This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json) Hash identifier: Jdx1SuTvd6yBWN/4+4T0Q2WIeGK0SMkjbDafbtJoxc8= Subject key identifier: 3D:D9:AF:DA:A1:23:FF:A7:1C:4F:B0:2B:58:A0:B8:1B:3C:3F:6D:E6 Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Certificate serial: 019AF12E662F05485760EC9E78A18CDB3C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft Manifest number: 1134 Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=) 2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=) 3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=) 4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: uZNce5i9bu733TMin24k75JCDg4fceUwe5C21327lvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:66:2f:05:48:57:60:ec:9e:78:a1:8c:db:3c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=3dd9afdaa123ffa71c4fb02b58a0b81b3c3f6de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:d1:b4:d2:7e:b5:46:d0:a7:64:0a:4d:c3: 54:ee:2c:7e:0a:2b:40:20:25:bb:05:55:4a:99:7f: f5:8a:2c:77:3d:85:ca:c7:bf:10:8e:df:2b:a7:25: b3:87:27:92:22:0f:1c:d8:db:6c:92:5d:30:66:b3: b0:ac:2f:33:21:5f:34:20:3b:53:ac:08:4c:ac:3a: c8:5f:f2:39:6a:5f:36:e9:6f:d3:82:71:3f:34:04: bd:3b:7f:9c:31:ab:ae:50:63:3c:24:23:07:81:72: 36:fc:58:e2:bd:1e:c8:ac:49:f7:ef:ec:82:89:9f: 48:53:8f:3c:20:19:ef:20:2e:2a:01:0b:0a:e0:e7: 76:95:64:a4:75:88:89:34:2d:b3:70:56:a7:ae:39: 2f:9a:61:d7:5f:bb:02:22:4f:b3:2a:b5:51:9a:93: 0f:44:99:e3:11:49:39:10:5e:fd:08:e1:3e:c2:9d: 90:1b:f9:bd:d6:3b:1d:ce:da:bb:73:86:29:74:3a: fe:94:b9:7e:9f:02:3b:f7:75:db:58:20:4a:4e:3a: 35:ea:3d:0b:4c:ac:6b:44:3a:75:1d:77:de:b5:7f: e2:ec:ce:20:b3:a6:2b:91:e2:8f:e8:bd:61:3a:79: 23:70:46:62:09:36:c4:ae:bb:84:00:c5:bb:15:65: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D9:AF:DA:A1:23:FF:A7:1C:4F:B0:2B:58:A0:B8:1B:3C:3F:6D:E6 X509v3 Authority Key Identifier: keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:35:ff:3a:f4:9e:af:97:b9:cc:0e:a5:17:bb:5e:2c:77: 73:bb:9e:94:1a:90:18:5d:c4:15:a8:a3:47:4e:f5:dd:5c:c0: 82:26:d1:32:13:23:7d:bd:d7:87:79:b8:64:a6:f8:be:37:4c: 87:86:01:c3:38:71:f8:48:fe:44:58:db:09:9e:81:ec:b5:5d: 76:26:fe:53:1f:b1:d7:5d:14:66:1f:70:92:b3:23:30:f0:07: 46:68:04:f7:f7:70:ca:38:5b:45:89:69:05:66:68:40:fe:2f: d8:02:51:65:ff:5d:cf:99:16:59:60:0c:02:fa:fa:c1:b7:0c: b3:e5:28:f2:d7:ce:12:6e:b8:28:d9:09:52:bc:f9:a8:33:97: 80:95:20:d9:e6:62:06:96:42:5e:45:6d:99:cd:69:8a:44:28: 7f:78:51:2a:1e:45:93:2a:2b:66:74:b1:0f:c4:01:f6:5a:2c: 5f:eb:78:1e:c4:40:96:d7:d4:79:33:45:01:1f:34:4e:59:5f: b3:e0:5e:43:d1:e9:e5:b4:92:b3:0f:52:7e:09:67:5e:b7:3c: f2:53:61:1c:ed:f2:c0:ea:87:6f:47:8b:ef:cc:9d:13:6a:82: 44:bf:0c:15:e2:af:8b:8d:37:4d:98:cd:01:c5:e3:53:88:4b: c5:5f:2f:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmYvBUhXYOyeeKGM2zwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz ZTgxZjEwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EygzZGQ5YWZkYWExMjNmZmE3MWM0ZmIwMmI1OGEwYjgxYjNjM2Y2ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnRtNJ+tUbQp2QKTcNU7ix+CitA ICW7BVVKmX/1iix3PYXKx78Qjt8rpyWzhyeSIg8c2Ntskl0wZrOwrC8zIV80IDtT rAhMrDrIX/I5al826W/TgnE/NAS9O3+cMauuUGM8JCMHgXI2/FjivR7IrEn37+yC iZ9IU488IBnvIC4qAQsK4Od2lWSkdYiJNC2zcFanrjkvmmHXX7sCIk+zKrVRmpMP RJnjEUk5EF79COE+wp2QG/m91jsdztq7c4YpdDr+lLl+nwI793XbWCBKTjo16j0L TKxrRDp1HXfetX/i7M4gs6YrkeKP6L1hOnkjcEZiCTbErruEAMW7FWU5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3Zr9qhI/+nHE+wK1iguBs8P23mMB8GA1UdIwQY MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfc1/zr0 nq+XucwOpRe7Xix3c7uelBqQGF3EFaijR0713VzAgibRMhMjfb3Xh3m4ZKb4vjdM h4YBwzhx+Ej+RFjbCZ6B7LVddib+Ux+x110UZh9wkrMjMPAHRmgE9/dwyjhbRYlp BWZoQP4v2AJRZf9dz5kWWWAMAvr6wbcMs+Uo8tfOEm64KNkJUrz5qDOXgJUg2eZi BpZCXkVtmc1pikQof3hRKh5FkyorZnSxD8QB9losX+t4HsRAltfUeTNFAR80Tllf s+BeQ9Hp5bSSsw9SfglnXrc88lNhHO3ywOqHb0eL78ydE2qCRL8MFeKvi403TZjN AcXjU4hLxV8veQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:38 2025 by rpki-client