This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json) Hash identifier: VvQ86TqNQ4j2G5jssfZKjAZYMSx5AL1JGS1xtc4A5mA= Subject key identifier: 99:59:43:13:18:D9:6B:82:D5:D6:C9:D8:06:64:F6:52:22:9D:B8:E7 Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Certificate serial: 019AF0BEE53F4E19AC02B44A82FFC6F9AAAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft Manifest number: 176A Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: MVr+noqk3iMoOrnpkp2HChnSmc75SLidEYb70U1TWFo=) 2: CCRf4uRfN50mc9puWV81ppkreOw.roa (hash: LGl0z7K8wV8haQ1zz2k3H6t4IGmg2Wy0LO5aidZN86c=) 3: gscq1-4ndiJ65U4hoz3eyHbkbS4.roa (hash: 24Hqzy5xg+vDt6hLmdJILsfqCK0ST6pwEHLOwV8AwS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e5:3f:4e:19:ac:02:b4:4a:82:ff:c6:f9:aa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=9959431318d96b82d5d6c9d80664f652229db8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:68:e2:70:66:e5:41:7c:26:04:ac:fd:90: cb:12:6a:e0:9c:3f:41:f1:0a:fa:4d:c4:c6:6c:70: 8b:a7:9f:51:36:30:dc:4a:3e:9e:47:5a:d7:80:d8: bc:1e:7d:91:13:f2:0a:0d:0c:2a:83:c6:1b:e0:d9: ac:42:c4:97:55:9d:96:2b:df:19:39:94:86:8c:1e: 11:b9:fe:a6:93:7d:ca:46:d1:34:fa:28:f5:7a:17: d7:c5:03:21:a7:21:d3:e5:cd:9a:27:81:7a:24:24: 27:b2:d0:62:c8:cc:09:07:f3:d7:d1:28:93:61:65: 08:05:c6:4a:a4:65:ac:36:94:87:f5:c3:a0:e9:2a: d0:b6:1f:c4:3f:f5:d1:c0:57:70:9f:ef:6a:03:bd: ec:38:38:5d:6c:12:f8:0e:cb:ae:3f:b6:73:8a:13: 18:2c:3d:05:a2:49:97:19:40:9e:46:47:d8:c0:97: 53:aa:5d:87:15:ce:45:fb:92:2a:7d:bc:c3:da:10: 64:2f:27:50:e2:3f:b7:63:de:c3:77:d0:01:17:72: 11:d8:9e:1b:29:cb:72:31:b1:be:2c:bc:b6:72:46: f4:8b:3e:fb:ca:9a:b8:23:d8:dd:f4:21:1d:13:94: d2:6d:3f:75:76:14:a9:65:c7:ab:95:4c:75:f3:06: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:59:43:13:18:D9:6B:82:D5:D6:C9:D8:06:64:F6:52:22:9D:B8:E7 X509v3 Authority Key Identifier: keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:00:ea:db:b8:94:ce:46:a0:71:21:01:5a:c0:f2:f3:dd: a6:89:1d:c4:ce:24:ac:ae:94:39:9a:3b:93:20:9c:1e:36:39: 3a:47:a7:7f:92:59:2b:06:3b:63:25:5a:94:a9:ba:42:d1:2d: 1d:1a:f2:47:35:c3:d7:6a:cc:96:7b:29:08:4d:52:fb:6d:aa: c5:fb:79:db:5c:7f:80:3d:72:76:29:12:d3:25:a3:47:94:5d: 22:d7:19:45:0e:97:9f:b0:65:13:52:ed:62:fe:60:b6:37:bf: 2d:cf:30:b6:e5:f9:2c:a5:27:2d:ba:76:98:7f:a6:67:be:fa: 4b:f0:3f:9f:12:60:b1:6c:74:37:21:c2:41:d1:33:2f:53:cb: 5a:24:35:2f:ad:de:9a:59:32:f1:ff:62:7e:94:48:97:95:ce: 44:44:ba:a3:8d:aa:54:c8:4f:10:62:46:ae:e7:cc:fb:18:45: 23:c6:bd:03:e0:96:01:29:dd:e7:9e:bc:92:00:07:85:7b:27: a4:74:6c:31:1b:8e:44:d4:84:ad:8b:02:38:65:4f:56:f8:d3: 5a:47:86:e2:65:22:1e:fb:75:a2:75:ad:f9:7c:9d:0e:c8:34: 44:2e:e6:92:ac:bf:58:f3:f0:a3:c9:e8:6e:da:84:f0:6a:31: f5:21:c4:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuU/ThmsArRKgv/G+aqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh MzljNzEwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD Eyg5OTU5NDMxMzE4ZDk2YjgyZDVkNmM5ZDgwNjY0ZjY1MjIyOWRiOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTto4nBm5UF8JgSs/ZDLEmrgnD9B 8Qr6TcTGbHCLp59RNjDcSj6eR1rXgNi8Hn2RE/IKDQwqg8Yb4NmsQsSXVZ2WK98Z OZSGjB4Ruf6mk33KRtE0+ij1ehfXxQMhpyHT5c2aJ4F6JCQnstBiyMwJB/PX0SiT YWUIBcZKpGWsNpSH9cOg6SrQth/EP/XRwFdwn+9qA73sODhdbBL4DsuuP7ZzihMY LD0FokmXGUCeRkfYwJdTql2HFc5F+5IqfbzD2hBkLydQ4j+3Y97Dd9ABF3IR2J4b KctyMbG+LLy2ckb0iz77ypq4I9jd9CEdE5TSbT91dhSpZcerlUx18waC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlZQxMY2WuC1dbJ2AZk9lIinbjnMB8GA1UdIwQY MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0 LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlIA6tu4 lM5GoHEhAVrA8vPdpokdxM4krK6UOZo7kyCcHjY5Okenf5JZKwY7YyValKm6QtEt HRryRzXD12rMlnspCE1S+22qxft521x/gD1ydikS0yWjR5RdItcZRQ6Xn7BlE1Lt Yv5gtje/Lc8wtuX5LKUnLbp2mH+mZ776S/A/nxJgsWx0NyHCQdEzL1PLWiQ1L63e mlky8f9ifpRIl5XORES6o42qVMhPEGJGrufM+xhFI8a9A+CWASnd5568kgAHhXsn pHRsMRuORNSErYsCOGVPVvjTWkeG4mUiHvt1onWt+XydDsg0RC7mkqy/WPPwo8no btqE8Gox9SHEuA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:28 2025 by rpki-client