This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json) Hash identifier: i1cSEM9Vboorgrf5bsaLnsMOo1jrdSzMDItwZ0rELBM= Subject key identifier: C9:22:5D:D0:62:1C:D0:93:9A:4D:75:E6:65:C7:D4:80:A7:BF:23:7E Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8 Certificate serial: 019B3F11B5295145A65E68CE94563CE03E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 04:01:23 +0000 Manifest this update: Sun 21 Dec 2025 04:01:23 +0000 Manifest next update: Mon 22 Dec 2025 04:01:23 +0000 Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: xr7MvGXwV2AxdhveLzic6A0RYAp6k2TfCRyCZ+j0CeA=) 2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:b5:29:51:45:a6:5e:68:ce:94:56:3c:e0:3e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8 Validity Not Before: Dec 21 04:01:23 2025 GMT Not After : Dec 22 04:01:23 2025 GMT Subject: CN=c9225dd0621cd0939a4d75e665c7d480a7bf237e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:37:b9:3c:c6:b9:30:c0:da:33:49:3e:86: f8:47:3e:32:fd:01:26:bb:ff:96:6a:e2:2e:92:80: 7c:d9:8c:7a:96:e3:ee:d4:ad:73:ce:af:34:3f:9e: e4:a8:da:fc:80:4f:b2:50:77:f7:8d:3c:17:12:4f: f5:ab:e7:5f:5b:71:c5:bb:5d:06:32:6e:08:40:a7: 29:2f:e1:81:1f:5d:23:86:c6:70:76:f1:dd:5a:9a: e9:04:df:cf:d0:77:59:b0:39:1c:93:82:00:65:45: f4:a5:77:46:8e:8b:e3:e6:19:4a:b1:88:1f:d4:aa: 35:39:60:50:50:b6:43:5f:82:69:6d:25:63:49:00: ca:ee:14:c8:b9:ba:39:76:6a:b5:d4:db:c1:55:66: d5:30:3c:78:dd:66:70:ed:d7:21:aa:49:dd:fc:d9: b3:38:18:35:5d:37:7c:f1:ac:d3:6a:1a:d8:ee:3e: 89:a1:a0:66:ce:68:24:17:0f:e5:c2:09:c5:e2:eb: 68:77:9a:f7:41:f2:52:ce:66:4b:f7:ce:33:9e:95: 34:1f:dc:fb:dd:3a:87:90:51:5d:49:17:4e:eb:2c: 23:13:3c:8c:4c:a5:f8:42:6d:54:1c:27:4b:52:b7: 62:12:0d:9f:0d:5d:79:66:dd:9a:51:46:9c:61:1b: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:5D:D0:62:1C:D0:93:9A:4D:75:E6:65:C7:D4:80:A7:BF:23:7E X509v3 Authority Key Identifier: keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:05:2c:98:66:d9:ad:23:98:bc:be:f5:f2:b6:de:1d:81:9b: 34:5f:d7:7b:45:7b:3e:35:db:ce:97:86:2e:8d:d7:02:32:74: 51:f6:4f:eb:8e:ac:21:d6:3d:f8:90:77:96:32:c0:18:85:ab: c9:92:42:51:62:f6:9b:ad:19:04:96:87:60:42:92:99:bf:a6: ae:e6:1a:fe:49:f4:90:26:1a:aa:69:27:4f:50:81:3d:61:5f: 58:c3:e3:b6:a0:0b:61:fe:0b:28:a2:a2:08:ab:8b:4e:02:58: 92:6f:0d:7f:b3:d1:13:d4:42:59:ab:c5:4b:0b:e6:91:a7:d2: 11:04:d8:62:e7:0c:42:88:e6:a0:92:5c:10:23:a1:4b:a3:cc: 76:bd:fb:c0:95:25:a3:da:1f:ba:60:a0:6d:ce:c3:c1:1b:8f: 40:f4:73:8a:ae:8a:a3:c4:9c:d3:b6:b7:c7:b8:a1:3d:d8:86: 07:0c:d9:17:83:36:5b:9b:0d:ee:c2:d5:f2:62:81:2c:d1:93: a4:3e:3a:5a:f9:f6:7c:35:db:ae:c8:25:70:54:d3:10:45:da: a8:11:6a:30:fe:f7:83:a4:ee:b2:87:b1:79:da:b9:ef:d3:8b: 67:03:00:e7:90:19:9a:61:42:a9:aa:3b:1a:53:01:d4:8c:b2: b9:a9:93:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EbUpUUWmXmjOlFY84D5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1 Njc5YzgwHhcNMjUxMjIxMDQwMTIzWhcNMjUxMjIyMDQwMTIzWjAzMTEwLwYDVQQD EyhjOTIyNWRkMDYyMWNkMDkzOWE0ZDc1ZTY2NWM3ZDQ4MGE3YmYyMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F03uTzGuTDA2jNJPob4Rz4y/QEm u/+WauIukoB82Yx6luPu1K1zzq80P57kqNr8gE+yUHf3jTwXEk/1q+dfW3HFu10G Mm4IQKcpL+GBH10jhsZwdvHdWprpBN/P0HdZsDkck4IAZUX0pXdGjovj5hlKsYgf 1Ko1OWBQULZDX4JpbSVjSQDK7hTIubo5dmq11NvBVWbVMDx43WZw7dchqknd/Nmz OBg1XTd88azTahrY7j6JoaBmzmgkFw/lwgnF4utod5r3QfJSzmZL984znpU0H9z7 3TqHkFFdSRdO6ywjEzyMTKX4Qm1UHCdLUrdiEg2fDV15Zt2aUUacYRv+pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkiXdBiHNCTmk115mXH1ICnvyN+MB8GA1UdIwQY MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgUsmGbZ rSOYvL718rbeHYGbNF/Xe0V7PjXbzpeGLo3XAjJ0UfZP646sIdY9+JB3ljLAGIWr yZJCUWL2m60ZBJaHYEKSmb+mruYa/kn0kCYaqmknT1CBPWFfWMPjtqALYf4LKKKi CKuLTgJYkm8Nf7PRE9RCWavFSwvmkafSEQTYYucMQojmoJJcECOhS6PMdr37wJUl o9ofumCgbc7DwRuPQPRziq6Ko8Sc07a3x7ihPdiGBwzZF4M2W5sN7sLV8mKBLNGT pD46Wvn2fDXbrsglcFTTEEXaqBFqMP73g6Tusoexedq579OLZwMA55AZmmFCqao7 GlMB1IyyuamTqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:14:53 2025 by rpki-client