This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json) Hash identifier: sm/396NHuaUl4gTouRYweDKvI6fLdbsqZ94M9nuJBJE= Subject key identifier: 0C:A5:80:87:DC:27:EF:CF:0A:91:1E:84:90:4D:BA:14:5A:EC:35:80 Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Certificate serial: 019B1ACE1384392603FE27BFAE853967B0FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft Manifest number: 1774 Signing time: Sun 14 Dec 2025 03:01:11 +0000 Manifest this update: Sun 14 Dec 2025 03:01:11 +0000 Manifest next update: Mon 15 Dec 2025 03:01:11 +0000 Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: pkjLOGrRnPJO0wH9ZSOY5/6aaPMs2eOLkVjW0/7PI+w=) 2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:13:84:39:26:03:fe:27:bf:ae:85:39:67:b0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Validity Not Before: Dec 14 03:01:11 2025 GMT Not After : Dec 15 03:01:11 2025 GMT Subject: CN=0ca58087dc27efcf0a911e84904dba145aec3580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:e9:70:d5:0d:75:ac:a7:7f:be:4b:9e:9e: 55:a8:69:ac:95:51:69:f6:a3:4a:9e:49:e7:98:8c: fc:21:a1:97:17:2d:89:50:85:94:98:ec:21:53:51: 7b:6c:80:47:52:2e:4e:d3:22:97:ab:db:38:04:59: 81:17:de:ab:91:b4:5e:0d:34:7d:03:e9:76:58:87: ea:a1:0f:67:7b:c6:0d:e6:72:e7:04:b5:6c:61:59: 0a:ea:8c:ed:6c:79:c5:ed:f3:58:95:43:5e:dd:27: a7:e2:8f:5b:77:f3:33:79:8b:ee:8a:b5:65:2c:34: b3:8c:3e:5c:bc:5f:5c:d7:0a:cf:e0:da:bc:33:e2: 4a:7e:f8:21:86:a5:67:a3:e8:98:73:cc:dc:5e:37: 13:45:c8:c2:f2:e0:2f:f4:88:02:7b:5a:95:bc:2f: ee:a0:13:03:5f:ec:3e:12:18:d3:6a:1a:70:8a:93: 5d:35:dd:1d:7a:65:81:ce:78:40:16:9d:f1:82:11: ad:da:37:25:06:a1:b8:e7:01:0f:97:68:d3:17:5c: 21:b0:d9:2a:79:b3:8c:8a:87:bd:ac:71:68:58:d4: 65:74:ff:68:4e:e3:56:9a:43:b9:74:23:a2:39:55: 28:a6:2e:57:a0:02:a7:db:e4:cc:8b:42:d2:90:5c: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:80:87:DC:27:EF:CF:0A:91:1E:84:90:4D:BA:14:5A:EC:35:80 X509v3 Authority Key Identifier: keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:79:a7:ad:44:63:14:e3:ce:b6:cc:ed:d7:9b:eb:14:59:a4: 33:6a:03:6d:8d:e2:a9:59:83:05:1a:ee:83:06:b9:ef:3e:12: 29:a8:56:6c:d1:a2:08:da:90:26:3d:d5:fc:24:7d:f5:5b:64: 26:98:e6:f2:3c:fd:09:80:8b:91:ac:de:a7:2c:66:6e:5e:8b: 02:d4:87:19:d7:59:ed:14:53:c6:5e:06:b4:8d:d1:30:21:5f: 12:19:cd:f1:ef:0d:e6:a0:92:65:ef:6c:13:cf:ca:f4:a7:75: a2:88:2b:d0:ff:f2:21:cb:c0:e8:44:45:b7:6d:77:31:77:43: c6:9a:35:eb:8d:06:3c:00:42:e1:30:ef:69:6d:8d:92:9f:e6: 52:1d:2e:b5:b6:a0:95:4a:be:d8:b2:4e:34:96:24:4c:7d:0a: 61:7c:ba:11:e6:a8:83:a3:56:94:d3:c4:c1:95:aa:97:e9:1a: ce:82:b6:32:32:99:79:13:a2:91:fb:1f:e6:2d:e0:84:73:b3: b0:c9:64:40:47:d5:a4:86:ed:95:3a:9a:0d:36:85:51:b0:14: 44:c8:1c:fa:4c:be:81:62:79:5e:fd:d6:4b:75:5f:27:db:3f: 47:6a:b9:e5:fc:ab:dd:27:0c:eb:24:2a:51:fb:ed:2c:21:1d: e9:f9:32:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazhOEOSYD/ie/roU5Z7D8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTRhNGM0ODQwZmM5YTVmZDIxNGE2MTlhYTg4N2I1Yjc2 MjRiZjUwHhcNMjUxMjE0MDMwMTExWhcNMjUxMjE1MDMwMTExWjAzMTEwLwYDVQQD EygwY2E1ODA4N2RjMjdlZmNmMGE5MTFlODQ5MDRkYmExNDVhZWMzNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oTpcNUNdaynf75Lnp5VqGmslVFp 9qNKnknnmIz8IaGXFy2JUIWUmOwhU1F7bIBHUi5O0yKXq9s4BFmBF96rkbReDTR9 A+l2WIfqoQ9ne8YN5nLnBLVsYVkK6oztbHnF7fNYlUNe3Sen4o9bd/MzeYvuirVl LDSzjD5cvF9c1wrP4Nq8M+JKfvghhqVno+iYc8zcXjcTRcjC8uAv9IgCe1qVvC/u oBMDX+w+EhjTahpwipNdNd0demWBznhAFp3xghGt2jclBqG45wEPl2jTF1whsNkq ebOMioe9rHFoWNRldP9oTuNWmkO5dCOiOVUopi5XoAKn2+TMi0LSkFyGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAylgIfcJ+/PCpEehJBNuhRa7DWAMB8GA1UdIwQY MBaAFNzkpMSED8ml/SFKYZqoh7W3Ykv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEt MmI3YWU3MjIwMTFmLzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEtMmI3YWU3MjIwMTFm LzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenmnrURj FOPOtszt15vrFFmkM2oDbY3iqVmDBRrugwa57z4SKahWbNGiCNqQJj3V/CR99Vtk Jpjm8jz9CYCLkazepyxmbl6LAtSHGddZ7RRTxl4GtI3RMCFfEhnN8e8N5qCSZe9s E8/K9Kd1oogr0P/yIcvA6ERFt213MXdDxpo1640GPABC4TDvaW2Nkp/mUh0utbag lUq+2LJONJYkTH0KYXy6Eeaog6NWlNPEwZWql+kazoK2MjKZeROikfsf5i3ghHOz sMlkQEfVpIbtlTqaDTaFUbAURMgc+ky+gWJ5Xv3WS3VfJ9s/R2q55fyr3ScM6yQq UfvtLCEd6fkyoA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:59 2025 by rpki-client