This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json) Hash identifier: 8MMBQpfR2VGp0D46AQ5Oni0vZkVjZhCz52WMXyH7RQc= Subject key identifier: 6D:13:61:17:A7:BA:EE:23:5D:8A:7B:A8:2C:97:A5:04:0D:F2:5E:D2 Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21 Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021 Certificate serial: 019AF61C6B9A9FA42F579F5038E7A95E71A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft Manifest number: 13A6 Signing time: Sun 07 Dec 2025 00:00:48 +0000 Manifest this update: Sun 07 Dec 2025 00:00:48 +0000 Manifest next update: Mon 08 Dec 2025 00:00:48 +0000 Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: 5Ci2Y6AFZyGjVC8kGMA+0M5ydTl2Qm9Fi5IEewru934=) 2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6b:9a:9f:a4:2f:57:9f:50:38:e7:a9:5e:71:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021 Validity Not Before: Dec 7 00:00:48 2025 GMT Not After : Dec 8 00:00:48 2025 GMT Subject: CN=6d136117a7baee235d8a7ba82c97a5040df25ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:9f:14:d2:c2:fb:32:aa:cb:e9:79:1f:02: 7d:8e:a8:78:76:39:21:d7:ec:cd:85:15:89:51:d4: cb:10:23:50:4a:d6:db:c9:64:25:22:ec:b3:89:76: ad:86:1b:ee:dc:e5:b8:8c:6f:f7:29:d4:2d:07:23: 4b:b3:5a:0b:97:ed:41:fb:d0:63:94:4d:2b:82:c3: 02:15:7f:3f:38:dd:a5:9d:c5:3f:e5:c0:b4:c4:d8: 32:eb:6b:e5:36:23:0b:18:7c:22:2d:9e:1f:51:c7: 21:08:e7:05:84:bb:70:47:04:b1:29:c5:d6:4d:be: 97:3b:80:fa:70:02:15:75:07:0a:18:0b:44:aa:7f: ef:54:bf:29:67:58:0f:fc:4c:70:1c:75:e0:88:18: 7d:4b:5e:4e:39:19:93:ad:05:9c:f6:11:2f:67:a1: 0d:ce:eb:a5:8c:c1:75:42:b3:5e:ce:6f:30:c8:3e: e0:40:14:ff:7d:11:94:48:a5:bf:3b:b4:5a:de:6e: 62:96:2d:65:08:c2:73:8d:42:d5:16:03:c7:2d:8d: e8:6f:0c:93:2a:ae:5a:9c:79:8c:18:28:28:44:d3: ad:2b:d3:c0:23:8a:0f:01:b8:05:e9:21:4b:86:c2: 23:41:b1:1a:d7:46:e2:c8:c9:91:e8:98:b6:9a:8a: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:13:61:17:A7:BA:EE:23:5D:8A:7B:A8:2C:97:A5:04:0D:F2:5E:D2 X509v3 Authority Key Identifier: keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c1:de:e7:d4:61:d2:f0:75:84:df:9f:71:5a:4d:7e:2e:90: 0e:b2:20:bf:50:2b:61:c4:c6:93:cf:6f:1e:d5:a9:dc:bd:f3: 33:68:ca:e4:99:83:b3:62:1c:fd:6a:1d:95:12:77:9d:4e:4d: a2:68:eb:1e:8f:f8:13:38:fe:83:98:d3:81:3c:c4:5c:4a:51: 8c:58:fe:ec:48:9b:c0:0f:b3:a3:38:d6:e1:50:f8:8c:ab:c8: c6:f9:07:09:17:48:ca:57:a1:b6:a6:e1:b6:11:bd:d7:25:0c: e0:05:d7:b4:81:94:1e:15:a6:3e:a3:88:f7:12:ea:c5:22:59: 4f:e5:b5:07:3a:86:22:98:56:68:ba:a7:99:5a:1a:d2:82:97: 11:23:97:46:5a:f3:86:cb:d4:7d:55:ab:85:97:2f:a8:09:6b: 6d:b5:78:ce:c1:e5:16:05:96:f0:ac:a4:e2:91:6a:ad:cc:5f: 79:c0:32:33:3c:fc:a1:c8:90:d7:5a:b1:7f:c1:77:f3:41:f6: b4:d7:24:04:d8:0e:88:ec:61:04:b3:34:6d:08:09:66:e1:d5: 68:96:4b:57:f9:ee:b9:01:ff:f7:d5:4a:ae:8e:a7:7d:17:5f: 5b:a2:87:c3:1d:b8:93:dc:e3:be:ec:b0:a4:85:0e:62:01:91: 27:13:9a:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGuan6QvV59QOOepXnGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWI1NDg3NjJjN2Q0Y2FjY2I2MTZkODE5Y2U5NWNmNjI3 YjIwMjEwHhcNMjUxMjA3MDAwMDQ4WhcNMjUxMjA4MDAwMDQ4WjAzMTEwLwYDVQQD Eyg2ZDEzNjExN2E3YmFlZTIzNWQ4YTdiYTgyYzk3YTUwNDBkZjI1ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFGfFNLC+zKqy+l5HwJ9jqh4djkh 1+zNhRWJUdTLECNQStbbyWQlIuyziXathhvu3OW4jG/3KdQtByNLs1oLl+1B+9Bj lE0rgsMCFX8/ON2lncU/5cC0xNgy62vlNiMLGHwiLZ4fUcchCOcFhLtwRwSxKcXW Tb6XO4D6cAIVdQcKGAtEqn/vVL8pZ1gP/ExwHHXgiBh9S15OORmTrQWc9hEvZ6EN zuuljMF1QrNezm8wyD7gQBT/fRGUSKW/O7Ra3m5ili1lCMJzjULVFgPHLY3obwyT Kq5anHmMGCgoRNOtK9PAI4oPAbgF6SFLhsIjQbEa10biyMmR6Ji2moojywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0TYRenuu4jXYp7qCyXpQQN8l7SMB8GA1UdIwQY MBaAFNzrVIdix9TKzLYW2BnOlc9ieyAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMt YjRjZWE1MTQ1NmI0LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMtYjRjZWE1MTQ1NmI0 LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMHe59Rh 0vB1hN+fcVpNfi6QDrIgv1ArYcTGk89vHtWp3L3zM2jK5JmDs2Ic/WodlRJ3nU5N omjrHo/4Ezj+g5jTgTzEXEpRjFj+7EibwA+zozjW4VD4jKvIxvkHCRdIylehtqbh thG91yUM4AXXtIGUHhWmPqOI9xLqxSJZT+W1BzqGIphWaLqnmVoa0oKXESOXRlrz hsvUfVWrhZcvqAlrbbV4zsHlFgWW8Kyk4pFqrcxfecAyMzz8ociQ11qxf8F380H2 tNckBNgOiOxhBLM0bQgJZuHVaJZLV/nuuQH/99VKro6nfRdfW6KHwx24k9zjvuyw pIUOYgGRJxOaYA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:54 2025 by rpki-client