This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json) Hash identifier: rNpgaJhWZ+89mNJIn+xN9AB+aQIU5gjhoHK+ZGwND90= Subject key identifier: A1:10:CF:59:CA:30:0F:A1:A0:93:F2:FB:61:DE:6D:C6:D6:6F:8A:7B Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019B3D90E202D7E8AB8EA48E509EF1A94564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: BfywBjhot/iAXeGBM7PykRsjDFN+rPoiE/0lfzhQu0U=) 2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=) 3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=) 4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=) 5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e2:02:d7:e8:ab:8e:a4:8e:50:9e:f1:a9:45:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=a110cf59ca300fa1a093f2fb61de6dc6d66f8a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:66:a8:3e:46:4b:2c:13:fb:fc:96:fa:01: 2d:33:de:18:17:42:41:c3:cf:b3:3b:f3:9d:65:d8: ba:c5:46:ef:81:e6:d3:c2:a7:d6:60:b3:4d:e3:0e: 12:6d:93:db:9b:47:b2:a6:d2:ba:f2:3d:31:be:d9: 0d:b5:de:07:01:1a:8d:98:94:2b:d6:f5:25:c9:e4: 25:be:cd:54:94:a4:06:6d:d1:37:2f:85:14:a6:bc: 31:22:34:76:ec:1e:0f:2a:4a:02:d4:f9:2b:2c:9b: 72:de:b3:20:2d:0d:35:97:7c:3b:2b:a6:50:44:c4: aa:f2:ef:38:98:4c:3d:f3:a8:d8:45:22:16:fe:3f: ef:c5:21:82:4e:fd:fa:19:97:d1:7b:8d:8e:41:58: f4:96:25:80:22:c9:f7:97:da:16:80:61:07:c7:bc: 03:6a:e8:b6:61:d8:bd:23:3d:19:2a:35:c6:c4:eb: a9:b5:e6:e0:98:c0:49:f6:60:c4:74:d7:51:37:97: 5f:ea:75:dc:3e:bb:c1:a8:ab:72:a5:5c:fc:9c:fa: 0c:00:30:45:95:1f:30:21:24:35:1f:a5:b0:19:4b: a4:6d:d2:61:fc:61:ee:6b:da:68:e7:8d:6d:28:0a: f1:ff:f4:48:67:9a:8b:6a:05:70:1f:a2:6c:7b:6c: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:CF:59:CA:30:0F:A1:A0:93:F2:FB:61:DE:6D:C6:D6:6F:8A:7B X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b7:f9:b8:47:e4:b4:09:87:63:06:c6:9f:df:9e:fb:af:2a: 61:35:b9:1b:41:4a:79:4c:f5:7a:f2:83:92:8c:2b:27:ed:f8: 88:60:29:fc:75:f5:95:6e:7a:8d:1e:2f:9b:2d:a7:2c:75:f7: 40:96:f3:5e:34:36:ea:e0:60:b1:06:54:c3:f4:cf:1d:cf:f4: 5a:f5:c5:63:bf:64:09:c8:4d:b4:c7:16:0f:db:2c:8a:6c:41: a6:ce:44:cb:c7:1a:08:6a:97:c1:8c:a2:b7:78:d4:8c:da:d0: a6:97:5f:f8:8e:a4:53:e3:44:88:78:b2:3c:d3:98:ea:07:27: 86:c8:37:09:1c:86:15:2d:c4:68:54:bf:74:8b:84:29:b7:71: 1b:a8:42:b5:4d:0f:15:68:2c:87:9b:6b:46:89:0c:6e:7c:00: 82:d6:77:2e:f9:6a:df:79:b1:a0:a7:10:44:bc:12:11:c7:3c: e5:89:13:04:7a:96:32:40:f1:24:5f:3b:2b:cf:ea:a1:79:eb: 92:38:5b:a0:b2:1b:7d:2f:46:ae:3a:64:4e:ce:e3:73:e2:c4: 46:01:b6:8a:41:cc:f0:63:68:7f:30:ee:6f:f1:68:ca:d8:4b: 30:3e:e3:5d:b7:7f:84:40:91:18:a7:e9:24:f9:47:73:a4:00: ca:7f:96:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOIC1+irjqSOUJ7xqUVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD EyhhMTEwY2Y1OWNhMzAwZmExYTA5M2YyZmI2MWRlNmRjNmQ2NmY4YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yVmqD5GSywT+/yW+gEtM94YF0JB w8+zO/OdZdi6xUbvgebTwqfWYLNN4w4SbZPbm0eyptK68j0xvtkNtd4HARqNmJQr 1vUlyeQlvs1UlKQGbdE3L4UUprwxIjR27B4PKkoC1PkrLJty3rMgLQ01l3w7K6ZQ RMSq8u84mEw986jYRSIW/j/vxSGCTv36GZfRe42OQVj0liWAIsn3l9oWgGEHx7wD aui2Ydi9Iz0ZKjXGxOuptebgmMBJ9mDEdNdRN5df6nXcPrvBqKtypVz8nPoMADBF lR8wISQ1H6WwGUukbdJh/GHua9po541tKArx//RIZ5qLagVwH6Jse2x1TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEQz1nKMA+hoJPy+2HebcbWb4p7MB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7f5uEfk tAmHYwbGn9+e+68qYTW5G0FKeUz1evKDkowrJ+34iGAp/HX1lW56jR4vmy2nLHX3 QJbzXjQ26uBgsQZUw/TPHc/0WvXFY79kCchNtMcWD9ssimxBps5Ey8caCGqXwYyi t3jUjNrQppdf+I6kU+NEiHiyPNOY6gcnhsg3CRyGFS3EaFS/dIuEKbdxG6hCtU0P FWgsh5trRokMbnwAgtZ3Lvlq33mxoKcQRLwSEcc85YkTBHqWMkDxJF87K8/qoXnr kjhboLIbfS9GrjpkTs7jc+LERgG2ikHM8GNofzDub/FoythLMD7jXbd/hECRGKfp JPlHc6QAyn+WLg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:26 2025 by rpki-client