This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json) Hash identifier: JOGzKcBJwP4u/tcqhceCEFVB1a2iVpFXdMoHb1Shirg= Subject key identifier: 91:0A:26:85:98:DF:DA:C0:2F:12:E2:82:88:C2:11:30:4A:42:E6:5D Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04 Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04 Certificate serial: 019AF577B0760CBDBE2F7F26E18104337679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft Manifest number: 10A1 Signing time: Sat 06 Dec 2025 21:00:53 +0000 Manifest this update: Sat 06 Dec 2025 21:00:53 +0000 Manifest next update: Sun 07 Dec 2025 21:00:53 +0000 Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: gdKMzjcsqCr5zCgEq4+5T/TFGlk8u8j0xsk/NH3avF0=) 2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:b0:76:0c:bd:be:2f:7f:26:e1:81:04:33:76:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04 Validity Not Before: Dec 6 21:00:53 2025 GMT Not After : Dec 7 21:00:53 2025 GMT Subject: CN=910a268598dfdac02f12e28288c211304a42e65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:ca:cd:e6:e1:eb:98:d4:cc:35:21:9c:81: 41:bc:7f:2b:60:b7:92:a0:1e:99:73:2d:71:33:32: 01:c3:aa:b4:d5:df:5b:be:4c:c2:e1:ef:c2:1a:72: 94:66:56:c0:8e:e7:83:b3:5f:8a:d4:23:ad:6f:63: 3c:4a:7a:51:eb:95:0d:fe:9d:a1:fe:ec:86:7c:3b: e5:e6:5e:46:65:44:08:b7:95:f6:eb:0b:c9:bf:65: f3:4f:70:f2:65:41:d1:bf:cf:f9:f9:77:60:92:f2: 3a:5e:b9:ee:e9:82:eb:27:02:03:14:31:ab:64:1b: 08:7f:f2:60:95:bf:e6:d2:8c:19:25:cf:04:11:cf: ec:c5:25:b9:0d:ef:b1:ff:50:1b:7e:b2:25:f2:3c: 8d:f3:fe:04:f1:77:f8:79:eb:70:c9:92:dd:a6:bb: 80:c4:67:35:19:66:b3:53:6e:d7:63:1a:82:7e:d8: 66:f3:e5:3f:a9:ec:65:e4:b5:93:83:8e:3a:d0:d8: 1b:08:51:ac:9f:83:0d:96:01:7f:21:6b:0e:cb:a3: 21:ee:2b:4c:f3:04:06:d7:5d:c5:f1:c8:18:8e:98: 91:4a:24:8b:d9:ef:28:ad:9d:3c:d5:e0:95:d0:28: 16:48:c1:c9:a0:63:d8:21:00:8d:89:fa:e0:a1:30: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:26:85:98:DF:DA:C0:2F:12:E2:82:88:C2:11:30:4A:42:E6:5D X509v3 Authority Key Identifier: keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f0:53:8a:ee:eb:e7:7c:77:b6:c0:60:6b:8f:bf:34:ef:da: 51:dc:85:eb:cd:f8:30:56:6b:73:20:66:20:5b:13:f0:bb:c3: f9:cf:2c:8d:d2:68:bc:a8:1a:27:4f:d0:18:bf:a6:83:1c:05: 0d:8c:18:1b:cc:66:2e:4d:b2:db:60:d3:84:6e:c1:36:80:f5: 97:71:91:58:bf:d4:c4:72:1b:71:1d:7f:0f:dd:e9:ac:f9:e4: d6:16:da:a2:cb:ca:04:5e:0f:de:dc:36:e8:3d:ee:20:11:65: 27:d4:f7:ab:b6:be:45:44:7b:79:2f:9c:61:ff:42:2b:07:fd: de:68:bd:b3:16:4c:be:e9:7c:61:43:ef:b7:82:63:27:b5:d5: f3:6b:06:dd:d3:34:86:11:e9:c4:cc:43:a4:ad:32:68:ad:dc: 85:99:7c:39:27:44:4f:10:b2:9a:45:e1:7c:57:90:cd:2f:58: 38:53:69:15:5a:98:46:82:13:6f:80:84:68:ce:18:39:78:7a: 87:ef:d4:e5:15:d7:4f:32:dc:04:95:83:5c:b6:fc:94:58:f0: a5:3f:82:56:f5:71:31:38:4a:6c:40:9d:13:62:24:3a:99:c3: f3:5c:93:96:0b:83:05:34:0a:01:e2:f3:bd:1e:87:72:94:29: 70:78:6b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d7B2DL2+L38m4YEEM3Z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGI4NTQ5ZThjZjcxZTkxZmFhNjNiNDA3OTFlNmJmYmJm ZGFjMDQwHhcNMjUxMjA2MjEwMDUzWhcNMjUxMjA3MjEwMDUzWjAzMTEwLwYDVQQD Eyg5MTBhMjY4NTk4ZGZkYWMwMmYxMmUyODI4OGMyMTEzMDRhNDJlNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXnKzebh65jUzDUhnIFBvH8rYLeS oB6Zcy1xMzIBw6q01d9bvkzC4e/CGnKUZlbAjueDs1+K1COtb2M8SnpR65UN/p2h /uyGfDvl5l5GZUQIt5X26wvJv2XzT3DyZUHRv8/5+XdgkvI6Xrnu6YLrJwIDFDGr ZBsIf/Jglb/m0owZJc8EEc/sxSW5De+x/1AbfrIl8jyN8/4E8Xf4eetwyZLdpruA xGc1GWazU27XYxqCfthm8+U/qexl5LWTg4460NgbCFGsn4MNlgF/IWsOy6Mh7itM 8wQG113F8cgYjpiRSiSL2e8orZ081eCV0CgWSMHJoGPYIQCNifrgoTC7nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEKJoWY39rALxLigojCETBKQuZdMB8GA1UdIwQY MBaAFN6LhUnoz3HpH6pjtAeR5r+7/awEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM291RlNlalBjZWtmcW1PMEI1SG12N3Y5ckFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zNjI1M2YtY2Q4ZS00ZmQwLWFlMzct ZTkzNzA5OTczM2MzLzEvM291RlNlalBjZWtmcW1PMEI1SG12N3Y5ckFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zNjI1M2YtY2Q4ZS00ZmQwLWFlMzctZTkzNzA5OTczM2Mz LzEvM291RlNlalBjZWtmcW1PMEI1SG12N3Y5ckFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfBTiu7r 53x3tsBga4+/NO/aUdyF6834MFZrcyBmIFsT8LvD+c8sjdJovKgaJ0/QGL+mgxwF DYwYG8xmLk2y22DThG7BNoD1l3GRWL/UxHIbcR1/D93prPnk1hbaosvKBF4P3tw2 6D3uIBFlJ9T3q7a+RUR7eS+cYf9CKwf93mi9sxZMvul8YUPvt4JjJ7XV82sG3dM0 hhHpxMxDpK0yaK3chZl8OSdETxCymkXhfFeQzS9YOFNpFVqYRoITb4CEaM4YOXh6 h+/U5RXXTzLcBJWDXLb8lFjwpT+CVvVxMThKbECdE2IkOpnD81yTlguDBTQKAeLz vR6HcpQpcHhrPQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:36 2025 by rpki-client