This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json) Hash identifier: MF5LxpRT3yxSFazLSzjbrS+3xaFrQwxH8FSWktrCBjY= Subject key identifier: 3A:6A:8B:6D:D7:6E:DD:92:A8:A5:E3:69:FC:15:C9:8E:41:7B:99:6B Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Certificate serial: 019B72922E68DD497B6ED18E748BC13EF55B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft Manifest number: 17A0 Signing time: Wed 31 Dec 2025 04:02:21 +0000 Manifest this update: Wed 31 Dec 2025 04:02:21 +0000 Manifest next update: Thu 01 Jan 2026 04:02:21 +0000 Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 2ieu5r1Axw83wbH8jceDpaV+sX6B6rRyg1pUf/+9IAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:2e:68:dd:49:7b:6e:d1:8e:74:8b:c1:3e:f5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Validity Not Before: Dec 31 04:02:21 2025 GMT Not After : Jan 1 04:02:21 2026 GMT Subject: CN=3a6a8b6dd76edd92a8a5e369fc15c98e417b996b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:f7:37:94:b4:ab:26:8d:24:98:22:4f:1e: e4:23:7c:ab:05:42:ce:f3:69:71:ed:8b:68:f1:42: 5b:b8:65:1a:20:74:b8:0f:78:b2:2a:c4:2e:f5:f4: 40:86:5c:b9:05:ad:a2:03:e8:6b:24:f4:37:5b:46: ba:63:33:f0:0e:fb:87:80:2c:8d:c2:62:83:0b:b1: 41:61:77:22:38:bb:27:a3:9a:97:ff:35:6d:30:12: b1:10:45:5f:8c:24:5b:93:36:42:1d:67:67:44:7b: d4:6e:64:5c:e8:1e:6d:fa:85:88:01:dd:ec:b8:0d: a8:5a:3f:33:b5:53:6f:b3:20:d8:19:2c:78:1c:30: 9b:55:b6:e5:14:fe:65:c5:55:d6:11:ae:17:03:ff: 33:b1:9f:01:e3:55:60:a8:bc:0a:20:05:43:34:dd: f1:01:ca:e5:ba:22:0b:51:5b:a6:79:55:3c:14:40: 85:5a:93:9f:60:c5:3c:b4:8b:93:33:f3:e4:37:af: 00:70:17:e1:c8:85:bf:dd:26:a3:57:af:4a:44:7d: 4d:af:4a:1e:19:0b:7d:a9:98:c8:4a:67:ed:ca:b4: 3d:64:a3:69:a8:ea:e6:fd:65:c5:98:98:d6:40:6c: 33:ed:7a:65:cc:0a:0a:80:fe:9d:0d:43:28:35:35: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6A:8B:6D:D7:6E:DD:92:A8:A5:E3:69:FC:15:C9:8E:41:7B:99:6B X509v3 Authority Key Identifier: keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:33:b1:87:63:6e:0e:4c:67:69:06:fc:bc:c9:90:9e:3e: f5:2e:28:0f:3b:c6:ce:76:fd:6a:c2:ba:e5:4e:65:81:4e:9d: f7:e9:bb:c8:1f:c7:c7:74:0f:85:9a:52:d2:fa:e7:0d:ac:5b: a3:d5:9c:ce:04:08:d3:b9:2f:11:43:6b:03:ba:3c:a0:3d:19: bf:c3:41:64:1a:16:c8:c9:a4:92:6a:be:50:6c:04:41:5f:4e: e5:7f:c5:1a:88:59:39:03:8f:a9:23:b7:5f:1f:53:88:40:57: 35:e9:65:24:2a:a5:6c:27:57:49:a7:47:71:7c:f6:63:55:12: 1c:d4:0a:75:d4:5f:6e:10:2f:f8:b3:8d:74:65:ee:85:a6:66: 0d:3a:d5:fc:a7:fd:bd:23:bc:f8:df:6f:32:f1:ca:30:e2:fb: 73:1e:e1:b3:37:56:ab:9f:77:ef:c8:b4:c7:e9:01:02:49:ac: cc:af:51:41:60:2b:3e:a2:c1:56:61:9b:80:6e:29:d3:44:80: ac:98:74:0c:43:8e:97:2c:a4:aa:0d:36:74:72:a6:e0:a8:e8: 29:b7:7e:a2:66:12:46:6a:7c:8b:ba:40:02:d9:ce:96:54:e0: 60:68:34:14:85:db:98:65:e9:92:85:cc:7a:91:33:e7:ed:ee: 4a:c3:54:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyki5o3Ul7btGOdIvBPvVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw YjZlNTEwHhcNMjUxMjMxMDQwMjIxWhcNMjYwMTAxMDQwMjIxWjAzMTEwLwYDVQQD EygzYTZhOGI2ZGQ3NmVkZDkyYThhNWUzNjlmYzE1Yzk4ZTQxN2I5OTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPn3N5S0qyaNJJgiTx7kI3yrBULO 82lx7Yto8UJbuGUaIHS4D3iyKsQu9fRAhly5Ba2iA+hrJPQ3W0a6YzPwDvuHgCyN wmKDC7FBYXciOLsno5qX/zVtMBKxEEVfjCRbkzZCHWdnRHvUbmRc6B5t+oWIAd3s uA2oWj8ztVNvsyDYGSx4HDCbVbblFP5lxVXWEa4XA/8zsZ8B41VgqLwKIAVDNN3x AcrluiILUVumeVU8FECFWpOfYMU8tIuTM/PkN68AcBfhyIW/3SajV69KRH1Nr0oe GQt9qZjISmftyrQ9ZKNpqOrm/WXFmJjWQGwz7XplzAoKgP6dDUMoNTVOmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpqi23Xbt2SqKXjafwVyY5Be5lrMB8GA1UdIwQY MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKAzsYdj bg5MZ2kG/LzJkJ4+9S4oDzvGznb9asK65U5lgU6d9+m7yB/Hx3QPhZpS0vrnDaxb o9WczgQI07kvEUNrA7o8oD0Zv8NBZBoWyMmkkmq+UGwEQV9O5X/FGohZOQOPqSO3 Xx9TiEBXNellJCqlbCdXSadHcXz2Y1USHNQKddRfbhAv+LONdGXuhaZmDTrV/Kf9 vSO8+N9vMvHKMOL7cx7hszdWq59378i0x+kBAkmszK9RQWArPqLBVmGbgG4p00SA rJh0DEOOlyykqg02dHKm4KjoKbd+omYSRmp8i7pAAtnOllTgYGg0FIXbmGXpkoXM epEz5+3uSsNUBw== -----END CERTIFICATE-----Generated at Wed Dec 31 11:55:21 2025 by rpki-client