This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json) Hash identifier: mWjSlvQlq6bkymW57QjIxqQob7VA/nrFJtQ7w61kA+g= Subject key identifier: DD:31:F4:59:60:2C:2D:74:4F:C8:67:66:51:FB:71:60:03:72:9B:F8 Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a Certificate serial: 019B52CEE81B771C120ECE94A8665C01FF9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft Manifest number: 0BFF Signing time: Thu 25 Dec 2025 00:00:50 +0000 Manifest this update: Thu 25 Dec 2025 00:00:50 +0000 Manifest next update: Fri 26 Dec 2025 00:00:50 +0000 Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: U6oPDEucnfkEOrfQj3fQNrYQ+q6dGeU2yyL4BDQi9JU=) 2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:e8:1b:77:1c:12:0e:ce:94:a8:66:5c:01:ff:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a Validity Not Before: Dec 25 00:00:50 2025 GMT Not After : Dec 26 00:00:50 2025 GMT Subject: CN=dd31f459602c2d744fc8676651fb716003729bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:fc:fd:02:92:39:f8:14:c1:93:ac:17:e2: c1:ab:50:2e:33:fd:ca:2a:b9:af:95:f7:78:2e:f8: f8:11:65:58:86:59:2e:86:bd:e3:0f:6c:dc:f0:b7: b3:50:57:2a:81:67:08:da:02:f2:9a:0d:90:fa:36: 8d:15:8c:c0:38:3e:39:37:88:b7:fc:b2:d9:98:a8: 4b:25:80:11:b3:83:22:58:c5:f2:ac:5e:6a:29:ba: e1:a1:c5:42:34:ea:f2:d8:e5:c3:6f:41:31:01:fa: f6:fa:8b:53:c6:21:70:1c:1a:4d:b5:43:dc:a6:f0: 16:1d:f1:6b:2d:be:28:ec:fb:ed:ce:7b:32:2a:fb: b0:5b:23:6d:df:ee:da:a3:32:8c:cf:c4:3a:3e:ec: c4:d2:e7:11:18:46:f0:6f:d6:d7:8b:40:0d:8b:56: 58:49:68:01:b0:f4:82:15:05:fd:28:45:19:83:a5: 0a:12:b5:a5:83:f2:a6:33:d6:c4:15:08:68:6a:67: 40:51:f8:36:13:6c:18:3b:26:33:28:99:1b:de:67: f5:3c:5d:e6:a5:02:f1:e7:c1:ca:e7:80:8c:f7:f6: c7:83:f6:be:91:12:71:11:8d:4e:8b:7f:7c:75:45: 86:fd:86:39:b7:90:4a:95:d3:1f:de:27:88:c4:58: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:31:F4:59:60:2C:2D:74:4F:C8:67:66:51:FB:71:60:03:72:9B:F8 X509v3 Authority Key Identifier: keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7d:58:ba:81:f4:9d:e2:15:f5:28:b9:27:07:14:4f:ec:9e: 14:18:ad:65:b3:54:a3:e1:d8:48:6a:a5:d4:b5:c4:0e:3e:a8: 68:e7:83:9d:5b:4c:42:0c:23:2b:5c:f7:f1:16:56:2f:f0:e0: ec:3c:7f:b8:f4:70:b8:0b:89:35:09:38:2b:3e:4f:ad:1b:c8: 6f:b6:95:79:e2:04:f4:c4:15:b1:c5:c4:80:27:20:da:60:a2: 06:e6:d2:ee:80:d9:7c:c2:0d:e0:2a:a0:95:c2:9a:ea:c8:3c: 05:1f:43:2e:1e:ab:73:3a:0f:05:1f:bd:ea:f2:6f:83:4a:fc: 19:fa:a9:17:39:8d:4f:65:09:eb:93:e2:16:18:73:91:31:bc: 31:98:66:fb:0e:5d:32:90:e2:ca:5d:24:9e:d8:ea:6a:fb:92: 74:64:fb:6a:f3:88:79:a8:27:e4:0f:86:bf:1e:bb:2c:41:d1: 99:ba:37:20:d6:e0:2d:58:63:d5:b1:6b:e7:b7:c1:71:a9:91: 57:db:a6:95:5d:f6:8b:4b:6a:11:f0:b6:75:69:b0:45:24:7b: 45:31:15:43:a8:3a:c3:69:a1:71:05:5b:5e:70:01:a3:d1:7b: 44:f0:a2:4c:4d:fd:47:85:c0:56:e7:7b:6d:4a:41:a3:b1:1c: bb:a6:13:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzugbdxwSDs6UqGZcAf+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0 NzMwOGEwHhcNMjUxMjI1MDAwMDUwWhcNMjUxMjI2MDAwMDUwWjAzMTEwLwYDVQQD EyhkZDMxZjQ1OTYwMmMyZDc0NGZjODY3NjY1MWZiNzE2MDAzNzI5YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruz8/QKSOfgUwZOsF+LBq1AuM/3K Krmvlfd4Lvj4EWVYhlkuhr3jD2zc8LezUFcqgWcI2gLymg2Q+jaNFYzAOD45N4i3 /LLZmKhLJYARs4MiWMXyrF5qKbrhocVCNOry2OXDb0ExAfr2+otTxiFwHBpNtUPc pvAWHfFrLb4o7PvtznsyKvuwWyNt3+7aozKMz8Q6PuzE0ucRGEbwb9bXi0ANi1ZY SWgBsPSCFQX9KEUZg6UKErWlg/KmM9bEFQhoamdAUfg2E2wYOyYzKJkb3mf1PF3m pQLx58HK54CM9/bHg/a+kRJxEY1Oi398dUWG/YY5t5BKldMf3ieIxFj02wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0x9FlgLC10T8hnZlH7cWADcpv4MB8GA1UdIwQY MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt ZDFhNGE0NWZhZmJjLzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX1YuoH0 neIV9Si5JwcUT+yeFBitZbNUo+HYSGql1LXEDj6oaOeDnVtMQgwjK1z38RZWL/Dg 7Dx/uPRwuAuJNQk4Kz5PrRvIb7aVeeIE9MQVscXEgCcg2mCiBubS7oDZfMIN4Cqg lcKa6sg8BR9DLh6rczoPBR+96vJvg0r8GfqpFzmNT2UJ65PiFhhzkTG8MZhm+w5d MpDiyl0kntjqavuSdGT7avOIeagn5A+Gvx67LEHRmbo3INbgLVhj1bFr57fBcamR V9umlV32i0tqEfC2dWmwRSR7RTEVQ6g6w2mhcQVbXnABo9F7RPCiTE39R4XAVud7 bUpBo7Ecu6YTUQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:04:21 2025 by rpki-client