This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json) Hash identifier: fvtCy5DzQJNXXMGMjStDcMnKiwVg8r12uSnSFOciCfM= Subject key identifier: EE:EB:CB:CF:2B:18:17:72:0F:5E:71:49:A8:F8:19:0D:61:90:6A:C1 Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Certificate serial: 019B5599FF2DD0F67E5E854EB6FD1333FA04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft Manifest number: 12C8 Signing time: Thu 25 Dec 2025 13:01:54 +0000 Manifest this update: Thu 25 Dec 2025 13:01:54 +0000 Manifest next update: Fri 26 Dec 2025 13:01:54 +0000 Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: ZwSNTpnJUWX7b5DfC6S+NsdwYbFYn7MVaoDFr5ZMBxY=) 2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:ff:2d:d0:f6:7e:5e:85:4e:b6:fd:13:33:fa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Validity Not Before: Dec 25 13:01:54 2025 GMT Not After : Dec 26 13:01:54 2025 GMT Subject: CN=eeebcbcf2b1817720f5e7149a8f8190d61906ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:87:28:fb:19:38:67:24:c3:d4:27:bc:48: bf:9f:f0:b7:04:0f:f1:92:03:90:be:4d:fa:40:55: 70:70:10:e8:40:5e:e7:1e:d0:a0:b2:64:f8:bc:1f: 7f:0f:84:81:b8:c5:e7:f6:77:48:bc:39:1b:51:0f: 2f:70:0d:24:f6:02:cc:11:24:f6:f1:12:35:4e:95: 16:a7:a5:c1:d3:61:a6:5c:e7:b6:a7:1d:49:c0:9d: 04:fd:b6:41:2d:93:96:27:e7:5a:66:cb:85:a4:83: 71:71:37:5a:42:61:3e:90:b6:1f:60:3e:1b:a3:f2: 8d:98:95:a7:65:f0:db:98:2c:07:00:cb:ac:b8:8f: 2a:80:60:5f:d2:c3:9f:ea:c6:fb:a4:df:26:59:d1: 5d:08:36:0f:dc:09:6e:31:08:ca:20:17:35:8c:de: dd:ce:f0:40:f4:e2:fd:48:26:0a:5e:6c:99:dc:55: 8a:1e:79:bd:03:21:92:c8:46:2a:fc:e4:9c:13:69: 56:92:f4:47:c8:f5:18:fd:3e:ab:b1:99:51:5d:c3: e5:b1:81:7a:6e:dd:2f:e7:0c:53:e6:8e:42:14:fc: ef:86:74:1b:08:97:fc:8b:39:40:22:a7:1d:30:f0: ae:dc:20:e9:9d:cd:2c:f0:e3:0d:3d:45:50:15:ac: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EB:CB:CF:2B:18:17:72:0F:5E:71:49:A8:F8:19:0D:61:90:6A:C1 X509v3 Authority Key Identifier: keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f0:d4:50:56:ff:bb:1f:47:50:2d:c0:2a:58:e8:5f:3e:ea: db:23:38:f5:b2:2c:e8:cb:b5:f0:fc:93:af:f4:79:5f:4d:11: a3:31:29:22:38:16:48:e4:fb:f6:bb:87:ac:5b:58:e6:86:04: b4:98:68:64:b9:ae:7a:31:c9:28:9a:d3:04:4a:8c:8f:90:86: 10:cd:3e:23:6b:ad:2e:91:7d:03:63:11:5b:77:78:c5:6a:d1: 57:b5:a2:68:32:30:9b:e1:f3:4a:c2:61:78:7b:ab:c8:a8:55: 1c:e3:0e:b2:90:cc:b6:63:2c:da:25:be:f0:f1:8a:8b:37:04: 96:e9:b5:63:14:ad:a5:83:15:4a:5c:b1:af:04:45:39:7d:fc: e4:1d:23:dd:fb:31:a2:bd:b9:6e:ae:a9:7c:d5:2b:7d:6b:fb: 2f:bc:97:d6:08:2a:b6:e3:7e:b9:9b:3f:ec:02:d3:4f:6e:2c: b1:57:92:b1:ea:e1:73:cd:20:bf:53:75:db:11:e8:74:2d:10: de:01:1a:98:ed:63:24:a0:01:fc:12:9f:25:71:e7:17:ea:18: ee:5d:79:78:74:20:23:90:c9:21:51:e8:7c:25:17:d3:6d:10: e9:f7:40:bf:59:46:30:fe:b3:6c:e3:72:93:f6:97:cf:39:01: 90:cd:5f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmf8t0PZ+XoVOtv0TM/oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj NGRlNTMwHhcNMjUxMjI1MTMwMTU0WhcNMjUxMjI2MTMwMTU0WjAzMTEwLwYDVQQD EyhlZWViY2JjZjJiMTgxNzcyMGY1ZTcxNDlhOGY4MTkwZDYxOTA2YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6mHKPsZOGckw9QnvEi/n/C3BA/x kgOQvk36QFVwcBDoQF7nHtCgsmT4vB9/D4SBuMXn9ndIvDkbUQ8vcA0k9gLMEST2 8RI1TpUWp6XB02GmXOe2px1JwJ0E/bZBLZOWJ+daZsuFpINxcTdaQmE+kLYfYD4b o/KNmJWnZfDbmCwHAMusuI8qgGBf0sOf6sb7pN8mWdFdCDYP3AluMQjKIBc1jN7d zvBA9OL9SCYKXmyZ3FWKHnm9AyGSyEYq/OScE2lWkvRHyPUY/T6rsZlRXcPlsYF6 bt0v5wxT5o5CFPzvhnQbCJf8izlAIqcdMPCu3CDpnc0s8OMNPUVQFawQawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7ry88rGBdyD15xSaj4GQ1hkGrBMB8GA1UdIwQY MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5 LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/DUUFb/ ux9HUC3AKljoXz7q2yM49bIs6Mu18PyTr/R5X00RozEpIjgWSOT79ruHrFtY5oYE tJhoZLmuejHJKJrTBEqMj5CGEM0+I2utLpF9A2MRW3d4xWrRV7WiaDIwm+HzSsJh eHuryKhVHOMOspDMtmMs2iW+8PGKizcElum1YxStpYMVSlyxrwRFOX385B0j3fsx or25bq6pfNUrfWv7L7yX1ggqtuN+uZs/7ALTT24ssVeSserhc80gv1N12xHodC0Q 3gEamO1jJKAB/BKfJXHnF+oY7l15eHQgI5DJIVHofCUX020Q6fdAv1lGMP6zbONy k/aXzzkBkM1ftw== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:08 2025 by rpki-client