This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json) Hash identifier: 9QbYfArB2xZOzMRVu0yu1KKknJ6SQrGsJ/nMg1Kn7J4= Subject key identifier: 0E:36:B4:39:C7:9B:4D:00:B8:14:AB:01:CD:9D:F6:3D:E0:53:08:7A Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49 Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49 Certificate serial: 019AF2769D240BE8FE95E770DAD2C21643B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft Manifest number: 0252 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=) 2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: grlnvBpZOS0bLRuHhIKibXnuqviPztiCz2+dgtYK/qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9d:24:0b:e8:fe:95:e7:70:da:d2:c2:16:43:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=0e36b439c79b4d00b814ab01cd9df63de053087a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:92:93:a1:e7:24:59:12:64:38:90:9f:ed: 68:61:28:09:e7:ab:95:5f:3c:28:08:66:e4:8a:59: 84:72:91:b4:3e:31:e4:7b:fb:7d:22:70:81:f0:20: 34:ab:62:ce:91:3d:da:93:3f:f7:f3:bc:51:90:82: a8:46:f1:38:cb:e6:20:48:8a:96:29:31:bb:60:76: d9:03:c7:69:c4:3e:a0:e4:01:84:ad:57:53:42:8e: a1:4e:be:c7:5b:f5:c1:94:19:0f:8d:db:bb:49:7e: 4a:46:9d:90:c1:9b:6e:53:cf:30:7c:fb:9f:7a:6f: 69:d1:8a:34:4f:c7:0c:ae:b8:af:1d:53:b4:bd:c3: bc:af:22:fc:0b:1d:f4:e2:f7:49:bf:30:7b:43:e0: 9a:59:b4:70:a0:26:3d:33:d8:13:48:e3:55:15:91: e2:41:09:b7:16:3e:e1:ae:5e:97:99:72:e0:c2:39: dd:0f:63:e8:b9:e0:42:63:e4:04:64:e9:d9:19:9d: c8:7c:13:d9:21:d2:12:a8:78:f2:f6:aa:a5:82:c4: 20:9c:07:1f:f4:aa:7f:a1:4d:5a:ec:8d:df:77:e2: 15:30:58:cb:b7:3b:4d:46:a7:9a:86:8d:3a:dc:f0: 44:25:bd:5e:b6:7b:ae:20:3b:7c:51:6c:79:36:09: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:B4:39:C7:9B:4D:00:B8:14:AB:01:CD:9D:F6:3D:E0:53:08:7A X509v3 Authority Key Identifier: keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:10:6f:10:07:43:74:43:dd:89:71:2a:d9:73:f7:e8:41:5a: e1:ce:e0:f9:d9:62:a4:21:2c:34:25:50:ec:75:68:5a:d1:d8: 7d:a2:10:8c:f8:d8:f5:60:eb:80:4b:6e:0a:63:11:db:a7:ab: e7:94:8b:1e:cc:d5:7b:42:6c:69:75:9d:cc:2f:71:c9:78:60: 2a:64:13:12:d0:00:72:17:f4:2e:74:df:bd:fc:e1:0c:aa:dc: d4:c9:0a:99:93:5d:68:11:df:b6:88:bb:f8:df:c7:30:66:0f: a3:3d:10:11:b0:79:14:e4:e3:d2:34:a1:22:52:be:22:83:d3: c4:54:c0:a0:2d:6b:10:91:ad:e8:d4:d2:de:74:8c:60:b3:39: 4d:7a:99:a9:fc:92:73:09:b4:b7:3e:65:28:89:63:68:a8:c6: 3f:c5:9f:25:15:c9:74:de:af:48:32:73:3c:18:0d:c8:11:23: 5e:c6:1e:1e:35:f8:ba:8a:0e:16:02:04:f9:60:78:94:4d:3a: 00:1b:57:ef:76:fb:98:03:7e:3f:25:05:ed:30:c1:22:23:16: ac:e2:7b:1e:fa:0f:a8:69:52:3c:b0:ae:4d:49:76:09:52:ca: cb:53:d2:db:3c:c5:2f:70:e7:35:03:c8:cb:cd:99:90:7f:94: fa:54:06:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp0kC+j+ledw2tLCFkOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh YWNlNDkwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygwZTM2YjQzOWM3OWI0ZDAwYjgxNGFiMDFjZDlkZjYzZGUwNTMwODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj6Sk6HnJFkSZDiQn+1oYSgJ56uV XzwoCGbkilmEcpG0PjHke/t9InCB8CA0q2LOkT3akz/387xRkIKoRvE4y+YgSIqW KTG7YHbZA8dpxD6g5AGErVdTQo6hTr7HW/XBlBkPjdu7SX5KRp2QwZtuU88wfPuf em9p0Yo0T8cMrrivHVO0vcO8ryL8Cx304vdJvzB7Q+CaWbRwoCY9M9gTSONVFZHi QQm3Fj7hrl6XmXLgwjndD2PoueBCY+QEZOnZGZ3IfBPZIdISqHjy9qqlgsQgnAcf 9Kp/oU1a7I3fd+IVMFjLtztNRqeaho063PBEJb1etnuuIDt8UWx5NgnjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA42tDnHm00AuBSrAc2d9j3gUwh6MB8GA1UdIwQY MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxBvEAdD dEPdiXEq2XP36EFa4c7g+dlipCEsNCVQ7HVoWtHYfaIQjPjY9WDrgEtuCmMR26er 55SLHszVe0JsaXWdzC9xyXhgKmQTEtAAchf0LnTfvfzhDKrc1MkKmZNdaBHftoi7 +N/HMGYPoz0QEbB5FOTj0jShIlK+IoPTxFTAoC1rEJGt6NTS3nSMYLM5TXqZqfyS cwm0tz5lKIljaKjGP8WfJRXJdN6vSDJzPBgNyBEjXsYeHjX4uooOFgIE+WB4lE06 ABtX73b7mAN+PyUF7TDBIiMWrOJ7HvoPqGlSPLCuTUl2CVLKy1PS2zzFL3DnNQPI y82ZkH+U+lQGbg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:02 2025 by rpki-client