This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json) Hash identifier: DvFcSsPttnaK/IS8gucOJ4JhneG4EJPfRIYZKksIKvs= Subject key identifier: 19:9D:9F:7F:83:48:B8:44:95:0E:5F:85:4D:4A:08:DD:EC:08:B6:84 Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019B73A32FB2A388CDDECA6F9F520544837C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft Manifest number: 0C0E Signing time: Wed 31 Dec 2025 09:00:32 +0000 Manifest this update: Wed 31 Dec 2025 09:00:32 +0000 Manifest next update: Thu 01 Jan 2026 09:00:32 +0000 Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: xaZA+G8c4V+7Nste65fXEPPpfB5DphrYtyz4pummu24=) 2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:a3:2f:b2:a3:88:cd:de:ca:6f:9f:52:05:44:83:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Dec 31 09:00:32 2025 GMT Not After : Jan 1 09:00:32 2026 GMT Subject: CN=199d9f7f8348b844950e5f854d4a08ddec08b684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:c9:50:3a:1e:8f:5d:f5:9f:ef:6e:eb:35: ad:c6:88:34:5e:f5:9b:eb:f0:50:f6:20:53:80:5c: 6e:ef:05:5f:fa:e2:73:d6:2d:61:ac:b2:b2:69:a3: 3c:89:51:0b:95:40:85:30:ce:3b:14:19:82:73:97: 6e:cc:d1:ec:8d:57:4b:e0:45:48:ff:11:51:1c:5f: 3a:c2:d9:1f:a3:2c:97:62:bc:42:ae:7f:1e:9e:58: 7e:90:4a:b5:63:23:00:e8:d5:ac:d3:c3:d2:a0:75: 8a:53:72:f1:7c:b5:81:e8:2f:44:83:82:d2:b6:7d: 2e:00:20:c5:f1:02:aa:8a:52:f6:73:33:e0:d6:ae: 93:58:b1:05:a4:ff:fa:66:0d:9c:9e:5d:22:4b:ee: c7:99:1b:11:5b:3c:b6:9c:c3:b7:70:8b:3d:f8:e1: 19:49:3c:3a:eb:a4:a5:9a:77:ca:df:09:a7:9f:1b: 90:f6:5d:19:9f:2c:a9:da:a7:fe:9e:cb:60:1b:1e: de:28:c7:07:48:26:e1:6c:32:1e:fd:b6:cd:0e:be: 1b:2d:1e:43:26:1c:fb:f0:08:22:41:60:8f:33:e4: 43:ae:c5:13:68:70:3e:9b:79:17:88:76:1c:e8:0d: e3:28:12:04:a8:09:6b:7b:73:d4:9b:96:98:f1:b0: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:9F:7F:83:48:B8:44:95:0E:5F:85:4D:4A:08:DD:EC:08:B6:84 X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4a:66:5b:8c:f4:d6:19:99:59:c6:97:76:93:27:be:22:64: 1c:57:36:20:ce:ea:6d:18:f0:10:e6:9c:91:c4:97:d2:2f:52: a2:19:38:5f:22:52:d1:12:3e:08:d9:f8:c4:b2:bf:5c:81:39: 51:2b:24:55:50:06:dd:8f:57:5e:2e:a8:3b:03:a7:3d:aa:bc: 52:50:a8:9b:da:1d:ff:e9:af:6f:56:a2:fc:fc:51:7a:f7:8c: 1a:d9:28:bb:68:c2:cd:7f:a2:d0:16:4e:78:d3:69:8e:8c:5c: 66:8a:e4:4d:c4:30:d3:50:8f:08:38:a4:4b:63:f9:b4:6b:e5: 25:4a:57:07:30:e0:74:2a:39:ff:f3:14:28:04:60:0a:e3:b5: 15:49:5d:76:93:62:2a:ad:63:62:59:2c:af:97:8e:2e:94:2a: f4:fc:35:fe:bd:b4:09:7e:21:19:aa:d0:f7:8a:34:9b:73:9e: c3:04:3e:b5:c4:a4:09:c7:40:24:1f:a4:65:2c:28:8f:4c:fb: 28:63:b5:81:c3:ae:55:f3:64:44:2a:09:bb:a4:61:2a:22:b7: 91:c9:46:0c:0b:13:80:67:e1:c8:9a:9a:46:bb:99:c7:78:cc: f0:63:f0:93:87:a5:2e:88:88:69:60:c7:30:45:fe:4d:1c:dc: 86:c2:ec:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzoy+yo4jN3spvn1IFRIN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjUxMjMxMDkwMDMyWhcNMjYwMTAxMDkwMDMyWjAzMTEwLwYDVQQD EygxOTlkOWY3ZjgzNDhiODQ0OTUwZTVmODU0ZDRhMDhkZGVjMDhiNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXJUDoej131n+9u6zWtxog0XvWb 6/BQ9iBTgFxu7wVf+uJz1i1hrLKyaaM8iVELlUCFMM47FBmCc5duzNHsjVdL4EVI /xFRHF86wtkfoyyXYrxCrn8enlh+kEq1YyMA6NWs08PSoHWKU3LxfLWB6C9Eg4LS tn0uACDF8QKqilL2czPg1q6TWLEFpP/6Zg2cnl0iS+7HmRsRWzy2nMO3cIs9+OEZ STw666SlmnfK3wmnnxuQ9l0Znyyp2qf+nstgGx7eKMcHSCbhbDIe/bbNDr4bLR5D Jhz78AgiQWCPM+RDrsUTaHA+m3kXiHYc6A3jKBIEqAlre3PUm5aY8bBZhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmdn3+DSLhElQ5fhU1KCN3sCLaEMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUpmW4z0 1hmZWcaXdpMnviJkHFc2IM7qbRjwEOackcSX0i9Sohk4XyJS0RI+CNn4xLK/XIE5 USskVVAG3Y9XXi6oOwOnPaq8UlCom9od/+mvb1ai/PxReveMGtkou2jCzX+i0BZO eNNpjoxcZorkTcQw01CPCDikS2P5tGvlJUpXBzDgdCo5//MUKARgCuO1FUlddpNi Kq1jYlksr5eOLpQq9Pw1/r20CX4hGarQ94o0m3OewwQ+tcSkCcdAJB+kZSwoj0z7 KGO1gcOuVfNkRCoJu6RhKiK3kclGDAsTgGfhyJqaRruZx3jM8GPwk4elLoiIaWDH MEX+TRzchsLsZQ== -----END CERTIFICATE-----Generated at Wed Dec 31 12:16:40 2025 by rpki-client