This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json) Hash identifier: Pwb0LL9eggJwf/8/sxmSS782ymlzZ6vOZv5e+4vKOec= Subject key identifier: D1:74:F3:FD:E4:D1:72:0C:AA:8D:47:10:EE:86:4C:E2:E5:53:C9:1F Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Certificate serial: 019B533D154AD62AD82EAD9CD341CFF62102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft Manifest number: 1728 Signing time: Thu 25 Dec 2025 02:01:10 +0000 Manifest this update: Thu 25 Dec 2025 02:01:10 +0000 Manifest next update: Fri 26 Dec 2025 02:01:10 +0000 Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: stJu4awNN1ale+hKLnd2OXwQESbUWQxZ3ZWJ7n1JHFw=) 2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:15:4a:d6:2a:d8:2e:ad:9c:d3:41:cf:f6:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Validity Not Before: Dec 25 02:01:10 2025 GMT Not After : Dec 26 02:01:10 2025 GMT Subject: CN=d174f3fde4d1720caa8d4710ee864ce2e553c91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:49:45:50:66:fa:2d:88:a2:04:d3:f0:cd:20: e6:4d:19:e2:85:39:a4:12:a1:b3:90:fe:4d:56:4e: b9:8d:e1:dc:23:22:9c:f8:46:1b:bf:a0:9b:54:30: 30:0c:cc:25:12:ea:42:3f:fb:b6:16:e4:13:ad:02: 7a:50:d0:b5:80:67:4c:69:0f:15:9d:36:cd:9c:ac: 0b:2a:9f:bb:c2:be:69:2e:b1:bb:04:90:ca:02:77: 51:a2:da:ba:b8:58:a8:6f:80:c7:5a:e1:e9:f4:8a: 3f:27:2e:ee:7f:22:77:69:61:1f:66:1e:3e:62:8a: 2f:19:4a:2f:2a:c2:84:5c:e0:f4:e3:84:cc:46:3a: 63:07:7f:d8:b6:a8:e7:0d:39:ff:03:c0:37:41:76: 69:77:86:0f:97:c6:cc:0f:51:58:54:fe:81:c6:5a: cd:63:c3:bf:ba:3a:d3:88:01:b6:70:de:1c:d4:29: 77:17:de:24:27:f2:66:d4:d2:1b:5e:26:0c:fb:fd: 2f:db:91:06:db:de:c5:a7:1c:61:e3:22:38:3a:d9: 99:5b:2a:7d:e6:9a:54:7a:e4:e0:52:c8:77:24:05: 28:a7:f3:f6:a9:14:28:1f:41:61:d7:13:83:d7:cd: 56:21:de:b0:bb:0f:dd:6c:50:74:65:92:24:85:23: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:74:F3:FD:E4:D1:72:0C:AA:8D:47:10:EE:86:4C:E2:E5:53:C9:1F X509v3 Authority Key Identifier: keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:1f:1c:4c:5f:82:5a:ea:1e:5a:a0:71:1d:f9:47:50:ce: f3:52:5c:e1:32:1b:39:74:41:20:37:c8:4f:c1:2c:32:03:1b: 31:5a:0a:e4:ec:d1:f9:5d:2b:8c:8d:09:5a:3c:d8:d2:2b:af: aa:43:6b:29:4d:f7:f7:1e:ce:8b:13:d7:68:59:a3:ad:31:2c: 60:a3:35:11:d5:ce:69:4a:99:f0:25:85:63:06:1e:94:b9:fb: 29:7d:9d:de:b6:35:47:c3:9b:78:4c:ee:98:61:fc:87:62:15: e0:c7:85:74:2d:fb:4a:7d:39:20:bb:fd:93:8b:ee:51:03:bc: 21:7b:ab:49:24:1d:46:95:95:d5:10:86:26:82:db:bf:8d:43: 0c:fa:12:07:49:41:90:72:ca:4d:da:f5:3c:02:92:68:88:9d: 58:1c:e7:d7:d2:e2:15:0e:af:4d:08:3c:6e:43:63:a2:74:fd: 15:2a:b1:61:08:7a:f6:8f:2f:11:c0:a5:dd:af:77:40:50:c9: 77:49:aa:27:3d:65:11:38:3f:4d:fb:12:a3:87:d0:86:f7:0f: c0:0e:49:32:46:c8:d8:6f:35:e4:ab:a7:cd:9d:4f:8a:5d:ae: 97:7e:c5:54:6f:08:9a:9d:e7:7e:a3:da:85:fb:82:1e:0f:28: dd:cc:9b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPRVK1irYLq2c00HP9iECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5 ZWQ0NDgwHhcNMjUxMjI1MDIwMTEwWhcNMjUxMjI2MDIwMTEwWjAzMTEwLwYDVQQD EyhkMTc0ZjNmZGU0ZDE3MjBjYWE4ZDQ3MTBlZTg2NGNlMmU1NTNjOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUlFUGb6LYiiBNPwzSDmTRnihTmk EqGzkP5NVk65jeHcIyKc+EYbv6CbVDAwDMwlEupCP/u2FuQTrQJ6UNC1gGdMaQ8V nTbNnKwLKp+7wr5pLrG7BJDKAndRotq6uFiob4DHWuHp9Io/Jy7ufyJ3aWEfZh4+ YoovGUovKsKEXOD044TMRjpjB3/YtqjnDTn/A8A3QXZpd4YPl8bMD1FYVP6BxlrN Y8O/ujrTiAG2cN4c1Cl3F94kJ/Jm1NIbXiYM+/0v25EG297Fpxxh4yI4OtmZWyp9 5ppUeuTgUsh3JAUop/P2qRQoH0Fh1xOD181WId6wuw/dbFB0ZZIkhSPXLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF08/3k0XIMqo1HEO6GTOLlU8kfMB8GA1UdIwQY MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt OTNjNjQ1N2NhZjMzLzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAkfHExf glrqHlqgcR35R1DO81Jc4TIbOXRBIDfIT8EsMgMbMVoK5OzR+V0rjI0JWjzY0iuv qkNrKU339x7OixPXaFmjrTEsYKM1EdXOaUqZ8CWFYwYelLn7KX2d3rY1R8ObeEzu mGH8h2IV4MeFdC37Sn05ILv9k4vuUQO8IXurSSQdRpWV1RCGJoLbv41DDPoSB0lB kHLKTdr1PAKSaIidWBzn19LiFQ6vTQg8bkNjonT9FSqxYQh69o8vEcCl3a93QFDJ d0mqJz1lETg/TfsSo4fQhvcPwA5JMkbI2G815KunzZ1Pil2ul37FVG8Imp3nfqPa hfuCHg8o3cybEw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:27:38 2025 by rpki-client