This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json) Hash identifier: 3yNgvEDMqyuVhQZ6lrxzgRBYwL3vkvn8HBBnhnfJPCU= Subject key identifier: 52:65:5D:C7:DA:77:B9:3F:BC:4E:AE:9C:E6:A3:4B:6D:8F:BF:D0:C7 Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Certificate serial: 019B48161DA255D0ED25F2E85EC77E4F6CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft Manifest number: 12C1 Signing time: Mon 22 Dec 2025 22:02:47 +0000 Manifest this update: Mon 22 Dec 2025 22:02:47 +0000 Manifest next update: Tue 23 Dec 2025 22:02:47 +0000 Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: Xh0Ft9egzfFEdoUXefwUixE/FQhJlMLOdQY2GB3mUzA=) 2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:1d:a2:55:d0:ed:25:f2:e8:5e:c7:7e:4f:6c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53 Validity Not Before: Dec 22 22:02:47 2025 GMT Not After : Dec 23 22:02:47 2025 GMT Subject: CN=52655dc7da77b93fbc4eae9ce6a34b6d8fbfd0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:cf:d8:8f:dc:07:26:db:43:ff:32:f1:e9: 64:bb:9d:41:7d:b4:f2:27:32:df:e5:96:47:e6:bc: 35:09:31:92:63:6c:a1:b0:8e:4d:28:09:24:d4:04: fb:33:82:0d:11:d6:57:12:5c:0f:0e:04:52:9c:49: d6:e3:33:01:76:75:72:08:66:fa:04:6d:90:03:0b: f8:a8:e8:6f:28:6e:f1:c6:7a:d4:0d:83:3e:af:21: c7:98:35:f2:4e:27:7e:ab:03:83:c1:60:bf:bb:f0: 86:d0:21:61:3c:7c:bb:1d:4a:2c:e8:7a:33:b4:d5: b3:84:b6:be:6c:89:16:f0:df:27:35:93:14:be:97: 1d:cc:76:cb:fc:a7:26:ba:69:50:a2:ab:25:aa:b5: 4f:54:a8:d6:bc:2e:fb:d4:fb:eb:25:99:75:38:c0: 83:de:f1:0b:d2:43:5a:64:75:47:42:45:88:8c:b6: 2f:4c:84:ed:66:c5:20:5b:f7:31:c1:30:6f:d9:43: 23:52:2c:18:aa:8a:b1:bb:eb:e3:4b:19:3c:37:f2: 9b:b4:33:6e:eb:79:80:90:d5:dd:40:cb:18:85:3c: 51:78:9e:b9:26:37:8a:ac:c4:51:37:da:21:f9:fd: 5a:51:98:67:4f:1d:e8:7e:30:f0:1a:59:4b:f3:b2: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:65:5D:C7:DA:77:B9:3F:BC:4E:AE:9C:E6:A3:4B:6D:8F:BF:D0:C7 X509v3 Authority Key Identifier: keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a6:ec:37:6b:53:d5:d0:94:ca:d7:2c:1d:d3:30:bc:92:f5: 9b:3f:ff:83:1b:f4:ee:f8:70:3e:65:d2:a1:83:bc:13:3f:ad: 50:19:3f:ef:fd:4b:98:a4:3e:d6:60:8e:94:03:9e:f5:5d:ac: 19:d2:7d:b3:97:9b:ac:cf:aa:5a:71:ad:86:e8:67:75:52:5a: 9a:43:56:8b:a4:77:6e:e4:ad:c8:27:2e:43:85:ff:43:e8:46: ce:6a:6d:ba:fa:14:12:f4:97:4e:4d:e2:d4:a4:64:10:58:08: c5:37:28:46:70:2c:13:cf:f4:1e:a5:4a:37:bd:56:76:6a:ff: 7b:31:7c:8f:be:7d:e8:a8:bb:26:8a:c6:d2:0a:fb:32:b9:98: 5c:52:3a:32:fc:40:e0:40:ca:da:b9:3f:ca:40:26:1a:27:41: 67:75:fe:bc:f2:d2:57:5f:36:0a:82:97:0c:92:56:d5:be:6a: 03:3f:3a:2f:94:fb:dd:0d:ea:25:00:28:bf:96:78:1e:00:27: 63:1e:07:49:be:64:85:2a:6d:0a:d7:37:1b:fd:04:0a:d9:d4: 37:23:65:b2:52:6e:31:d6:b6:8d:bb:d2:09:72:91:e4:e2:40: 4e:71:c4:08:c3:32:e3:b6:60:9f:c8:60:12:9e:f8:32:27:ec: b6:d6:40:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFh2iVdDtJfLoXsd+T2zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj NGRlNTMwHhcNMjUxMjIyMjIwMjQ3WhcNMjUxMjIzMjIwMjQ3WjAzMTEwLwYDVQQD Eyg1MjY1NWRjN2RhNzdiOTNmYmM0ZWFlOWNlNmEzNGI2ZDhmYmZkMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif3P2I/cBybbQ/8y8elku51BfbTy JzLf5ZZH5rw1CTGSY2yhsI5NKAkk1AT7M4INEdZXElwPDgRSnEnW4zMBdnVyCGb6 BG2QAwv4qOhvKG7xxnrUDYM+ryHHmDXyTid+qwODwWC/u/CG0CFhPHy7HUos6Hoz tNWzhLa+bIkW8N8nNZMUvpcdzHbL/KcmumlQoqslqrVPVKjWvC771PvrJZl1OMCD 3vEL0kNaZHVHQkWIjLYvTITtZsUgW/cxwTBv2UMjUiwYqoqxu+vjSxk8N/KbtDNu 63mAkNXdQMsYhTxReJ65JjeKrMRRN9oh+f1aUZhnTx3ofjDwGllL87KKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJlXcfad7k/vE6unOajS22Pv9DHMB8GA1UdIwQY MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5 LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKbsN2tT 1dCUytcsHdMwvJL1mz//gxv07vhwPmXSoYO8Ez+tUBk/7/1LmKQ+1mCOlAOe9V2s GdJ9s5ebrM+qWnGthuhndVJamkNWi6R3buStyCcuQ4X/Q+hGzmptuvoUEvSXTk3i 1KRkEFgIxTcoRnAsE8/0HqVKN71Wdmr/ezF8j7596Ki7JorG0gr7MrmYXFI6MvxA 4EDK2rk/ykAmGidBZ3X+vPLSV182CoKXDJJW1b5qAz86L5T73Q3qJQAov5Z4HgAn Yx4HSb5khSptCtc3G/0ECtnUNyNlslJuMda2jbvSCXKR5OJATnHECMMy47Zgn8hg Ep74MifsttZATg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:09 2025 by rpki-client