This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json) Hash identifier: 7bfv9V4EIx5An1rs3OFigOczTqVVmT8hhHUkhJU5zI8= Subject key identifier: 39:E8:90:0B:69:18:90:B3:77:4F:50:D5:EF:99:21:A0:07:BB:89:57 Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Certificate serial: 019B37FCCCD6A7217309E1935A4CF9A687B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft Manifest number: 1056 Signing time: Fri 19 Dec 2025 19:01:12 +0000 Manifest this update: Fri 19 Dec 2025 19:01:12 +0000 Manifest next update: Sat 20 Dec 2025 19:01:12 +0000 Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: r51AklzWZtDojcxxSD+53SFQ0RR3KwF2b7hLWxG7CDs=) 2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:cc:d6:a7:21:73:09:e1:93:5a:4c:f9:a6:87:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Validity Not Before: Dec 19 19:01:12 2025 GMT Not After : Dec 20 19:01:12 2025 GMT Subject: CN=39e8900b691890b3774f50d5ef9921a007bb8957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:c5:14:69:c8:b6:a7:b3:b0:1d:47:2f:2e: 90:ba:89:0e:0a:d3:5c:0d:0a:73:37:8d:d2:2b:f2: bb:08:95:3b:10:35:0b:43:c2:dc:4d:6f:5e:37:a5: 87:4b:a0:3a:5e:df:ac:f5:a6:df:ce:07:9f:ab:3c: 07:73:00:37:7e:67:6c:66:2b:2a:23:e8:31:af:ac: 2b:1b:b0:12:42:be:da:5a:5c:70:38:7d:88:98:28: 14:dc:e0:e1:a9:be:43:61:ad:36:99:ad:68:fb:fc: 4b:3c:0c:28:c4:89:3e:27:a9:9f:4f:5d:6a:e4:74: d6:f0:d3:c6:27:20:0b:64:0c:9a:5e:c3:dd:c8:5e: 99:ae:3f:ed:05:04:ef:f6:7c:f9:98:2d:0a:d5:9a: 32:a4:55:4d:a3:ab:fa:5f:cd:91:49:8d:ef:a0:49: 8f:47:bb:3d:f5:8b:11:4e:7f:16:81:95:67:c7:40: 51:61:84:76:87:a4:67:96:c9:df:1c:50:ad:2a:4e: 4c:16:e8:df:17:36:64:61:63:cc:2a:9b:69:dc:c8: be:8d:2c:e5:da:d7:43:f0:d0:ed:e2:99:8a:1a:eb: f3:48:4a:e3:79:b4:70:71:67:83:6f:43:87:f7:b3: fc:4c:f1:1e:2c:3f:34:7d:79:cc:ec:68:f2:5f:3e: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E8:90:0B:69:18:90:B3:77:4F:50:D5:EF:99:21:A0:07:BB:89:57 X509v3 Authority Key Identifier: keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:79:c3:63:9d:06:30:72:34:ee:11:80:17:1f:a1:b0:6a: 5d:b5:c5:bf:17:95:73:f6:b6:ee:2f:38:2e:a5:ea:bc:57:74: 31:7e:b1:ec:6e:b3:9d:65:3e:a8:23:7c:7e:8a:90:b2:dc:a1: da:ef:92:93:1c:b6:47:49:18:1d:b4:a0:a9:d0:ca:36:70:56: 46:17:57:33:4f:e7:43:aa:b0:6f:80:10:58:7e:03:58:e9:93: cf:2b:3e:1b:76:3a:5f:53:45:08:36:8f:38:ce:03:b6:2a:8c: a5:d7:0e:a6:d8:9d:83:f7:ac:fd:52:28:50:4b:34:96:78:c1: 2d:95:81:64:2d:4a:0e:53:db:9f:72:bd:a8:3c:2a:20:7b:4b: 18:77:91:3f:df:18:34:8d:cd:9d:07:6b:b0:18:70:f6:a9:66: 48:64:ce:72:e4:a7:df:bb:7e:7e:1c:f5:b5:90:16:e7:8f:3f: 5e:b6:5e:36:59:92:e0:4c:87:92:d6:6d:05:0b:2a:4b:0c:b9: 29:dd:5b:41:55:47:61:54:37:09:96:d7:37:86:f1:98:ba:5f: ba:04:75:f8:4f:db:56:99:b7:ad:f2:30:4c:7f:b7:84:10:67: 2c:40:a3:85:0a:56:ef:a6:1f:74:a1:ea:40:fe:36:dc:d5:ec: fb:bf:7a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/MzWpyFzCeGTWkz5poezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy NDliMDQwHhcNMjUxMjE5MTkwMTEyWhcNMjUxMjIwMTkwMTEyWjAzMTEwLwYDVQQD EygzOWU4OTAwYjY5MTg5MGIzNzc0ZjUwZDVlZjk5MjFhMDA3YmI4OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T3FFGnItqezsB1HLy6QuokOCtNc DQpzN43SK/K7CJU7EDULQ8LcTW9eN6WHS6A6Xt+s9abfzgefqzwHcwA3fmdsZisq I+gxr6wrG7ASQr7aWlxwOH2ImCgU3ODhqb5DYa02ma1o+/xLPAwoxIk+J6mfT11q 5HTW8NPGJyALZAyaXsPdyF6Zrj/tBQTv9nz5mC0K1ZoypFVNo6v6X82RSY3voEmP R7s99YsRTn8WgZVnx0BRYYR2h6RnlsnfHFCtKk5MFujfFzZkYWPMKptp3Mi+jSzl 2tdD8NDt4pmKGuvzSErjebRwcWeDb0OH97P8TPEeLD80fXnM7GjyXz4eQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnokAtpGJCzd09Q1e+ZIaAHu4lXMB8GA1UdIwQY MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt YzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJl5w2Od BjByNO4RgBcfobBqXbXFvxeVc/a27i84LqXqvFd0MX6x7G6znWU+qCN8foqQstyh 2u+Skxy2R0kYHbSgqdDKNnBWRhdXM0/nQ6qwb4AQWH4DWOmTzys+G3Y6X1NFCDaP OM4DtiqMpdcOptidg/es/VIoUEs0lnjBLZWBZC1KDlPbn3K9qDwqIHtLGHeRP98Y NI3NnQdrsBhw9qlmSGTOcuSn37t+fhz1tZAW548/XrZeNlmS4EyHktZtBQsqSwy5 Kd1bQVVHYVQ3CZbXN4bxmLpfugR1+E/bVpm3rfIwTH+3hBBnLECjhQpW76YfdKHq QP423NXs+796TA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:26:39 2025 by rpki-client