This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json) Hash identifier: 3rtmHxj+zYpw33Sod5djisJYrmoJeumB7Kzy7JY1gzU= Subject key identifier: BC:F3:0F:DA:D8:9A:62:BC:D3:5A:D5:1C:C4:36:65:7B:F6:4E:3C:6C Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019B3CECAE33EE013421D959E0876E7C26FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft Manifest number: 118B Signing time: Sat 20 Dec 2025 18:01:42 +0000 Manifest this update: Sat 20 Dec 2025 18:01:42 +0000 Manifest next update: Sun 21 Dec 2025 18:01:42 +0000 Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: KOp3u1M0KSFIUdZPTVEaGlazeUC1ARsJOpcTo2UMzIo=) 2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:ae:33:ee:01:34:21:d9:59:e0:87:6e:7c:26:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Dec 20 18:01:42 2025 GMT Not After : Dec 21 18:01:42 2025 GMT Subject: CN=bcf30fdad89a62bcd35ad51cc436657bf64e3c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:e3:8e:93:e6:41:90:47:d8:b1:45:e5:b8: 8c:66:42:2d:1a:59:af:9a:36:5e:dc:67:0f:ef:86: 80:08:96:8b:ce:0c:73:e8:94:35:01:a5:91:1b:b4: f0:3f:27:e0:14:f7:4d:cc:65:a2:f0:a8:2e:6c:77: 99:f9:e6:b5:98:f4:dc:2c:dd:4b:34:5a:14:a4:b3: 29:77:b5:11:91:ab:32:57:2e:95:be:68:87:52:fb: 3b:bf:bc:6d:98:b6:9c:e5:72:df:4b:c4:ff:75:cc: ab:08:da:e6:c6:48:f5:0b:90:ce:71:c4:55:d6:54: 4f:94:4b:c9:45:77:dd:0e:39:eb:54:d0:37:13:f9: 95:cd:cc:42:98:ec:f5:eb:ac:3f:f8:a0:c3:28:78: 4c:22:49:dd:c8:b6:c0:b7:91:3e:e4:4b:23:6c:e6: 8a:5d:fd:f3:82:61:46:f5:5c:74:ac:05:d2:61:06: 2d:13:c5:aa:64:d2:e8:83:34:20:33:f1:bd:70:6e: 0e:dc:bb:23:b3:19:f4:dd:a3:67:55:af:fc:2f:86: a6:fd:c2:d4:d9:f3:1a:2b:96:c0:39:61:e7:1d:e3: d6:77:e1:46:16:63:44:83:ed:93:c4:c9:e6:d9:70: 82:c3:8a:e0:d5:ed:54:cc:ce:74:ae:7d:3c:f2:48: 82:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:0F:DA:D8:9A:62:BC:D3:5A:D5:1C:C4:36:65:7B:F6:4E:3C:6C X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bb:30:f9:ac:1c:f0:5b:47:0b:c4:29:83:be:f8:6b:18:8a: dd:f8:d7:7a:bb:f6:19:3e:50:da:d5:90:67:8e:0c:f0:f6:aa: 73:61:30:ab:af:1e:c1:a3:0a:7d:89:57:0d:73:8b:1f:58:91: 28:ac:73:eb:e5:d7:9c:2c:7a:5d:bd:ec:64:f8:64:5e:d1:8f: 93:d1:73:92:b9:3a:6c:43:5f:67:f5:39:bc:c9:58:23:e1:6a: ee:ac:ba:ea:d6:40:4b:68:f1:50:a7:05:ed:21:26:9d:8e:5e: 62:a0:d3:9d:57:43:95:3d:32:3b:bc:45:24:aa:52:d0:92:bb: be:5b:da:c9:51:9a:d9:82:f7:92:b8:62:80:94:79:5a:8c:00: 98:ed:e1:00:5c:ff:a4:af:fe:42:bc:42:be:41:30:15:61:8f: 3c:44:57:0e:94:df:7a:a8:70:8e:7f:2f:b1:24:bc:f0:5d:ea: c6:e9:42:01:e0:3a:ff:b0:0a:74:50:5b:0a:e0:ae:75:ad:8e: 22:75:20:0e:3f:66:c2:99:2e:70:5b:a8:31:a9:8c:6a:b3:66: ca:fc:a8:af:dc:26:cc:6a:19:52:74:62:46:35:43:1b:32:e2: 2d:47:37:f5:a0:57:5c:de:b9:c0:20:f9:32:b2:5c:d1:14:6a: 69:ff:00:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87K4z7gE0IdlZ4IdufCb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjUxMjIwMTgwMTQyWhcNMjUxMjIxMTgwMTQyWjAzMTEwLwYDVQQD EyhiY2YzMGZkYWQ4OWE2MmJjZDM1YWQ1MWNjNDM2NjU3YmY2NGUzYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgLjjpPmQZBH2LFF5biMZkItGlmv mjZe3GcP74aACJaLzgxz6JQ1AaWRG7TwPyfgFPdNzGWi8KgubHeZ+ea1mPTcLN1L NFoUpLMpd7URkasyVy6VvmiHUvs7v7xtmLac5XLfS8T/dcyrCNrmxkj1C5DOccRV 1lRPlEvJRXfdDjnrVNA3E/mVzcxCmOz166w/+KDDKHhMIkndyLbAt5E+5EsjbOaK Xf3zgmFG9Vx0rAXSYQYtE8WqZNLogzQgM/G9cG4O3Lsjsxn03aNnVa/8L4am/cLU 2fMaK5bAOWHnHePWd+FGFmNEg+2TxMnm2XCCw4rg1e1UzM50rn088kiC8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzzD9rYmmK801rVHMQ2ZXv2TjxsMB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7sw+awc 8FtHC8Qpg774axiK3fjXerv2GT5Q2tWQZ44M8Paqc2Ewq68ewaMKfYlXDXOLH1iR KKxz6+XXnCx6Xb3sZPhkXtGPk9Fzkrk6bENfZ/U5vMlYI+Fq7qy66tZAS2jxUKcF 7SEmnY5eYqDTnVdDlT0yO7xFJKpS0JK7vlvayVGa2YL3krhigJR5WowAmO3hAFz/ pK/+QrxCvkEwFWGPPERXDpTfeqhwjn8vsSS88F3qxulCAeA6/7AKdFBbCuCuda2O InUgDj9mwpkucFuoMamMarNmyvyor9wmzGoZUnRiRjVDGzLiLUc39aBXXN65wCD5 MrJc0RRqaf8AGg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:30 2025 by rpki-client