This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json) Hash identifier: 4gQTtYXp9Ts7hsRGV0tM65Yjd30AYwf3g63kffdaVYU= Subject key identifier: 56:B6:D0:1C:4A:03:D3:6E:3F:EC:79:76:E7:06:8C:54:99:A9:19:90 Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Certificate serial: 019AF2E426FDC57A86C6E05AE4011E97E0A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft Manifest number: 0DE3 Signing time: Sat 06 Dec 2025 09:00:29 +0000 Manifest this update: Sat 06 Dec 2025 09:00:29 +0000 Manifest next update: Sun 07 Dec 2025 09:00:29 +0000 Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=) 2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: zeFEY1FAab7PVydFtHTYWWQtCYN8Dy/7EVqOMHU7Qy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:26:fd:c5:7a:86:c6:e0:5a:e4:01:1e:97:e0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Validity Not Before: Dec 6 09:00:29 2025 GMT Not After : Dec 7 09:00:29 2025 GMT Subject: CN=56b6d01c4a03d36e3fec7976e7068c5499a91990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:05:d9:c5:66:14:c3:1a:a9:5a:99:f2:a1: ec:20:bb:d4:f5:e2:94:c7:93:e7:f9:78:bd:6f:cd: ad:7b:55:5a:09:ac:64:6b:33:4b:e2:26:03:1c:70: 5c:32:66:e3:37:dd:5e:5d:ef:39:3d:e3:92:51:c7: 3a:1c:32:4d:a6:7c:0b:07:f4:f5:f6:01:d3:9d:a9: 47:11:9b:9f:be:02:56:cb:cc:1c:86:77:41:3b:ad: b0:0b:69:76:96:07:ac:62:c0:cf:7b:52:0c:c6:b9: eb:86:23:ac:5a:5d:db:db:15:7a:9f:64:e9:92:95: 24:a9:cc:f4:26:d5:44:9c:d2:a2:da:be:2b:19:67: f6:41:b9:af:af:27:6d:10:97:f4:0c:ed:91:30:40: a1:20:a4:0f:4f:a3:f5:26:3f:13:0c:86:e2:ee:58: f5:96:a7:a0:da:a9:86:fe:69:b0:cf:ba:4d:6c:cc: 18:a2:1f:dd:eb:e2:5d:f9:5a:0c:a3:4d:0c:25:ea: e9:1e:fe:a3:1f:83:c4:41:8f:86:27:c4:ac:32:ce: 74:e0:08:28:26:63:89:8d:42:a1:5f:c8:91:ef:68: 7d:0c:17:4a:ca:4d:73:73:58:38:ae:fa:bc:9e:fd: a1:b7:1c:10:4e:42:4d:84:02:04:93:61:3e:3f:c6: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B6:D0:1C:4A:03:D3:6E:3F:EC:79:76:E7:06:8C:54:99:A9:19:90 X509v3 Authority Key Identifier: keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:e9:65:c9:8f:07:79:cd:7b:ad:10:30:d9:a1:f3:6c:9c: 61:07:54:4c:c3:cd:f5:e4:bb:c1:af:4f:77:af:b7:4c:8d:a0: 4d:ee:1b:1a:f9:d9:3f:4b:e1:9d:2b:04:94:4f:2d:42:70:99: 77:67:8d:5b:4a:63:b4:39:e5:37:64:ca:4c:96:2b:6d:39:93: cd:3d:06:91:3c:f6:cc:56:b3:37:05:96:2f:4c:14:59:30:dd: fe:da:45:1b:98:02:1c:d3:2b:1e:b2:dc:ef:40:5e:f1:92:3e: 7d:b4:90:0a:f5:5f:90:3d:18:51:e7:8d:fc:8a:8b:ab:61:f8: f5:09:5c:04:7a:de:70:32:cc:1a:6b:89:42:6b:b0:ba:05:e7: 8e:d6:47:a0:1b:e3:7c:2e:ae:7a:c8:97:2a:0b:78:0e:86:28: 52:d6:dc:a4:10:ce:04:21:17:02:1e:83:48:5a:a7:8f:84:bc: e8:e9:28:75:f5:0c:e9:54:c5:f1:6d:67:82:9f:ca:9e:31:16: 82:b3:2e:71:60:5b:b1:4c:9d:59:33:7f:31:df:0a:13:ba:61: 28:34:b1:7a:ef:e1:0f:47:51:03:0e:70:3a:35:86:56:18:ce: e8:b7:8f:34:de:f6:59:e3:c5:f4:07:43:42:fb:29:7a:fa:f8: 4d:c0:2b:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5Cb9xXqGxuBa5AEel+CpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2 YWMxZTkwHhcNMjUxMjA2MDkwMDI5WhcNMjUxMjA3MDkwMDI5WjAzMTEwLwYDVQQD Eyg1NmI2ZDAxYzRhMDNkMzZlM2ZlYzc5NzZlNzA2OGM1NDk5YTkxOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3IF2cVmFMMaqVqZ8qHsILvU9eKU x5Pn+Xi9b82te1VaCaxkazNL4iYDHHBcMmbjN91eXe85PeOSUcc6HDJNpnwLB/T1 9gHTnalHEZufvgJWy8wchndBO62wC2l2lgesYsDPe1IMxrnrhiOsWl3b2xV6n2Tp kpUkqcz0JtVEnNKi2r4rGWf2QbmvrydtEJf0DO2RMEChIKQPT6P1Jj8TDIbi7lj1 lqeg2qmG/mmwz7pNbMwYoh/d6+Jd+VoMo00MJerpHv6jH4PEQY+GJ8SsMs504Ago JmOJjUKhX8iR72h9DBdKyk1zc1g4rvq8nv2htxwQTkJNhAIEk2E+P8auLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa20BxKA9NuP+x5ducGjFSZqRmQMB8GA1UdIwQY MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2 LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoPpZcmP B3nNe60QMNmh82ycYQdUTMPN9eS7wa9Pd6+3TI2gTe4bGvnZP0vhnSsElE8tQnCZ d2eNW0pjtDnlN2TKTJYrbTmTzT0GkTz2zFazNwWWL0wUWTDd/tpFG5gCHNMrHrLc 70Be8ZI+fbSQCvVfkD0YUeeN/IqLq2H49QlcBHrecDLMGmuJQmuwugXnjtZHoBvj fC6uesiXKgt4DoYoUtbcpBDOBCEXAh6DSFqnj4S86OkodfUM6VTF8W1ngp/KnjEW grMucWBbsUydWTN/Md8KE7phKDSxeu/hD0dRAw5wOjWGVhjO6LePNN72WePF9AdD Qvspevr4TcArjA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:27 2025 by rpki-client