This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json) Hash identifier: geCR4tNvx6SxiNkHkUBao/b3UoQOLaVzgi3meUUvpkk= Subject key identifier: 9B:0D:2F:9A:1C:7A:A8:A1:25:53:60:BD:44:95:6A:16:C0:7E:5C:5E Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98 Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98 Certificate serial: 019AF12D9EF46B1D21E918F3339D5FFE8219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: LeczMbH0fYTIbTMHBbDcWNe1bDtarAIo8B2jPyVE/J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9e:f4:6b:1d:21:e9:18:f3:33:9d:5f:fe:82:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=9b0d2f9a1c7aa8a1255360bd44956a16c07e5c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:7e:c7:a2:94:5a:72:35:31:2f:e6:7d:6f: 0f:83:a4:54:fe:7f:8c:25:2f:c4:48:0e:0c:86:c0: 5b:a9:0c:5d:a7:b8:f4:c2:65:b4:0b:a9:5a:8a:55: bd:6e:f5:69:fe:bb:e7:9c:3c:a0:25:fc:f1:72:9c: 71:fc:3d:82:43:ea:f6:e6:b0:66:ee:ce:f9:76:b4: 59:c4:d9:e0:6f:77:1e:41:d2:af:fe:aa:e9:d3:eb: a3:2c:1c:7a:99:2e:14:9c:2a:de:b6:22:62:ce:ac: a8:b7:e4:b9:d5:78:e2:a5:d5:bf:3b:64:af:bd:3a: 21:c6:6d:b2:8b:8e:72:87:53:4a:70:b0:6a:82:98: ba:37:55:9d:26:08:c1:90:66:a7:4f:93:41:32:8a: 19:3f:60:18:6d:3c:42:e0:98:a2:d6:19:d1:f6:52: f0:5d:b5:f9:4e:b6:da:a3:e3:35:f8:97:96:0d:c5: 4e:9c:97:96:6f:e5:84:e3:8a:17:8f:e6:12:0a:83: d5:0e:0f:33:10:0d:3e:fc:a1:10:5d:56:86:7c:d7: 46:18:75:d8:ba:ff:8f:4a:2d:cb:8a:cc:56:20:78: 4c:67:89:41:24:90:dd:46:00:6b:42:c4:79:61:0a: e6:71:4a:8b:c2:ac:3e:e6:63:6d:a7:08:d9:6d:48: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0D:2F:9A:1C:7A:A8:A1:25:53:60:BD:44:95:6A:16:C0:7E:5C:5E X509v3 Authority Key Identifier: keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:3c:ca:78:63:6c:df:f3:e9:60:ab:ef:fc:4f:5a:31:05: fd:f0:da:7d:a1:6c:00:f4:68:46:75:20:97:c7:28:a0:4e:a0: 65:6c:32:d8:02:49:40:c8:81:1d:21:9c:ea:99:b5:7f:5f:a6: 94:33:b3:19:ae:4b:45:c5:ef:b3:4b:ca:62:56:6f:48:c7:2f: 12:e6:08:34:b0:8c:f6:ea:0a:e4:72:36:5c:7d:75:b8:90:75: b9:1f:c5:78:8f:df:5b:07:e5:0d:16:91:ff:46:3a:0a:c4:97: 90:c8:f2:ef:cd:cf:1d:ac:ac:cf:18:56:f7:59:02:2b:08:92: 98:0d:db:82:15:f3:7b:66:08:6f:ae:7e:77:c3:e4:0d:48:f5: b1:ff:50:20:72:1c:1c:f3:23:43:73:30:ad:16:02:71:6d:a0: 74:c5:c5:02:3c:6b:17:84:21:89:d4:83:67:96:53:c0:b6:d3: 09:c9:23:dc:9e:8e:6c:1c:b7:cb:94:ab:3e:7d:2a:29:9d:6f: 3c:d7:36:af:55:f0:a0:e6:31:03:cc:77:18:9b:fe:39:e4:3b: 56:90:54:40:1b:14:64:08:a3:85:e8:d5:00:d1:37:2b:cd:f1: 09:69:c9:b6:1a:f8:1e:fa:d5:69:26:f3:65:0c:95:01:e3:37: e8:16:ba:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ70ax0h6RjzM51f/oIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzN2EzZjE5Y2Y5NzE2NmE0NDQyMjA3ZTEyNmYyYTAzYjZj YmViOTgwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD Eyg5YjBkMmY5YTFjN2FhOGExMjU1MzYwYmQ0NDk1NmExNmMwN2U1YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaN+x6KUWnI1MS/mfW8Pg6RU/n+M JS/ESA4MhsBbqQxdp7j0wmW0C6lailW9bvVp/rvnnDygJfzxcpxx/D2CQ+r25rBm 7s75drRZxNngb3ceQdKv/qrp0+ujLBx6mS4UnCretiJizqyot+S51XjipdW/O2Sv vTohxm2yi45yh1NKcLBqgpi6N1WdJgjBkGanT5NBMooZP2AYbTxC4Jii1hnR9lLw XbX5Trbao+M1+JeWDcVOnJeWb+WE44oXj+YSCoPVDg8zEA0+/KEQXVaGfNdGGHXY uv+PSi3LisxWIHhMZ4lBJJDdRgBrQsR5YQrmcUqLwqw+5mNtpwjZbUgPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsNL5oceqihJVNgvUSVahbAflxeMB8GA1UdIwQY MBaAFNN6PxnPlxZqREIgfhJvKgO2y+uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMt MjZhNzc2NjBjYzI3LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMtMjZhNzc2NjBjYzI3 LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkc8ynhj bN/z6WCr7/xPWjEF/fDafaFsAPRoRnUgl8cooE6gZWwy2AJJQMiBHSGc6pm1f1+m lDOzGa5LRcXvs0vKYlZvSMcvEuYINLCM9uoK5HI2XH11uJB1uR/FeI/fWwflDRaR /0Y6CsSXkMjy783PHayszxhW91kCKwiSmA3bghXze2YIb65+d8PkDUj1sf9QIHIc HPMjQ3MwrRYCcW2gdMXFAjxrF4QhidSDZ5ZTwLbTCckj3J6ObBy3y5SrPn0qKZ1v PNc2r1XwoOYxA8x3GJv+OeQ7VpBUQBsUZAijhejVANE3K83xCWnJthr4HvrVaSbz ZQyVAeM36Ba6nw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:52 2025 by rpki-client