This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json) Hash identifier: zzhfR4hOg/NwG80FhKkjIyTqVMGSOdjSMYGPSY+c9Cc= Subject key identifier: 25:29:F6:19:4B:0F:0A:CF:AD:B1:93:42:8B:57:99:53:43:DA:00:B5 Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Certificate serial: 019B7D140A8AF51A023AB77B121CDDD99E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft Manifest number: 12DD Signing time: Fri 02 Jan 2026 05:00:23 +0000 Manifest this update: Fri 02 Jan 2026 05:00:23 +0000 Manifest next update: Sat 03 Jan 2026 05:00:23 +0000 Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: Zge0SN2kbK/VqwQusz+Hwz5D4J5TVN1UVzruO02cjk0=) 2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:14:0a:8a:f5:1a:02:3a:b7:7b:12:1c:dd:d9:9e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Validity Not Before: Jan 2 05:00:23 2026 GMT Not After : Jan 3 05:00:23 2026 GMT Subject: CN=2529f6194b0f0acfadb193428b57995343da00b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:c7:16:cc:8a:8a:6d:cb:38:ec:bb:36:79: 30:c2:a2:19:0a:cc:a3:e8:34:db:5d:7c:3a:b6:6d: c1:70:c2:83:2f:6f:7a:b7:5a:99:db:2c:1c:fe:a6: 72:3c:c2:83:0a:1b:bc:7a:cf:cb:98:c0:8b:06:23: 05:22:49:49:b6:49:25:a7:09:16:9b:e9:b4:98:9e: ee:a1:f1:f5:66:1c:43:ec:0e:4a:b4:05:30:59:1e: 9d:76:52:15:be:9c:bf:ab:e6:e8:cd:45:82:2f:83: dc:8a:57:1c:6a:0c:9d:5d:c9:33:d6:e4:ab:2d:74: 81:8a:a1:c6:c5:5d:7c:e9:2e:78:dc:0d:93:31:53: a2:7f:58:bf:69:31:90:d0:57:40:ec:c7:df:96:90: 48:df:51:0a:8e:18:b0:07:0b:e7:86:36:1f:f0:ac: 6e:fe:dd:50:2c:ce:88:2b:a0:ee:2b:ae:d8:c7:1d: d9:4b:a3:2e:ef:20:98:06:9e:cc:a6:2b:62:ff:31: 65:06:8d:43:11:af:ec:85:03:b6:a4:f0:36:eb:86: cd:a0:a9:de:ea:86:12:a6:61:b3:71:d7:0a:09:5c: af:19:ac:5e:a2:03:5b:56:42:8d:33:69:46:0b:9e: 6b:04:a3:02:ae:d1:32:57:b7:1b:03:f2:5e:65:52: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:F6:19:4B:0F:0A:CF:AD:B1:93:42:8B:57:99:53:43:DA:00:B5 X509v3 Authority Key Identifier: keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:24:eb:f0:9a:4f:30:4c:14:df:02:27:a4:a1:7f:c0:35:c5: 84:64:8c:59:44:f2:f3:8e:81:1f:c5:7b:f5:8f:f0:1f:ee:ab: bf:83:54:e1:e0:3c:07:82:99:f6:c4:e6:25:a3:4a:85:ed:21: a5:dc:7b:15:87:28:f2:cb:05:c6:07:c0:41:e2:c9:6c:cc:07: d7:33:e1:50:0f:31:f4:6f:7c:89:8f:fe:00:01:e6:59:bf:8c: 37:df:58:24:85:7e:e4:de:1e:5d:85:b6:e5:65:db:fd:b5:09: 2c:c8:86:42:ae:af:3b:e2:c4:b7:64:93:cc:28:c4:b0:6d:df: a4:b3:d8:48:6f:c5:47:20:5e:aa:5d:c6:04:c1:b5:3d:74:6b: 16:3d:20:db:ad:2a:a9:43:6f:df:26:e2:97:d6:1e:85:de:d0: 7c:57:71:37:e2:53:87:a6:66:83:0e:e0:df:12:71:a9:fd:1f: fe:ee:80:0d:d1:9f:1b:30:5b:13:e3:a8:5d:04:2f:c6:ac:dc: 65:3b:fb:de:31:2d:ea:72:fc:20:d0:7a:8b:d8:ac:58:a5:4f: d0:a9:08:20:d7:bb:33:f4:2e:1b:8c:e1:0a:82:fe:c6:9e:44: df:5a:48:36:e8:69:3a:83:d6:53:9a:88:54:10:f3:ef:8b:f2: bb:d9:ea:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9FAqK9RoCOrd7Ehzd2Z6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj NGRlNTMwHhcNMjYwMTAyMDUwMDIzWhcNMjYwMTAzMDUwMDIzWjAzMTEwLwYDVQQD EygyNTI5ZjYxOTRiMGYwYWNmYWRiMTkzNDI4YjU3OTk1MzQzZGEwMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQzHFsyKim3LOOy7NnkwwqIZCsyj 6DTbXXw6tm3BcMKDL296t1qZ2ywc/qZyPMKDChu8es/LmMCLBiMFIklJtkklpwkW m+m0mJ7uofH1ZhxD7A5KtAUwWR6ddlIVvpy/q+bozUWCL4PcilccagydXckz1uSr LXSBiqHGxV186S543A2TMVOif1i/aTGQ0FdA7MfflpBI31EKjhiwBwvnhjYf8Kxu /t1QLM6IK6DuK67Yxx3ZS6Mu7yCYBp7Mpiti/zFlBo1DEa/shQO2pPA264bNoKne 6oYSpmGzcdcKCVyvGaxeogNbVkKNM2lGC55rBKMCrtEyV7cbA/JeZVIO3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUp9hlLDwrPrbGTQotXmVND2gC1MB8GA1UdIwQY MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5 LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESTr8JpP MEwU3wInpKF/wDXFhGSMWUTy846BH8V79Y/wH+6rv4NU4eA8B4KZ9sTmJaNKhe0h pdx7FYco8ssFxgfAQeLJbMwH1zPhUA8x9G98iY/+AAHmWb+MN99YJIV+5N4eXYW2 5WXb/bUJLMiGQq6vO+LEt2STzCjEsG3fpLPYSG/FRyBeql3GBMG1PXRrFj0g260q qUNv3ybil9Yehd7QfFdxN+JTh6Zmgw7g3xJxqf0f/u6ADdGfGzBbE+OoXQQvxqzc ZTv73jEt6nL8INB6i9isWKVP0KkIINe7M/QuG4zhCoL+xp5E31pINuhpOoPWU5qI VBDz74vyu9nq9Q== -----END CERTIFICATE-----Generated at Fri Jan 2 08:17:56 2026 by rpki-client