This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json) Hash identifier: TMAh7SlMx9sieZtBq4lfNBzP8o90D0l8g2kS5fS2VLY= Subject key identifier: 6D:7B:08:90:03:30:6E:46:64:F5:44:83:59:D0:87:3E:7B:C0:5A:34 Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9 Certificate serial: 019B3EDAA142855D4AF71E5C1AD2F2BB6E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft Manifest number: 1708 Signing time: Sun 21 Dec 2025 03:01:13 +0000 Manifest this update: Sun 21 Dec 2025 03:01:13 +0000 Manifest next update: Mon 22 Dec 2025 03:01:13 +0000 Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=) 2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: x5Kj2w7VLdAoE5ZOowIRRAlH8lm30si+/eNCXOi9kR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a1:42:85:5d:4a:f7:1e:5c:1a:d2:f2:bb:6e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9 Validity Not Before: Dec 21 03:01:13 2025 GMT Not After : Dec 22 03:01:13 2025 GMT Subject: CN=6d7b089003306e4664f5448359d0873e7bc05a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:ad:3a:dc:19:fa:62:1c:75:92:67:64:aa: 58:3c:7d:00:e0:02:03:c3:c0:f1:38:fe:6f:9d:30: 7f:61:21:97:a6:0c:79:0f:67:c5:95:b1:4b:a9:23: 7f:59:44:e4:9c:df:9b:66:58:8c:57:9a:67:fd:79: 72:7b:cf:b0:bb:41:5a:42:a6:4f:79:36:dd:9d:86: 7b:0a:3d:4e:62:14:57:59:87:51:91:bb:03:ed:66: cc:0a:c1:2c:fd:d9:fc:88:ac:1f:ee:79:0e:53:5c: 58:04:3b:3c:b8:80:1b:91:23:b3:09:a5:c0:40:64: f2:92:83:c6:82:cb:f1:30:74:69:78:0c:77:08:5b: 73:c3:e2:f4:2b:90:64:85:70:f7:c5:a1:bb:7c:79: c1:99:14:0f:c6:61:9b:39:d3:e1:57:6e:fc:23:73: 37:f9:6c:d7:fd:81:a9:b5:05:d9:5d:ae:07:c0:be: c2:b6:82:3c:11:07:f9:47:52:5d:f6:9c:7b:11:d9: 11:af:e7:cd:f7:19:2b:12:ee:52:d0:a8:a3:d9:01: af:25:40:ec:dd:17:ed:ab:46:27:06:6c:9e:6b:0f: 9f:ed:47:55:5b:61:45:87:9a:69:36:6e:72:9b:e6: e0:a6:f1:93:37:70:c5:2b:90:3e:47:1b:77:ae:4b: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:08:90:03:30:6E:46:64:F5:44:83:59:D0:87:3E:7B:C0:5A:34 X509v3 Authority Key Identifier: keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:bc:02:b0:fb:7d:10:99:3a:2b:89:a5:64:67:90:7a:fb: 82:1a:dc:fd:e7:b6:42:e1:da:c5:c9:e5:d8:6b:10:42:b5:ae: 93:9d:9f:fa:f3:c9:f1:45:1f:8d:d0:0d:22:ab:6f:20:f7:95: b5:89:39:56:da:4e:2f:87:c7:b0:f2:1e:3b:a8:56:71:40:a3: 43:5d:a1:f9:94:91:d0:29:f8:d9:16:bf:ec:af:aa:cc:49:5e: b7:19:76:0b:7d:14:16:24:58:e0:11:f8:bb:cf:e0:bd:eb:3c: 50:07:23:8e:9d:24:41:da:10:41:ee:7a:a1:5a:a3:cf:c1:b5: b4:30:19:a8:26:d2:44:cb:27:32:7e:88:7a:0c:e9:17:fc:1f: 6f:fb:c2:1f:ad:38:bd:dc:13:6c:f1:99:4a:5c:16:b6:db:ce: 93:dd:03:2c:3a:50:59:78:53:85:dc:c2:88:bf:06:20:9e:ae: 07:82:1e:d5:69:e0:76:21:bf:bc:af:b5:63:de:1f:8c:53:1b: f2:fd:b9:e8:ca:fc:18:ce:7d:f2:b9:8b:b2:34:e0:4f:e1:ef: 3c:72:72:07:17:9e:37:da:f6:44:57:0a:3d:bc:0c:cc:72:de: 74:9e:c1:71:62:7e:69:f2:11:18:39:6f:78:f1:ef:eb:3a:53: 2d:ef:8f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qFChV1K9x5cGtLyu26WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh YzNhZjkwHhcNMjUxMjIxMDMwMTEzWhcNMjUxMjIyMDMwMTEzWjAzMTEwLwYDVQQD Eyg2ZDdiMDg5MDAzMzA2ZTQ2NjRmNTQ0ODM1OWQwODczZTdiYzA1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F2tOtwZ+mIcdZJnZKpYPH0A4AID w8DxOP5vnTB/YSGXpgx5D2fFlbFLqSN/WUTknN+bZliMV5pn/Xlye8+wu0FaQqZP eTbdnYZ7Cj1OYhRXWYdRkbsD7WbMCsEs/dn8iKwf7nkOU1xYBDs8uIAbkSOzCaXA QGTykoPGgsvxMHRpeAx3CFtzw+L0K5BkhXD3xaG7fHnBmRQPxmGbOdPhV278I3M3 +WzX/YGptQXZXa4HwL7CtoI8EQf5R1Jd9px7EdkRr+fN9xkrEu5S0Kij2QGvJUDs 3Rftq0YnBmyeaw+f7UdVW2FFh5ppNm5ym+bgpvGTN3DFK5A+Rxt3rkvFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG17CJADMG5GZPVEg1nQhz57wFo0MB8GA1UdIwQY MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVC8ArD7 fRCZOiuJpWRnkHr7ghrc/ee2QuHaxcnl2GsQQrWuk52f+vPJ8UUfjdANIqtvIPeV tYk5VtpOL4fHsPIeO6hWcUCjQ12h+ZSR0Cn42Ra/7K+qzEletxl2C30UFiRY4BH4 u8/gves8UAcjjp0kQdoQQe56oVqjz8G1tDAZqCbSRMsnMn6IegzpF/wfb/vCH604 vdwTbPGZSlwWttvOk90DLDpQWXhThdzCiL8GIJ6uB4Ie1WngdiG/vK+1Y94fjFMb 8v256Mr8GM598rmLsjTgT+HvPHJyBxeeN9r2RFcKPbwMzHLedJ7BcWJ+afIRGDlv ePHv6zpTLe+Prg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:44:02 2025 by rpki-client