This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json) Hash identifier: qIOpeh13fjxRAq4CssIhbHYtmuKt6KxRu+q2r/S5l1g= Subject key identifier: DA:3A:E4:31:5F:84:A5:BF:08:1B:A3:5A:31:F6:AF:80:58:12:83:5E Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B3EA39F174B90CA05BB085F9708D17A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 02:01:08 +0000 Manifest this update: Sun 21 Dec 2025 02:01:08 +0000 Manifest next update: Mon 22 Dec 2025 02:01:08 +0000 Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: D/HQkWbNN9BdQ30iqeWjuuQWTX9nasp6XR6CNHlz5JM=) 2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=) 3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=) 4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=) 5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=) 6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=) 7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=) 8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=) 9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=) 10: dNmEpnLjp-lO8gmW3k6P1Inx2O4.roa (hash: lJLSDkihxscSK2n9w3BUV6TQD0rnHs7+lDruW36I8YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9f:17:4b:90:ca:05:bb:08:5f:97:08:d1:7a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Dec 21 02:01:08 2025 GMT Not After : Dec 22 02:01:08 2025 GMT Subject: CN=da3ae4315f84a5bf081ba35a31f6af805812835e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:45:b5:07:e4:2a:8a:db:f9:3a:ea:82:d5: f6:15:4a:c0:69:08:00:3c:f2:7e:0f:29:47:6a:e5: 2f:e7:26:b0:a3:48:56:13:ee:37:cc:b3:7b:00:c4: 53:17:7b:a9:32:04:3e:58:4d:69:1d:a2:e0:25:41: a9:5a:12:9b:8f:33:ea:9f:a4:26:49:8f:20:84:79: 6e:65:63:f6:30:bd:da:c2:93:9a:ba:be:c2:80:57: 0e:95:39:67:07:ff:1a:a4:b4:f2:63:4f:ed:32:b0: dd:11:eb:f4:78:58:ac:ff:0b:42:28:7b:bf:3a:5e: bc:2c:ce:36:76:c9:9c:21:5e:47:42:a2:ce:1a:95: 65:9e:d8:12:02:e5:5a:8a:45:b3:ab:60:4f:dc:cb: b8:a6:2b:90:af:22:79:46:74:3b:0d:b4:64:00:8f: 0b:b5:13:cf:fa:70:76:4a:99:1f:e0:8a:e9:cd:f2: 2b:bb:fa:7f:b9:a9:65:e4:eb:18:51:07:0d:c1:8e: d4:78:56:ba:b8:b5:ae:dd:26:e5:24:7f:90:85:96: 4e:c5:7d:91:81:6e:e8:50:52:f6:35:42:66:4d:d4: 2a:e2:68:41:1b:9c:f6:5c:2f:bf:47:42:2b:a6:bf: 6f:d4:c1:ac:9d:71:f3:72:61:a6:0e:da:a2:ef:b1: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:E4:31:5F:84:A5:BF:08:1B:A3:5A:31:F6:AF:80:58:12:83:5E X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e7:10:9b:f9:5e:ed:c6:a5:c0:de:0d:f6:56:36:8b:62:6d: 56:d1:3a:38:89:8c:b7:7d:e7:9a:a8:b8:77:d5:de:54:f0:17: 40:03:4d:2a:e1:db:f0:81:1f:a9:d4:1c:f5:d6:d9:e3:70:85: d2:85:5f:3d:00:b4:32:22:37:ad:76:f2:42:bc:90:be:e8:6c: 2e:2a:7b:c8:1c:57:20:26:16:73:65:e3:0a:dd:93:7b:dd:8d: d0:8b:36:08:43:c0:53:41:29:16:c0:2d:d9:85:2b:81:4f:ff: 74:3a:fb:75:e7:1a:54:74:3b:e8:b7:25:cc:25:1b:74:91:6f: cd:b2:13:50:ab:66:2c:3c:01:32:60:f8:20:7f:f4:94:44:59: dc:9f:0c:7d:97:0a:cd:43:2e:95:9a:29:00:bd:2d:1f:b6:e3: 50:61:24:8a:a1:7a:dc:b8:72:49:0d:13:c9:6b:76:de:74:0f: e1:b7:f7:e6:11:5d:3d:a1:cb:1c:c3:d0:53:21:1f:7c:68:fb: 2b:0e:61:7f:34:2d:74:fc:77:cb:b6:ee:c7:2a:f7:1a:6d:2f: 3e:cd:ef:cf:a9:c2:8a:0a:73:01:1c:08:93:9d:b1:53:ea:47: 0c:03:78:cf:94:52:28:45:ff:ea:a2:40:ac:cd:a4:01:db:c8: c2:35:90:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o58XS5DKBbsIX5cI0XoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjUxMjIxMDIwMTA4WhcNMjUxMjIyMDIwMTA4WjAzMTEwLwYDVQQD EyhkYTNhZTQzMTVmODRhNWJmMDgxYmEzNWEzMWY2YWY4MDU4MTI4MzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZlFtQfkKorb+TrqgtX2FUrAaQgA PPJ+DylHauUv5yawo0hWE+43zLN7AMRTF3upMgQ+WE1pHaLgJUGpWhKbjzPqn6Qm SY8ghHluZWP2ML3awpOaur7CgFcOlTlnB/8apLTyY0/tMrDdEev0eFis/wtCKHu/ Ol68LM42dsmcIV5HQqLOGpVlntgSAuVaikWzq2BP3Mu4piuQryJ5RnQ7DbRkAI8L tRPP+nB2Spkf4IrpzfIru/p/uall5OsYUQcNwY7UeFa6uLWu3SblJH+QhZZOxX2R gW7oUFL2NUJmTdQq4mhBG5z2XC+/R0Irpr9v1MGsnXHzcmGmDtqi77FztwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo65DFfhKW/CBujWjH2r4BYEoNeMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATucQm/le 7calwN4N9lY2i2JtVtE6OImMt33nmqi4d9XeVPAXQANNKuHb8IEfqdQc9dbZ43CF 0oVfPQC0MiI3rXbyQryQvuhsLip7yBxXICYWc2XjCt2Te92N0Is2CEPAU0EpFsAt 2YUrgU//dDr7decaVHQ76LclzCUbdJFvzbITUKtmLDwBMmD4IH/0lERZ3J8MfZcK zUMulZopAL0tH7bjUGEkiqF63LhySQ0TyWt23nQP4bf35hFdPaHLHMPQUyEffGj7 Kw5hfzQtdPx3y7buxyr3Gm0vPs3vz6nCigpzARwIk52xU+pHDAN4z5RSKEX/6qJA rM2kAdvIwjWQzA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:20 2025 by rpki-client