This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json) Hash identifier: ZE4PaC3SlcHcUTK3sxPAEjtut6hRE5Z9/OYL86SFAuo= Subject key identifier: 01:75:EC:49:34:30:76:E4:53:06:DA:01:6A:F4:64:E1:5B:1A:19:78 Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019B48B92BBD702DE5C0BE82C0087FF9EE28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 01:00:53 +0000 Manifest this update: Tue 23 Dec 2025 01:00:53 +0000 Manifest next update: Wed 24 Dec 2025 01:00:53 +0000 Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: fs4XTy5TNw63rf1achOVb9w3m3krTeXrU29feCv57hA=) 2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=) 3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:2b:bd:70:2d:e5:c0:be:82:c0:08:7f:f9:ee:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Dec 23 01:00:53 2025 GMT Not After : Dec 24 01:00:53 2025 GMT Subject: CN=0175ec49343076e45306da016af464e15b1a1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:5d:97:1f:c4:70:1d:e6:e0:99:39:f9:92: 52:e3:ee:ae:11:03:0a:d4:d3:90:c7:5a:64:6f:cd: 4d:c8:5b:49:1f:ee:d5:48:18:76:31:1a:0f:f8:6e: fa:86:21:39:26:81:52:ce:a2:a3:4b:9a:33:95:21: 0d:9c:38:65:69:45:37:29:4e:30:31:03:e7:1e:5a: 2a:f1:92:b2:6b:2e:1f:91:e5:c0:7a:8c:55:f4:5b: 15:fa:0c:81:d8:8b:d6:e5:24:c1:69:53:b1:ce:ea: 71:b7:74:19:f5:5d:a1:ca:49:7c:65:92:ff:e0:db: 68:39:85:09:b4:34:0a:34:54:a0:32:0d:f1:34:37: 0e:d4:f5:42:48:50:a8:1b:40:66:79:99:1e:ff:86: 46:a5:65:d9:41:41:d3:35:e1:05:e8:fa:9c:81:8d: c7:d6:80:d8:c8:27:9b:f6:a0:49:c2:56:b6:ea:ee: 20:d6:99:a6:44:40:d3:b9:5b:e4:35:1d:2b:21:5b: f0:76:3c:22:44:b3:bb:db:ad:64:d8:e4:80:a3:54: be:7b:33:fa:4d:53:d2:d6:88:56:63:da:1e:24:be: b0:33:f1:d5:60:67:18:36:77:ec:1e:2a:0c:9a:a6: 22:19:8d:c5:69:bd:4c:1f:6e:e3:27:33:28:3f:6a: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:EC:49:34:30:76:E4:53:06:DA:01:6A:F4:64:E1:5B:1A:19:78 X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7d:e7:15:ae:61:ef:f6:28:fe:d3:f8:45:a8:f6:18:ad:64: b3:e1:fb:d3:ef:3e:c8:9a:b0:35:8c:9e:26:32:c9:60:0f:48: 7d:f4:a4:49:d0:7a:df:c0:ee:f2:d4:99:ae:56:ea:9c:24:1b: a6:d1:26:4d:4f:3a:f5:bb:cc:1f:5b:0a:ef:82:03:70:23:5c: 0f:fd:a4:67:d1:f0:83:32:c9:ee:c4:16:e6:a1:37:fa:17:54: c5:32:a9:95:c9:d8:d1:57:6c:07:02:e6:b4:d9:8b:8d:b6:f9: 55:cd:91:39:89:ae:6a:c5:74:c3:a6:73:86:a6:9a:50:de:05: 68:90:2d:c7:3d:c7:d6:b6:41:49:bf:0a:d8:bc:c0:3c:f6:3f: 9b:27:3b:e5:47:b6:c7:1c:a6:99:10:bc:fa:d6:08:59:ad:e8: be:6a:d1:90:32:fd:2b:d3:cb:91:3c:d7:e1:cd:f2:b0:4c:35: 69:6c:84:54:5e:04:86:4b:05:97:3f:cb:45:55:14:10:48:12: be:5a:e5:a4:17:66:d4:fe:e1:52:5a:c9:72:ff:16:bb:23:9e: e5:15:fd:04:b2:cc:cc:bc:03:4e:46:9e:0b:ee:93:63:c5:55: 44:ee:c6:03:52:e7:46:d5:7a:93:d0:21:69:05:4d:72:42:1c: d8:79:ef:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuSu9cC3lwL6CwAh/+e4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjUxMjIzMDEwMDUzWhcNMjUxMjI0MDEwMDUzWjAzMTEwLwYDVQQD EygwMTc1ZWM0OTM0MzA3NmU0NTMwNmRhMDE2YWY0NjRlMTViMWExOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVldlx/EcB3m4Jk5+ZJS4+6uEQMK 1NOQx1pkb81NyFtJH+7VSBh2MRoP+G76hiE5JoFSzqKjS5ozlSENnDhlaUU3KU4w MQPnHloq8ZKyay4fkeXAeoxV9FsV+gyB2IvW5STBaVOxzupxt3QZ9V2hykl8ZZL/ 4NtoOYUJtDQKNFSgMg3xNDcO1PVCSFCoG0BmeZke/4ZGpWXZQUHTNeEF6PqcgY3H 1oDYyCeb9qBJwla26u4g1pmmREDTuVvkNR0rIVvwdjwiRLO7261k2OSAo1S+ezP6 TVPS1ohWY9oeJL6wM/HVYGcYNnfsHioMmqYiGY3Fab1MH27jJzMoP2r36QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF17Ek0MHbkUwbaAWr0ZOFbGhl4MB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn3nFa5h 7/Yo/tP4Raj2GK1ks+H70+8+yJqwNYyeJjLJYA9IffSkSdB638Du8tSZrlbqnCQb ptEmTU869bvMH1sK74IDcCNcD/2kZ9HwgzLJ7sQW5qE3+hdUxTKplcnY0VdsBwLm tNmLjbb5Vc2ROYmuasV0w6ZzhqaaUN4FaJAtxz3H1rZBSb8K2LzAPPY/myc75Ue2 xxymmRC8+tYIWa3ovmrRkDL9K9PLkTzX4c3ysEw1aWyEVF4EhksFlz/LRVUUEEgS vlrlpBdm1P7hUlrJcv8WuyOe5RX9BLLMzLwDTkaeC+6TY8VVRO7GA1LnRtV6k9Ah aQVNckIc2HnvyQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:51 2025 by rpki-client