This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json) Hash identifier: qowEpVT/k3HgNWl1D/nYoIYxe4ceWbUNAAQMPl5At4g= Subject key identifier: 3F:CD:A8:FB:16:51:65:C5:D1:9D:1F:45:1A:A7:BA:09:F8:94:13:CB Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Certificate serial: 019B42495AA1E3991A7C056804C6FD67E941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft Manifest number: 0553 Signing time: Sun 21 Dec 2025 19:01:02 +0000 Manifest this update: Sun 21 Dec 2025 19:01:02 +0000 Manifest next update: Mon 22 Dec 2025 19:01:02 +0000 Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: +VJUNCZmnU8mA9qLKcWqB1CvFJZKOI5pY5Lurz7NXK0=) 2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:5a:a1:e3:99:1a:7c:05:68:04:c6:fd:67:e9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Validity Not Before: Dec 21 19:01:02 2025 GMT Not After : Dec 22 19:01:02 2025 GMT Subject: CN=3fcda8fb165165c5d19d1f451aa7ba09f89413cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:8c:2c:ae:64:7d:41:64:28:3a:74:8f:80: 65:e6:dc:38:ae:8c:7b:3c:47:34:3b:24:6a:3c:7d: 98:e5:d9:69:3c:4d:36:3f:de:97:48:38:9e:8e:87: dd:3b:0f:aa:79:48:8c:29:f9:e2:e6:f6:54:8f:38: 2a:cf:dc:4b:f2:8c:88:c9:c5:b1:49:13:7f:e0:ee: 0f:37:e5:fc:f9:63:b8:46:86:17:01:dc:09:1c:37: 66:18:39:e3:74:40:44:0d:86:a6:89:c2:31:da:e1: 33:4f:55:d8:24:0c:27:c5:7f:d3:1c:d7:98:2c:ba: 63:c3:c4:9c:4c:12:47:4a:f4:98:66:b4:36:80:d3: 6c:25:6a:13:e1:75:b9:17:d6:53:22:1d:a2:c4:70: 33:ee:52:1d:80:e0:eb:80:d5:d4:ba:35:28:f8:02: 71:cf:7a:9c:92:c7:2f:67:da:c3:c2:51:11:d5:08: eb:38:3e:d2:25:45:75:be:07:c9:7c:41:0d:26:03: 4e:e7:7f:06:cc:28:2d:7b:2a:55:34:b6:c4:23:ae: 35:9b:66:70:2b:4e:63:d2:4f:ba:65:f5:72:44:4d: 2a:44:53:fd:82:46:e1:be:92:31:f3:fe:64:e8:79: ec:bc:ad:c5:87:1a:ca:bf:93:ef:2a:b5:76:c8:a9: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:A8:FB:16:51:65:C5:D1:9D:1F:45:1A:A7:BA:09:F8:94:13:CB X509v3 Authority Key Identifier: keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5e:fa:e1:89:88:d3:54:c4:e1:b2:78:4a:5c:c5:56:2b:d1: 1f:da:c3:ab:d5:c4:54:fa:00:49:f1:aa:b9:bc:cb:36:5b:25: 8e:5e:53:99:e9:ea:b4:4f:cf:14:48:d7:2f:ba:aa:17:ef:56: a7:ef:47:ec:b0:68:1c:89:b8:b4:70:86:cf:0e:fc:6f:3d:6b: ff:83:07:04:1a:8a:cd:da:47:5d:b0:97:65:bb:f7:9e:6b:f0: e6:95:8f:70:df:be:16:a0:9b:6a:67:cf:81:49:9c:b6:c4:41: 76:d1:3a:08:d1:ad:9a:bf:21:d3:bb:c5:d5:82:ee:e8:f9:49: 83:75:70:ee:fe:cc:0d:f5:fb:87:cf:25:ce:7d:b6:18:99:28: 83:e4:b7:c3:da:ef:bc:2a:87:d8:f1:c9:0e:61:af:b8:da:45: eb:aa:61:80:71:8f:6b:64:58:fe:08:6b:58:f7:c0:b0:3b:8d: e1:6e:2a:c5:24:80:4f:37:4a:40:52:94:a3:21:5d:b5:a3:0e: 87:1a:06:de:8c:70:e8:d8:f8:ed:75:29:91:39:c9:c0:bf:1e: b1:71:79:86:b6:a3:34:79:aa:0f:5a:61:e8:80:b5:8f:5a:81: ca:e5:2a:dd:56:08:81:20:69:d4:8b:84:c7:8d:fa:1a:b9:55: 66:3a:06:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSVqh45kafAVoBMb9Z+lBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGJmOGE1MjZkYTAwNTZkNTNjNzI5ZmJjZmVkYjhhZjFm NDg0OWIwHhcNMjUxMjIxMTkwMTAyWhcNMjUxMjIyMTkwMTAyWjAzMTEwLwYDVQQD EygzZmNkYThmYjE2NTE2NWM1ZDE5ZDFmNDUxYWE3YmEwOWY4OTQxM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCaMLK5kfUFkKDp0j4Bl5tw4rox7 PEc0OyRqPH2Y5dlpPE02P96XSDiejofdOw+qeUiMKfni5vZUjzgqz9xL8oyIycWx SRN/4O4PN+X8+WO4RoYXAdwJHDdmGDnjdEBEDYamicIx2uEzT1XYJAwnxX/THNeY LLpjw8ScTBJHSvSYZrQ2gNNsJWoT4XW5F9ZTIh2ixHAz7lIdgODrgNXUujUo+AJx z3qckscvZ9rDwlER1QjrOD7SJUV1vgfJfEENJgNO538GzCgteypVNLbEI641m2Zw K05j0k+6ZfVyRE0qRFP9gkbhvpIx8/5k6HnsvK3FhxrKv5PvKrV2yKlSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/NqPsWUWXF0Z0fRRqnugn4lBPLMB8GA1UdIwQY MBaAFKOL+KUm2gBW1Txyn7z+24rx9ISbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgt NjA0YjQ3MjYxNDc2LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgtNjA0YjQ3MjYxNDc2 LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1764YmI 01TE4bJ4SlzFVivRH9rDq9XEVPoASfGqubzLNlsljl5TmenqtE/PFEjXL7qqF+9W p+9H7LBoHIm4tHCGzw78bz1r/4MHBBqKzdpHXbCXZbv3nmvw5pWPcN++FqCbamfP gUmctsRBdtE6CNGtmr8h07vF1YLu6PlJg3Vw7v7MDfX7h88lzn22GJkog+S3w9rv vCqH2PHJDmGvuNpF66phgHGPa2RY/ghrWPfAsDuN4W4qxSSATzdKQFKUoyFdtaMO hxoG3oxw6Nj47XUpkTnJwL8esXF5hrajNHmqD1ph6IC1j1qByuUq3VYIgSBp1IuE x436GrlVZjoGcQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:02 2025 by rpki-client