This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: aCxqS5pFgOSTJFIPNCQP8WksfNfXD+AFwO7AfZyXilY= Subject key identifier: B7:37:5F:53:1E:51:00:5D:35:9D:B6:D9:40:70:E2:B8:CC:AB:E2:6F Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019AF540A964E74ACC6E7C3DD1993E25B617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 0306 Signing time: Sat 06 Dec 2025 20:00:46 +0000 Manifest this update: Sat 06 Dec 2025 20:00:46 +0000 Manifest next update: Sun 07 Dec 2025 20:00:46 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: PjXwH5uiX/aKhyPuoPmK9z1iBCHfkYV11MRYm2WLNSs=) 2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=) 3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a9:64:e7:4a:cc:6e:7c:3d:d1:99:3e:25:b6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Dec 6 20:00:46 2025 GMT Not After : Dec 7 20:00:46 2025 GMT Subject: CN=b7375f531e51005d359db6d94070e2b8ccabe26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:a1:56:f2:e6:0f:94:51:b0:26:0d:f7:c7: 3a:e6:cf:38:48:67:25:7d:4b:a6:6a:00:7f:df:f6: b3:16:46:3f:1a:f6:51:1b:a5:74:28:ab:fd:22:0b: 90:d3:11:ee:49:e1:53:f5:f3:c7:91:3b:b7:52:eb: 90:cc:12:34:79:d9:80:a8:ac:c4:2a:5a:77:49:31: 7e:10:ce:45:88:62:75:55:0b:05:78:5d:06:e9:60: b7:b3:6f:97:72:e1:84:4d:2b:74:53:7c:dc:73:89: 5b:d7:e2:73:26:ef:89:5f:dd:46:34:11:f8:ad:d1: 01:cc:36:69:17:79:e9:b5:e5:f3:17:db:88:0d:60: 5c:d7:42:0b:14:62:25:4a:c1:5d:8e:76:36:50:54: d0:dc:bb:c8:e0:bd:7f:24:c3:a4:16:dd:61:3a:48: 21:b9:ef:9e:bf:7a:1d:ba:a7:46:01:3c:a1:92:4e: 5b:14:4e:17:fc:6d:93:20:9f:eb:2c:ff:b6:b2:1d: ad:a2:15:85:0b:dc:f9:e4:02:f3:71:7a:e7:84:c9: d3:43:20:36:28:8e:f2:25:e7:5c:19:18:89:32:f2: 89:73:2b:ee:be:48:a1:14:e8:a4:41:2f:e1:29:a2: 1d:e8:99:43:ee:e8:2c:10:3c:d8:6d:6a:8f:09:2f: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:37:5F:53:1E:51:00:5D:35:9D:B6:D9:40:70:E2:B8:CC:AB:E2:6F X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ff:78:fb:55:a9:32:91:97:15:be:1f:81:5c:26:00:fe:18: e5:bc:54:52:5c:b8:f5:90:cb:7c:3e:ff:e5:05:bd:bc:e6:ab: ea:f6:63:79:ae:d6:2a:df:81:d9:f1:d3:0c:70:33:55:ba:ad: f9:ca:d0:49:bf:6e:b8:3e:52:c6:f5:ba:28:a5:4d:16:81:8f: 66:06:e6:b7:d5:d1:59:e4:96:8e:bb:f0:fe:08:8a:28:e8:c6: e8:c6:71:be:b0:cf:a3:3f:f0:d1:c0:94:b0:5d:93:96:74:d5: 76:32:e9:bf:77:b4:ab:cb:75:74:d6:6d:c2:0f:20:85:13:58: 62:92:04:d9:5a:8c:6a:34:48:9b:ac:e1:6a:63:25:cd:86:2c: 33:87:e3:62:f9:46:47:38:76:cc:00:a3:bf:4e:a2:c1:c8:6f: 6c:94:61:0d:3e:e5:c0:ff:9c:6b:d0:81:26:19:04:a6:d1:26: 17:65:4d:c1:9b:1a:c9:42:52:11:ab:df:55:c3:d4:2c:8c:9f: ca:24:39:3e:37:28:b4:2d:ed:67:bb:df:e3:21:ae:24:86:2a: d4:f6:15:9b:5c:dd:a6:fd:75:cd:e4:cb:9b:0e:a3:89:0e:05: 6f:e2:f9:4a:5a:ba:ff:f7:99:a5:d4:f0:f9:ea:60:26:46:98: 32:e9:3e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKlk50rMbnw90Zk+JbYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjUxMjA2MjAwMDQ2WhcNMjUxMjA3MjAwMDQ2WjAzMTEwLwYDVQQD EyhiNzM3NWY1MzFlNTEwMDVkMzU5ZGI2ZDk0MDcwZTJiOGNjYWJlMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseqhVvLmD5RRsCYN98c65s84SGcl fUumagB/3/azFkY/GvZRG6V0KKv9IguQ0xHuSeFT9fPHkTu3UuuQzBI0edmAqKzE Klp3STF+EM5FiGJ1VQsFeF0G6WC3s2+XcuGETSt0U3zcc4lb1+JzJu+JX91GNBH4 rdEBzDZpF3npteXzF9uIDWBc10ILFGIlSsFdjnY2UFTQ3LvI4L1/JMOkFt1hOkgh ue+ev3oduqdGATyhkk5bFE4X/G2TIJ/rLP+2sh2tohWFC9z55ALzcXrnhMnTQyA2 KI7yJedcGRiJMvKJcyvuvkihFOikQS/hKaId6JlD7ugsEDzYbWqPCS8LqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc3X1MeUQBdNZ222UBw4rjMq+JvMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv94+1Wp MpGXFb4fgVwmAP4Y5bxUUly49ZDLfD7/5QW9vOar6vZjea7WKt+B2fHTDHAzVbqt +crQSb9uuD5SxvW6KKVNFoGPZgbmt9XRWeSWjrvw/giKKOjG6MZxvrDPoz/w0cCU sF2TlnTVdjLpv3e0q8t1dNZtwg8ghRNYYpIE2VqMajRIm6zhamMlzYYsM4fjYvlG Rzh2zACjv06iwchvbJRhDT7lwP+ca9CBJhkEptEmF2VNwZsayUJSEavfVcPULIyf yiQ5PjcotC3tZ7vf4yGuJIYq1PYVm1zdpv11zeTLmw6jiQ4Fb+L5Slq6//eZpdTw +epgJkaYMuk+Bw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:45 2025 by rpki-client