This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: q28lO/fzdn9G6m2xmBLucSGQq5E43DiMLSXnoymwnc4= Subject key identifier: 23:1E:98:42:A5:32:F7:92:FD:21:77:37:10:94:E6:1B:4E:B9:02:20 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019AF57765CD23F2FE1B2F7CDE71C0A55710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1978 Signing time: Sat 06 Dec 2025 21:00:34 +0000 Manifest this update: Sat 06 Dec 2025 21:00:34 +0000 Manifest next update: Sun 07 Dec 2025 21:00:34 +0000 Files and hashes: 1: 1-4n255q-GmhvWguY8knOSWxwWOE.roa (hash: SpMPf2vIKuvnbl4s5E51poi38FquEwM10w09zg2yecI=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 6: DiojNNQH08E8VT8z31hy5NWp8N0.roa (hash: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=) 7: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 8: E628OGnKWXsWV6h8__lmYOw0VuQ.roa (hash: 0Qyyg2JckxtcQsRmrYcG0CbwVr4IoeBXt3vaGkjRMF4=) 9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 10: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 11: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: usVTfjWEOw3j+fJogE53iX9vWwq39PfTXnYNtpGD1qs=) 13: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 14: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 15: R2DhxkhJKynVq23HdTKG0z5fWJU.roa (hash: nG6WCjylMd8h79NDHMZUFgdfvCePLcuKEsqpEgLBkv4=) 16: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 17: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 18: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 19: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 20: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=) 21: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 22: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 23: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 24: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 25: jmsaJLgFgv0pE5HAtZEW2L4T9Rs.roa (hash: V0bEaj3C7tdAL5hfru57w0KCpkUkdH5e60oMAhwg6r4=) 26: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 27: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 28: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=) 29: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=) 30: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=) 31: vvf88GgWIXzkz27KzReib56wTnw.roa (hash: mexIXafPODNJ/VdJ+Am5z5IEHLOmDpbTiyu+ASbiaXg=) 32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:65:cd:23:f2:fe:1b:2f:7c:de:71:c0:a5:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 6 21:00:34 2025 GMT Not After : Dec 7 21:00:34 2025 GMT Subject: CN=231e9842a532f792fd2177371094e61b4eb90220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:27:53:83:40:a1:81:97:67:99:65:51:fa: 6a:ca:15:9a:c7:05:b0:13:33:33:3e:d7:d0:4b:0a: f9:bf:f7:e3:cf:f5:52:ba:36:58:04:27:1a:09:11: 25:5f:b4:08:4c:27:04:de:ae:c2:9e:cf:83:52:70: a1:78:c3:cf:47:33:50:a2:e4:84:57:f8:1f:0d:24: b9:94:00:83:f0:7e:82:24:ea:6b:a0:d5:ec:38:af: 66:7c:74:16:17:2d:73:4b:a6:6b:14:d7:21:ea:07: 27:96:30:13:16:9b:6b:ba:88:6d:7c:c6:94:30:22: 9b:10:f2:cf:8c:fe:8d:3c:cd:8b:d9:1f:db:cb:ff: b9:ee:c9:a3:a9:a2:53:0b:d9:c2:a3:e1:0f:d2:4d: bc:37:2c:86:a6:2a:98:5f:60:63:f9:d8:93:41:6f: 4a:07:df:50:2b:66:b2:3b:0a:2c:7f:10:11:22:eb: d7:c8:1b:97:cf:c0:2e:d9:c9:5f:0b:76:55:7e:5c: 73:ff:e6:eb:29:07:68:11:61:8d:d8:77:d9:11:44: f8:c1:8c:fc:ac:a7:0f:4d:c4:74:64:55:e2:d9:e2: f6:5d:22:61:21:e0:2c:a6:84:fa:b4:17:de:d8:3c: e1:f1:7d:22:d8:1d:89:68:ea:12:cc:b9:67:63:89: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:98:42:A5:32:F7:92:FD:21:77:37:10:94:E6:1B:4E:B9:02:20 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:88:ec:20:bc:19:05:48:8d:0f:b9:2b:f6:e0:d0:47:f3:e0: 0c:01:d7:5c:fa:ff:e3:89:50:d1:95:b1:67:41:82:20:55:9d: 0c:e5:72:8d:58:f8:7d:48:e9:56:f6:73:82:15:f6:1c:4d:ad: e6:65:ed:75:14:bc:eb:db:86:fb:cb:25:07:07:bc:a9:e2:98: ed:86:dc:45:e3:de:fc:d7:4f:e3:f7:51:1e:3b:16:f3:24:b4: dc:a1:2e:0f:29:9b:1d:a9:c9:91:89:17:01:6a:16:cb:f9:8c: 02:55:56:9a:b3:51:83:f9:71:e9:ae:32:55:d5:5b:e7:de:61: 0d:5c:0c:72:c3:f6:f2:3f:6b:77:e5:a3:f5:31:e6:a8:2e:f5: 91:a6:d7:2c:e3:7e:5b:99:89:5b:4e:c3:97:fd:bd:9f:48:6f: 13:e8:42:35:b9:d5:cf:a2:64:af:e6:fb:b0:a5:13:b7:fc:97: 35:cb:ba:2e:ac:87:40:37:b0:e9:9a:dd:73:d3:14:10:8d:94: 90:35:8b:bd:09:48:6f:6e:5e:ba:7a:59:cf:d6:a5:20:fd:97: c2:61:8f:c3:58:02:cb:bb:3b:39:8d:66:ad:64:5a:be:ae:04: 9e:26:83:72:3a:44:b3:70:ee:4a:7d:5b:59:ee:0a:39:50:12: b3:01:d4:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2XNI/L+Gy983nHApVcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjA2MjEwMDM0WhcNMjUxMjA3MjEwMDM0WjAzMTEwLwYDVQQD EygyMzFlOTg0MmE1MzJmNzkyZmQyMTc3MzcxMDk0ZTYxYjRlYjkwMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs68nU4NAoYGXZ5llUfpqyhWaxwWw EzMzPtfQSwr5v/fjz/VSujZYBCcaCRElX7QITCcE3q7Cns+DUnCheMPPRzNQouSE V/gfDSS5lACD8H6CJOproNXsOK9mfHQWFy1zS6ZrFNch6gcnljATFptruohtfMaU MCKbEPLPjP6NPM2L2R/by/+57smjqaJTC9nCo+EP0k28NyyGpiqYX2Bj+diTQW9K B99QK2ayOwosfxARIuvXyBuXz8Au2clfC3ZVflxz/+brKQdoEWGN2HfZEUT4wYz8 rKcPTcR0ZFXi2eL2XSJhIeAspoT6tBfe2Dzh8X0i2B2JaOoSzLlnY4k4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMemEKlMveS/SF3NxCU5htOuQIgMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANojsILwZ BUiND7kr9uDQR/PgDAHXXPr/44lQ0ZWxZ0GCIFWdDOVyjVj4fUjpVvZzghX2HE2t 5mXtdRS869uG+8slBwe8qeKY7YbcRePe/NdP4/dRHjsW8yS03KEuDymbHanJkYkX AWoWy/mMAlVWmrNRg/lx6a4yVdVb595hDVwMcsP28j9rd+Wj9THmqC71kabXLON+ W5mJW07Dl/29n0hvE+hCNbnVz6Jkr+b7sKUTt/yXNcu6LqyHQDew6Zrdc9MUEI2U kDWLvQlIb25eunpZz9alIP2XwmGPw1gCy7s7OY1mrWRavq4EniaDcjpEs3DuSn1b We4KOVASswHUhw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:30 2025 by rpki-client