This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json) Hash identifier: PdEfTSNNZroyu96UoCMTj1PDHovNTRsotTHiDDdTc6Q= Subject key identifier: D8:D6:04:52:D0:50:77:08:CF:3C:B3:0B:74:63:C6:07:C8:BF:18:50 Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5 Certificate serial: 019AF49BD19500F0F4B462FEE9D80AF05ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft Manifest number: 0BF2 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: IY5Q7nHBQLfDjQ1zWQNZxz6JZ12rSbHEaeGO+ndX4Ns=) 2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d1:95:00:f0:f4:b4:62:fe:e9:d8:0a:f0:5a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce6e13e413baf381b625131e924e947843436f5 Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=d8d60452d0507708cf3cb30b7463c607c8bf1850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:a8:d1:9b:4a:0b:48:e0:9f:f7:75:66:70: bb:27:bf:3b:8d:49:80:29:cb:18:f6:10:16:49:26: a9:68:24:d9:73:ab:d8:11:58:8a:23:d7:87:b0:71: 89:9a:e3:2a:0d:c5:68:4c:85:b8:12:b3:4e:13:ae: e6:a3:c9:a2:b9:de:f8:9f:97:0c:32:fc:9e:6d:ca: 62:8e:a6:93:87:43:ba:4e:d4:2c:cd:55:07:8c:5c: 65:18:53:cc:b7:5e:36:9e:a7:39:69:58:23:8f:57: dd:84:29:6e:3b:f7:ee:ed:8d:ca:90:60:51:f7:ad: c7:72:7f:c2:1c:91:65:5f:a8:34:cb:a1:79:30:8a: 7f:40:77:82:65:fe:7d:cb:fe:d8:58:fc:95:7d:68: 97:1d:04:1b:ff:ad:2c:1f:28:ac:bc:c8:5f:ad:6a: 46:20:f1:ba:3e:1e:67:13:78:c7:64:c0:13:0e:eb: f6:7d:6d:4b:cc:ff:46:41:b0:4e:74:97:6c:db:6b: 5f:ea:a9:cf:3f:98:44:16:1d:0c:cd:88:35:69:81: e6:1b:2f:db:f6:86:f3:59:ff:6c:27:35:bd:99:94: 90:21:fd:9d:77:f5:a6:0d:16:5e:5c:91:b0:f4:90: e0:5f:3b:84:6c:16:15:62:89:9b:a0:f2:68:e3:2b: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D6:04:52:D0:50:77:08:CF:3C:B3:0B:74:63:C6:07:C8:BF:18:50 X509v3 Authority Key Identifier: keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:28:d3:57:8c:ae:f6:ee:a4:6a:49:8e:76:3d:1d:78:7d:9b: cc:36:29:70:84:5d:a3:3f:60:33:69:8c:de:bd:4a:c3:c9:16: 86:9b:98:6b:a5:df:b1:c1:59:44:38:9d:87:bd:e6:a5:74:76: 64:2c:98:26:67:9f:90:ca:67:25:4e:ac:26:5b:1d:e8:c8:3a: 96:0c:7c:23:a9:29:0b:ff:48:6b:5f:55:4a:ab:de:32:5e:c5: 3c:b4:52:72:9a:10:9b:d9:af:f8:84:4e:e7:cf:0f:77:c8:59: ee:fd:6f:77:d0:e2:51:11:3b:d1:ab:50:a2:53:5e:7f:30:f1: ce:b4:32:92:e2:e4:c4:a6:15:1a:ee:9b:47:e8:a1:7b:d0:61: ff:40:15:11:2b:aa:ee:ec:86:f6:72:0d:84:65:db:dd:14:8f: 80:9b:f9:79:af:bf:0b:8a:81:c1:be:aa:49:b7:82:0e:63:68: d5:ae:ce:04:85:f6:01:50:83:d0:17:aa:59:30:1d:9e:8b:48: 7e:85:d7:75:02:85:bd:6b:d5:ea:23:b3:26:0f:dd:0f:7e:80: 73:c2:2e:c4:34:b1:4a:66:da:8f:5d:e2:52:27:00:52:a3:c2: 8d:b0:fd:15:80:75:5c:b5:ec:5d:3e:e3:b0:06:92:91:8a:b9: ed:d0:34:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9GVAPD0tGL+6dgK8Fq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz NDM2ZjUwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EyhkOGQ2MDQ1MmQwNTA3NzA4Y2YzY2IzMGI3NDYzYzYwN2M4YmYxODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jCo0ZtKC0jgn/d1ZnC7J787jUmA KcsY9hAWSSapaCTZc6vYEViKI9eHsHGJmuMqDcVoTIW4ErNOE67mo8miud74n5cM MvyebcpijqaTh0O6TtQszVUHjFxlGFPMt142nqc5aVgjj1fdhCluO/fu7Y3KkGBR 963Hcn/CHJFlX6g0y6F5MIp/QHeCZf59y/7YWPyVfWiXHQQb/60sHyisvMhfrWpG IPG6Ph5nE3jHZMATDuv2fW1LzP9GQbBOdJds22tf6qnPP5hEFh0MzYg1aYHmGy/b 9obzWf9sJzW9mZSQIf2dd/WmDRZeXJGw9JDgXzuEbBYVYomboPJo4yvuBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjWBFLQUHcIzzyzC3RjxgfIvxhQMB8GA1UdIwQY MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt YjFmNGZjNzUyMmEwLzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyjTV4yu 9u6kakmOdj0deH2bzDYpcIRdoz9gM2mM3r1Kw8kWhpuYa6XfscFZRDidh73mpXR2 ZCyYJmefkMpnJU6sJlsd6Mg6lgx8I6kpC/9Ia19VSqveMl7FPLRScpoQm9mv+IRO 588Pd8hZ7v1vd9DiURE70atQolNefzDxzrQykuLkxKYVGu6bR+ihe9Bh/0AVESuq 7uyG9nINhGXb3RSPgJv5ea+/C4qBwb6qSbeCDmNo1a7OBIX2AVCD0BeqWTAdnotI foXXdQKFvWvV6iOzJg/dD36Ac8IuxDSxSmbaj13iUicAUqPCjbD9FYB1XLXsXT7j sAaSkYq57dA0rg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:59 2025 by rpki-client