This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json) Hash identifier: 5CHrqHlFdwcWUd9lC0GGPMqdOZd4abKuNMdMLxgfXhQ= Subject key identifier: 67:2A:39:E4:2E:B4:1F:ED:E7:A9:BA:06:26:3F:FF:0C:B7:40:E2:11 Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace Certificate serial: 019AF12CD5BD6BE2BCAA51901951C1E6FC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: ewi4AYGemi1K+EB1TdIDqWVt9XgLqowqzKnyZTbSjao=) 2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d5:bd:6b:e2:bc:aa:51:90:19:51:c1:e6:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=672a39e42eb41fede7a9ba06263fff0cb740e211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:a2:77:e1:ae:f7:44:4b:6a:1d:fe:58:92: 72:2e:de:b1:1c:9e:4a:33:21:c3:dd:52:3f:e3:8b: 03:4d:45:be:3a:0f:f1:28:1c:3e:b3:6b:96:81:e1: f4:2c:89:25:13:64:ef:c5:b9:7c:97:0d:7f:3a:b5: 04:9f:6a:a9:92:d9:21:f4:af:04:97:da:95:c0:62: d6:25:0d:8e:b8:8d:15:9e:0a:70:be:90:cc:f8:e6: 35:dd:ab:ad:f0:e9:e9:cf:b2:88:86:23:5c:61:0f: a6:c2:24:4d:f8:aa:1a:6c:6c:bb:f2:8c:aa:48:6d: e2:cf:b6:73:dc:0c:ae:d9:8f:61:35:23:d2:e0:ed: 41:5c:50:d3:5f:a3:f1:ca:4e:d3:31:e8:ca:b9:53: ad:e0:7c:41:f1:46:76:fb:24:76:8e:cb:fd:35:7d: 86:cd:7b:ec:b9:21:0b:84:3e:5c:43:98:fd:21:90: a3:b7:2a:95:b3:fb:ec:40:0f:4a:8b:f9:38:da:e7: b1:74:46:29:9a:80:fc:6d:48:f0:5e:97:45:e6:af: 52:bb:7d:46:72:b6:8a:ba:11:7f:ea:b7:cb:f6:b5: 5e:df:bd:b3:cc:04:ea:a2:04:c1:21:75:74:6d:27: eb:a6:8e:76:58:97:4b:35:95:91:82:97:1c:37:d7: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:39:E4:2E:B4:1F:ED:E7:A9:BA:06:26:3F:FF:0C:B7:40:E2:11 X509v3 Authority Key Identifier: keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:01:fc:4d:96:ce:55:5d:36:ea:e2:9a:cb:18:6f:79:56:d1: 80:67:91:a3:f6:7c:1d:b0:a6:21:58:d6:92:8a:d8:20:08:e2: b3:65:3f:d3:88:74:98:e0:98:5d:9a:3a:82:56:0d:63:5a:af: 91:59:7a:f7:1f:bb:a5:00:c6:a0:c0:3d:bc:7f:90:90:81:2e: 8f:22:aa:bc:27:e8:71:d3:f2:36:bd:8c:e1:50:7b:c4:b7:fb: b9:40:ab:b7:ee:52:84:c5:35:7f:9d:fd:64:93:e3:1e:57:c9: c1:5f:ed:3e:45:ef:6d:f3:b3:0d:95:22:ba:dc:bf:8f:b0:a8: 5f:13:1c:6e:95:28:b9:12:1d:a9:44:5c:04:3f:29:f0:c5:3b: c8:ab:fe:4f:5d:41:ed:05:d4:05:72:db:20:10:b6:c9:d7:b1: 35:97:fe:c0:7f:4d:2f:8f:c2:35:07:83:8c:e2:2d:7d:2d:fb: 19:22:c9:8a:7d:0a:61:3b:49:f2:f4:6d:d5:1a:59:a6:f5:31: a7:73:8a:59:66:b4:55:f6:d0:5b:bf:40:d0:17:30:24:b9:15: 80:cc:1f:c6:4a:68:97:d6:d5:d9:62:e9:7f:a4:73:d4:87:bf: 42:e4:7d:0f:3c:8f:9c:12:9f:ac:7d:b5:ec:33:95:71:64:46: 04:70:64:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNW9a+K8qlGQGVHB5vwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU2MGYwZWM4NTBkYThhN2MwZjhkNmYzODI1MTAyZDRk ZTRhY2UwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD Eyg2NzJhMzllNDJlYjQxZmVkZTdhOWJhMDYyNjNmZmYwY2I3NDBlMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSqid+Gu90RLah3+WJJyLt6xHJ5K MyHD3VI/44sDTUW+Og/xKBw+s2uWgeH0LIklE2Tvxbl8lw1/OrUEn2qpktkh9K8E l9qVwGLWJQ2OuI0VngpwvpDM+OY13aut8Onpz7KIhiNcYQ+mwiRN+KoabGy78oyq SG3iz7Zz3Ayu2Y9hNSPS4O1BXFDTX6Pxyk7TMejKuVOt4HxB8UZ2+yR2jsv9NX2G zXvsuSELhD5cQ5j9IZCjtyqVs/vsQA9Ki/k42uexdEYpmoD8bUjwXpdF5q9Su31G craKuhF/6rfL9rVe372zzATqogTBIXV0bSfrpo52WJdLNZWRgpccN9dpowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcqOeQutB/t56m6BiY//wy3QOIRMB8GA1UdIwQY MBaAFNzlYPDshQ2op8D41vOCUQLU3krOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUt NDMxZjc1YmE4Njc1LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUtNDMxZjc1YmE4Njc1 LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQH8TZbO VV026uKayxhveVbRgGeRo/Z8HbCmIVjWkorYIAjis2U/04h0mOCYXZo6glYNY1qv kVl69x+7pQDGoMA9vH+QkIEujyKqvCfocdPyNr2M4VB7xLf7uUCrt+5ShMU1f539 ZJPjHlfJwV/tPkXvbfOzDZUiuty/j7CoXxMcbpUouRIdqURcBD8p8MU7yKv+T11B 7QXUBXLbIBC2ydexNZf+wH9NL4/CNQeDjOItfS37GSLJin0KYTtJ8vRt1RpZpvUx p3OKWWa0VfbQW79A0BcwJLkVgMwfxkpol9bV2WLpf6Rz1Ie/QuR9DzyPnBKfrH21 7DOVcWRGBHBkow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:05 2025 by rpki-client