This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json) Hash identifier: G7ns2wjg1oIY64mAocG9VWmvgxVPZvEGEgnATHpAD0c= Subject key identifier: 0A:DB:7A:2D:78:42:03:FC:85:C6:BA:42:63:16:99:83:D9:FE:77:6A Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Certificate serial: 019B5A1B05FE4F2F444A61B48D85A9912C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft Manifest number: 010D Signing time: Fri 26 Dec 2025 10:01:18 +0000 Manifest this update: Fri 26 Dec 2025 10:01:18 +0000 Manifest next update: Sat 27 Dec 2025 10:01:18 +0000 Files and hashes: 1: QBmdu5DezxoxKGOkAZGRTHz_Ovo.roa (hash: FxhiZR0M8vGdibBrIWA/GLd0J4VZN3IOW0ocA5RR3YQ=) 2: iVyiZxwev_wYI7BNU3e008G4zfk.roa (hash: 8qCaR6UbT2VINv7ijvxNhHg8ECE+Q7GiqaPlqabo5mM=) 3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: r3Yvk8U1k2nYvecx/qr8S4WPPeunuiKR8RYKsSLqkmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:05:fe:4f:2f:44:4a:61:b4:8d:85:a9:91:2c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19 Validity Not Before: Dec 26 10:01:18 2025 GMT Not After : Dec 27 10:01:18 2025 GMT Subject: CN=0adb7a2d784203fc85c6ba4263169983d9fe776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:5d:89:5b:b2:aa:89:69:f6:cf:c7:30:a8: 5e:8c:f9:32:b8:8e:61:e0:9f:54:58:9e:9c:93:84: 55:d0:1b:43:8b:9e:9c:bc:88:ba:01:81:e6:45:d8: e2:b1:55:50:f7:3a:dd:9b:17:f3:b2:0a:0d:5d:88: f2:85:6b:27:a9:6e:11:2b:25:04:80:8f:73:1b:3d: 09:55:5a:bc:80:52:c1:c4:5e:20:69:21:a0:4e:43: d0:46:4b:d0:cb:3b:b6:dc:d6:68:e8:f3:c7:4c:06: 51:59:0a:f2:5a:e4:5f:ca:88:fa:76:91:7b:d0:4f: e5:9f:e8:e2:6f:a2:93:a1:c4:62:63:46:bb:30:a6: f2:0e:39:08:db:ee:34:db:20:e4:e3:6e:67:fc:a2: 2b:7f:96:83:9f:3c:4e:10:aa:04:13:14:8b:0e:ab: 30:50:a1:51:58:07:5d:8b:61:6c:a9:ee:ff:94:94: d9:e5:1b:41:2d:a2:2f:49:4a:fb:e9:ad:71:7a:a3: e8:cc:81:60:49:da:74:64:95:df:81:0b:dc:6c:08: e6:be:5f:f6:9c:3b:b6:2e:f5:6e:14:10:4c:a8:cd: b2:a5:69:84:91:bc:8d:15:fc:29:f3:43:82:3f:51: de:68:67:ea:5f:36:a4:8e:62:2c:99:ad:b9:5a:25: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:7A:2D:78:42:03:FC:85:C6:BA:42:63:16:99:83:D9:FE:77:6A X509v3 Authority Key Identifier: keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e5:ca:e3:f8:60:f0:76:3a:fc:da:ea:71:43:4a:87:50:c8: 4b:f8:d9:03:5f:fb:7f:d7:9a:9a:c1:d7:c4:ac:ae:28:ef:f2: 92:12:8d:55:1c:c7:3d:bb:89:da:5a:4b:4f:2f:9e:f6:13:e0: 99:e9:a4:7a:4c:19:97:eb:e8:bf:08:de:d9:7c:e6:f4:ab:69: 6e:69:86:fc:76:c7:e4:70:6a:c5:8c:7e:80:57:29:69:4b:6d: 7a:83:ee:49:af:49:c1:8e:92:f0:b6:95:22:2f:3b:7a:19:86: 86:f7:87:ad:ba:3a:07:e5:e5:dd:ae:58:a9:03:8a:79:49:fe: c7:15:a6:7a:f9:c8:21:6b:27:69:fd:76:f2:5f:54:c7:b2:24: 36:85:76:3d:40:68:f1:c4:58:05:53:65:88:04:49:22:fa:ee: 74:e3:ff:9f:87:8c:05:24:55:7f:88:d6:e2:4f:92:ae:eb:11: 65:4b:d2:17:15:15:d7:0c:6c:5e:f5:8e:74:a1:ca:c5:a6:0d: 77:73:55:7e:49:7c:27:5b:68:7e:dd:70:90:2b:56:30:84:9b: e3:fa:bb:62:8a:01:9d:41:f3:88:4b:5e:02:ba:bb:44:e0:00: 83:a4:34:d2:b6:77:63:0d:64:a9:c4:a1:3e:59:d9:38:b2:06: 25:92:52:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwX+Ty9ESmG0jYWpkSyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWE2NjBkZGI2MTAwZTdkMzJlNWQzNjY4OWE3NzdjYTlj YWZhMTkwHhcNMjUxMjI2MTAwMTE4WhcNMjUxMjI3MTAwMTE4WjAzMTEwLwYDVQQD EygwYWRiN2EyZDc4NDIwM2ZjODVjNmJhNDI2MzE2OTk4M2Q5ZmU3NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0tdiVuyqolp9s/HMKhejPkyuI5h 4J9UWJ6ck4RV0BtDi56cvIi6AYHmRdjisVVQ9zrdmxfzsgoNXYjyhWsnqW4RKyUE gI9zGz0JVVq8gFLBxF4gaSGgTkPQRkvQyzu23NZo6PPHTAZRWQryWuRfyoj6dpF7 0E/ln+jib6KTocRiY0a7MKbyDjkI2+402yDk425n/KIrf5aDnzxOEKoEExSLDqsw UKFRWAddi2Fsqe7/lJTZ5RtBLaIvSUr76a1xeqPozIFgSdp0ZJXfgQvcbAjmvl/2 nDu2LvVuFBBMqM2ypWmEkbyNFfwp80OCP1HeaGfqXzakjmIsma25WiUPjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArbei14QgP8hca6QmMWmYPZ/ndqMB8GA1UdIwQY MBaAFKTqZg3bYQDn0y5dNmiad3ypyvoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEt NmY2MjJmZDE4ZDMwLzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEtNmY2MjJmZDE4ZDMw LzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeXK4/hg 8HY6/NrqcUNKh1DIS/jZA1/7f9eamsHXxKyuKO/ykhKNVRzHPbuJ2lpLTy+e9hPg memkekwZl+vovwje2Xzm9KtpbmmG/HbH5HBqxYx+gFcpaUtteoPuSa9JwY6S8LaV Ii87ehmGhveHrbo6B+Xl3a5YqQOKeUn+xxWmevnIIWsnaf128l9Ux7IkNoV2PUBo 8cRYBVNliARJIvrudOP/n4eMBSRVf4jW4k+SrusRZUvSFxUV1wxsXvWOdKHKxaYN d3NVfkl8J1toft1wkCtWMISb4/q7YooBnUHziEteArq7ROAAg6Q00rZ3Yw1kqcSh PlnZOLIGJZJSsQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:43 2025 by rpki-client