This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft File: 3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json) Hash identifier: QQjosv7nu8sxTvD6cj0jpd8PO02iGnFSjAgVu1c321Y= Subject key identifier: CC:E6:25:6B:1C:83:BC:6E:DC:A8:CB:C9:03:47:B4:87:97:94:40:BE Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019B0A495636360BB091F9712B152A6054B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft Manifest number: 1787 Signing time: Wed 10 Dec 2025 22:02:16 +0000 Manifest this update: Wed 10 Dec 2025 22:02:16 +0000 Manifest next update: Thu 11 Dec 2025 22:02:16 +0000 Files and hashes: 1: 0xa4mU5yRo1nzTt0AhMREexXLR4.roa (hash: V8/58Ec+nJB6D8SUXkgg5RfVldJgcq7giFR6HQKgRBM=) 2: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: vh6HhhYOivCqwR8VmsjS7qJrWZrsEjY+LPoEmkWDZfw=) 3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=) 4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=) 5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=) 6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:49:56:36:36:0b:b0:91:f9:71:2b:15:2a:60:54:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Dec 10 22:02:16 2025 GMT Not After : Dec 11 22:02:16 2025 GMT Subject: CN=cce6256b1c83bc6edca8cbc90347b487979440be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:8c:03:04:14:cb:c2:0a:ba:6f:d4:2c:7e: 12:8d:94:88:6d:58:94:f3:63:c2:d5:d1:7f:c1:38: b2:0f:da:67:7d:80:c3:27:35:77:9c:d7:3f:ef:7a: 1d:f1:3b:d7:ae:cd:6d:00:2e:de:92:6c:80:8e:75: 20:6f:21:d1:8b:8b:0d:c9:ab:e0:c8:30:df:90:97: 81:61:24:a8:3a:fa:33:93:cf:a7:d1:7b:b7:d1:6a: 93:5a:af:67:02:b7:1f:c9:38:8c:de:a1:23:b5:d5: ac:e1:42:7c:e0:37:74:45:b4:92:ef:f6:5a:fb:df: f0:dc:0d:b4:52:5f:94:1a:89:2f:2c:94:d7:af:24: 5b:3e:6b:e2:a2:f5:d0:a7:c6:10:4b:4c:20:92:48: f5:25:84:a8:1c:d3:2a:3a:8f:11:b4:0d:63:17:d1: 5a:d6:f5:ae:6b:e8:41:92:d8:c7:67:db:5e:05:4c: 78:33:36:64:32:06:f2:98:27:17:04:fc:32:d0:ac: 50:26:c7:d5:f4:c9:6b:ae:54:c9:08:33:d4:86:cb: 2f:f0:83:78:7e:01:51:a6:19:27:1f:06:27:a3:33: 9f:7f:68:2c:cb:12:97:e9:03:80:b6:dd:ad:dc:3d: 1e:10:65:e1:b6:e7:7b:96:1c:a0:bc:1b:c0:69:28: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:25:6B:1C:83:BC:6E:DC:A8:CB:C9:03:47:B4:87:97:94:40:BE X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d7:f1:41:94:e6:1d:7f:6f:09:b6:3e:40:08:5a:92:2b:1d: 4b:9a:6d:ad:cd:fb:3b:95:a4:69:5c:32:0e:6c:12:52:26:bf: c5:94:49:dc:e8:15:77:9b:de:b9:60:d1:96:09:d5:a4:e7:77: ae:2d:c4:4c:5f:ef:fb:8b:1e:85:b5:5d:92:e4:96:78:6a:10: 1c:95:b3:6c:7b:ca:be:67:76:3e:08:ba:22:7e:f2:e6:11:f0: e0:18:76:75:3a:a7:cd:55:da:49:e2:8d:09:da:fb:52:7b:93: 5b:97:57:84:4b:8c:07:26:15:03:83:f9:b3:d1:63:a0:a8:49: 21:45:93:c6:03:a2:50:a7:61:20:96:b1:b2:1f:71:7e:e0:93: f5:f5:99:60:4a:ba:ef:0c:5b:d0:04:09:52:1a:fe:34:7d:11: 13:05:d9:0e:71:df:cf:eb:4d:c6:1d:68:00:55:e2:5b:db:78: 62:34:13:94:7d:d3:29:77:ae:e1:a0:a0:8a:91:a0:b9:75:71: 06:cb:5f:65:01:b8:d6:8d:b6:7a:28:7e:65:1b:2d:d7:cc:f6: 40:c7:03:f5:08:6b:f1:73:7a:a1:ad:fc:a2:e6:aa:27:06:4f: 83:45:02:b1:49:a6:c1:2f:7c:7e:ea:0d:f3:c7:d2:27:b7:3f: 4e:d9:22:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSVY2NguwkflxKxUqYFSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjUxMjEwMjIwMjE2WhcNMjUxMjExMjIwMjE2WjAzMTEwLwYDVQQD EyhjY2U2MjU2YjFjODNiYzZlZGNhOGNiYzkwMzQ3YjQ4Nzk3OTQ0MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDCMAwQUy8IKum/ULH4SjZSIbViU 82PC1dF/wTiyD9pnfYDDJzV3nNc/73od8TvXrs1tAC7ekmyAjnUgbyHRi4sNyavg yDDfkJeBYSSoOvozk8+n0Xu30WqTWq9nArcfyTiM3qEjtdWs4UJ84Dd0RbSS7/Za +9/w3A20Ul+UGokvLJTXryRbPmviovXQp8YQS0wgkkj1JYSoHNMqOo8RtA1jF9Fa 1vWua+hBktjHZ9teBUx4MzZkMgbymCcXBPwy0KxQJsfV9MlrrlTJCDPUhssv8IN4 fgFRphknHwYnozOff2gsyxKX6QOAtt2t3D0eEGXhtud7lhygvBvAaSjekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzmJWscg7xu3KjLyQNHtIeXlEC+MB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtfxQZTm HX9vCbY+QAhakisdS5ptrc37O5WkaVwyDmwSUia/xZRJ3OgVd5veuWDRlgnVpOd3 ri3ETF/v+4sehbVdkuSWeGoQHJWzbHvKvmd2Pgi6In7y5hHw4Bh2dTqnzVXaSeKN Cdr7UnuTW5dXhEuMByYVA4P5s9FjoKhJIUWTxgOiUKdhIJaxsh9xfuCT9fWZYEq6 7wxb0AQJUhr+NH0REwXZDnHfz+tNxh1oAFXiW9t4YjQTlH3TKXeu4aCgipGguXVx BstfZQG41o22eih+ZRst18z2QMcD9Qhr8XN6oa38ouaqJwZPg0UCsUmmwS98fuoN 88fSJ7c/TtkiMw== -----END CERTIFICATE-----Generated at Thu Dec 11 05:18:46 2025 by rpki-client