This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json) Hash identifier: 0jdyTXjp7VgFyAORq55pkmm+pX03ZimXyeWIpivLbhM= Subject key identifier: B7:50:F1:13:B9:CC:90:54:08:26:48:87:E8:03:10:31:29:9E:72:96 Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019AF3C0483211CFC432984760B731D45F2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 13:00:56 +0000 Manifest this update: Sat 06 Dec 2025 13:00:56 +0000 Manifest next update: Sun 07 Dec 2025 13:00:56 +0000 Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: F60nFrmo1Ma6XiGFqqrkX+n8UZxMD6PBt/Zry4AW34k=) 2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=) 3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:48:32:11:cf:c4:32:98:47:60:b7:31:d4:5f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Dec 6 13:00:56 2025 GMT Not After : Dec 7 13:00:56 2025 GMT Subject: CN=b750f113b9cc905408264887e8031031299e7296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:a0:cf:d1:e1:c9:e1:a1:a7:c8:99:09:88: 78:92:35:1c:17:d3:d0:a4:a6:a8:24:71:a0:84:86: fb:61:00:df:72:3c:61:17:c2:08:27:dd:fd:c4:5f: 29:c8:b8:5c:6e:f9:af:96:9d:1a:dc:df:be:f7:2d: e6:ab:2f:5d:66:5e:cb:d8:50:35:62:99:9b:e2:18: 6b:22:49:37:bb:6e:71:35:e3:92:8f:58:9a:e6:7d: a8:29:44:36:d9:c6:d8:26:e3:5f:32:ab:0f:be:a0: 85:71:7c:92:15:15:cf:d9:06:98:9e:da:e2:e0:89: b0:aa:e9:e6:c4:c8:04:f4:9a:e4:ba:b4:e8:80:4e: 5a:dc:ce:7d:2b:eb:21:5f:1d:a0:9c:23:77:e1:78: 0b:61:75:51:b7:81:9d:79:38:af:35:3b:20:23:1e: 65:9e:65:b1:53:b9:17:95:f9:55:0d:55:44:f6:24: cc:1e:34:fe:26:e7:3a:47:f7:ca:30:f6:d8:1f:f6: 55:15:39:25:cc:71:8a:7d:32:13:1b:4d:5f:06:20: 86:a0:26:a4:71:80:7f:5f:9f:b4:0e:e1:8f:11:5f: 6e:1f:9b:07:b2:80:78:a2:55:b1:30:70:a6:a9:15: 82:35:10:9c:c1:ce:d4:a4:f8:a3:63:4a:f3:21:71: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:50:F1:13:B9:CC:90:54:08:26:48:87:E8:03:10:31:29:9E:72:96 X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:77:35:16:b2:02:7a:b8:f9:fd:8f:68:c2:93:cc:3b:1e: 16:75:1b:53:8a:26:b4:30:b6:76:9d:6c:88:74:29:11:14:73: 20:cb:fb:6d:78:9e:95:73:0a:8e:74:d6:ae:33:53:3e:dc:76: dc:76:cf:f4:da:d1:77:4a:92:40:af:c4:db:bc:cd:a5:b3:c4: 40:40:01:a2:f2:5d:00:73:c3:7a:79:3d:55:40:18:ca:e9:a7: 54:41:04:e3:40:96:7d:78:42:cc:7c:49:82:00:93:f3:d4:78: 2e:fa:82:03:c2:33:23:a0:f2:6b:24:2c:ce:26:0f:11:5a:33: d2:f9:d2:e6:33:3f:ec:a0:60:24:68:97:9d:bc:80:c9:26:bc: 17:fc:4a:fb:03:b0:da:a3:47:14:f0:cd:ea:da:65:b4:70:69: dc:bb:a1:d8:ca:49:e3:55:52:fa:79:3e:8f:ad:e2:b2:81:e5: 2a:bc:e1:64:f0:48:c3:a8:3f:21:89:83:dc:41:4a:6f:5a:c7: 71:94:c0:42:e3:b9:87:40:6b:91:42:db:1c:88:ba:a1:1c:ba: 7e:d9:ef:35:a5:7c:a8:04:02:ce:bb:61:54:59:22:a3:82:f3: d0:62:2a:36:35:18:6c:a3:78:7c:84:c7:da:ce:85:28:86:44: ea:21:69:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEgyEc/EMphHYLcx1F8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjUxMjA2MTMwMDU2WhcNMjUxMjA3MTMwMDU2WjAzMTEwLwYDVQQD EyhiNzUwZjExM2I5Y2M5MDU0MDgyNjQ4ODdlODAzMTAzMTI5OWU3Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Umgz9HhyeGhp8iZCYh4kjUcF9PQ pKaoJHGghIb7YQDfcjxhF8IIJ939xF8pyLhcbvmvlp0a3N++9y3mqy9dZl7L2FA1 Ypmb4hhrIkk3u25xNeOSj1ia5n2oKUQ22cbYJuNfMqsPvqCFcXySFRXP2QaYntri 4ImwqunmxMgE9JrkurTogE5a3M59K+shXx2gnCN34XgLYXVRt4GdeTivNTsgIx5l nmWxU7kXlflVDVVE9iTMHjT+Juc6R/fKMPbYH/ZVFTklzHGKfTITG01fBiCGoCak cYB/X5+0DuGPEV9uH5sHsoB4olWxMHCmqRWCNRCcwc7UpPijY0rzIXGV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdQ8RO5zJBUCCZIh+gDEDEpnnKWMB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPel3NRay Anq4+f2PaMKTzDseFnUbU4omtDC2dp1siHQpERRzIMv7bXielXMKjnTWrjNTPtx2 3HbP9NrRd0qSQK/E27zNpbPEQEABovJdAHPDenk9VUAYyumnVEEE40CWfXhCzHxJ ggCT89R4LvqCA8IzI6DyayQsziYPEVoz0vnS5jM/7KBgJGiXnbyAySa8F/xK+wOw 2qNHFPDN6tpltHBp3Luh2MpJ41VS+nk+j63isoHlKrzhZPBIw6g/IYmD3EFKb1rH cZTAQuO5h0BrkULbHIi6oRy6ftnvNaV8qAQCzrthVFkio4Lz0GIqNjUYbKN4fITH 2s6FKIZE6iFpVg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:42 2025 by rpki-client