This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json) Hash identifier: weXwiIsLwp4hj1B70HIKjsSNVE8GYpoQjx1zA3h073c= Subject key identifier: 68:36:6A:76:DF:F3:1C:B2:4A:83:9D:00:65:3B:F9:65:CD:19:3E:E1 Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04 Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04 Certificate serial: 019AF31C448EDD72716F4B30FE408AC0AB89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft Manifest number: 1345 Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: yKBOYnLmrmlCJMQdVustYbhp2wxc0QEHQR8i5oohGAU=) 2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:44:8e:dd:72:71:6f:4b:30:fe:40:8a:c0:ab:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04 Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=68366a76dff31cb24a839d00653bf965cd193ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d2:3e:cd:f7:fc:10:a7:74:f9:9f:51:2e:22: 85:4c:1c:0d:8f:db:59:f9:e9:c9:0d:2d:c2:62:fe: 05:1a:81:33:73:f1:89:43:b0:47:be:34:75:80:9e: 5f:18:5f:11:4d:d3:3d:c7:97:ae:f9:81:8a:59:ea: 99:f3:0e:fc:df:3f:ac:fa:84:a1:46:60:3b:59:0a: 35:38:38:29:ae:f6:d8:d9:bf:21:bc:60:75:07:df: c4:fb:de:e6:ae:a8:a8:95:9a:45:bd:92:b6:00:95: 46:1e:27:0f:7c:90:b0:c7:74:83:d5:a5:3f:8d:b4: 36:0c:76:28:13:97:b6:46:35:06:c8:c7:90:fa:80: f5:08:bb:0d:69:99:3d:2a:ed:5f:3f:7f:68:1f:a0: b7:d0:af:2f:4d:07:e8:61:31:54:f3:87:e9:fd:1a: c1:6a:cf:43:5c:45:5a:6c:c4:a2:40:c1:c2:c9:67: 11:ee:85:41:e8:9a:a6:5c:c9:d0:45:5c:87:1c:b9: 11:e2:e4:fc:5d:f4:2e:2a:0d:18:eb:be:48:6c:92: 3a:e1:f6:47:7b:95:de:75:14:00:55:1c:f4:e0:2e: 9c:bd:48:b3:d9:8e:fc:e1:ec:1f:b3:6b:8f:79:70: 9c:68:d3:cb:29:30:0a:c9:ff:fc:ed:3d:db:73:0f: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:36:6A:76:DF:F3:1C:B2:4A:83:9D:00:65:3B:F9:65:CD:19:3E:E1 X509v3 Authority Key Identifier: keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:45:66:7d:43:49:9b:df:35:b4:06:36:6d:63:94:f1:15:3b: 1b:be:d1:fb:b8:0c:e7:e6:08:7d:85:cc:2a:93:c6:9a:e8:2f: 67:1e:a1:91:63:1e:9f:d3:10:f6:95:66:46:6a:82:f1:1a:ef: 76:c2:17:80:31:3a:73:9c:06:77:9c:39:05:f6:c6:bd:d5:c2: 1a:2d:64:4b:be:5e:46:f7:06:42:45:8e:3c:fc:2f:a8:68:81: df:45:98:03:fa:04:ff:30:e2:17:22:6e:ab:44:17:9d:5f:51: a0:50:60:6f:ef:dd:3b:bd:80:9b:3c:f5:c3:c9:17:54:b7:1e: bf:26:57:89:25:32:69:cd:9e:31:5b:0d:96:0d:64:9b:c6:34: 81:7e:91:07:01:ea:0d:98:1c:d8:70:69:07:1d:02:71:db:22: 92:df:f1:c8:d0:f0:95:9c:1b:c7:cd:f4:1a:cb:ce:c1:78:76: 1c:dd:40:9d:89:8e:a1:1c:91:f3:0c:62:54:d3:4a:9a:92:43: fd:6f:af:03:0f:54:b8:9e:8e:23:88:17:2f:9d:0e:14:a6:51: 2f:a1:71:c9:6b:92:c0:2d:6e:92:8b:3e:4f:d9:86:a7:40:49: 64:e1:14:aa:7e:e1:0a:7b:30:39:f2:31:a7:ed:bd:d2:cc:89: d3:85:38:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHESO3XJxb0sw/kCKwKuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTFiMjVmZDkxYjVmYmMxZmZiMTIxOGM2N2VkNTU4YWU3 NzhjMDQwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD Eyg2ODM2NmE3NmRmZjMxY2IyNGE4MzlkMDA2NTNiZjk2NWNkMTkzZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NI+zff8EKd0+Z9RLiKFTBwNj9tZ +enJDS3CYv4FGoEzc/GJQ7BHvjR1gJ5fGF8RTdM9x5eu+YGKWeqZ8w783z+s+oSh RmA7WQo1ODgprvbY2b8hvGB1B9/E+97mrqiolZpFvZK2AJVGHicPfJCwx3SD1aU/ jbQ2DHYoE5e2RjUGyMeQ+oD1CLsNaZk9Ku1fP39oH6C30K8vTQfoYTFU84fp/RrB as9DXEVabMSiQMHCyWcR7oVB6JqmXMnQRVyHHLkR4uT8XfQuKg0Y675IbJI64fZH e5XedRQAVRz04C6cvUiz2Y784ewfs2uPeXCcaNPLKTAKyf/87T3bcw8yDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg2anbf8xyySoOdAGU7+WXNGT7hMB8GA1UdIwQY MBaAFNzhsl/ZG1+8H/sSGMZ+1Viud4wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEt NjQzYmIyN2Y3ZmJmLzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEtNjQzYmIyN2Y3ZmJm LzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEVmfUNJ m981tAY2bWOU8RU7G77R+7gM5+YIfYXMKpPGmugvZx6hkWMen9MQ9pVmRmqC8Rrv dsIXgDE6c5wGd5w5BfbGvdXCGi1kS75eRvcGQkWOPPwvqGiB30WYA/oE/zDiFyJu q0QXnV9RoFBgb+/dO72Amzz1w8kXVLcevyZXiSUyac2eMVsNlg1km8Y0gX6RBwHq DZgc2HBpBx0Ccdsikt/xyNDwlZwbx830GsvOwXh2HN1AnYmOoRyR8wxiVNNKmpJD /W+vAw9UuJ6OI4gXL50OFKZRL6FxyWuSwC1ukos+T9mGp0BJZOEUqn7hCnswOfIx p+290syJ04U4Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:49 2025 by rpki-client