This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: rK2N1IjjH49FGaDPJp2Nsj/UYvqA4kGQ20DnGE6ryK4=
Subject key identifier: D6:86:CA:0A:82:F2:FF:F4:66:2B:F2:F9:9D:27:33:57:CC:15:A7:F4
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019AF5AEAAF192778047B2E36A4085C7D117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 16F6
Signing time: Sat 06 Dec 2025 22:00:56 +0000
Manifest this update: Sat 06 Dec 2025 22:00:56 +0000
Manifest next update: Sun 07 Dec 2025 22:00:56 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: rZl+bKNRpfGrI/dt9dU2ZgmwiKA9zreyLbRTsGW9pO4=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:ae:aa:f1:92:77:80:47:b2:e3:6a:40:85:c7:d1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Dec 6 22:00:56 2025 GMT
Not After : Dec 7 22:00:56 2025 GMT
Subject: CN=d686ca0a82f2fff4662bf2f99d273357cc15a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:f4:6a:50:66:5c:4b:18:91:1f:7c:09:95:
b8:23:5d:18:87:fd:ea:6a:0b:a6:af:53:d9:2d:00:
a7:44:24:5b:ea:28:12:5e:42:e8:ae:35:e1:da:1c:
05:f0:7a:6b:d2:5c:6a:65:94:28:92:c8:3a:8e:59:
dd:45:16:44:95:f0:b2:29:2f:5e:94:30:15:35:d0:
73:ec:db:b1:79:98:b0:22:7a:87:c6:d8:b8:b0:49:
50:2e:4f:2f:3e:51:17:ac:b8:59:d4:e4:56:f9:27:
78:35:dd:c7:d1:ab:7d:5b:9e:22:f7:a3:c0:45:7a:
37:62:55:ec:8e:11:7e:4d:a9:ec:31:61:28:8e:ab:
cb:14:21:f5:8f:2e:5a:f5:40:76:b9:c9:09:21:7a:
78:0d:0e:cf:a4:cc:43:db:d1:85:1a:cd:6e:50:48:
e2:db:14:16:8b:e9:d3:18:f4:0e:77:fd:70:c2:43:
ed:e4:82:1a:13:9a:66:67:d5:f9:1a:64:6a:20:4a:
e4:cc:03:a5:2b:fb:6f:e1:af:f7:30:ff:99:1e:3f:
b5:6a:26:65:ae:6c:de:3b:84:84:53:23:81:7f:f1:
82:4c:0b:cb:b4:67:e9:ec:fc:20:10:64:cd:46:c8:
05:5c:29:04:bb:9f:c6:36:42:e9:62:c0:6d:e1:0e:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:CA:0A:82:F2:FF:F4:66:2B:F2:F9:9D:27:33:57:CC:15:A7:F4
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:8a:41:05:76:dc:ee:22:d8:2d:99:3d:9f:d8:2c:b7:69:
1e:58:15:a4:80:5c:98:f9:df:c2:18:71:8e:87:cc:72:da:1d:
b6:83:69:99:6e:bf:08:f8:5f:4b:58:69:b9:9e:a5:3e:a2:44:
1f:41:56:ff:ce:c0:83:5f:27:d1:8c:51:02:db:6a:d3:c7:8d:
e7:d1:77:c5:c1:7e:f8:8d:07:8d:4c:6a:c4:e7:1d:d1:f2:dc:
1e:c2:b0:15:76:40:48:c0:8f:46:26:3b:cc:aa:69:80:4f:78:
d6:29:4a:9d:d7:12:86:5f:70:e2:80:c9:bd:ba:ce:de:1a:0a:
71:7c:13:4d:0b:18:b7:91:92:28:dc:0f:7b:d7:c0:19:01:f3:
44:03:bf:55:bf:6c:4e:76:8e:8a:82:21:67:23:16:e8:06:01:
c2:87:d5:46:09:6b:4c:a8:f2:ee:bb:e9:90:ad:b8:a4:ba:ab:
f0:03:e2:3f:f2:27:ef:4c:92:49:6f:ad:c6:bd:57:ae:b2:fa:
1d:5f:28:60:35:44:67:b0:30:34:db:4a:b4:cd:32:ce:79:bd:
49:d3:66:72:9d:90:0c:92:64:1b:22:fc:5b:cd:97:c6:24:3d:
f3:88:ce:6e:0f:b5:2a:66:3e:f5:70:fc:83:07:32:de:6d:a1:
93:74:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:44 2025 by rpki-client