This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json) Hash identifier: V4pw/qzd66hS8dQhWYC262CN1Ec9KWLuADP4v2z+tNg= Subject key identifier: 44:6F:D0:D3:B0:67:D5:9B:03:62:B1:69:FA:A6:68:4A:45:A6:2E:C8 Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Certificate serial: 019AF2402199A58560C2551566F1CC077986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: V5workOV5+zv5sWdlS8fTMhHNaXBpK4GXs10Kib+/xo=) 2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:21:99:a5:85:60:c2:55:15:66:f1:cc:07:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=446fd0d3b067d59b0362b169faa6684a45a62ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:21:3d:c3:3f:86:44:e3:46:ed:cf:3a:4e:dd: 67:1d:7f:55:32:2c:0b:bd:ac:60:10:37:b2:0c:16: d2:b8:2b:d1:93:9e:8b:d4:bc:17:1e:46:a8:8a:c4: fc:e9:05:7c:62:a3:e3:b4:01:13:74:0c:5a:28:78: 88:d5:84:59:e8:8f:00:dd:d0:e3:78:b2:97:72:17: 3f:c8:c0:78:24:92:d0:e5:28:ce:c7:3d:bf:1b:d4: 49:42:fb:96:65:f0:54:46:c0:49:0e:bc:eb:4e:3a: f8:cf:ab:ed:87:1c:25:b3:e9:bb:9a:57:57:cf:32: 3b:e5:51:10:62:d6:0e:b1:0a:6b:48:b8:f5:0b:e4: 05:70:59:93:df:84:e6:bb:be:28:a2:86:ac:47:89: 1d:ca:3a:0a:5f:e2:10:ce:11:e3:77:a3:56:c8:e1: f5:0d:28:44:1a:c8:f6:8f:e9:c8:74:2b:3f:bc:bb: f2:cc:51:20:50:69:ba:cd:07:d9:17:2a:52:36:ac: 04:d7:22:59:c9:e3:c9:a4:1e:b9:e1:5c:4d:29:b0: db:c4:5f:a1:c4:53:1f:96:8f:21:84:b0:ae:32:24: 67:3f:bf:6e:86:14:5c:86:c1:b5:ce:a7:90:14:26: a8:d8:bb:4e:31:40:7b:8a:bf:de:ac:84:31:c4:95: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6F:D0:D3:B0:67:D5:9B:03:62:B1:69:FA:A6:68:4A:45:A6:2E:C8 X509v3 Authority Key Identifier: keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:aa:6b:ee:4a:3c:c1:cd:b7:e8:d8:0e:1b:ea:a5:55:a9:c8: 67:58:52:9c:b5:85:51:a4:90:f1:a6:03:27:8f:db:d7:79:14: a7:aa:88:5e:e8:6b:af:17:ad:9e:50:a0:92:c0:75:61:f2:e7: 9b:77:52:93:cf:27:8c:e8:13:f8:18:e2:38:ee:d4:52:5c:83: dd:00:c6:55:00:c3:d0:2c:f6:61:be:86:f1:f6:34:8e:ec:22: 19:23:72:15:00:ea:f7:d1:e3:00:71:94:27:64:82:19:04:46: ef:92:d3:b6:a8:18:17:03:52:5f:1b:56:c7:67:1c:c5:1a:d9: 7b:7e:da:38:fc:f4:97:e8:16:c4:7b:0c:2e:29:a2:f6:16:cf: ff:3b:55:f8:eb:7d:77:be:93:d7:98:b4:bc:18:9e:ff:3a:b3: b8:d1:45:7e:8e:30:e5:58:fe:eb:35:b3:06:4f:e2:4c:98:8b: c8:36:9f:54:3a:29:14:a4:98:dc:03:1f:99:ad:31:73:e8:a6: 37:ae:f3:91:0c:d6:bc:9f:a1:1f:ee:d4:43:fa:8b:77:99:18: 65:e4:78:ad:75:43:43:35:17:a3:52:91:a4:9a:ba:84:5f:b7: 8e:1e:86:6e:09:c5:42:27:44:cb:6b:4c:87:94:c1:b7:da:a6: 27:34:39:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCGZpYVgwlUVZvHMB3mGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTRhNGM0ODQwZmM5YTVmZDIxNGE2MTlhYTg4N2I1Yjc2 MjRiZjUwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD Eyg0NDZmZDBkM2IwNjdkNTliMDM2MmIxNjlmYWE2Njg0YTQ1YTYyZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyE9wz+GRONG7c86Tt1nHX9VMiwL vaxgEDeyDBbSuCvRk56L1LwXHkaoisT86QV8YqPjtAETdAxaKHiI1YRZ6I8A3dDj eLKXchc/yMB4JJLQ5SjOxz2/G9RJQvuWZfBURsBJDrzrTjr4z6vthxwls+m7mldX zzI75VEQYtYOsQprSLj1C+QFcFmT34Tmu74oooasR4kdyjoKX+IQzhHjd6NWyOH1 DShEGsj2j+nIdCs/vLvyzFEgUGm6zQfZFypSNqwE1yJZyePJpB654VxNKbDbxF+h xFMflo8hhLCuMiRnP79uhhRchsG1zqeQFCao2LtOMUB7ir/erIQxxJWOQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERv0NOwZ9WbA2KxafqmaEpFpi7IMB8GA1UdIwQY MBaAFNzkpMSED8ml/SFKYZqoh7W3Ykv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEt MmI3YWU3MjIwMTFmLzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEtMmI3YWU3MjIwMTFm LzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKpr7ko8 wc236NgOG+qlVanIZ1hSnLWFUaSQ8aYDJ4/b13kUp6qIXuhrrxetnlCgksB1YfLn m3dSk88njOgT+BjiOO7UUlyD3QDGVQDD0Cz2Yb6G8fY0juwiGSNyFQDq99HjAHGU J2SCGQRG75LTtqgYFwNSXxtWx2ccxRrZe37aOPz0l+gWxHsMLimi9hbP/ztV+Ot9 d76T15i0vBie/zqzuNFFfo4w5Vj+6zWzBk/iTJiLyDafVDopFKSY3AMfma0xc+im N67zkQzWvJ+hH+7UQ/qLd5kYZeR4rXVDQzUXo1KRpJq6hF+3jh6GbgnFQidEy2tM h5TBt9qmJzQ5iw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:50 2025 by rpki-client