This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json) Hash identifier: oRq3Q51yd77JNHNsueLI+yXHELrGotChiBYw4cqN/uQ= Subject key identifier: A6:27:4B:52:28:9A:D3:8A:2A:32:52:CA:7D:A7:2F:EF:71:B9:D5:F7 Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52 Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452 Certificate serial: 019B378E67D2064D5AC46F189CC1D6BD6804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft Manifest number: 0D31 Signing time: Fri 19 Dec 2025 17:00:38 +0000 Manifest this update: Fri 19 Dec 2025 17:00:38 +0000 Manifest next update: Sat 20 Dec 2025 17:00:38 +0000 Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: lJQzhLD/72m/pmIKx9oQS/4jc9ATrLbK4XQGq4K/6+o=) 2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:67:d2:06:4d:5a:c4:6f:18:9c:c1:d6:bd:68:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452 Validity Not Before: Dec 19 17:00:38 2025 GMT Not After : Dec 20 17:00:38 2025 GMT Subject: CN=a6274b52289ad38a2a3252ca7da72fef71b9d5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:62:63:07:86:23:c6:95:bd:13:0a:00:f1: 66:64:10:bf:55:c5:fb:03:39:2a:10:9d:07:43:a0: 49:c2:3e:c7:e2:f9:e9:4e:9a:0c:9c:0b:52:16:8e: 0a:b6:1c:e4:9f:d4:58:4f:3e:99:fd:f3:c4:f1:0b: 1e:28:36:10:99:dc:99:be:53:ea:84:8f:bd:1f:b8: 8f:b6:ae:11:07:7a:f4:fe:25:d1:e8:43:88:e6:3c: dd:13:68:63:8b:18:67:4b:bc:b6:0a:97:42:a1:9a: 74:87:1f:7a:23:cf:74:16:ef:39:f1:a2:96:52:f0: 3c:34:07:13:6a:c3:6a:21:b7:bd:8c:16:f1:04:b2: d2:44:e3:80:a4:b3:54:2c:b3:4d:03:26:82:0a:eb: c5:23:c2:d5:16:e1:a2:b0:5f:6f:d2:a4:38:e3:6a: f7:c9:04:c2:b8:e7:d6:a8:ba:52:f7:37:66:69:5d: ca:97:dd:65:8b:ad:ef:53:e3:29:14:01:26:ad:4e: 36:b2:ef:ef:c8:1b:4a:e1:9e:6e:c4:0b:52:74:6d: 22:42:33:b0:c4:fb:ac:70:d1:7c:bd:9b:d3:84:1a: 1b:b3:ed:10:7c:d0:38:a1:58:bf:e5:cb:81:53:1c: ac:28:8b:ca:2c:a1:67:2f:4a:a3:32:49:b8:85:04: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:27:4B:52:28:9A:D3:8A:2A:32:52:CA:7D:A7:2F:EF:71:B9:D5:F7 X509v3 Authority Key Identifier: keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2f:af:30:c6:15:d8:b0:6e:ae:e1:e5:75:d3:e8:13:55:df: 63:fb:e7:bc:af:07:93:7a:17:86:e4:44:ae:15:51:c6:b3:fa: 6e:fc:7b:91:96:84:41:e4:0e:91:f6:9e:72:75:f1:ac:5e:bd: 06:0d:05:43:03:74:09:55:e7:92:d2:f4:21:a6:51:3e:a7:5d: bf:a2:2c:66:8d:4f:20:d4:57:17:84:21:b2:8e:03:f8:a1:ae: 44:4c:e2:ef:1d:55:d6:1c:42:97:06:e9:86:96:2d:31:d7:2e: fc:fc:66:36:ad:50:2d:27:9e:b0:64:23:d5:53:d5:5b:35:c6: 9b:78:c9:ce:c7:bf:44:25:24:76:34:b1:a2:c3:4f:51:e2:64: b7:89:1c:5b:60:3d:56:24:cc:85:d6:d6:70:1c:e6:93:6c:15: df:fe:b2:58:7b:c0:26:0a:b8:54:21:6c:db:ba:88:07:4f:8d: 7e:d0:e2:bc:37:1a:94:74:01:9c:da:99:e2:fe:d2:7c:ad:56: 38:7b:18:de:25:e2:47:c0:d4:48:ad:b0:bf:0d:23:72:26:d8: 2f:66:83:e9:71:41:d5:b1:37:e7:8d:af:cc:6a:07:41:7e:2a: b6:95:85:f6:c8:b6:db:bb:de:8b:01:56:81:da:5f:69:ec:7f: 1c:c0:b6:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmfSBk1axG8YnMHWvWgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj Yzc0NTIwHhcNMjUxMjE5MTcwMDM4WhcNMjUxMjIwMTcwMDM4WjAzMTEwLwYDVQQD EyhhNjI3NGI1MjI4OWFkMzhhMmEzMjUyY2E3ZGE3MmZlZjcxYjlkNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaJiYweGI8aVvRMKAPFmZBC/VcX7 AzkqEJ0HQ6BJwj7H4vnpTpoMnAtSFo4Kthzkn9RYTz6Z/fPE8QseKDYQmdyZvlPq hI+9H7iPtq4RB3r0/iXR6EOI5jzdE2hjixhnS7y2CpdCoZp0hx96I890Fu858aKW UvA8NAcTasNqIbe9jBbxBLLSROOApLNULLNNAyaCCuvFI8LVFuGisF9v0qQ442r3 yQTCuOfWqLpS9zdmaV3Kl91li63vU+MpFAEmrU42su/vyBtK4Z5uxAtSdG0iQjOw xPuscNF8vZvThBobs+0QfNA4oVi/5cuBUxysKIvKLKFnL0qjMkm4hQQdhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYnS1IomtOKKjJSyn2nL+9xudX3MB8GA1UdIwQY MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS+vMMYV 2LBuruHlddPoE1XfY/vnvK8Hk3oXhuRErhVRxrP6bvx7kZaEQeQOkfaecnXxrF69 Bg0FQwN0CVXnktL0IaZRPqddv6IsZo1PINRXF4Qhso4D+KGuREzi7x1V1hxClwbp hpYtMdcu/PxmNq1QLSeesGQj1VPVWzXGm3jJzse/RCUkdjSxosNPUeJkt4kcW2A9 ViTMhdbWcBzmk2wV3/6yWHvAJgq4VCFs27qIB0+NftDivDcalHQBnNqZ4v7SfK1W OHsY3iXiR8DUSK2wvw0jcibYL2aD6XFB1bE3542vzGoHQX4qtpWF9si227veiwFW gdpfaex/HMC2Zw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:21 2025 by rpki-client