This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json) Hash identifier: wEHxFhKvOTbvbUCHigljpFCMJatPwhR1dPlWsvAuScA= Subject key identifier: 04:63:80:0C:AC:0E:8C:65:9B:F2:E4:65:F7:15:A9:10:D6:76:10:02 Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Certificate serial: 019B3A58872BCECB032693EC37CD96D0163A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft Manifest number: 0E08 Signing time: Sat 20 Dec 2025 06:00:38 +0000 Manifest this update: Sat 20 Dec 2025 06:00:38 +0000 Manifest next update: Sun 21 Dec 2025 06:00:38 +0000 Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=) 2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: KyJsDd3svU+imu44SRl1xOgrOnAPp5kwOjmvmlbE0js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:87:2b:ce:cb:03:26:93:ec:37:cd:96:d0:16:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Validity Not Before: Dec 20 06:00:38 2025 GMT Not After : Dec 21 06:00:38 2025 GMT Subject: CN=0463800cac0e8c659bf2e465f715a910d6761002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:ba:35:4d:47:06:f3:65:91:84:3e:6f:e7: fd:65:a4:9f:31:25:5e:33:61:1c:c8:a2:a5:3e:a2: 22:76:de:f4:37:40:41:fe:ba:a3:c4:6a:61:96:1e: e6:c8:85:44:00:46:37:68:7b:4e:38:c9:74:27:b1: d0:14:82:2d:92:cb:a5:a2:5c:2d:59:57:49:20:16: 5c:c4:12:e4:83:15:67:1f:16:8d:1f:83:42:46:a3: ea:6c:63:f3:3d:74:44:22:9c:8d:29:c2:39:5b:b0: de:74:dc:e8:1e:dd:51:d8:e5:28:31:5b:87:94:a2: 69:3c:4d:67:b1:97:c4:ce:a7:01:8f:f8:d1:32:5d: b0:75:d8:1a:df:e4:a4:75:4f:cd:fa:45:a9:4a:40: 88:c0:4c:02:a8:c4:ab:76:69:eb:d0:a3:20:c0:8c: e5:11:77:e2:ba:eb:54:b9:69:b4:73:1b:17:4f:08: 3a:e7:8b:5a:34:48:75:cd:6e:5d:7a:64:cd:71:8d: 3c:6e:6d:4a:69:f7:38:1f:4c:3a:46:c9:21:3e:9c: cd:2b:b2:5e:d2:98:58:8a:0d:3d:32:88:f6:2e:9c: cd:3e:9c:6b:4e:e8:e5:36:b8:60:a6:f9:fd:87:6f: 05:93:ec:c8:6b:67:f9:3d:c1:3b:f3:f6:b7:dd:07: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:80:0C:AC:0E:8C:65:9B:F2:E4:65:F7:15:A9:10:D6:76:10:02 X509v3 Authority Key Identifier: keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:db:78:33:87:d3:28:52:8b:20:b6:3e:2d:f7:4e:02:d0:6b: 22:57:88:31:7a:19:3f:bf:a7:48:0d:1c:94:b7:14:6f:bd:85: b4:10:cc:93:77:57:09:23:97:a3:d6:c3:dd:ec:42:33:e4:45: 9c:03:59:42:ca:d2:24:b4:38:46:9b:cb:a3:f7:fc:df:c0:24: 01:4d:54:a6:79:0e:db:77:f4:49:0d:2c:5a:4c:fe:f8:19:13: dd:21:ab:e1:9a:cb:75:4d:e9:75:3d:56:f7:a9:13:f3:a5:e7: 2d:c4:59:3c:0f:d1:21:44:3b:f5:a7:ba:7e:03:d3:c3:ae:34: 40:e1:3f:9e:8c:56:4d:38:9d:f7:bd:cd:05:79:ee:02:ca:7f: 9a:1c:e8:53:ac:0a:ac:fc:7d:65:60:38:80:04:86:bd:4b:d0: 1c:74:73:25:bb:e1:1f:fd:f6:85:33:61:63:b9:b2:e7:a1:f4: b8:0e:f1:6c:86:b1:79:c1:78:1f:27:a9:90:a3:f6:9d:00:51: da:3c:a0:99:ce:6c:98:f6:de:91:f3:d3:dd:1c:2c:39:06:5f: 5e:3c:6f:f7:43:3a:54:79:b5:24:45:2f:ae:26:82:ff:07:26: 4e:73:67:b6:4f:be:60:ec:e8:e2:fe:cd:89:c3:46:e5:48:89: c1:45:43:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIcrzssDJpPsN82W0BY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2 YWMxZTkwHhcNMjUxMjIwMDYwMDM4WhcNMjUxMjIxMDYwMDM4WjAzMTEwLwYDVQQD EygwNDYzODAwY2FjMGU4YzY1OWJmMmU0NjVmNzE1YTkxMGQ2NzYxMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjW6NU1HBvNlkYQ+b+f9ZaSfMSVe M2EcyKKlPqIidt70N0BB/rqjxGphlh7myIVEAEY3aHtOOMl0J7HQFIItksulolwt WVdJIBZcxBLkgxVnHxaNH4NCRqPqbGPzPXREIpyNKcI5W7DedNzoHt1R2OUoMVuH lKJpPE1nsZfEzqcBj/jRMl2wddga3+SkdU/N+kWpSkCIwEwCqMSrdmnr0KMgwIzl EXfiuutUuWm0cxsXTwg654taNEh1zW5demTNcY08bm1Kafc4H0w6RskhPpzNK7Je 0phYig09Moj2LpzNPpxrTujlNrhgpvn9h28Fk+zIa2f5PcE78/a33Qc13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARjgAysDoxlm/LkZfcVqRDWdhACMB8GA1UdIwQY MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2 LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9t4M4fT KFKLILY+LfdOAtBrIleIMXoZP7+nSA0clLcUb72FtBDMk3dXCSOXo9bD3exCM+RF nANZQsrSJLQ4RpvLo/f838AkAU1UpnkO23f0SQ0sWkz++BkT3SGr4ZrLdU3pdT1W 96kT86XnLcRZPA/RIUQ79ae6fgPTw640QOE/noxWTTid973NBXnuAsp/mhzoU6wK rPx9ZWA4gASGvUvQHHRzJbvhH/32hTNhY7my56H0uA7xbIaxecF4HyepkKP2nQBR 2jygmc5smPbekfPT3RwsOQZfXjxv90M6VHm1JEUvriaC/wcmTnNntk++YOzo4v7N icNG5UiJwUVD9A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:45 2025 by rpki-client