This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json) Hash identifier: tpymBQulmmUoVO8oynX+TeutCIe4MVA3J50JJVMOMvQ= Subject key identifier: 85:CB:A3:50:27:22:94:37:67:0B:F7:2D:99:98:FA:F7:3A:7A:AF:F4 Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a Certificate serial: 019B514EC7B2DC788BF8E285417FEE599794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft Manifest number: 10C2 Signing time: Wed 24 Dec 2025 17:01:16 +0000 Manifest this update: Wed 24 Dec 2025 17:01:16 +0000 Manifest next update: Thu 25 Dec 2025 17:01:16 +0000 Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: +ZbPsY+FSkxf9njzzwhbB4/S0TA9pGg5L26ivLr9ySQ=) 2: ZK9gU4FBN8KUQTPHGhgGaXPIWjk.roa (hash: YFHfAWvmuV1pyKRAlUfEUWxi+ZLKrTZD/d9TC0Av1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:c7:b2:dc:78:8b:f8:e2:85:41:7f:ee:59:97:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a Validity Not Before: Dec 24 17:01:16 2025 GMT Not After : Dec 25 17:01:16 2025 GMT Subject: CN=85cba35027229437670bf72d9998faf73a7aaff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:b5:e9:63:90:43:26:29:1c:ed:26:f1:d4: 06:04:83:3b:aa:a0:d5:ba:f2:99:01:34:e5:0d:0f: c2:8e:1e:db:c9:0d:14:36:f9:c0:80:8b:11:23:23: 8a:17:7a:1a:91:2e:89:2a:50:9f:38:b0:89:19:ff: 59:01:62:41:62:41:f4:fa:d4:86:74:bf:7f:ab:27: c7:72:b6:ce:7c:6e:81:1b:69:6c:e1:00:ee:5a:05: 3d:fd:fb:0f:aa:06:b4:11:de:d7:13:33:9d:f9:89: 9f:87:72:9f:f7:d4:49:ef:84:4e:45:a1:88:c1:e9: 40:b1:d4:99:44:21:ad:96:13:c8:a4:fd:ad:52:e3: 17:f3:2c:04:ae:8c:a0:b8:86:72:45:3b:24:27:bd: 1f:15:d9:6d:0d:b4:10:8a:78:b9:76:6e:e8:aa:e7: b2:2a:e2:68:a5:6a:e7:51:ec:3a:b4:04:02:95:ae: 03:5f:4c:f0:81:76:e1:56:74:e1:7b:b8:b2:c0:da: 52:17:37:01:e6:99:10:67:e2:e9:d2:7f:7e:13:a8: de:d8:45:82:12:87:5c:09:81:10:14:7e:34:a0:34: 20:dc:ec:3e:57:6e:08:9a:65:d8:53:26:f7:fb:57: 02:2e:bd:e1:9f:56:dc:b2:a1:2f:35:ac:16:3b:fe: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CB:A3:50:27:22:94:37:67:0B:F7:2D:99:98:FA:F7:3A:7A:AF:F4 X509v3 Authority Key Identifier: keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:93:84:8c:1c:e1:ec:a5:76:1a:5a:82:0b:03:3a:d2:88: 19:e6:92:91:9f:0c:e3:d9:41:15:4b:f3:ca:67:f9:b1:95:69: 1b:19:70:91:ec:ae:e8:4b:cf:47:54:3b:36:29:82:9b:5e:63: 6f:0c:3a:11:6e:e1:40:6c:00:8b:bb:5e:0d:7b:5a:6f:8b:aa: 1d:e8:a0:86:de:59:b4:ad:51:fd:f5:47:1f:26:f3:83:23:00: 18:25:2e:18:f9:8c:70:2a:ee:d5:23:db:e5:dd:1a:17:57:9c: aa:95:40:3a:9b:7c:37:9f:79:37:22:5a:c6:e8:0c:cf:7d:d7: d2:06:ed:93:8d:91:2c:91:38:f1:dd:6d:ee:8c:c4:4a:9b:8a: 8a:a7:0b:35:8c:3d:32:94:bf:d7:06:fb:07:7c:4b:1f:fc:39: b2:49:c7:33:8f:87:39:d2:63:c0:68:74:8c:9d:02:a0:5c:4a: 1d:d6:bd:44:fb:27:ce:54:b1:d9:20:0c:48:a4:0b:3e:af:a3: b5:4b:9f:69:76:de:7a:53:67:dc:e7:22:59:a4:ef:c6:37:ef: bb:72:19:da:82:cb:09:e9:8a:cd:32:99:c6:4c:c7:6f:f7:1e: f2:f8:5b:ab:e3:fd:8f:f8:ee:cc:9a:3e:d5:f4:de:cd:d8:82: a9:f3:8b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTsey3HiL+OKFQX/uWZeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDc5NGQ5ZmNhYjIzZWMwNWRkZGQ1MDQ4YTNmYzcyMDQw MDJhMmEwHhcNMjUxMjI0MTcwMTE2WhcNMjUxMjI1MTcwMTE2WjAzMTEwLwYDVQQD Eyg4NWNiYTM1MDI3MjI5NDM3NjcwYmY3MmQ5OTk4ZmFmNzNhN2FhZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt+16WOQQyYpHO0m8dQGBIM7qqDV uvKZATTlDQ/Cjh7byQ0UNvnAgIsRIyOKF3oakS6JKlCfOLCJGf9ZAWJBYkH0+tSG dL9/qyfHcrbOfG6BG2ls4QDuWgU9/fsPqga0Ed7XEzOd+Ymfh3Kf99RJ74RORaGI welAsdSZRCGtlhPIpP2tUuMX8ywEroyguIZyRTskJ70fFdltDbQQini5dm7oquey KuJopWrnUew6tAQCla4DX0zwgXbhVnThe7iywNpSFzcB5pkQZ+Lp0n9+E6je2EWC EodcCYEQFH40oDQg3Ow+V24ImmXYUyb3+1cCLr3hn1bcsqEvNawWO/69mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXLo1AnIpQ3Zwv3LZmY+vc6eq/0MB8GA1UdIwQY MBaAFN5HlNn8qyPsBd3dUEij/HIEACoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDIt ZjAxMTI5Mzk1M2Y1LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDItZjAxMTI5Mzk1M2Y1 LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfaThIwc 4eyldhpaggsDOtKIGeaSkZ8M49lBFUvzymf5sZVpGxlwkeyu6EvPR1Q7NimCm15j bww6EW7hQGwAi7teDXtab4uqHeight5ZtK1R/fVHHybzgyMAGCUuGPmMcCru1SPb 5d0aF1ecqpVAOpt8N595NyJaxugMz33X0gbtk42RLJE48d1t7ozESpuKiqcLNYw9 MpS/1wb7B3xLH/w5sknHM4+HOdJjwGh0jJ0CoFxKHda9RPsnzlSx2SAMSKQLPq+j tUufaXbeelNn3OciWaTvxjfvu3IZ2oLLCemKzTKZxkzHb/ce8vhbq+P9j/juzJo+ 1fTezdiCqfOLbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:49:47 2025 by rpki-client