This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json) Hash identifier: e554iA6bMo3u2/gcJdoMd1KLqHz99v2zSemzGxxjmmA= Subject key identifier: BC:47:12:1F:F5:71:86:C3:70:CE:E1:67:D4:1A:82:58:1D:4C:6D:52 Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Certificate serial: 019B51BDBD48C6F490B0AF37F0F336AA08D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft Manifest number: 0EC3 Signing time: Wed 24 Dec 2025 19:02:27 +0000 Manifest this update: Wed 24 Dec 2025 19:02:27 +0000 Manifest next update: Thu 25 Dec 2025 19:02:27 +0000 Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: tbb+F2D3WkrIOM9aBf8j1X3dvn1bxon8FYq4niWpPyY=) 2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:bd:48:c6:f4:90:b0:af:37:f0:f3:36:aa:08:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Validity Not Before: Dec 24 19:02:27 2025 GMT Not After : Dec 25 19:02:27 2025 GMT Subject: CN=bc47121ff57186c370cee167d41a82581d4c6d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:8f:eb:9d:45:ae:f9:36:3a:82:37:6b:08: 9d:a7:1a:fc:fa:03:b9:5e:68:e1:de:5d:b6:e1:af: 40:91:dc:03:46:56:6f:63:70:2d:83:9e:9e:57:96: e2:e1:a0:85:ee:ce:da:53:65:3e:37:da:68:3b:cc: d6:9d:1a:4f:a2:29:a5:dd:69:0c:16:02:ad:97:4a: d1:d7:88:8b:98:2f:bb:29:60:a1:5d:21:b1:84:1a: 94:2e:b3:55:87:f6:b3:2c:1b:5a:63:57:9f:3a:d8: 72:c9:eb:c3:52:9f:9c:f1:17:2a:e1:c2:00:b4:cc: 17:41:bb:13:56:da:ad:34:41:bf:91:dc:7a:79:06: 56:e2:ac:55:c0:ec:f8:28:17:2a:73:c8:d8:aa:0a: 3a:0f:bc:23:a8:63:f4:e7:b5:43:0e:0e:f5:87:d8: c6:bb:b1:1a:28:8f:6e:ec:40:25:8b:6a:51:3c:87: bd:95:44:27:d3:32:da:fd:0b:e5:9f:21:13:ed:5c: 8a:58:8f:82:eb:5d:7f:65:ff:14:4b:c1:f5:77:6a: ed:7a:18:d2:69:15:a5:f5:7b:cd:17:ca:9f:08:1f: 34:48:42:c4:b0:9c:be:43:8d:11:84:2b:ef:b1:84: 92:89:97:15:5b:ec:be:44:4b:c8:c4:32:6e:53:f5: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:12:1F:F5:71:86:C3:70:CE:E1:67:D4:1A:82:58:1D:4C:6D:52 X509v3 Authority Key Identifier: keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:2d:69:dd:96:28:d9:a1:96:ac:e0:84:30:48:75:dd:e8: f1:9b:38:84:0b:ba:1e:44:71:3b:4f:a9:04:80:9d:24:9f:dc: 27:99:f2:74:4c:e8:dd:5b:bd:ed:be:99:26:f7:2e:03:34:97: 0b:5c:c3:57:a1:80:12:05:87:06:57:4e:74:0c:a1:85:e7:a2: de:ea:db:9d:d4:b6:c6:9f:72:3d:79:9b:a5:da:08:6c:54:ab: f2:bb:38:ea:99:09:36:2b:05:85:bb:7a:88:64:f4:ad:25:6f: c0:a2:9d:ff:cb:67:02:72:7c:06:8c:5b:29:ba:f6:81:b5:33: ce:d0:3e:56:f9:64:b4:35:53:81:48:36:0f:5c:2e:23:e1:9a: 85:25:1d:06:fd:f5:2a:0b:8b:04:ce:87:04:6f:5c:e2:6a:a6: 61:49:83:7c:e5:a7:6f:11:b1:2c:a3:0b:13:bc:af:f5:fd:aa: a0:2e:8b:6d:d8:b2:57:c4:eb:70:27:5a:09:c9:2b:44:43:8a: f8:02:99:16:46:8d:f6:d7:40:9d:d7:29:69:c9:e3:1f:9d:aa: 93:35:f6:5d:66:32:b5:b9:db:c2:fb:58:6b:3b:22:c8:0a:80: 54:d0:c2:2e:a5:3e:a3:65:4c:7a:bd:31:04:7c:5d:f2:b9:51: ae:8b:d2:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvb1IxvSQsK838PM2qgjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5 YzU4MDcwHhcNMjUxMjI0MTkwMjI3WhcNMjUxMjI1MTkwMjI3WjAzMTEwLwYDVQQD EyhiYzQ3MTIxZmY1NzE4NmMzNzBjZWUxNjdkNDFhODI1ODFkNGM2ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+P651Frvk2OoI3awidpxr8+gO5 Xmjh3l224a9AkdwDRlZvY3Atg56eV5bi4aCF7s7aU2U+N9poO8zWnRpPoiml3WkM FgKtl0rR14iLmC+7KWChXSGxhBqULrNVh/azLBtaY1efOthyyevDUp+c8Rcq4cIA tMwXQbsTVtqtNEG/kdx6eQZW4qxVwOz4KBcqc8jYqgo6D7wjqGP057VDDg71h9jG u7EaKI9u7EAli2pRPIe9lUQn0zLa/QvlnyET7VyKWI+C611/Zf8US8H1d2rtehjS aRWl9XvNF8qfCB80SELEsJy+Q40RhCvvsYSSiZcVW+y+REvIxDJuU/WslQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxHEh/1cYbDcM7hZ9QaglgdTG1SMB8GA1UdIwQY MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt NmVmN2UxMTk5Njk4LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4 LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu4tad2W KNmhlqzghDBIdd3o8Zs4hAu6HkRxO0+pBICdJJ/cJ5nydEzo3Vu97b6ZJvcuAzSX C1zDV6GAEgWHBldOdAyhheei3urbndS2xp9yPXmbpdoIbFSr8rs46pkJNisFhbt6 iGT0rSVvwKKd/8tnAnJ8BoxbKbr2gbUzztA+VvlktDVTgUg2D1wuI+GahSUdBv31 KguLBM6HBG9c4mqmYUmDfOWnbxGxLKMLE7yv9f2qoC6LbdiyV8TrcCdaCckrREOK +AKZFkaN9tdAndcpacnjH52qkzX2XWYytbnbwvtYazsiyAqAVNDCLqU+o2VMer0x BHxd8rlRrovSvw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:53:00 2025 by rpki-client