This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json) Hash identifier: rFtanhx6DlgojqfHV+LYIE0HJJcWor5X0mHzP0++RLU= Subject key identifier: 27:BA:A6:20:FD:EC:B9:B5:C3:C1:7A:F9:4B:E7:B4:36:B4:88:BD:6F Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019B1C4E4C48533A194794F8A54BB5F62C3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 10:00:51 +0000 Manifest this update: Sun 14 Dec 2025 10:00:51 +0000 Manifest next update: Mon 15 Dec 2025 10:00:51 +0000 Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: eRV9iXCTRbgejiSd5XQgdaVnkKjZnvFu9ZdG0+Wv17g=) 2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=) 3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:4c:48:53:3a:19:47:94:f8:a5:4b:b5:f6:2c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Dec 14 10:00:51 2025 GMT Not After : Dec 15 10:00:51 2025 GMT Subject: CN=27baa620fdecb9b5c3c17af94be7b436b488bd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:23:26:e6:79:07:5e:e7:6b:fb:4c:3b:3d: c9:fe:99:dc:ca:b5:1a:c9:c0:1e:7b:61:59:66:c3: 77:f2:77:a1:2b:8d:20:a7:f4:5d:12:83:5d:92:8f: 6a:c1:6a:2e:23:17:71:47:3a:89:1e:de:ee:32:97: 52:16:5a:aa:86:75:52:9d:9e:c7:92:08:3d:61:ae: 15:f7:b1:e6:26:c1:9f:a5:bd:8f:a2:29:b8:50:6a: 23:c4:c4:b5:ca:87:eb:56:4c:ca:30:53:c8:54:85: 23:3b:52:d6:4b:dd:60:1c:a1:a2:6f:c2:9a:df:34: 8c:60:5c:c8:de:60:39:c4:ab:91:f2:bf:18:9e:a5: 52:21:15:68:5b:db:bb:ec:ef:b0:9c:da:0f:44:ad: 87:09:6a:96:25:7d:23:1c:cb:df:7a:2a:23:5e:23: 67:b3:02:45:0c:79:b9:66:e6:7f:71:f5:e0:c9:a3: 92:70:65:8e:31:08:d4:be:0f:1c:5c:57:18:0c:42: ca:b6:2d:5d:93:39:fb:47:c5:15:45:b4:2e:c0:2a: e1:34:5e:8f:ea:a3:81:2e:4c:76:02:70:a6:28:c1: 8d:3a:37:7c:d8:72:f5:1c:d8:6f:f5:cf:31:24:fc: d0:46:49:85:30:77:88:ad:15:0e:19:f0:f8:6c:f4: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BA:A6:20:FD:EC:B9:B5:C3:C1:7A:F9:4B:E7:B4:36:B4:88:BD:6F X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:09:ac:ee:f1:8f:1f:f8:11:d6:0c:75:df:6b:6b:d1:04:ba: 1d:15:30:03:d7:b1:c0:1c:6b:79:07:b9:d2:c4:c6:a6:39:1b: 42:24:3b:4e:e3:4d:d6:e9:fe:94:58:41:9d:b0:70:35:a1:cf: 09:ff:15:f1:88:51:ed:40:b7:c0:b9:41:71:1b:fc:19:3c:ed: 3d:13:bb:fd:c3:d0:40:68:73:2a:bf:6d:3b:fa:e8:cb:c4:05: 34:e6:e4:f9:26:23:3e:2a:b0:01:e5:4b:d0:a1:6f:d1:9e:63: 8c:2c:29:ab:ae:a1:21:1d:01:8f:bf:91:70:ba:5d:9c:be:e2: a7:d2:52:76:e9:6f:6b:f4:e5:f2:8d:8e:11:91:a5:91:cd:5a: 4c:78:6e:26:f1:83:90:c0:2a:e9:12:c8:3c:cf:95:73:51:87: 25:8c:77:81:b2:22:df:a5:83:cd:64:11:fc:d7:62:cb:5c:78: eb:4f:9e:67:30:8c:74:ac:e2:bb:44:16:8c:0f:2f:a3:5e:29: ac:f8:77:df:91:72:00:3f:b1:ae:a3:af:fa:86:a8:44:21:24: 60:58:b0:02:ed:c2:24:2f:b2:8c:3f:44:1f:05:88:b7:3c:a7: 95:14:8c:60:38:24:f8:47:38:fe:a4:9b:c7:c9:2b:e5:1f:ee: 3b:fa:61:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTkxIUzoZR5T4pUu19iw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjUxMjE0MTAwMDUxWhcNMjUxMjE1MTAwMDUxWjAzMTEwLwYDVQQD EygyN2JhYTYyMGZkZWNiOWI1YzNjMTdhZjk0YmU3YjQzNmI0ODhiZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0jJuZ5B17na/tMOz3J/pncyrUa ycAee2FZZsN38nehK40gp/RdEoNdko9qwWouIxdxRzqJHt7uMpdSFlqqhnVSnZ7H kgg9Ya4V97HmJsGfpb2Poim4UGojxMS1yofrVkzKMFPIVIUjO1LWS91gHKGib8Ka 3zSMYFzI3mA5xKuR8r8YnqVSIRVoW9u77O+wnNoPRK2HCWqWJX0jHMvfeiojXiNn swJFDHm5ZuZ/cfXgyaOScGWOMQjUvg8cXFcYDELKti1dkzn7R8UVRbQuwCrhNF6P 6qOBLkx2AnCmKMGNOjd82HL1HNhv9c8xJPzQRkmFMHeIrRUOGfD4bPR0rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCe6piD97Lm1w8F6+UvntDa0iL1vMB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAms7vGP H/gR1gx132tr0QS6HRUwA9exwBxreQe50sTGpjkbQiQ7TuNN1un+lFhBnbBwNaHP Cf8V8YhR7UC3wLlBcRv8GTztPRO7/cPQQGhzKr9tO/roy8QFNObk+SYjPiqwAeVL 0KFv0Z5jjCwpq66hIR0Bj7+RcLpdnL7ip9JSdulva/Tl8o2OEZGlkc1aTHhuJvGD kMAq6RLIPM+Vc1GHJYx3gbIi36WDzWQR/Ndiy1x460+eZzCMdKziu0QWjA8vo14p rPh335FyAD+xrqOv+oaoRCEkYFiwAu3CJC+yjD9EHwWItzynlRSMYDgk+Ec4/qSb x8kr5R/uO/ph+w== -----END CERTIFICATE-----Generated at Sun Dec 14 15:23:38 2025 by rpki-client