This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json) Hash identifier: F3dFN09E2ucmLmtxG1u9lDyVSUPctIJZlDlR6I3rklA= Subject key identifier: DD:7D:8E:2B:36:B2:24:6B:A6:37:16:07:58:59:BD:30:59:6F:D6:55 Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb Certificate serial: 019AF23F9E08F1C5A12A98AA10E0B234C914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft Manifest number: 16E9 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: Xn5XkxzSFbBJ6gEh7LiWdcNr4gg/ZgA46r/vTbhLxjs=) 2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9e:08:f1:c5:a1:2a:98:aa:10:e0:b2:34:c9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=dd7d8e2b36b2246ba63716075859bd30596fd655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:7f:54:0a:40:44:04:97:a3:1c:a9:47:ea: 6d:e9:99:8b:5a:75:34:bb:88:4a:ab:83:47:0c:2b: c1:a6:f1:90:c1:f6:dc:e2:49:e2:46:10:97:8d:96: 63:cc:fd:94:e8:96:86:19:89:c8:b1:b4:fb:44:ca: 71:27:80:da:a4:02:40:9a:50:8b:ab:c0:30:47:b1: bd:5b:fe:d2:a1:60:c7:fa:92:84:22:52:f9:31:19: 56:67:00:55:c3:49:a4:16:b9:45:d8:05:75:0a:46: 92:03:f6:34:c8:ac:f6:6e:f0:63:6a:f8:e9:63:06: 69:86:48:73:cb:40:17:b7:1c:88:d9:da:50:09:60: 89:27:53:62:17:60:66:c0:54:bf:1c:22:9e:b0:22: cf:33:42:e9:0d:39:fa:39:44:f4:a8:16:0b:a0:02: ca:6a:9f:e2:a8:33:e9:ad:1d:b4:c7:77:e2:77:a6: 8c:01:ea:87:6a:0f:80:59:d9:66:83:29:ad:dc:88: ce:5e:88:24:4d:aa:e1:43:31:01:fc:e2:99:ae:8e: e5:53:d9:ad:de:da:e1:49:a1:39:07:02:5b:11:18: ff:80:48:23:ad:06:a3:88:06:7a:85:95:e8:71:5f: 3f:50:34:78:ed:94:3f:12:b2:f2:1e:b1:19:1e:4b: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:8E:2B:36:B2:24:6B:A6:37:16:07:58:59:BD:30:59:6F:D6:55 X509v3 Authority Key Identifier: keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:21:ad:b0:30:4f:c9:2d:3d:4c:30:74:7d:22:91:ee:bc:00: 35:c8:49:31:d5:d4:10:a8:12:ac:ac:51:52:8e:d8:42:c2:30: 13:4f:10:5a:44:fc:47:b5:bb:2c:73:42:4f:39:86:c1:6b:21: 64:96:20:e9:54:ab:9d:9a:d9:4f:a4:d6:eb:09:31:3f:01:99: 6e:55:1f:c6:e3:ec:d0:ba:f9:fa:e2:38:5c:6d:60:5a:4c:73: 4b:3f:54:5f:d3:a9:a5:0c:4c:a3:37:c1:1f:4b:78:18:2a:76: 3c:64:d0:e8:e5:d2:45:40:f3:ee:e5:88:d0:66:50:fa:ad:28: 2c:5b:24:02:11:6f:b1:4f:fd:98:f3:dc:e5:69:bd:a7:fe:c7: f4:aa:fd:4b:bd:b2:71:5f:46:a7:b5:07:3a:10:33:3a:53:83: 56:66:0a:3a:82:81:f9:75:d2:bf:d9:a0:5e:93:cd:6b:77:7f: 09:07:eb:18:37:fd:a9:2e:33:e8:42:c1:c7:ee:57:73:46:1d: 31:05:a3:f5:9a:c1:19:2a:06:eb:77:e2:2f:93:60:55:ef:10: 96:5a:e0:0f:24:ff:17:e1:15:db:e6:ad:c2:30:5a:5d:54:f5: f4:c2:92:6a:5e:06:2a:60:f7:73:69:ec:ba:2b:22:11:3c:0b: 75:f8:d6:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP54I8cWhKpiqEOCyNMkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm OTRhZmIwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhkZDdkOGUyYjM2YjIyNDZiYTYzNzE2MDc1ODU5YmQzMDU5NmZkNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruN/VApARASXoxypR+pt6ZmLWnU0 u4hKq4NHDCvBpvGQwfbc4kniRhCXjZZjzP2U6JaGGYnIsbT7RMpxJ4DapAJAmlCL q8AwR7G9W/7SoWDH+pKEIlL5MRlWZwBVw0mkFrlF2AV1CkaSA/Y0yKz2bvBjavjp YwZphkhzy0AXtxyI2dpQCWCJJ1NiF2BmwFS/HCKesCLPM0LpDTn6OUT0qBYLoALK ap/iqDPprR20x3fid6aMAeqHag+AWdlmgymt3IjOXogkTarhQzEB/OKZro7lU9mt 3trhSaE5BwJbERj/gEgjrQajiAZ6hZXocV8/UDR47ZQ/ErLyHrEZHkt2kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN19jis2siRrpjcWB1hZvTBZb9ZVMB8GA1UdIwQY MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct MTU3YWQwYWM1MjBhLzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCGtsDBP yS09TDB0fSKR7rwANchJMdXUEKgSrKxRUo7YQsIwE08QWkT8R7W7LHNCTzmGwWsh ZJYg6VSrnZrZT6TW6wkxPwGZblUfxuPs0Lr5+uI4XG1gWkxzSz9UX9OppQxMozfB H0t4GCp2PGTQ6OXSRUDz7uWI0GZQ+q0oLFskAhFvsU/9mPPc5Wm9p/7H9Kr9S72y cV9Gp7UHOhAzOlODVmYKOoKB+XXSv9mgXpPNa3d/CQfrGDf9qS4z6ELBx+5Xc0Yd MQWj9ZrBGSoG63fiL5NgVe8QllrgDyT/F+EV2+atwjBaXVT19MKSal4GKmD3c2ns uisiETwLdfjW/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:09 2025 by rpki-client