This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json) Hash identifier: 2DPQQ6mFRH3jNEOaaMjSb00kGvkjI43URCM1lZGdujI= Subject key identifier: 22:A6:14:74:7B:24:DD:7A:6D:2F:D6:87:79:10:3A:89:F3:E3:1D:F0 Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d Certificate serial: 019B2B1E2D3547DD1716D14DD151DB8D6C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft Manifest number: 0E06 Signing time: Wed 17 Dec 2025 07:02:36 +0000 Manifest this update: Wed 17 Dec 2025 07:02:36 +0000 Manifest next update: Thu 18 Dec 2025 07:02:36 +0000 Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: N5h185YqbveQcMMnMXxgaDI9s/Xou8y98rQwPtPmL+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:2d:35:47:dd:17:16:d1:4d:d1:51:db:8d:6c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d Validity Not Before: Dec 17 07:02:36 2025 GMT Not After : Dec 18 07:02:36 2025 GMT Subject: CN=22a614747b24dd7a6d2fd68779103a89f3e31df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:a9:96:fa:86:17:e5:a2:31:3c:3a:1a:55: 54:5f:2e:30:0b:7a:c3:cd:15:72:01:22:d8:85:c1: e3:08:23:0d:f2:c0:47:57:94:c1:73:62:de:0c:d7: 3c:94:cc:0b:de:35:44:86:4d:f9:fd:6c:c0:38:b6: bf:90:df:6b:61:55:09:ee:b6:03:b0:af:01:ab:3f: 0c:06:18:8c:7a:80:34:1b:e2:e0:4f:12:23:d2:59: ad:4b:56:4e:96:de:14:02:f4:77:90:24:51:30:67: b0:c9:67:01:26:38:9e:3f:f4:dc:24:57:00:fd:2c: d4:bf:0c:34:03:95:b8:fa:2d:4f:52:a9:03:c1:28: 21:49:93:9b:97:f1:4c:7b:16:49:27:54:6a:b3:75: 41:da:29:aa:50:ad:84:cd:75:71:e8:9e:4a:a7:8a: bf:5b:dd:ac:4f:af:85:08:79:1a:ba:42:f8:63:5d: 98:13:93:1b:73:d6:6d:5e:58:5a:51:30:a7:37:55: c4:bb:21:b4:fa:9f:d8:09:0c:6a:a9:1b:e6:c7:80: 42:48:a2:be:e9:fb:0d:44:bb:d0:b6:95:00:04:ae: b2:72:64:87:37:8c:b3:df:3d:dc:b7:28:be:cd:23: c4:8d:10:42:8b:ab:f5:f3:f2:03:c5:ad:5b:1c:61: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:14:74:7B:24:DD:7A:6D:2F:D6:87:79:10:3A:89:F3:E3:1D:F0 X509v3 Authority Key Identifier: keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:18:cb:c2:c9:26:b3:b2:2c:0b:a0:b7:07:b4:ed:11:fe: d9:7d:e6:f9:a9:ca:8a:be:64:98:20:eb:c2:60:f4:77:20:d4: be:36:57:6e:6d:bf:02:6b:a0:ed:64:ab:9a:8a:56:cb:23:c6: 92:91:a6:60:74:e0:69:af:95:84:3c:7e:56:79:d1:66:ab:0b: 46:5b:d4:4e:04:26:69:d3:58:c3:cf:5b:90:42:77:10:96:43: d3:b2:47:a3:42:d3:8b:02:c1:61:5a:34:bb:34:75:66:95:01: 49:44:11:90:67:83:a6:ce:a6:b8:4a:44:73:6d:8e:bd:2d:ff: 32:c1:64:54:2d:df:c6:8d:24:68:67:c2:43:4a:1c:05:34:de: 15:68:b0:18:ee:53:c1:55:23:b0:02:41:7e:be:97:86:13:62: 62:62:e3:98:af:9d:38:22:d9:b4:62:bb:29:4c:c2:e5:7b:14: a4:40:4d:74:97:74:8d:22:61:ab:54:a8:b6:61:85:b1:fe:2c: dd:b0:c6:53:f9:29:28:5a:9d:d9:68:26:45:04:1b:21:2a:1e: ac:e1:0c:d5:21:5e:54:70:66:88:76:04:23:fc:43:62:d5:76: 8a:8a:2d:a5:35:05:64:a8:d0:69:92:85:d1:20:04:2f:59:28: bf:d5:a8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHi01R90XFtFN0VHbjWwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzN2IxZTNlZmFlYTg5ZGNmY2QxYzhlOTdjMGU5Yjc4MGM2 MTQ2NWQwHhcNMjUxMjE3MDcwMjM2WhcNMjUxMjE4MDcwMjM2WjAzMTEwLwYDVQQD EygyMmE2MTQ3NDdiMjRkZDdhNmQyZmQ2ODc3OTEwM2E4OWYzZTMxZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwaplvqGF+WiMTw6GlVUXy4wC3rD zRVyASLYhcHjCCMN8sBHV5TBc2LeDNc8lMwL3jVEhk35/WzAOLa/kN9rYVUJ7rYD sK8Bqz8MBhiMeoA0G+LgTxIj0lmtS1ZOlt4UAvR3kCRRMGewyWcBJjieP/TcJFcA /SzUvww0A5W4+i1PUqkDwSghSZObl/FMexZJJ1Rqs3VB2imqUK2EzXVx6J5Kp4q/ W92sT6+FCHkaukL4Y12YE5Mbc9ZtXlhaUTCnN1XEuyG0+p/YCQxqqRvmx4BCSKK+ 6fsNRLvQtpUABK6ycmSHN4yz3z3ctyi+zSPEjRBCi6v18/IDxa1bHGEdjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKmFHR7JN16bS/Wh3kQOonz4x3wMB8GA1UdIwQY MBaAFKN7Hj766onc/NHI6XwOm3gMYUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNWJiMjEtMjIzOS00Zjc3LWE3ZmEt NTVkZTY1YTJlYTNiLzEvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zNWJiMjEtMjIzOS00Zjc3LWE3ZmEtNTVkZTY1YTJlYTNi LzEvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0gYy8LJ JrOyLAugtwe07RH+2X3m+anKir5kmCDrwmD0dyDUvjZXbm2/Amug7WSrmopWyyPG kpGmYHTgaa+VhDx+VnnRZqsLRlvUTgQmadNYw89bkEJ3EJZD07JHo0LTiwLBYVo0 uzR1ZpUBSUQRkGeDps6muEpEc22OvS3/MsFkVC3fxo0kaGfCQ0ocBTTeFWiwGO5T wVUjsAJBfr6XhhNiYmLjmK+dOCLZtGK7KUzC5XsUpEBNdJd0jSJhq1SotmGFsf4s 3bDGU/kpKFqd2WgmRQQbISoerOEM1SFeVHBmiHYEI/xDYtV2iootpTUFZKjQaZKF 0SAEL1kov9WolQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:27:56 2025 by rpki-client