duuB1dorYNUdoHn2hqmPKDLERuutr2l+Ms99dMf BZAJZCNVD61up4UqhkHKPromhrqMRFhZWiuFEfd08N9FWBiaRTaxkz2+Ihe1HNWY F4DizsOBCLIb2VVy/qzxkp+ZHPwy5AJOGFQ8CO7jhPtLyMTSK6UxPTvZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfrniYboG48yB6ArISsSC08BzKXMB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTWjGXab yBOS/z9Z1vzrsBC9Ut6YYLQndnpNgxLvYVviA8wf8/nW88QipZEed5y3RVz3zKAE B3jCLedewhg+CwvTN7KQKo9wD61odnrsKH5UKbN+dfOZKvCpw04P5C5laQZKaZNQ 63kh+p+xdt8OUopYEsx3BzUYEwo30hWd1lMlp6CVZ6nexrEICCzHqsQzNcb5TUFC PPMBBwdaAberqqDs5YYSOLOJD7h0Nj5tuUFkNqNaCTNHpNxc7fIsZRTNui3ewxZ8 Q7JHkT0pz6XEfQrCwQQlnxw4hodjtrY0fJ3kbeINkfn7JS44ARsDFXNXOkzzslXU omz95BB0ZolUdw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:47:30 2025 by rpki-client