This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json) Hash identifier: 5YZkaM92XoRg6LUcIasdYt19veQ3lWSKRNDYzRpnzn8= Subject key identifier: B2:47:77:45:97:05:30:BD:BE:46:53:D1:06:A8:35:60:BF:FD:88:CB Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Certificate serial: 019B1E7450683903E908C7649A2AA6412337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft Manifest number: 1537 Signing time: Sun 14 Dec 2025 20:01:37 +0000 Manifest this update: Sun 14 Dec 2025 20:01:37 +0000 Manifest next update: Mon 15 Dec 2025 20:01:37 +0000 Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=) 2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: t8wqV8u3FN66OIP5j7NIpKGh4gf6j6LFGl7HRVc8ie4=) 3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:50:68:39:03:e9:08:c7:64:9a:2a:a6:41:23:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Validity Not Before: Dec 14 20:01:37 2025 GMT Not After : Dec 15 20:01:37 2025 GMT Subject: CN=b2477745970530bdbe4653d106a83560bffd88cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:27:58:08:c6:c2:a0:51:19:4f:f4:99:87: 58:d0:74:42:6f:aa:ea:e4:eb:86:ee:95:65:62:c8: 9d:9c:5d:b9:0e:ff:83:dd:a7:51:2f:9d:e0:10:6c: 9c:8b:95:ba:c8:9c:50:9f:6a:2d:27:ee:df:0a:81: 94:23:5f:b3:ba:a0:4a:2e:58:4e:53:34:03:e9:73: 78:da:86:f3:90:47:bd:71:c6:c7:09:d8:8e:69:5c: fa:30:60:16:f3:98:fa:e8:49:4e:c5:4f:cf:54:b4: fd:0f:55:60:84:87:8a:42:a7:2b:5f:42:1d:e4:8c: c9:1f:2d:3e:24:0a:0c:10:3c:d0:19:d0:b8:1f:79: 32:2d:04:f3:ae:d2:90:de:b1:e0:43:5f:11:84:87: 58:b8:d6:30:75:15:e7:ef:ed:1e:6d:f7:17:8a:ee: 28:6c:55:1d:fe:ed:23:de:50:a2:a0:f8:92:da:f2: b1:cc:03:30:ac:61:60:62:8a:27:68:fd:9e:19:c0: ea:5a:e4:7d:05:a3:30:d6:6e:b4:c7:4c:5d:19:cc: 75:77:23:a7:9f:bc:91:88:fa:2f:b1:bf:95:f2:85: 87:08:15:ca:e7:e5:5d:d2:3d:74:e1:94:c4:a2:e8: 7a:60:e0:77:c7:33:28:1a:30:18:da:a5:08:c3:eb: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:47:77:45:97:05:30:BD:BE:46:53:D1:06:A8:35:60:BF:FD:88:CB X509v3 Authority Key Identifier: keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:03:f8:05:8c:6b:18:85:e8:81:2d:0f:5f:34:97:bb:f8:ac: 2d:30:e9:ba:a0:83:55:a3:9d:0b:f0:32:bc:74:e1:ab:eb:97: 04:97:7f:33:4e:b5:b2:e0:e6:24:ea:01:fb:d1:07:5e:38:a2: 6a:9f:73:a2:73:a5:80:cd:c0:fb:f5:ea:86:00:d9:b3:e1:1b: 42:00:49:4b:5d:23:48:89:ef:50:15:61:ef:65:b5:86:55:1f: 85:20:02:ef:9c:dd:32:3d:ca:fe:20:85:40:4c:56:89:03:80: 18:00:f5:5d:4f:f5:5f:58:13:04:c6:f5:eb:2d:29:c1:04:2d: 08:a5:0a:37:bc:4f:69:76:ed:fc:9a:29:e9:fb:43:46:bb:35: eb:1d:9c:06:97:5f:a9:1c:2b:0c:58:88:b1:4f:dd:f5:e1:7e: b3:df:40:b3:37:05:cc:0b:b5:e2:83:3e:00:68:48:ea:05:68: af:fa:6f:f5:64:ab:39:ff:ef:2c:fa:83:20:00:33:36:2d:30: a8:34:51:43:68:a5:fd:eb:23:4f:82:2a:db:eb:c0:43:80:d2: 04:3c:91:42:af:cb:d5:54:52:0a:26:3d:09:61:41:c5:8b:73: 1f:59:59:9b:63:7e:04:94:53:74:ef:b1:2f:f4:19:98:50:bd: c9:4b:d1:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedFBoOQPpCMdkmiqmQSM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5 ZDRhZWMwHhcNMjUxMjE0MjAwMTM3WhcNMjUxMjE1MjAwMTM3WjAzMTEwLwYDVQQD EyhiMjQ3Nzc0NTk3MDUzMGJkYmU0NjUzZDEwNmE4MzU2MGJmZmQ4OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXknWAjGwqBRGU/0mYdY0HRCb6rq 5OuG7pVlYsidnF25Dv+D3adRL53gEGyci5W6yJxQn2otJ+7fCoGUI1+zuqBKLlhO UzQD6XN42obzkEe9ccbHCdiOaVz6MGAW85j66ElOxU/PVLT9D1VghIeKQqcrX0Id 5IzJHy0+JAoMEDzQGdC4H3kyLQTzrtKQ3rHgQ18RhIdYuNYwdRXn7+0ebfcXiu4o bFUd/u0j3lCioPiS2vKxzAMwrGFgYoonaP2eGcDqWuR9BaMw1m60x0xdGcx1dyOn n7yRiPovsb+V8oWHCBXK5+Vd0j104ZTEouh6YOB3xzMoGjAY2qUIw+shoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJHd0WXBTC9vkZT0QaoNWC//YjLMB8GA1UdIwQY MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3 LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwP4BYxr GIXogS0PXzSXu/isLTDpuqCDVaOdC/AyvHThq+uXBJd/M061suDmJOoB+9EHXjii ap9zonOlgM3A+/XqhgDZs+EbQgBJS10jSInvUBVh72W1hlUfhSAC75zdMj3K/iCF QExWiQOAGAD1XU/1X1gTBMb16y0pwQQtCKUKN7xPaXbt/Jop6ftDRrs16x2cBpdf qRwrDFiIsU/d9eF+s99AszcFzAu14oM+AGhI6gVor/pv9WSrOf/vLPqDIAAzNi0w qDRRQ2il/esjT4Iq2+vAQ4DSBDyRQq/L1VRSCiY9CWFBxYtzH1lZm2N+BJRTdO+x L/QZmFC9yUvRMA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:54 2025 by rpki-client