This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json) Hash identifier: nuYoklI1JO88764iHFeU3BZIfDt66nkcFjAc1+Bc1GM= Subject key identifier: 20:6E:4F:4B:6D:14:B9:EA:33:B1:B4:B8:34:E3:EB:64:42:A9:8F:A2 Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468 Certificate serial: 019B1B3C46CE348B2622A0F78405E62E0BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft Manifest number: 03CA Signing time: Sun 14 Dec 2025 05:01:33 +0000 Manifest this update: Sun 14 Dec 2025 05:01:33 +0000 Manifest next update: Mon 15 Dec 2025 05:01:33 +0000 Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=) 2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: Qj/l+VNzS3iSq3k20ONrbOmKPx1BFGF6oviYMAGM/u0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:46:ce:34:8b:26:22:a0:f7:84:05:e6:2e:0b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468 Validity Not Before: Dec 14 05:01:33 2025 GMT Not After : Dec 15 05:01:33 2025 GMT Subject: CN=206e4f4b6d14b9ea33b1b4b834e3eb6442a98fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:e5:ce:86:3c:82:c6:f4:e1:f1:50:9b:42: 7f:a0:18:66:32:cb:ce:31:e2:86:a4:c6:40:3e:94: b8:db:e7:1d:54:7f:38:87:1e:b5:a3:19:6a:34:a4: 4a:31:ea:5a:e6:df:46:c0:dd:99:1f:84:ea:70:6f: 4d:a1:99:e3:dd:7f:a2:4e:34:9c:fd:40:76:25:95: 2b:a5:74:41:fe:8c:e4:1b:11:5a:55:fa:a3:ac:d2: a1:21:70:6f:f2:8a:55:01:9b:8a:b7:4f:71:de:d0: 04:27:6c:e0:e2:ea:d7:f1:92:43:d3:ea:74:52:f8: 2c:47:3b:e0:96:ca:c8:89:50:bd:ca:a0:92:59:24: 45:db:f3:1d:eb:db:9f:f8:5c:67:16:ee:78:87:18: 53:f2:1e:f8:00:9b:7b:af:35:a9:43:41:9f:86:5c: ae:8e:22:97:15:71:3a:a5:a5:b0:d0:de:fa:0b:16: 64:61:ad:6b:eb:84:59:f6:00:ec:0b:bb:a3:79:34: c6:50:a1:9f:42:20:5b:94:9d:de:78:a2:51:fd:61: 54:9d:69:3a:52:d2:40:40:77:ee:78:0c:c5:4f:26: 01:69:07:c0:37:1a:fd:d5:02:53:14:c2:a3:d7:87: e0:c6:5e:fe:63:66:4a:e5:72:4d:75:40:74:33:ce: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:4F:4B:6D:14:B9:EA:33:B1:B4:B8:34:E3:EB:64:42:A9:8F:A2 X509v3 Authority Key Identifier: keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ad:51:4a:19:dc:72:68:c0:4c:5c:e6:47:84:ec:a4:ff:b4: 87:f6:b3:6b:ea:18:c6:dd:23:61:e5:ba:bc:f7:6f:c0:c3:16: 1f:6d:09:23:0e:cf:30:9a:87:91:9c:d7:85:df:38:88:6b:72: 51:39:84:71:c8:61:c9:64:55:e8:85:7a:19:ba:b4:2e:97:5c: 1c:69:40:f0:94:c6:30:ce:60:d6:b6:b2:66:61:03:d5:74:3a: 87:45:78:cf:a4:d6:8c:60:06:7e:4b:05:2d:d4:27:89:52:44: 77:79:c5:0c:16:32:94:e0:a8:40:85:e6:5b:81:20:f7:67:c3: 2d:d7:60:cb:f5:d2:4c:51:54:85:2a:f3:7f:dc:79:83:66:59: c2:01:e9:c6:76:be:12:81:7b:0b:8e:80:ed:24:21:22:42:6d: e6:3c:92:56:ce:71:96:3b:c1:e8:77:45:89:e8:94:8b:2f:f8: 5a:5e:0d:97:f5:cf:fc:13:30:b2:72:f8:39:eb:46:bd:06:05: 47:4c:db:43:f4:45:f4:5b:73:e3:d1:5e:5c:cc:89:b0:71:bc: 3b:43:95:a4:73:3f:48:19:5a:5f:70:eb:43:76:3d:9c:01:f8: 06:43:cc:33:c5:7e:9e:09:36:ea:6e:19:56:44:a4:58:a8:c2: 2b:9c:c3:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPEbONIsmIqD3hAXmLgu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz NzE0NjgwHhcNMjUxMjE0MDUwMTMzWhcNMjUxMjE1MDUwMTMzWjAzMTEwLwYDVQQD EygyMDZlNGY0YjZkMTRiOWVhMzNiMWI0YjgzNGUzZWI2NDQyYTk4ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmDlzoY8gsb04fFQm0J/oBhmMsvO MeKGpMZAPpS42+cdVH84hx61oxlqNKRKMepa5t9GwN2ZH4TqcG9NoZnj3X+iTjSc /UB2JZUrpXRB/ozkGxFaVfqjrNKhIXBv8opVAZuKt09x3tAEJ2zg4urX8ZJD0+p0 UvgsRzvglsrIiVC9yqCSWSRF2/Md69uf+FxnFu54hxhT8h74AJt7rzWpQ0Gfhlyu jiKXFXE6paWw0N76CxZkYa1r64RZ9gDsC7ujeTTGUKGfQiBblJ3eeKJR/WFUnWk6 UtJAQHfueAzFTyYBaQfANxr91QJTFMKj14fgxl7+Y2ZK5XJNdUB0M86etQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBuT0ttFLnqM7G0uDTj62RCqY+iMB8GA1UdIwQY MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0 LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa1RShnc cmjATFzmR4TspP+0h/aza+oYxt0jYeW6vPdvwMMWH20JIw7PMJqHkZzXhd84iGty UTmEcchhyWRV6IV6Gbq0LpdcHGlA8JTGMM5g1rayZmED1XQ6h0V4z6TWjGAGfksF LdQniVJEd3nFDBYylOCoQIXmW4Eg92fDLddgy/XSTFFUhSrzf9x5g2ZZwgHpxna+ EoF7C46A7SQhIkJt5jySVs5xljvB6HdFieiUiy/4Wl4Nl/XP/BMwsnL4OetGvQYF R0zbQ/RF9Ftz49FeXMyJsHG8O0OVpHM/SBlaX3DrQ3Y9nAH4BkPMM8V+ngk26m4Z VkSkWKjCK5zDPg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:16:25 2025 by rpki-client