This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json) Hash identifier: wAx8FiUuaWqh3hjfqlYbg47QvagRVMhjGxehTaT019s= Subject key identifier: 9C:8E:13:19:EA:59:BB:C8:6F:38:F7:CD:5B:6E:8E:4B:EF:2C:66:01 Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Certificate serial: 019AF31CB28D45B8DDE09D14FAF9BF00A8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft Manifest number: 1295 Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: eup1wP4XEr4OWd+JaF69dCp/n9VWlleDjTxi5KvM+6w=) 2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b2:8d:45:b8:dd:e0:9d:14:fa:f9:bf:00:a8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=9c8e1319ea59bbc86f38f7cd5b6e8e4bef2c6601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:43:50:0b:47:15:3c:31:43:1d:3c:99:63: 4c:da:b7:6c:a2:c9:a4:f0:95:8b:50:de:c1:dd:c4: fb:f7:c7:3e:94:c2:a0:e3:7a:54:24:f5:80:6f:8b: 0c:d9:42:88:a7:3e:fe:0d:3b:f6:55:d9:f7:8e:22: bb:45:30:6b:df:d2:10:39:fd:94:7e:82:ec:ee:9e: 57:90:a0:3a:58:1d:ed:08:ee:e4:d3:a1:bb:ae:b5: e0:a2:94:11:a8:51:2c:2d:45:98:1f:4c:71:4f:4f: d5:6b:c2:c6:2d:13:3b:29:c6:a6:26:a3:b2:bc:01: 0c:73:9c:69:c0:c5:82:bb:59:be:5f:59:94:b9:50: 78:93:06:07:14:ee:d3:55:dd:89:a9:04:e4:40:ce: d0:ec:7a:f7:ec:61:ae:ed:c2:f6:79:a7:18:21:dc: 98:cd:ef:59:5c:9a:ee:65:6d:2a:59:f7:f3:0e:73: 42:99:16:ff:a2:27:09:5e:6d:88:00:12:99:7d:f8: 88:7c:76:d6:7a:2d:0f:38:db:8c:02:36:ba:51:cd: b3:49:98:f1:91:c6:7b:1b:1c:61:6d:d2:ec:16:15: ba:51:38:f0:a4:76:05:e9:a3:e1:6d:1b:51:74:b8: f1:51:3e:b7:3f:de:c2:18:ee:b1:a0:60:05:6b:5f: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8E:13:19:EA:59:BB:C8:6F:38:F7:CD:5B:6E:8E:4B:EF:2C:66:01 X509v3 Authority Key Identifier: keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:cc:d1:d0:0c:86:39:80:0a:b6:2c:53:69:05:98:10:13: 2e:db:18:14:98:12:06:ea:2b:11:15:db:c6:61:6d:e1:79:df: 3d:be:ca:6d:35:81:19:5b:03:4c:60:54:10:ae:5e:fc:8d:37: 6a:0e:40:47:a4:40:3e:ae:d1:67:12:50:0a:74:92:97:04:4d: d0:3b:49:50:14:b1:8a:b9:bf:d0:07:aa:71:8b:76:9f:a5:0d: b4:dc:da:90:14:8f:66:93:ab:00:0e:90:8c:69:b6:50:7e:e2: 33:ef:69:b1:a9:fe:57:c9:37:f2:e5:f5:84:a1:fe:a1:58:d1: 81:45:3d:de:ac:21:be:f1:94:b9:c6:fc:31:c6:1e:b4:6e:e2: 10:7c:30:e8:62:fc:71:c9:eb:f7:14:0a:f8:81:fb:0b:6a:6d: c6:22:28:0b:34:4e:07:7d:a3:16:74:3c:19:79:23:a9:f4:f4: 71:8d:d7:2b:c9:5f:2c:66:cc:dd:f4:46:97:7c:02:4a:0a:57: de:13:e9:df:bd:47:ef:3f:a9:b1:89:36:f7:11:3b:6b:83:68: 2c:ad:c3:66:c8:ac:24:af:8c:03:59:43:40:53:f9:96:dd:aa: 36:7f:92:78:f5:12:2f:36:7a:72:5e:bd:a2:0d:f9:45:e8:bc: d6:dc:07:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLKNRbjd4J0U+vm/AKjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj NGRlNTMwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD Eyg5YzhlMTMxOWVhNTliYmM4NmYzOGY3Y2Q1YjZlOGU0YmVmMmM2NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7hDUAtHFTwxQx08mWNM2rdsosmk 8JWLUN7B3cT798c+lMKg43pUJPWAb4sM2UKIpz7+DTv2Vdn3jiK7RTBr39IQOf2U foLs7p5XkKA6WB3tCO7k06G7rrXgopQRqFEsLUWYH0xxT0/Va8LGLRM7KcamJqOy vAEMc5xpwMWCu1m+X1mUuVB4kwYHFO7TVd2JqQTkQM7Q7Hr37GGu7cL2eacYIdyY ze9ZXJruZW0qWffzDnNCmRb/oicJXm2IABKZffiIfHbWei0PONuMAja6Uc2zSZjx kcZ7GxxhbdLsFhW6UTjwpHYF6aPhbRtRdLjxUT63P97CGO6xoGAFa18IIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyOExnqWbvIbzj3zVtujkvvLGYBMB8GA1UdIwQY MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5 LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhfM0dAM hjmACrYsU2kFmBATLtsYFJgSBuorERXbxmFt4XnfPb7KbTWBGVsDTGBUEK5e/I03 ag5AR6RAPq7RZxJQCnSSlwRN0DtJUBSxirm/0AeqcYt2n6UNtNzakBSPZpOrAA6Q jGm2UH7iM+9psan+V8k38uX1hKH+oVjRgUU93qwhvvGUucb8McYetG7iEHww6GL8 ccnr9xQK+IH7C2ptxiIoCzROB32jFnQ8GXkjqfT0cY3XK8lfLGbM3fRGl3wCSgpX 3hPp371H7z+psYk29xE7a4NoLK3DZsisJK+MA1lDQFP5lt2qNn+SePUSLzZ6cl69 og35Rei81twHCA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:59 2025 by rpki-client