This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json) Hash identifier: RWE8d6bFVgaMsMlm7q7oksrE8u+nTGgYtQXKR4UyvxU= Subject key identifier: EB:EB:75:F8:B2:B6:03:6D:B8:AC:58:BC:B6:9D:B6:E7:F8:82:3B:FA Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04 Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04 Certificate serial: 019AF389BFA00E6B752A7AFAB7DEFCEAE70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:22 +0000 Manifest this update: Sat 06 Dec 2025 12:01:22 +0000 Manifest next update: Sun 07 Dec 2025 12:01:22 +0000 Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=) 2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: Qzw44UJWznR+iWpbx4RwXVm4f+iuOPrpq0HGnHESNz8=) 3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bf:a0:0e:6b:75:2a:7a:fa:b7:de:fc:ea:e7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04 Validity Not Before: Dec 6 12:01:22 2025 GMT Not After : Dec 7 12:01:22 2025 GMT Subject: CN=ebeb75f8b2b6036db8ac58bcb69db6e7f8823bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:52:6c:7e:bf:cf:b5:f8:66:10:84:46:39: a5:13:31:84:3e:06:13:17:e4:58:8d:5b:10:f4:e8: 6c:01:24:6f:70:31:37:d3:7b:e0:82:b7:df:74:67: 67:19:b0:c4:9b:ec:da:be:78:51:eb:50:13:08:7d: 94:aa:49:f2:c2:56:1c:4b:68:8e:fc:f0:3f:3f:66: e4:3c:43:8d:83:ff:10:f1:92:f5:bc:88:26:ef:fe: 10:0b:40:b9:77:40:20:ca:e2:0b:f9:c6:3d:3d:9b: b2:ac:a1:c0:1c:c8:92:38:5a:c0:c3:9c:b0:5d:c2: 84:65:f1:84:0f:5c:fc:9a:a8:05:91:64:c9:7e:e6: 29:c3:52:a7:4d:a9:3d:c9:8e:91:f6:08:9f:8b:2b: a0:5d:39:ba:d2:01:42:10:fc:23:f1:43:d6:3d:bd: c6:40:40:bd:71:f3:2e:a3:1a:56:5a:32:bb:33:8a: 96:62:00:eb:3a:a1:ee:37:dd:51:e3:c3:6f:b0:e4: d4:c2:e8:20:4e:9f:3d:ac:df:34:8b:3b:8a:f8:cb: 09:0e:66:6d:10:5e:88:48:31:20:7b:26:10:0d:77: 17:6d:e5:22:14:b0:99:14:ce:c1:56:ea:86:62:b5: a4:b9:b5:50:43:70:ec:7a:b7:ae:05:86:e1:c8:92: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:75:F8:B2:B6:03:6D:B8:AC:58:BC:B6:9D:B6:E7:F8:82:3B:FA X509v3 Authority Key Identifier: keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:70:5f:10:53:e8:43:b3:28:f2:26:03:c7:15:c0:32:f8:02: 8c:64:e3:13:5e:b3:8e:6f:52:b8:20:3a:2b:01:c6:74:ad:df: 9c:20:c1:a4:c7:3b:2a:96:81:54:c6:9e:c8:e2:85:4b:67:78: ea:b6:65:e1:9f:d7:d7:b5:c1:74:f0:0e:9b:2f:4d:cb:a5:0b: 86:45:23:45:f0:d5:f7:61:4b:80:d1:39:af:1c:56:b7:e7:d9: 74:e1:2d:3c:7e:38:23:e5:b2:11:92:0c:b6:14:57:a6:b5:30: d7:ce:8b:a5:d4:5a:ee:5e:9d:3e:a5:0b:55:ca:33:05:f9:da: fa:fe:87:80:25:5b:4f:21:8a:84:93:fb:18:6a:e8:7d:47:f7: c3:5a:34:1b:91:0d:a5:46:96:4a:da:70:2d:02:61:8f:5b:68: 8a:64:01:1c:16:0e:5b:7b:a6:cf:58:57:6e:b1:97:c3:21:c4: c4:47:30:61:ae:a8:73:51:c7:81:99:bd:19:44:09:62:68:4a: 20:48:06:1f:0d:af:97:7f:5f:2c:be:54:ba:00:63:b2:3c:f5: 09:c5:dc:53:fc:2d:86:32:6e:20:16:6e:19:bb:81:db:d1:f2: f3:e0:cb:bf:7f:d7:24:87:b3:e1:47:d3:29:42:8b:fc:7b:e1: b1:21:94:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzib+gDmt1Knr6t9786ucOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4 MDBiMDQwHhcNMjUxMjA2MTIwMTIyWhcNMjUxMjA3MTIwMTIyWjAzMTEwLwYDVQQD EyhlYmViNzVmOGIyYjYwMzZkYjhhYzU4YmNiNjlkYjZlN2Y4ODIzYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBSbH6/z7X4ZhCERjmlEzGEPgYT F+RYjVsQ9OhsASRvcDE303vggrffdGdnGbDEm+zavnhR61ATCH2UqknywlYcS2iO /PA/P2bkPEONg/8Q8ZL1vIgm7/4QC0C5d0AgyuIL+cY9PZuyrKHAHMiSOFrAw5yw XcKEZfGED1z8mqgFkWTJfuYpw1KnTak9yY6R9gifiyugXTm60gFCEPwj8UPWPb3G QEC9cfMuoxpWWjK7M4qWYgDrOqHuN91R48NvsOTUwuggTp89rN80izuK+MsJDmZt EF6ISDEgeyYQDXcXbeUiFLCZFM7BVuqGYrWkubVQQ3DsereuBYbhyJL1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvrdfiytgNtuKxYvLadtuf4gjv6MB8GA1UdIwQY MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt NDczZDc0YTVlMjBmLzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnBfEFPo Q7Mo8iYDxxXAMvgCjGTjE16zjm9SuCA6KwHGdK3fnCDBpMc7KpaBVMaeyOKFS2d4 6rZl4Z/X17XBdPAOmy9Ny6ULhkUjRfDV92FLgNE5rxxWt+fZdOEtPH44I+WyEZIM thRXprUw186LpdRa7l6dPqULVcozBfna+v6HgCVbTyGKhJP7GGrofUf3w1o0G5EN pUaWStpwLQJhj1toimQBHBYOW3umz1hXbrGXwyHExEcwYa6oc1HHgZm9GUQJYmhK IEgGHw2vl39fLL5UugBjsjz1CcXcU/wthjJuIBZuGbuB29Hy8+DLv3/XJIez4UfT KUKL/HvhsSGUZA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:07 2025 by rpki-client