This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json) Hash identifier: mbPK9LWuFQ7RmiMW7aqUaKMAE79dYFxZuhHzncyIu4Y= Subject key identifier: 4E:C8:A0:21:2E:3F:EA:47:97:D4:3C:9E:DC:4F:16:8D:16:60:13:B2 Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Certificate serial: 019B2B538B9F56FC085FD13510ACC99F7DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft Manifest number: 1711 Signing time: Wed 17 Dec 2025 08:00:53 +0000 Manifest this update: Wed 17 Dec 2025 08:00:53 +0000 Manifest next update: Thu 18 Dec 2025 08:00:53 +0000 Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: H9MyooPMpaYB/O1RplKRutkFBLMaFHhE0LvULs9E0+4=) 2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:8b:9f:56:fc:08:5f:d1:35:10:ac:c9:9f:7d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Validity Not Before: Dec 17 08:00:53 2025 GMT Not After : Dec 18 08:00:53 2025 GMT Subject: CN=4ec8a0212e3fea4797d43c9edc4f168d166013b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:08:2f:52:ed:2d:b5:d9:ac:87:1e:e8:0d: 8d:1d:0c:78:87:91:e4:27:ed:33:0c:22:1e:34:e0: e7:26:7a:cd:be:22:2d:fa:0b:af:1e:30:3e:37:40: 8d:35:cf:ff:b1:03:0b:da:83:4f:fa:2f:13:37:05: 25:9e:92:20:6e:10:3b:d3:25:5a:e7:c4:35:05:3f: 5c:2c:85:c1:ab:ca:a3:6a:63:13:f5:a0:a1:9f:2b: 96:9d:02:65:a1:ea:d9:65:18:ac:29:35:67:90:66: ae:67:db:a5:0b:e3:ef:8d:d2:21:93:bf:f8:28:49: 5e:75:3a:ed:f5:a0:65:eb:f6:12:6b:00:20:fa:f7: 1e:f7:28:ef:a1:7f:3b:93:fb:78:98:d9:1b:39:8a: b6:18:3b:65:52:dc:00:e0:37:67:fa:8e:44:3c:8a: 0c:76:a3:b2:91:42:3e:0a:ed:68:52:03:93:1b:85: 74:76:20:96:56:f8:5b:16:30:61:47:d1:12:f1:21: 04:34:29:e6:7d:18:4c:be:a0:5d:9e:15:1b:4f:4b: 78:38:af:15:37:9e:12:00:ee:03:df:3d:e6:3d:5a: 9c:c1:9e:32:4b:c7:b3:1f:99:2d:a5:59:2c:32:28: bb:04:89:01:42:6e:e9:d2:93:61:00:52:47:e5:38: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:A0:21:2E:3F:EA:47:97:D4:3C:9E:DC:4F:16:8D:16:60:13:B2 X509v3 Authority Key Identifier: keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:36:a0:d1:59:8a:08:0f:6d:fe:75:a3:aa:f3:32:4a:ef:29: de:8f:04:19:db:7f:c5:f3:7a:e8:96:d2:96:f0:77:83:13:ba: 38:c1:9f:be:3d:79:1c:c0:96:2f:a8:a8:5a:0a:c6:ec:ea:dd: 3f:2b:1d:d4:d3:13:6b:7e:93:e1:1d:4e:87:74:90:20:0a:22: 23:7b:3f:cb:c0:59:ad:13:7c:f2:68:43:dd:f5:e3:18:9a:51: bb:0c:ad:21:96:6b:15:15:db:c5:b6:ba:53:7e:7c:b5:4a:d8: dc:40:f6:d7:66:c2:c6:5f:d7:5a:43:07:67:db:3d:46:d6:ae: 06:97:b3:78:13:99:e9:49:3a:a3:3b:15:81:36:f3:79:86:40: 43:d1:47:9e:e2:3a:b8:56:20:86:b4:2b:af:0b:ff:67:a4:43: 11:2c:db:29:9e:24:95:d5:e4:ce:d3:ab:9f:cb:9b:34:d5:cd: ef:c5:c3:1e:f0:c1:8b:9c:fb:e6:a0:9e:2a:94:94:bb:99:50: 2d:66:aa:fd:b5:13:28:a9:16:d2:72:3d:5b:dd:cd:1e:91:c0: 17:62:b3:73:86:de:df:01:d7:7d:5f:b3:41:ec:91:04:41:f7: a2:79:32:0e:fa:c7:61:a7:33:4b:a1:e5:e5:4b:a1:fa:d0:54: 26:39:15:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU4ufVvwIX9E1EKzJn32oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2 OThiMzcwHhcNMjUxMjE3MDgwMDUzWhcNMjUxMjE4MDgwMDUzWjAzMTEwLwYDVQQD Eyg0ZWM4YTAyMTJlM2ZlYTQ3OTdkNDNjOWVkYzRmMTY4ZDE2NjAxM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4IL1LtLbXZrIce6A2NHQx4h5Hk J+0zDCIeNODnJnrNviIt+guvHjA+N0CNNc//sQML2oNP+i8TNwUlnpIgbhA70yVa 58Q1BT9cLIXBq8qjamMT9aChnyuWnQJloerZZRisKTVnkGauZ9ulC+PvjdIhk7/4 KEledTrt9aBl6/YSawAg+vce9yjvoX87k/t4mNkbOYq2GDtlUtwA4Ddn+o5EPIoM dqOykUI+Cu1oUgOTG4V0diCWVvhbFjBhR9ES8SEENCnmfRhMvqBdnhUbT0t4OK8V N54SAO4D3z3mPVqcwZ4yS8ezH5ktpVksMii7BIkBQm7p0pNhAFJH5TiWmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7IoCEuP+pHl9Q8ntxPFo0WYBOyMB8GA1UdIwQY MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3 LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjag0VmK CA9t/nWjqvMySu8p3o8EGdt/xfN66JbSlvB3gxO6OMGfvj15HMCWL6ioWgrG7Ord Pysd1NMTa36T4R1Oh3SQIAoiI3s/y8BZrRN88mhD3fXjGJpRuwytIZZrFRXbxba6 U358tUrY3ED212bCxl/XWkMHZ9s9RtauBpezeBOZ6Uk6ozsVgTbzeYZAQ9FHnuI6 uFYghrQrrwv/Z6RDESzbKZ4kldXkztOrn8ubNNXN78XDHvDBi5z75qCeKpSUu5lQ LWaq/bUTKKkW0nI9W93NHpHAF2Kzc4be3wHXfV+zQeyRBEH3onkyDvrHYaczS6Hl 5Uuh+tBUJjkVnA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:13 2025 by rpki-client