This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json) Hash identifier: WYpTRLfQb76mtEhqzJDo5WsZ9chPIgG5RvPDvEsOee4= Subject key identifier: 50:1C:F4:05:29:77:0D:9E:C4:87:6F:1E:64:28:FE:E1:DD:27:3A:AE Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Certificate serial: 019B3CEC42D1D2262DD1E584D69B33B73A91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft Manifest number: 16A9 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: fAceK0UNUIN4GS6c0mtoCqmmQdDjyZmcWJEzQazcvUo=) 2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:42:d1:d2:26:2d:d1:e5:84:d6:9b:33:b7:3a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=501cf40529770d9ec4876f1e6428fee1dd273aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:c5:cc:b6:78:27:72:aa:de:e7:79:d1:e9: 9c:21:ab:d2:ff:7b:bf:0f:5b:59:c8:3b:cf:89:2e: 9f:c4:fa:68:e3:ca:3e:f1:8e:1a:ce:f2:d4:c9:aa: 2f:2e:54:f1:8e:13:6c:15:6e:ba:fb:e3:69:eb:0c: 6c:2e:10:0a:51:3a:55:0a:61:a9:9a:e7:d5:1c:06: b0:f6:7c:21:62:73:af:ba:01:52:e0:f9:b2:fd:67: a5:e8:e8:63:ce:03:47:9d:04:65:76:c6:91:88:af: 5c:28:c5:ca:11:34:3d:4d:b7:b8:ee:46:5e:f2:6c: 07:5f:d5:ff:22:5b:22:3e:3b:80:96:3e:2b:a7:ed: 2c:cd:11:66:44:4b:ab:8d:bb:67:91:67:f1:c0:0f: 58:29:15:55:d2:bf:bc:76:a6:39:2d:d7:96:5a:49: 22:ed:d8:68:c8:8c:54:c4:78:81:bb:21:df:5e:76: 43:3f:5e:21:c7:73:ea:8a:86:fd:74:30:09:bf:93: 20:c4:31:33:b9:3d:28:ef:10:cb:80:54:a9:ba:50: ed:02:a4:96:40:e0:d0:fd:f7:32:8f:5d:81:19:7c: 09:ef:96:a9:60:eb:2a:80:d2:dc:4b:19:dc:ca:a1: d7:d8:6d:d0:51:fa:a7:8e:d7:be:f4:0b:14:82:64: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:F4:05:29:77:0D:9E:C4:87:6F:1E:64:28:FE:E1:DD:27:3A:AE X509v3 Authority Key Identifier: keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:47:f0:bf:7e:67:66:1d:bf:67:c9:7d:78:c2:e8:81:1b:43: dd:09:45:37:4f:f0:65:65:f9:7f:66:01:50:17:6b:94:de:89: 5f:b6:a5:fb:7f:3e:f4:13:2c:a8:65:70:c8:53:cb:e5:60:3e: d6:43:75:de:bf:28:f9:be:43:df:07:c9:14:a6:c4:20:3e:57: 1b:22:e8:6b:f1:28:f4:4f:61:14:f1:93:68:12:a2:a4:a5:c9: 02:86:d5:bb:02:df:9a:c8:61:6d:f0:17:19:30:3c:c9:6e:8f: 89:2b:01:1a:d2:06:0a:df:ab:9e:58:e5:a9:4c:7e:fa:aa:8d: e4:2d:bb:9e:4a:bf:bf:06:a3:da:07:a2:86:6d:d2:6e:22:5d: 2d:ff:f2:35:83:4e:44:bb:48:3e:b3:d0:b7:1e:21:00:fc:f3: 96:28:a6:55:60:04:d7:ed:e4:bf:91:62:b1:9e:db:61:51:70: 16:2b:f9:14:66:4a:3d:0e:3f:ef:95:0e:41:7b:e2:3c:3c:64: e9:01:81:ae:59:04:2e:e7:6b:30:da:fb:ab:a0:19:7b:38:b2: dd:f4:4a:84:9d:80:d1:83:43:70:78:3d:c5:ac:42:32:30:5b: a5:79:25:c2:8d:31:c8:ae:92:73:3d:99:b6:37:ff:8a:14:58: d3:b9:f6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87ELR0iYt0eWE1psztzqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw ZGVhYjUwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg1MDFjZjQwNTI5NzcwZDllYzQ4NzZmMWU2NDI4ZmVlMWRkMjczYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJvFzLZ4J3Kq3ud50emcIavS/3u/ D1tZyDvPiS6fxPpo48o+8Y4azvLUyaovLlTxjhNsFW66++Np6wxsLhAKUTpVCmGp mufVHAaw9nwhYnOvugFS4Pmy/Wel6OhjzgNHnQRldsaRiK9cKMXKETQ9Tbe47kZe 8mwHX9X/IlsiPjuAlj4rp+0szRFmREurjbtnkWfxwA9YKRVV0r+8dqY5LdeWWkki 7dhoyIxUxHiBuyHfXnZDP14hx3Pqiob9dDAJv5MgxDEzuT0o7xDLgFSpulDtAqSW QODQ/fcyj12BGXwJ75apYOsqgNLcSxncyqHX2G3QUfqnjte+9AsUgmTyTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAc9AUpdw2exIdvHmQo/uHdJzquMB8GA1UdIwQY MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEfwv35n Zh2/Z8l9eMLogRtD3QlFN0/wZWX5f2YBUBdrlN6JX7al+38+9BMsqGVwyFPL5WA+ 1kN13r8o+b5D3wfJFKbEID5XGyLoa/Eo9E9hFPGTaBKipKXJAobVuwLfmshhbfAX GTA8yW6PiSsBGtIGCt+rnljlqUx++qqN5C27nkq/vwaj2geihm3SbiJdLf/yNYNO RLtIPrPQtx4hAPzzliimVWAE1+3kv5FisZ7bYVFwFiv5FGZKPQ4/75UOQXviPDxk 6QGBrlkELudrMNr7q6AZeziy3fRKhJ2A0YNDcHg9xaxCMjBbpXklwo0xyK6Scz2Z tjf/ihRY07n2dg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:06:23 2025 by rpki-client