This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json) Hash identifier: tP/4tVEKuIbEuhvddFtp3TbdqJWdiXV0HPigYWUqqIo= Subject key identifier: 7A:DA:16:DB:DA:F2:46:FC:D1:AF:77:21:DD:6E:72:27:A3:81:45:B9 Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468 Certificate serial: 019B3456B128C1FBE6F8D9AD0F99EAF3B5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft Manifest number: 03D7 Signing time: Fri 19 Dec 2025 02:00:55 +0000 Manifest this update: Fri 19 Dec 2025 02:00:55 +0000 Manifest next update: Sat 20 Dec 2025 02:00:55 +0000 Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=) 2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: iiPgwWbY8oRiFMg43UZ2JPoSHEbWOvF2/bR/I292Rh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:b1:28:c1:fb:e6:f8:d9:ad:0f:99:ea:f3:b5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468 Validity Not Before: Dec 19 02:00:55 2025 GMT Not After : Dec 20 02:00:55 2025 GMT Subject: CN=7ada16dbdaf246fcd1af7721dd6e7227a38145b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:90:68:d8:eb:40:3d:13:2c:03:11:78:81: e7:a4:8d:c8:8d:08:7c:1b:38:d6:ea:26:1d:f5:65: 60:e4:d1:e3:96:88:68:8d:95:db:13:7c:2f:2d:c0: 7a:fb:04:87:c5:b4:47:76:78:df:5a:73:6e:a3:d7: 14:a0:54:6f:52:f9:f0:e1:20:2e:94:38:df:8b:3a: cb:75:56:7a:91:8a:77:80:a8:e7:15:d0:46:17:64: 72:6c:5f:3c:98:26:27:11:b7:6d:be:52:4a:dc:91: 6a:35:ef:e3:4b:d3:6f:6d:59:36:84:8e:76:33:d7: cb:57:a3:7b:0b:8b:67:0a:34:f8:b9:10:2c:4d:45: dc:09:f9:d5:84:55:ab:ea:2a:f6:3e:c5:98:23:6f: e5:25:9e:21:49:ee:b2:05:69:55:1f:00:fc:e7:41: fb:c9:3b:0a:2c:09:87:56:0c:15:4d:7e:be:d0:58: 9e:82:49:5b:11:1b:d2:6a:ac:50:7c:18:85:0d:c0: 22:1c:82:df:db:21:6a:95:ab:91:d2:d0:70:fc:09: e8:22:37:d8:2c:8c:e0:11:47:d7:32:df:db:b5:26: dc:7c:7a:89:6f:cb:d6:8a:13:51:30:1a:24:05:0b: 39:a2:fc:68:e9:d3:1e:67:3c:26:2d:72:85:bc:52: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:16:DB:DA:F2:46:FC:D1:AF:77:21:DD:6E:72:27:A3:81:45:B9 X509v3 Authority Key Identifier: keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:15:11:ed:5d:b3:86:c1:c6:b4:a1:c6:97:fc:1f:be:db: 8b:36:a3:b8:aa:8e:12:9c:19:6b:19:44:f8:5f:de:c6:5b:97: a9:2f:53:0a:0c:fa:be:09:cf:7c:db:97:d3:0c:c1:7e:19:80: cc:d2:ce:23:57:06:a7:c3:d9:4f:e3:4b:5f:a8:4d:f4:84:27: 9d:ff:75:8a:1b:aa:ac:b7:44:3a:f6:66:54:c1:64:16:35:2b: 7b:8e:49:15:ca:b9:55:f9:1b:ea:f7:1d:0b:f8:d8:f7:ba:d7: 39:49:21:4e:0a:b7:e6:f8:d7:76:65:7f:b2:1f:46:c5:d0:6c: 62:00:00:b3:03:6a:94:fe:a7:7c:a3:bf:2d:e5:b9:84:29:77: 21:58:84:ec:8c:c8:df:e4:1d:1a:9c:f4:fa:09:bc:a6:a6:bb: b6:d5:5a:ee:42:f4:a5:e9:1b:90:84:15:af:a2:ee:84:5c:30: 5c:34:ad:b8:65:07:53:76:15:93:2c:fa:52:a0:18:de:ac:b7: 54:e1:bb:aa:b5:48:d1:74:76:f1:83:57:72:cb:5b:15:86:f0: 2b:ac:b1:a4:67:08:e3:16:e0:76:69:8b:3d:f1:22:7e:8d:1f: 73:45:05:33:e8:68:56:5a:63:2f:63:54:e9:88:3b:ff:8f:0c: 7b:1d:eb:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrEowfvm+NmtD5nq87XfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz NzE0NjgwHhcNMjUxMjE5MDIwMDU1WhcNMjUxMjIwMDIwMDU1WjAzMTEwLwYDVQQD Eyg3YWRhMTZkYmRhZjI0NmZjZDFhZjc3MjFkZDZlNzIyN2EzODE0NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj2QaNjrQD0TLAMReIHnpI3IjQh8 GzjW6iYd9WVg5NHjlohojZXbE3wvLcB6+wSHxbRHdnjfWnNuo9cUoFRvUvnw4SAu lDjfizrLdVZ6kYp3gKjnFdBGF2RybF88mCYnEbdtvlJK3JFqNe/jS9NvbVk2hI52 M9fLV6N7C4tnCjT4uRAsTUXcCfnVhFWr6ir2PsWYI2/lJZ4hSe6yBWlVHwD850H7 yTsKLAmHVgwVTX6+0FiegklbERvSaqxQfBiFDcAiHILf2yFqlauR0tBw/AnoIjfY LIzgEUfXMt/btSbcfHqJb8vWihNRMBokBQs5ovxo6dMeZzwmLXKFvFJPXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHraFtva8kb80a93Id1uciejgUW5MB8GA1UdIwQY MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0 LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYEVEe1d s4bBxrShxpf8H77bizajuKqOEpwZaxlE+F/exluXqS9TCgz6vgnPfNuX0wzBfhmA zNLOI1cGp8PZT+NLX6hN9IQnnf91ihuqrLdEOvZmVMFkFjUre45JFcq5Vfkb6vcd C/jY97rXOUkhTgq35vjXdmV/sh9GxdBsYgAAswNqlP6nfKO/LeW5hCl3IViE7IzI 3+QdGpz0+gm8pqa7ttVa7kL0pekbkIQVr6LuhFwwXDStuGUHU3YVkyz6UqAY3qy3 VOG7qrVI0XR28YNXcstbFYbwK6yxpGcI4xbgdmmLPfEifo0fc0UFM+hoVlpjL2NU 6Yg7/48Mex3rfQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:03 2025 by rpki-client