This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json) Hash identifier: 9v2UHqihjph+Lf0OwVGBnqjNwBYllFA79Vi7p0E34uQ= Subject key identifier: EE:8A:38:A1:02:3D:EC:94:4C:28:E8:04:C3:2C:9A:70:78:E6:6B:1B Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019B3D22C3767C1F80D2A59787DB8F804350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 19:00:46 +0000 Manifest this update: Sat 20 Dec 2025 19:00:46 +0000 Manifest next update: Sun 21 Dec 2025 19:00:46 +0000 Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: OClL9SoxJaWIZPuLUcRqmeDpnYCS6AxLZUOikHGtuns=) 2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=) 3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:c3:76:7c:1f:80:d2:a5:97:87:db:8f:80:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Dec 20 19:00:46 2025 GMT Not After : Dec 21 19:00:46 2025 GMT Subject: CN=ee8a38a1023dec944c28e804c32c9a7078e66b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:ff:8e:d4:da:32:b2:07:91:9c:ff:80:18: 23:23:b2:75:4c:94:73:cb:8c:59:ed:d9:03:10:56: 3a:1c:51:60:22:d4:86:c5:c4:c7:30:bf:37:62:6a: ed:2f:b4:44:26:32:90:eb:1e:2f:1a:d5:46:a8:e7: 03:b0:22:be:3d:2e:50:d5:ea:12:35:b1:21:46:e5: b2:5e:7d:77:d6:2c:63:3a:9a:78:94:cb:05:dc:fb: 63:25:83:65:14:cb:2b:d4:e0:99:02:71:2f:a2:c7: 4b:07:dd:3e:5a:4e:85:c2:1d:1d:82:7b:48:a8:4a: 66:9c:c9:7a:e1:c3:c2:d4:24:3b:08:2a:29:ca:0e: f9:db:24:49:65:89:e2:1d:8d:ac:35:4f:e3:7d:a1: 8c:eb:4d:ce:14:d8:d8:ac:78:f1:78:69:53:04:eb: 31:ee:c2:c7:76:4b:9b:59:bf:50:04:25:37:0f:77: 25:e8:86:31:f0:c3:02:1e:69:eb:ee:ef:33:b5:95: a5:05:d3:18:e9:33:31:7a:83:85:5f:02:c2:3f:a1: 41:81:f3:9f:a1:6f:42:91:67:8c:11:f1:f3:3b:c2: 46:e8:97:c7:6e:1d:8a:d7:fd:4e:49:5c:75:ee:ac: 15:a9:2b:69:9d:4e:c5:be:19:32:b1:f0:89:d9:8a: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:38:A1:02:3D:EC:94:4C:28:E8:04:C3:2C:9A:70:78:E6:6B:1B X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6c:51:1e:85:30:5b:45:66:e9:30:16:0c:90:8e:3e:75:e3: b5:10:92:2e:f7:26:6c:22:0f:0a:87:37:d1:d0:7d:42:ab:4d: 10:f6:bf:a3:07:a9:27:80:c2:b7:0d:ab:2c:25:82:ac:b6:bc: ed:77:0a:77:8d:25:87:99:f4:37:4c:df:c8:a5:02:21:f1:73: fd:a1:d5:7f:0f:8b:e9:4e:fb:87:f3:c6:ba:8c:e6:24:03:8f: 66:15:80:de:02:0a:31:82:c2:5d:72:2d:80:f6:30:b2:95:77: 87:d9:63:36:f1:13:1c:e8:85:f2:4f:d8:ad:28:20:0c:64:98: a2:8b:16:63:9f:3c:da:c9:87:4e:50:f3:4b:aa:7c:ea:ec:c8: d9:08:e4:80:25:f0:11:98:02:72:01:b6:17:34:b9:a2:0d:65: 43:d3:7a:79:a6:b5:4b:55:fa:81:cb:67:b5:ed:50:6a:c9:8e: 57:91:5b:46:1a:47:5f:c9:db:a6:ec:14:87:98:5f:1e:47:f7: a0:1b:7f:29:7c:68:2d:f2:87:15:cc:9c:22:50:c3:69:7e:c4: c2:1d:e8:fa:cc:05:c1:01:38:a7:d1:8d:4c:ca:b0:39:e4:29: bf:f7:46:20:8c:01:f3:29:e3:a5:08:2b:49:f3:20:f4:4b:82: a1:a5:07:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IsN2fB+A0qWXh9uPgENQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjUxMjIwMTkwMDQ2WhcNMjUxMjIxMTkwMDQ2WjAzMTEwLwYDVQQD EyhlZThhMzhhMTAyM2RlYzk0NGMyOGU4MDRjMzJjOWE3MDc4ZTY2YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdP/jtTaMrIHkZz/gBgjI7J1TJRz y4xZ7dkDEFY6HFFgItSGxcTHML83YmrtL7REJjKQ6x4vGtVGqOcDsCK+PS5Q1eoS NbEhRuWyXn131ixjOpp4lMsF3PtjJYNlFMsr1OCZAnEvosdLB90+Wk6Fwh0dgntI qEpmnMl64cPC1CQ7CCopyg752yRJZYniHY2sNU/jfaGM603OFNjYrHjxeGlTBOsx 7sLHdkubWb9QBCU3D3cl6IYx8MMCHmnr7u8ztZWlBdMY6TMxeoOFXwLCP6FBgfOf oW9CkWeMEfHzO8JG6JfHbh2K1/1OSVx17qwVqStpnU7FvhkysfCJ2Yq8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6KOKECPeyUTCjoBMMsmnB45msbMB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWxRHoUw W0Vm6TAWDJCOPnXjtRCSLvcmbCIPCoc30dB9QqtNEPa/owepJ4DCtw2rLCWCrLa8 7XcKd40lh5n0N0zfyKUCIfFz/aHVfw+L6U77h/PGuozmJAOPZhWA3gIKMYLCXXIt gPYwspV3h9ljNvETHOiF8k/YrSggDGSYoosWY5882smHTlDzS6p86uzI2QjkgCXw EZgCcgG2FzS5og1lQ9N6eaa1S1X6gctnte1QasmOV5FbRhpHX8nbpuwUh5hfHkf3 oBt/KXxoLfKHFcycIlDDaX7Ewh3o+swFwQE4p9GNTMqwOeQpv/dGIIwB8ynjpQgr SfMg9EuCoaUHtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:43 2025 by rpki-client