This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json) Hash identifier: xSeD2i31pX7TWPlj4usFbKzX6D/z6GaWLE2qs5pU8gE= Subject key identifier: 30:A3:E5:D9:A5:F4:3E:21:07:ED:A0:83:2B:0E:32:AC:92:AD:11:A2 Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Certificate serial: 019AF31BF815976CDB7363C2294370E1725F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft Manifest number: 0D63 Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=) 2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: yRWRBmvfMsJq6TOnTujHQZ3QRh069apy2z4Yp2OUe8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f8:15:97:6c:db:73:63:c2:29:43:70:e1:72:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=30a3e5d9a5f43e2107eda0832b0e32ac92ad11a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:3f:10:04:38:e9:be:7a:d3:65:db:28:50: 5b:70:af:4a:fa:6e:6a:50:2f:d6:e3:fc:73:47:f5: ee:6d:81:4e:08:8e:a5:e5:19:c2:66:8e:8b:3e:8d: 24:7d:a3:c7:38:ed:54:15:07:fa:f2:04:f9:34:c7: 02:d2:17:1c:c4:4c:0b:7f:be:43:53:46:87:01:c0: 6d:65:4a:80:d8:de:ad:59:69:9f:cf:90:06:5b:cf: 7d:1c:d8:29:d0:04:eb:17:1f:19:a3:a5:ff:93:cc: cb:d6:52:e1:50:d3:36:6e:28:e7:21:09:d7:49:93: d4:9d:c2:f7:ed:cc:eb:4d:eb:78:88:11:1b:c4:a7: 2d:82:eb:02:81:6d:fe:8a:5e:4b:8e:50:79:37:4d: 20:53:4f:b1:90:bf:fe:a1:09:12:d0:44:30:0d:1e: 97:2e:82:15:f2:22:64:df:7f:4a:52:8c:6f:19:33: 1c:d4:a1:bc:7e:8c:53:38:60:4e:5f:94:a2:90:bf: 0e:0d:c1:bd:f1:f2:18:23:87:3c:46:c4:87:09:2a: c7:9a:68:11:69:4a:df:78:24:83:57:37:b9:e0:78: de:94:b5:6c:1b:21:ff:fb:f6:c1:91:d8:94:81:5e: 3f:0f:ff:ad:a4:41:71:ff:27:77:56:e4:ba:ef:95: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:E5:D9:A5:F4:3E:21:07:ED:A0:83:2B:0E:32:AC:92:AD:11:A2 X509v3 Authority Key Identifier: keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:49:dc:69:33:4e:4b:6d:4c:6e:97:ee:01:9f:75:0b:04:60: 73:b4:9e:48:75:eb:f5:b0:98:9f:b2:42:7f:47:35:9f:8e:7c: 3e:bf:b1:42:77:15:ba:8e:fe:53:61:88:cc:fb:a9:35:31:2f: 3e:80:e7:92:bd:de:41:0b:01:74:de:32:48:e7:dc:87:57:b2: 7d:de:de:4e:e2:93:70:af:35:b8:f5:7f:5a:7b:23:e0:7a:17: 35:dd:33:8e:d9:fc:9d:26:37:e2:8f:a0:1c:ea:23:41:d3:bc: 4a:8e:79:46:2f:d0:1a:57:dd:cd:e5:ca:53:63:78:08:c5:8c: 1f:21:e6:fd:3d:c7:aa:9f:73:17:fe:28:11:dd:99:92:e9:90: 61:7a:77:1a:50:cd:51:44:fb:19:3f:ef:49:b6:6a:a8:be:d2: b0:31:ff:3a:04:91:2d:e2:3b:d2:2d:ca:fd:a4:13:da:89:ee: ff:db:f2:29:cd:55:6c:29:9c:15:3f:bc:6c:58:58:ef:d2:70: c3:7b:70:c3:b3:c7:6b:0e:35:20:ae:1a:ed:51:65:d4:3b:fb: d8:3f:70:85:6a:34:fa:f5:21:60:ac:ab:6d:61:9c:2e:eb:12: 48:f2:8a:e6:c8:b4:67:ff:3b:43:c4:bd:49:36:f4:70:2c:bf: aa:c3:0e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/gVl2zbc2PCKUNw4XJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0 NTUwNzIwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD EygzMGEzZTVkOWE1ZjQzZTIxMDdlZGEwODMyYjBlMzJhYzkyYWQxMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6E/EAQ46b5602XbKFBbcK9K+m5q UC/W4/xzR/XubYFOCI6l5RnCZo6LPo0kfaPHOO1UFQf68gT5NMcC0hccxEwLf75D U0aHAcBtZUqA2N6tWWmfz5AGW899HNgp0ATrFx8Zo6X/k8zL1lLhUNM2bijnIQnX SZPUncL37czrTet4iBEbxKctgusCgW3+il5LjlB5N00gU0+xkL/+oQkS0EQwDR6X LoIV8iJk339KUoxvGTMc1KG8foxTOGBOX5SikL8ODcG98fIYI4c8RsSHCSrHmmgR aUrfeCSDVze54HjelLVsGyH/+/bBkdiUgV4/D/+tpEFx/yd3VuS675VaywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCj5dml9D4hB+2ggysOMqySrRGiMB8GA1UdIwQY MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUncaTNO S21MbpfuAZ91CwRgc7SeSHXr9bCYn7JCf0c1n458Pr+xQncVuo7+U2GIzPupNTEv PoDnkr3eQQsBdN4ySOfch1eyfd7eTuKTcK81uPV/Wnsj4HoXNd0zjtn8nSY34o+g HOojQdO8So55Ri/QGlfdzeXKU2N4CMWMHyHm/T3Hqp9zF/4oEd2ZkumQYXp3GlDN UUT7GT/vSbZqqL7SsDH/OgSRLeI70i3K/aQT2onu/9vyKc1VbCmcFT+8bFhY79Jw w3tww7PHaw41IK4a7VFl1Dv72D9whWo0+vUhYKyrbWGcLusSSPKK5si0Z/87Q8S9 STb0cCy/qsMOLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:12 2025 by rpki-client