This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json) Hash identifier: vbWWvgz8PjxoPcz0bQnYuqumDar1U//OkzOIEjR7iZU= Subject key identifier: BD:8B:D6:4F:6C:0C:E0:33:B1:1E:C7:56:4C:C6:FA:27:3B:94:0B:8A Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c Certificate serial: 019AF0BF6F95055DEA987E5271D2AD6A7596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft Manifest number: 1441 Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=) 2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: GVrgqrc5iurysPAiWEzbFMFEaNvqNAJeanrBDfjGKxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6f:95:05:5d:ea:98:7e:52:71:d2:ad:6a:75:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=bd8bd64f6c0ce033b11ec7564cc6fa273b940b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:18:b9:a9:af:79:73:59:57:e2:d3:89:69: b0:10:17:a0:19:1b:82:36:81:a8:ea:ce:13:49:2b: c9:98:22:5d:fb:96:2d:23:d5:a6:f8:ee:46:52:46: e3:df:52:a7:35:6a:34:3d:b2:73:c0:a4:23:79:7c: 1d:1d:ed:97:b3:3e:10:22:49:ad:c7:3e:d2:6c:dd: a2:7b:72:be:bf:f0:e0:68:b6:27:3b:a9:45:d6:73: 9c:18:b0:c4:16:eb:12:f7:8f:20:96:d9:2e:fc:2d: 77:07:c0:90:b2:2c:5a:99:12:73:9a:c0:c8:ac:49: c0:b8:da:91:21:40:dd:fb:3d:f1:3f:c0:92:6e:9d: c0:92:31:9a:ae:bf:bf:55:01:53:d7:da:c5:eb:48: c9:41:3a:7c:5b:6e:43:ce:89:13:92:24:27:83:59: 79:dc:1f:61:f5:8c:41:28:8f:03:ec:4f:11:16:a1: 09:9a:30:26:8e:d2:41:cd:d5:20:10:a9:64:2d:35: c2:6d:d0:a5:60:6b:04:72:f5:ed:d6:fc:53:e6:f3: d3:29:63:88:63:03:31:d9:3b:33:cf:28:a2:2f:f3: 95:87:b4:b6:aa:74:d2:74:a4:79:5b:57:13:ea:f9: 04:0c:13:b0:6c:0b:06:48:b1:f4:34:2b:f9:76:ca: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:D6:4F:6C:0C:E0:33:B1:1E:C7:56:4C:C6:FA:27:3B:94:0B:8A X509v3 Authority Key Identifier: keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:34:70:68:dd:14:c9:e0:ff:ea:0b:1a:ee:45:14:86:ae:35: b3:75:6b:88:06:1f:56:c0:6c:4a:5a:27:69:69:79:0c:6f:c3: e5:f1:7e:77:fe:d9:5f:aa:00:0a:a4:c3:2c:c8:76:b6:7d:ce: 55:d3:7f:8f:08:54:f8:2d:4c:48:07:3d:0b:14:a6:ee:76:9f: 34:76:1c:b3:5e:ba:64:6e:f4:21:bc:6a:20:ec:d6:38:ff:92: 7c:59:00:0b:f7:35:5c:e2:95:f2:dc:7b:bf:fc:bf:e1:dd:6b: 7d:f1:ba:3b:68:96:1c:e7:45:90:4b:7a:65:d3:06:3a:00:18: 79:b5:a9:25:54:f5:1a:c5:37:f9:ce:76:f1:fb:c1:3c:12:2c: 09:50:9d:e7:42:1c:ca:22:b7:1f:9c:b5:e0:8a:39:79:c2:68: 4e:85:7c:5c:ef:60:0b:bf:6a:fe:12:e5:e1:3d:a4:e9:de:50: 4b:47:22:eb:67:b7:c9:6f:53:22:d6:75:8c:f1:19:56:3d:c3: ff:8a:56:d8:26:ab:af:08:9b:c5:0a:ff:14:17:47:50:10:f4: 45:b7:2c:a4:f3:95:e5:37:f9:d0:79:93:62:9f:2f:6d:e4:d4: eb:8b:46:61:3f:b0:6c:e7:01:74:5c:0f:72:14:8c:2e:ce:7d: 36:34:3e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2+VBV3qmH5ScdKtanWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNmRjNzM5NTgxNWFmMDQ1MDQ4ZjRjZTM5MTBkMDQwMDhm ZjNhN2MwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EyhiZDhiZDY0ZjZjMGNlMDMzYjExZWM3NTY0Y2M2ZmEyNzNiOTQwYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/kYuamveXNZV+LTiWmwEBegGRuC NoGo6s4TSSvJmCJd+5YtI9Wm+O5GUkbj31KnNWo0PbJzwKQjeXwdHe2Xsz4QIkmt xz7SbN2ie3K+v/DgaLYnO6lF1nOcGLDEFusS948gltku/C13B8CQsixamRJzmsDI rEnAuNqRIUDd+z3xP8CSbp3AkjGarr+/VQFT19rF60jJQTp8W25DzokTkiQng1l5 3B9h9YxBKI8D7E8RFqEJmjAmjtJBzdUgEKlkLTXCbdClYGsEcvXt1vxT5vPTKWOI YwMx2TszzyiiL/OVh7S2qnTSdKR5W1cT6vkEDBOwbAsGSLH0NCv5dspT3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2L1k9sDOAzsR7HVkzG+ic7lAuKMB8GA1UdIwQY MBaAFHxtxzlYFa8EUEj0zjkQ0EAI/zp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTkt MzE1NWJhOGNiNzRmLzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTktMzE1NWJhOGNiNzRm LzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTRwaN0U yeD/6gsa7kUUhq41s3VriAYfVsBsSlonaWl5DG/D5fF+d/7ZX6oACqTDLMh2tn3O VdN/jwhU+C1MSAc9CxSm7nafNHYcs166ZG70IbxqIOzWOP+SfFkAC/c1XOKV8tx7 v/y/4d1rffG6O2iWHOdFkEt6ZdMGOgAYebWpJVT1GsU3+c528fvBPBIsCVCd50Ic yiK3H5y14Io5ecJoToV8XO9gC79q/hLl4T2k6d5QS0ci62e3yW9TItZ1jPEZVj3D /4pW2CarrwibxQr/FBdHUBD0RbcspPOV5Tf50HmTYp8vbeTU64tGYT+wbOcBdFwP chSMLs59NjQ+Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:32 2025 by rpki-client