This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json) Hash identifier: POgXysNOBstZSGuhuWAYNNmTkGOVIb7utq7A587euHs= Subject key identifier: 42:0D:F4:94:4E:28:37:92:08:8D:4B:35:59:AB:E3:4A:55:17:2B:2C Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Certificate serial: 019B41DB7D3AE300C2D31BEAAFF8147917E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft Manifest number: 0484 Signing time: Sun 21 Dec 2025 17:01:01 +0000 Manifest this update: Sun 21 Dec 2025 17:01:01 +0000 Manifest next update: Mon 22 Dec 2025 17:01:01 +0000 Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: GCW9qFpDCksMCFy6P9tmC7TeuQz/s0gTQI3kWELP380=) 2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=) 3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=) 4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=) 5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:7d:3a:e3:00:c2:d3:1b:ea:af:f8:14:79:17:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Validity Not Before: Dec 21 17:01:01 2025 GMT Not After : Dec 22 17:01:01 2025 GMT Subject: CN=420df4944e283792088d4b3559abe34a55172b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:0d:a1:3d:5e:5a:c3:a6:36:5e:bd:1f:fb: e3:fc:85:df:aa:77:36:f7:4c:b0:9b:77:02:00:81: 66:97:b8:90:3e:42:4b:15:56:9d:0d:48:8d:be:32: be:eb:b2:aa:1a:1f:46:79:d8:0e:94:fb:aa:1d:48: 01:7a:31:61:3f:10:a9:ae:8d:2d:99:1f:52:0b:e4: 2c:15:ec:ad:e0:66:c3:9c:64:21:75:69:b8:01:1b: 61:15:00:46:16:a1:20:69:4f:80:4b:94:45:21:95: 0c:95:cf:b1:0b:18:0e:6e:34:f3:e5:7c:69:ee:14: 91:f2:0c:c8:1c:9f:ba:c3:a8:48:bf:27:79:18:90: d7:1f:23:d7:11:5b:47:71:e4:90:9e:f1:96:cb:36: c7:96:0c:21:a2:93:98:a0:a7:07:52:9d:af:83:cb: b3:3f:02:a7:5a:bd:11:16:9a:ed:af:06:8c:b8:14: 3d:c2:31:57:15:b9:56:e6:84:8f:14:67:c1:27:9f: 7a:cf:af:eb:ce:e7:bb:6f:e0:78:10:06:35:20:ec: a5:79:51:1a:5a:43:4a:c6:11:be:03:76:d0:61:49: d9:7e:6f:cd:8b:ff:69:17:eb:6f:3a:7b:0c:99:d7: 46:d9:7a:82:34:43:87:24:cb:2c:66:ea:95:e3:6d: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:F4:94:4E:28:37:92:08:8D:4B:35:59:AB:E3:4A:55:17:2B:2C X509v3 Authority Key Identifier: keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:7b:28:cb:20:3e:5b:e4:34:4c:26:ee:5b:8f:45:bc:78:be: 54:aa:d1:2a:4a:fb:5b:d9:d4:93:f3:93:6d:8b:50:56:9a:48: 61:2d:40:54:58:1a:cd:19:37:79:29:5a:ff:30:34:4c:73:42: 5e:86:7a:77:8f:55:84:25:5f:ef:49:7c:ba:07:f4:9e:ee:0a: e1:4a:55:08:a6:e0:fd:9d:63:ff:24:7e:d8:97:b5:26:16:b2: 3d:6f:ad:12:a6:54:72:77:cf:e6:30:1a:76:ef:6a:29:36:6a: aa:37:2e:b6:c5:f0:04:07:a6:9b:b1:78:b4:8d:86:87:e0:46: e4:e1:6e:5b:9e:7f:f3:d7:78:ee:f1:be:7d:6c:52:07:17:30: 42:99:80:5d:74:af:f2:6a:aa:06:ef:ef:35:ef:a1:e2:5a:5a: 1f:89:8c:32:24:6f:c6:06:3b:83:c8:8f:e4:6b:ad:e9:c3:8f: 82:ea:6d:73:70:8a:07:b0:b4:19:b5:b0:47:65:6c:15:33:15: 03:9c:16:7e:ba:7d:56:fc:a5:94:bd:e4:5e:d0:d4:9c:94:4b: d3:64:63:f2:55:71:c8:b2:7f:a9:3e:c6:7b:3e:db:f5:0d:58: 0e:6f:40:ff:40:98:60:51:31:fe:f8:f8:ab:e8:c9:fe:c9:af: b5:a9:e7:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23064wDC0xvqr/gUeRfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0 OTk4ZjcwHhcNMjUxMjIxMTcwMTAxWhcNMjUxMjIyMTcwMTAxWjAzMTEwLwYDVQQD Eyg0MjBkZjQ5NDRlMjgzNzkyMDg4ZDRiMzU1OWFiZTM0YTU1MTcyYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqsNoT1eWsOmNl69H/vj/IXfqnc2 90ywm3cCAIFml7iQPkJLFVadDUiNvjK+67KqGh9GedgOlPuqHUgBejFhPxCpro0t mR9SC+QsFeyt4GbDnGQhdWm4ARthFQBGFqEgaU+AS5RFIZUMlc+xCxgObjTz5Xxp 7hSR8gzIHJ+6w6hIvyd5GJDXHyPXEVtHceSQnvGWyzbHlgwhopOYoKcHUp2vg8uz PwKnWr0RFprtrwaMuBQ9wjFXFblW5oSPFGfBJ596z6/rzue7b+B4EAY1IOyleVEa WkNKxhG+A3bQYUnZfm/Ni/9pF+tvOnsMmddG2XqCNEOHJMssZuqV423keQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIN9JROKDeSCI1LNVmr40pVFyssMB8GA1UdIwQY MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5 LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3soyyA+ W+Q0TCbuW49FvHi+VKrRKkr7W9nUk/OTbYtQVppIYS1AVFgazRk3eSla/zA0THNC XoZ6d49VhCVf70l8ugf0nu4K4UpVCKbg/Z1j/yR+2Je1JhayPW+tEqZUcnfP5jAa du9qKTZqqjcutsXwBAemm7F4tI2Gh+BG5OFuW55/89d47vG+fWxSBxcwQpmAXXSv 8mqqBu/vNe+h4lpaH4mMMiRvxgY7g8iP5Gut6cOPguptc3CKB7C0GbWwR2VsFTMV A5wWfrp9VvyllL3kXtDUnJRL02Rj8lVxyLJ/qT7Gez7b9Q1YDm9A/0CYYFEx/vj4 q+jJ/smvtannLA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:17 2025 by rpki-client