This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json) Hash identifier: 44XQQNbWohTUuofiEmf9KJWidyjuw3z2YEIz6yD0RbU= Subject key identifier: 81:0C:44:5F:98:6B:33:72:17:03:0A:FE:8C:E7:A7:2F:08:53:0F:32 Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c Certificate serial: 019AF2400AE6691CE9AECD811B99CB982944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: RczbnW966a3egbkaVCYKOHvB7M2ALabQmRICqBJWzdg=) 2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0a:e6:69:1c:e9:ae:cd:81:1b:99:cb:98:29:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=810c445f986b337217030afe8ce7a72f08530f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:84:f5:3d:c6:e5:c3:4c:77:bf:db:a4:59:45: 57:a1:38:1b:08:58:a8:17:ea:da:b5:ff:67:20:b1: d3:29:e2:04:6d:de:23:b6:19:4e:e8:a2:d8:72:18: 09:d7:df:ce:03:ff:16:35:9f:06:30:5c:c4:95:ae: 9e:b6:06:f8:a4:91:b3:b7:10:5f:5c:8c:4c:d0:69: b4:3c:94:5d:47:58:f3:ef:49:ce:91:12:8d:23:6b: 6b:cc:a6:e5:0c:5f:fe:80:af:6d:10:61:95:82:75: 98:de:7b:88:49:89:d1:48:33:7c:c9:0a:6b:3f:72: 98:74:61:85:2c:d4:a8:f4:0a:49:8c:86:2e:6f:18: 17:b2:73:68:46:cb:76:87:74:74:4d:e2:fb:5a:af: cb:0d:d3:bd:ed:68:c8:8c:cb:f7:e7:81:02:4a:fe: 85:4d:11:cd:b1:dd:6d:32:73:b3:ea:eb:ba:2a:9f: 46:8b:1c:05:b9:ce:84:26:fc:6c:42:ec:41:08:e7: 0b:ba:79:c5:fc:ac:4e:f0:68:ea:86:fb:8a:83:67: 7b:63:e2:78:67:11:da:63:8d:f0:6e:ba:13:da:13: 37:ca:ca:82:ee:6c:41:97:a9:31:cc:cd:7c:d3:c4: 77:99:40:d9:e7:75:50:fd:ea:8f:36:49:52:ca:30: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:44:5F:98:6B:33:72:17:03:0A:FE:8C:E7:A7:2F:08:53:0F:32 X509v3 Authority Key Identifier: keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:90:d9:da:6a:f8:c6:ee:85:86:9d:f9:0b:24:5e:00:c1:2e: 0e:6e:d6:54:6a:da:fc:d8:a8:49:a1:c9:bf:f9:c9:57:7a:7e: 6e:ba:af:92:61:cd:77:d0:c9:74:fe:31:29:05:30:98:05:66: c8:4e:69:43:fc:cb:2f:a3:63:99:4c:97:91:ed:08:ac:4d:78: 7c:3a:00:33:64:1f:2d:be:93:33:02:62:e7:76:ff:28:1b:c5: a0:05:69:ec:a7:78:03:19:e5:68:e5:93:2b:78:c3:f2:4c:83: d1:ae:4f:f2:54:5d:e0:3b:82:76:cc:a1:10:c5:48:ab:59:03: 17:51:7e:f8:c0:77:c4:95:69:25:81:95:1d:ca:1c:20:cd:b7: b4:65:4a:67:90:d1:f9:a5:f6:f0:08:97:e6:18:11:24:f7:06: 2f:1b:e2:fa:91:75:0a:1a:5d:32:eb:85:aa:34:73:fc:b0:4d: c2:ea:0c:31:37:c0:05:66:47:b6:04:93:58:02:c2:06:63:b6: ba:39:80:6a:0f:a9:d7:ad:0e:13:2b:56:e1:78:18:20:7f:d5: e6:30:1f:07:11:c4:f3:c3:81:3d:65:f4:a3:1f:ba:40:92:f6: 52:16:1e:f8:da:56:2e:0b:75:6f:5f:bd:93:18:e0:88:a3:7e: 93:06:02:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQArmaRzprs2BG5nLmClEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlODA0YzljOGE0MzM5N2QxNjc3OWFhOTM0ZjcwNjczODhm YzdkN2MwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD Eyg4MTBjNDQ1Zjk4NmIzMzcyMTcwMzBhZmU4Y2U3YTcyZjA4NTMwZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IT1Pcblw0x3v9ukWUVXoTgbCFio F+ratf9nILHTKeIEbd4jthlO6KLYchgJ19/OA/8WNZ8GMFzEla6etgb4pJGztxBf XIxM0Gm0PJRdR1jz70nOkRKNI2trzKblDF/+gK9tEGGVgnWY3nuISYnRSDN8yQpr P3KYdGGFLNSo9ApJjIYubxgXsnNoRst2h3R0TeL7Wq/LDdO97WjIjMv354ECSv6F TRHNsd1tMnOz6uu6Kp9GixwFuc6EJvxsQuxBCOcLunnF/KxO8GjqhvuKg2d7Y+J4 ZxHaY43wbroT2hM3ysqC7mxBl6kxzM1808R3mUDZ53VQ/eqPNklSyjBxHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEMRF+YazNyFwMK/oznpy8IUw8yMB8GA1UdIwQY MBaAFN6ATJyKQzl9FneaqTT3BnOI/H18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTIt YWY0ZTUyNDFiZjIwLzEvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTItYWY0ZTUyNDFiZjIw LzEvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpDZ2mr4 xu6Fhp35CyReAMEuDm7WVGra/NioSaHJv/nJV3p+brqvkmHNd9DJdP4xKQUwmAVm yE5pQ/zLL6NjmUyXke0IrE14fDoAM2QfLb6TMwJi53b/KBvFoAVp7Kd4AxnlaOWT K3jD8kyD0a5P8lRd4DuCdsyhEMVIq1kDF1F++MB3xJVpJYGVHcocIM23tGVKZ5DR +aX28AiX5hgRJPcGLxvi+pF1ChpdMuuFqjRz/LBNwuoMMTfABWZHtgSTWALCBmO2 ujmAag+p160OEytW4XgYIH/V5jAfBxHE88OBPWX0ox+6QJL2UhYe+NpWLgt1b1+9 kxjgiKN+kwYCJg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:27 2025 by rpki-client