This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json) Hash identifier: aOvlJ+bDu/OIUMVg8sBGKvghw+rC2s5oEfqjlC93kxE= Subject key identifier: 50:86:18:50:40:C4:73:AF:81:5D:CA:9F:96:41:66:D8:5A:EE:6E:E4 Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14 Certificate serial: 019B5CE4C7AB57EB02CFBF98295640DE80D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft Manifest number: 15A6 Signing time: Fri 26 Dec 2025 23:00:55 +0000 Manifest this update: Fri 26 Dec 2025 23:00:55 +0000 Manifest next update: Sat 27 Dec 2025 23:00:55 +0000 Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: NZji4Xl78dkOWxnM2fCdnQpFhuAtEMnNr9d/YYjlcjE=) 2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:c7:ab:57:eb:02:cf:bf:98:29:56:40:de:80:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14 Validity Not Before: Dec 26 23:00:55 2025 GMT Not After : Dec 27 23:00:55 2025 GMT Subject: CN=5086185040c473af815dca9f964166d85aee6ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:5e:c3:dd:e7:a3:b7:cc:9e:6b:30:7a:af: df:05:5b:ff:f0:3a:20:87:44:5d:9a:f7:89:12:ea: 16:90:78:7e:8a:16:d4:86:56:3c:4d:60:56:0d:31: fe:8e:83:04:68:37:47:cc:71:50:86:16:57:02:44: b5:ac:3f:b2:fe:c5:26:47:d4:8b:ec:f2:8a:82:12: 2b:88:e9:6a:e0:86:40:ed:61:49:97:56:d9:96:09: 56:5b:02:d7:31:e5:4f:de:2f:c7:31:fa:4a:a0:4b: 16:3b:39:01:b8:01:ea:57:ba:48:c4:b3:ce:14:ab: 04:5d:06:01:cd:b6:d8:28:63:94:36:52:c5:7e:51: 9f:c5:fd:a7:6d:4d:16:3c:3b:76:db:66:85:79:d5: 95:e9:25:2e:43:43:fc:52:a0:00:ea:ed:44:e9:3b: 50:23:f8:d4:10:b0:66:41:ec:49:69:56:cd:d2:ac: 06:e8:31:e8:8f:56:ad:0a:c3:de:bd:00:4a:ea:c0: e4:ce:5d:61:14:84:ce:c0:86:b2:71:d0:53:02:ff: f0:31:e4:b3:ad:e6:02:b9:9e:bc:91:0b:63:3a:8d: 70:8f:bb:fa:38:ed:19:b5:7c:a7:2d:34:2f:e3:9d: b5:cf:1d:9c:ea:7e:07:dc:02:7e:f7:0a:9e:cf:ca: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:18:50:40:C4:73:AF:81:5D:CA:9F:96:41:66:D8:5A:EE:6E:E4 X509v3 Authority Key Identifier: keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:43:cc:c5:a1:53:08:9b:6e:94:8f:02:0f:46:5f:5e:4d:2a: c9:59:71:f6:79:5d:57:b0:2f:ac:e4:a8:0b:98:4e:d1:56:09: bf:a5:d6:65:4f:39:b7:bd:be:12:d6:36:97:f7:77:bf:13:89: 7d:78:ac:c0:9a:ba:1c:8b:a3:43:46:d1:46:8b:95:93:d6:0f: 26:bd:f8:59:35:04:cd:d9:56:a5:63:cb:63:df:92:a3:97:65: b5:2a:e2:32:ff:79:95:22:f5:30:ec:c9:ee:9c:df:db:1b:14: f2:da:fd:20:2c:31:d3:d2:3b:91:06:92:b2:4f:20:ce:e2:07: f0:6d:a0:20:64:20:92:ea:d5:39:be:71:19:3f:fa:ef:2b:4d: 09:b9:70:cf:1e:80:07:c9:0d:f7:40:46:cc:7d:81:99:ed:b1: 9e:13:38:88:5d:82:4e:74:50:59:04:9a:9f:f4:41:75:5d:58: fc:02:d3:2d:dc:ee:48:d1:dc:62:75:08:81:c9:72:dc:da:8e: f3:29:86:12:83:dd:43:74:ea:38:ec:3b:f2:36:95:10:bb:d4: 71:1c:c8:41:44:54:14:10:ec:ed:25:57:90:93:c7:c9:b4:e0: 3f:a3:8e:47:d2:f8:49:1d:ba:84:5f:3f:d8:f3:28:38:3c:48: 3e:88:97:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5MerV+sCz7+YKVZA3oDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0 OThhMTQwHhcNMjUxMjI2MjMwMDU1WhcNMjUxMjI3MjMwMDU1WjAzMTEwLwYDVQQD Eyg1MDg2MTg1MDQwYzQ3M2FmODE1ZGNhOWY5NjQxNjZkODVhZWU2ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+lew93no7fMnmsweq/fBVv/8Dog h0RdmveJEuoWkHh+ihbUhlY8TWBWDTH+joMEaDdHzHFQhhZXAkS1rD+y/sUmR9SL 7PKKghIriOlq4IZA7WFJl1bZlglWWwLXMeVP3i/HMfpKoEsWOzkBuAHqV7pIxLPO FKsEXQYBzbbYKGOUNlLFflGfxf2nbU0WPDt222aFedWV6SUuQ0P8UqAA6u1E6TtQ I/jUELBmQexJaVbN0qwG6DHoj1atCsPevQBK6sDkzl1hFITOwIaycdBTAv/wMeSz reYCuZ68kQtjOo1wj7v6OO0ZtXynLTQv4521zx2c6n4H3AJ+9wqez8q0YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCGGFBAxHOvgV3Kn5ZBZtha7m7kMB8GA1UdIwQY MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEPMxaFT CJtulI8CD0ZfXk0qyVlx9nldV7AvrOSoC5hO0VYJv6XWZU85t72+EtY2l/d3vxOJ fXiswJq6HIujQ0bRRouVk9YPJr34WTUEzdlWpWPLY9+So5dltSriMv95lSL1MOzJ 7pzf2xsU8tr9ICwx09I7kQaSsk8gzuIH8G2gIGQgkurVOb5xGT/67ytNCblwzx6A B8kN90BGzH2Bme2xnhM4iF2CTnRQWQSan/RBdV1Y/ALTLdzuSNHcYnUIgcly3NqO 8ymGEoPdQ3TqOOw78jaVELvUcRzIQURUFBDs7SVXkJPHybTgP6OOR9L4SR26hF8/ 2PMoODxIPoiXVg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:11 2025 by rpki-client