This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json) Hash identifier: pg30TKHYca6Qfeh44tn0mh5zdixd9DcWP+tDa5ry3sY= Subject key identifier: D9:BA:BF:7E:A0:2E:D1:FB:36:2F:AC:68:C1:54:40:C6:A0:83:17:54 Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019B35D791F2B75C9B2CC04481B8231F013D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft Manifest number: 0DA4 Signing time: Fri 19 Dec 2025 09:01:18 +0000 Manifest this update: Fri 19 Dec 2025 09:01:18 +0000 Manifest next update: Sat 20 Dec 2025 09:01:18 +0000 Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=) 2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=) 3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=) 4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: BxRPHcmY7iUrkAy9TS/NcprKKBbT2fuRoTchhenx7uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:91:f2:b7:5c:9b:2c:c0:44:81:b8:23:1f:01:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Dec 19 09:01:18 2025 GMT Not After : Dec 20 09:01:18 2025 GMT Subject: CN=d9babf7ea02ed1fb362fac68c15440c6a0831754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:56:dc:b1:f9:a1:70:af:ea:58:e3:53:36: 4b:d4:bb:85:3a:02:89:3c:20:0a:b3:b6:c4:fb:c1: 3e:d9:3a:95:36:d6:fd:98:37:4f:4f:aa:1c:09:95: fe:a7:bc:b0:37:b7:b1:7b:e2:2e:d6:fd:90:fa:a2: 50:ca:e6:00:34:6a:a7:03:09:c1:01:15:0a:18:b7: 98:e2:f0:94:af:60:8e:51:26:7e:c2:a8:4f:a1:aa: de:93:d9:55:cf:49:97:b5:81:43:80:2e:5d:22:ce: ef:37:aa:1a:69:56:45:b8:ac:60:df:ed:e0:7c:c2: 33:b1:bd:ca:00:71:63:dd:e3:3b:1c:e7:82:a3:6f: b0:3f:e9:d5:1b:7f:dc:3a:58:8b:41:c4:5c:b0:cc: 3f:e5:ba:f0:24:85:d4:25:a0:85:6e:2f:1c:00:e7: 3d:99:96:0c:a2:4b:43:92:e1:0f:3e:3d:fd:48:ca: b3:ec:f2:13:8c:44:ad:25:43:91:17:40:a2:16:b0: 50:09:72:32:e8:0b:12:27:57:88:85:69:d0:0f:4c: f2:fc:fb:ad:99:1e:78:6f:e0:28:ee:bc:34:1b:42: 46:76:bc:c3:5f:b0:8c:4a:a7:ef:fc:2c:14:cf:10: 3b:03:fe:e7:87:bd:19:7a:b9:6f:2d:d4:24:16:c1: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BA:BF:7E:A0:2E:D1:FB:36:2F:AC:68:C1:54:40:C6:A0:83:17:54 X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:25:e8:0f:cd:65:4f:c3:d1:2e:42:fb:22:0a:c4:8e:23:30: e0:ca:1c:fc:be:26:5c:9e:07:5f:30:4d:b6:c4:02:de:3f:9a: 29:30:b4:78:03:8d:8b:c4:f3:53:62:84:ac:3c:bf:75:65:16: 73:8d:0d:d1:b3:bc:22:83:96:b4:2d:00:6d:73:4f:2f:17:ba: 4c:a1:79:38:b5:4a:8a:09:43:a8:ed:87:10:15:2c:95:72:30: 3e:ef:7f:63:43:b6:b3:b6:e6:33:00:fb:48:3c:6a:27:15:7b: af:cb:bd:8f:c9:c3:83:41:98:81:4a:db:0a:81:bf:71:7f:91: 05:22:c8:69:72:37:34:66:14:c6:81:6f:d3:e1:49:82:41:a4: d1:b3:b8:e8:35:93:9d:aa:ae:ed:d7:84:f4:c6:11:1c:8d:81: 62:07:d8:8e:54:4f:c3:22:00:84:1a:58:25:fb:69:ee:d6:e8: ee:de:8d:4c:d0:70:43:86:0a:0b:2f:31:bd:63:8e:c0:55:4d: 9a:16:0a:b2:10:51:cc:69:f4:61:8f:39:68:1c:4c:97:6c:e9: 3e:69:f5:e1:89:58:c7:60:0d:c5:ae:76:3c:9c:62:f9:94:8a: 57:a9:2f:88:07:d5:b3:8b:6f:a8:3b:18:73:c7:cf:cb:04:29: 44:36:29:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs115Hyt1ybLMBEgbgjHwE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjUxMjE5MDkwMTE4WhcNMjUxMjIwMDkwMTE4WjAzMTEwLwYDVQQD EyhkOWJhYmY3ZWEwMmVkMWZiMzYyZmFjNjhjMTU0NDBjNmEwODMxNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD9W3LH5oXCv6ljjUzZL1LuFOgKJ PCAKs7bE+8E+2TqVNtb9mDdPT6ocCZX+p7ywN7exe+Iu1v2Q+qJQyuYANGqnAwnB ARUKGLeY4vCUr2COUSZ+wqhPoarek9lVz0mXtYFDgC5dIs7vN6oaaVZFuKxg3+3g fMIzsb3KAHFj3eM7HOeCo2+wP+nVG3/cOliLQcRcsMw/5brwJIXUJaCFbi8cAOc9 mZYMoktDkuEPPj39SMqz7PITjEStJUORF0CiFrBQCXIy6AsSJ1eIhWnQD0zy/Put mR54b+Ao7rw0G0JGdrzDX7CMSqfv/CwUzxA7A/7nh70ZerlvLdQkFsEAOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm6v36gLtH7Ni+saMFUQMaggxdUMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiXoD81l T8PRLkL7IgrEjiMw4Moc/L4mXJ4HXzBNtsQC3j+aKTC0eAONi8TzU2KErDy/dWUW c40N0bO8IoOWtC0AbXNPLxe6TKF5OLVKiglDqO2HEBUslXIwPu9/Y0O2s7bmMwD7 SDxqJxV7r8u9j8nDg0GYgUrbCoG/cX+RBSLIaXI3NGYUxoFv0+FJgkGk0bO46DWT naqu7deE9MYRHI2BYgfYjlRPwyIAhBpYJftp7tbo7t6NTNBwQ4YKCy8xvWOOwFVN mhYKshBRzGn0YY85aBxMl2zpPmn14YlYx2ANxa52PJxi+ZSKV6kviAfVs4tvqDsY c8fPywQpRDYpgw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:57 2025 by rpki-client