This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json) Hash identifier: npVsaZcf+gzvt80ehR3Qtzzt/5MD4FFq7Qxi/xhRGcM= Subject key identifier: 89:5C:7C:74:60:8E:7F:7E:F2:0E:F5:5E:EC:CD:7A:68:EF:01:DC:9C Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff Certificate serial: 019B42496E942BB8AFDAF8FAC4B5905AED86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft Manifest number: 1461 Signing time: Sun 21 Dec 2025 19:01:07 +0000 Manifest this update: Sun 21 Dec 2025 19:01:07 +0000 Manifest next update: Mon 22 Dec 2025 19:01:07 +0000 Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: BdBiai7aFxMfUm8HOk2ojhDh7+WtjoI05yJvr4iyHaU=) 2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:6e:94:2b:b8:af:da:f8:fa:c4:b5:90:5a:ed:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff Validity Not Before: Dec 21 19:01:07 2025 GMT Not After : Dec 22 19:01:07 2025 GMT Subject: CN=895c7c74608e7f7ef20ef55eeccd7a68ef01dc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:24:92:8e:eb:d6:99:d1:ae:63:37:e9:eb: af:e7:e5:fc:46:79:6c:df:21:b8:87:1c:25:1d:9b: 67:4f:a6:14:60:c7:b9:b3:ef:e6:7f:1c:67:a2:f0: 5a:e9:64:9e:4a:18:4e:72:48:d0:9e:37:b1:79:b6: f5:d3:72:a1:a6:f0:f1:37:4c:29:68:29:ba:f3:c0: e1:e7:70:05:c4:44:4d:17:50:f3:6e:c8:fb:30:a9: 19:46:d7:c8:cf:61:a5:f0:f8:33:8e:ec:d1:4b:5d: 74:2a:98:e2:8f:80:6c:53:2e:c3:96:27:b0:21:16: d9:f2:f1:31:e8:f3:1e:09:2f:e3:86:6a:14:10:e3: 31:5b:cc:1b:2b:2c:74:8b:8f:51:45:f4:9d:0c:35: 1b:5f:83:f3:78:b7:e0:de:5e:4b:69:36:13:eb:2d: a7:e9:0f:03:76:04:0f:4b:55:96:9d:8f:27:cf:9f: c3:be:b2:3b:96:cc:a0:26:65:f8:46:d4:62:c1:fb: a4:b0:13:b0:63:77:c7:9e:7e:79:5f:70:89:e2:8b: ad:d9:fc:0e:b9:b2:a4:28:5e:85:b8:d1:a7:ba:8e: 8e:47:f4:cb:fe:0c:14:a9:b4:d6:0c:54:c1:61:c8: ae:37:dd:bc:05:d3:cb:e2:53:47:e7:3f:ee:98:eb: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5C:7C:74:60:8E:7F:7E:F2:0E:F5:5E:EC:CD:7A:68:EF:01:DC:9C X509v3 Authority Key Identifier: keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:62:2e:83:b2:8b:e4:33:2e:2f:41:2d:88:3f:4b:15:2f:13: de:e0:22:ec:5a:36:bf:14:d0:cc:74:78:82:b7:5c:63:b3:84: d4:57:22:8a:28:c4:f5:da:46:66:75:34:90:8a:99:e1:87:17: 47:66:85:68:30:7e:5c:fc:55:00:d7:77:fd:4e:22:56:30:22: 93:38:3d:7d:f9:e2:36:f9:40:ae:7e:d0:5c:bd:0b:70:99:21: 43:bf:3f:50:0b:e3:9b:e4:46:4b:1b:9e:bf:1a:b3:13:2c:e4: ea:43:16:29:21:30:9d:95:fd:a8:fb:e8:31:70:80:42:6a:9e: 2c:af:cd:94:95:42:94:5d:3b:d0:bf:5c:32:1d:1b:79:97:21: 29:55:44:4c:64:55:fe:32:fb:92:8c:64:31:bf:24:fa:89:7e: 18:fe:92:31:02:6b:d6:a8:dc:3f:9a:9f:90:54:73:ae:55:54: bf:49:bc:ec:ca:bc:3f:e4:ef:6c:22:c1:d8:87:1c:0b:83:27: d8:6f:2f:3b:45:0b:79:ed:09:88:e6:90:cf:f9:b4:40:4e:ab: 78:55:91:37:e1:36:96:73:77:24:03:45:c4:21:53:03:e0:5a: 25:07:e8:ff:3c:53:81:6b:e3:7d:15:b6:5d:79:b3:cf:5c:9a: 37:a6:f9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSW6UK7iv2vj6xLWQWu2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj NzNhZmYwHhcNMjUxMjIxMTkwMTA3WhcNMjUxMjIyMTkwMTA3WjAzMTEwLwYDVQQD Eyg4OTVjN2M3NDYwOGU3ZjdlZjIwZWY1NWVlY2NkN2E2OGVmMDFkYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Ukko7r1pnRrmM36euv5+X8Rnls 3yG4hxwlHZtnT6YUYMe5s+/mfxxnovBa6WSeShhOckjQnjexebb103KhpvDxN0wp aCm688Dh53AFxERNF1Dzbsj7MKkZRtfIz2Gl8PgzjuzRS110Kpjij4BsUy7Dliew IRbZ8vEx6PMeCS/jhmoUEOMxW8wbKyx0i49RRfSdDDUbX4PzeLfg3l5LaTYT6y2n 6Q8DdgQPS1WWnY8nz5/DvrI7lsygJmX4RtRiwfuksBOwY3fHnn55X3CJ4out2fwO ubKkKF6FuNGnuo6OR/TL/gwUqbTWDFTBYciuN928BdPL4lNH5z/umOuncwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlcfHRgjn9+8g71XuzNemjvAdycMB8GA1UdIwQY MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmIug7KL 5DMuL0EtiD9LFS8T3uAi7Fo2vxTQzHR4grdcY7OE1FciiijE9dpGZnU0kIqZ4YcX R2aFaDB+XPxVANd3/U4iVjAikzg9ffniNvlArn7QXL0LcJkhQ78/UAvjm+RGSxue vxqzEyzk6kMWKSEwnZX9qPvoMXCAQmqeLK/NlJVClF070L9cMh0beZchKVVETGRV /jL7koxkMb8k+ol+GP6SMQJr1qjcP5qfkFRzrlVUv0m87Mq8P+TvbCLB2IccC4Mn 2G8vO0ULee0JiOaQz/m0QE6reFWRN+E2lnN3JANFxCFTA+BaJQfo/zxTgWvjfRW2 XXmzz1yaN6b5WA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:33 2025 by rpki-client