This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json) Hash identifier: B72urvFRHy5B/hqVPG1E+mWRYAdHGHvs/BKav+y4p0c= Subject key identifier: B7:2D:05:DC:83:16:A1:66:E5:15:17:E8:D0:37:A2:B9:37:D5:E7:9D Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30 Certificate serial: 019B3B6BF0D2F750FEAA15BAE640AF1617FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 11:01:28 +0000 Manifest this update: Sat 20 Dec 2025 11:01:28 +0000 Manifest next update: Sun 21 Dec 2025 11:01:28 +0000 Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: qANKdPIS9VdqJmcuIM5/HJAggI48PK+21uSTNM8P6Uc=) 2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=) 3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=) 4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f0:d2:f7:50:fe:aa:15:ba:e6:40:af:16:17:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30 Validity Not Before: Dec 20 11:01:28 2025 GMT Not After : Dec 21 11:01:28 2025 GMT Subject: CN=b72d05dc8316a166e51517e8d037a2b937d5e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:46:59:5a:be:a0:3d:f4:e4:59:28:6a:7a: ff:e6:7f:dc:d2:c1:05:42:20:30:c4:f8:ae:fe:69: df:b1:7d:3e:6d:db:25:7c:88:6f:d8:6a:02:f3:58: e5:08:0e:bf:ee:dc:17:de:2f:72:20:4b:42:65:a7: d4:54:ae:61:96:3d:8d:f7:2d:c3:9d:30:3a:aa:43: ec:b8:3c:20:99:94:f7:86:2d:cc:b3:7e:2c:72:2d: 2c:3c:f3:10:5d:c0:cc:96:a8:22:71:a4:7f:11:fa: c5:97:7b:32:bf:0c:be:ac:6f:04:80:f5:10:44:3b: a6:fd:81:0c:ab:9f:17:62:b4:62:e5:0a:28:fb:8c: a3:8c:ed:9e:78:43:79:e7:1d:ef:8b:53:68:22:a6: 9a:1f:91:56:87:df:dc:61:f1:0f:83:b2:0a:c7:a2: 9b:b1:b0:f2:76:46:42:ce:1e:39:54:71:73:be:bc: 23:74:fe:e4:33:7d:90:fb:1b:45:47:10:dd:6f:fe: ce:5e:5a:9b:71:c3:f1:82:15:91:c4:7c:4b:c3:7a: 45:8c:6d:85:d9:0f:ec:a6:4e:a0:dc:9c:88:b6:1b: 7f:6d:07:83:12:3d:54:c9:cd:bb:f5:b3:51:56:0a: 6d:96:af:30:e0:92:65:85:2b:7b:31:7f:17:01:33: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2D:05:DC:83:16:A1:66:E5:15:17:E8:D0:37:A2:B9:37:D5:E7:9D X509v3 Authority Key Identifier: keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:0c:e4:2d:9d:c5:75:a1:9b:7b:1a:cd:bd:af:0b:99:6f:ae: cc:04:80:4a:e6:26:36:83:10:b0:0e:48:7b:78:2a:90:0b:e7: cc:c9:a8:f2:d3:27:48:7f:61:53:3a:74:3f:24:be:69:b8:96: a7:8f:33:e7:c6:bc:8e:ca:6e:4b:c4:e7:e5:4f:bb:3b:28:0e: a5:57:20:f8:a2:da:a2:a6:9e:c0:a6:0e:8d:c4:50:d0:15:d4: 02:64:ba:d5:88:c4:ff:80:c1:d2:c4:49:37:8b:3e:3d:9b:21: 0b:2e:18:8d:76:af:6d:92:07:3d:a6:88:b9:69:c0:25:0c:e0: 0a:5a:65:af:3f:5c:9a:77:fe:8c:e5:67:05:24:67:73:78:49: cb:d7:dd:92:c0:97:54:e4:ab:73:74:f9:7f:9e:6a:47:f0:8c: c3:bc:cd:ba:ed:d1:f5:4e:6b:5f:04:97:29:54:7c:75:b2:45: f7:47:6d:57:dc:b9:c9:dc:ef:f4:bf:2b:19:e1:f6:30:80:81: 3e:f2:fe:b8:d7:b9:0a:33:9a:f7:03:02:e6:86:fe:4c:63:a5: 43:b7:e2:d6:04:92:a8:ce:f6:19:17:3a:df:55:c5:ad:cf:5e: 1c:bc:88:be:bf:79:18:d2:27:13:b8:b7:00:80:63:fc:72:d3: fb:e6:5e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/DS91D+qhW65kCvFhf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw NmNiMzAwHhcNMjUxMjIwMTEwMTI4WhcNMjUxMjIxMTEwMTI4WjAzMTEwLwYDVQQD EyhiNzJkMDVkYzgzMTZhMTY2ZTUxNTE3ZThkMDM3YTJiOTM3ZDVlNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI5GWVq+oD305Fkoanr/5n/c0sEF QiAwxPiu/mnfsX0+bdslfIhv2GoC81jlCA6/7twX3i9yIEtCZafUVK5hlj2N9y3D nTA6qkPsuDwgmZT3hi3Ms34sci0sPPMQXcDMlqgicaR/EfrFl3syvwy+rG8EgPUQ RDum/YEMq58XYrRi5Qoo+4yjjO2eeEN55x3vi1NoIqaaH5FWh9/cYfEPg7IKx6Kb sbDydkZCzh45VHFzvrwjdP7kM32Q+xtFRxDdb/7OXlqbccPxghWRxHxLw3pFjG2F 2Q/spk6g3JyItht/bQeDEj1Uyc279bNRVgptlq8w4JJlhSt7MX8XATPwlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLctBdyDFqFm5RUX6NA3ork31eedMB8GA1UdIwQY MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt ODU2YjY1Yzc1YzI2LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2 LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAygzkLZ3F daGbexrNva8LmW+uzASASuYmNoMQsA5Ie3gqkAvnzMmo8tMnSH9hUzp0PyS+abiW p48z58a8jspuS8Tn5U+7OygOpVcg+KLaoqaewKYOjcRQ0BXUAmS61YjE/4DB0sRJ N4s+PZshCy4YjXavbZIHPaaIuWnAJQzgClplrz9cmnf+jOVnBSRnc3hJy9fdksCX VOSrc3T5f55qR/CMw7zNuu3R9U5rXwSXKVR8dbJF90dtV9y5ydzv9L8rGeH2MICB PvL+uNe5CjOa9wMC5ob+TGOlQ7fi1gSSqM72GRc631XFrc9eHLyIvr95GNInE7i3 AIBj/HLT++ZeBA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:44 2025 by rpki-client