This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json) Hash identifier: XVP4Oq4lrv/d02//YeX5LCEdYxeYgulti4bajn8W48s= Subject key identifier: EF:6D:00:CB:F0:B9:01:20:EA:2E:79:B3:3F:72:B1:DF:A9:70:B1:A3 Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334 Certificate serial: 019B47A6A8A1B78A6E5E86C18C9CF34491E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft Manifest number: 0C1D Signing time: Mon 22 Dec 2025 20:01:03 +0000 Manifest this update: Mon 22 Dec 2025 20:01:03 +0000 Manifest next update: Tue 23 Dec 2025 20:01:03 +0000 Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: RGvxMvc876mXLnKuRnjywR2CQBLQdZrayFIecy0olIo=) 2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:a8:a1:b7:8a:6e:5e:86:c1:8c:9c:f3:44:91:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334 Validity Not Before: Dec 22 20:01:03 2025 GMT Not After : Dec 23 20:01:03 2025 GMT Subject: CN=ef6d00cbf0b90120ea2e79b33f72b1dfa970b1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:6d:f4:58:80:6f:76:a5:66:8e:bc:3c:ce: 5e:7d:9f:8e:1c:ce:34:ca:78:e0:83:7f:85:4c:f9: 6b:b6:e5:20:7c:86:32:22:52:48:76:dd:ad:20:c6: 68:48:c1:cb:12:54:9f:33:b5:a2:5f:ea:15:b0:94: 7c:c6:11:85:75:2c:ad:35:72:05:2a:0c:bf:bb:77: 33:f4:31:19:3b:3a:f7:fe:77:cf:46:94:0d:33:d3: f0:98:f1:c8:3d:ef:9b:b6:2a:f3:0d:e8:71:97:fa: e2:e8:6b:dc:73:ab:d4:2f:8b:6d:13:6b:53:58:11: b5:25:c1:6c:d3:83:4b:ac:11:01:7a:97:d8:5f:dd: 81:10:f4:59:58:3a:01:dc:3f:5d:cd:5e:3e:de:ef: 09:c8:8e:bd:ef:e4:3c:06:ca:b6:34:92:49:62:2f: 05:82:b0:17:75:97:94:16:0d:75:94:9a:da:d1:4c: c3:5e:9d:2e:8a:55:20:a4:82:f9:0b:9e:ec:78:ac: 20:5f:30:89:15:e9:4e:cf:9b:d2:f8:0e:00:9d:b7: fa:8e:50:ca:7f:9d:5e:f3:46:b2:68:dc:4f:fe:80: d0:c6:98:76:5d:28:7f:2f:79:43:7a:40:7b:cd:10: a2:54:96:a5:11:7a:8f:f5:f8:a3:91:df:f0:17:1f: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6D:00:CB:F0:B9:01:20:EA:2E:79:B3:3F:72:B1:DF:A9:70:B1:A3 X509v3 Authority Key Identifier: keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1c:99:87:9b:06:e2:0c:b1:41:c9:f9:b1:aa:3f:f4:78:61: 00:7a:f6:13:4f:58:83:52:f1:dd:dd:63:06:c3:4d:55:77:e1: 80:c8:cc:85:c3:63:60:d9:cb:cc:e8:75:e6:9d:c5:1d:c7:f4: ed:48:c8:0c:8b:ac:47:05:0b:90:14:0f:a7:c6:54:bd:53:41: 64:ae:3d:5c:de:92:49:0f:82:a2:dc:27:e5:15:0b:04:47:94: a5:f0:d6:1c:b8:dd:72:23:43:b2:cb:a8:2d:47:1b:ec:35:49: 66:ab:58:9d:3f:32:30:0e:5b:4b:81:7f:17:6e:ec:87:1c:20: 83:00:1b:2b:56:19:69:96:e1:db:1d:e5:0f:5d:fa:e9:89:f4: 97:56:16:eb:ec:6a:53:c2:cd:83:dd:dd:0d:e7:b1:97:5d:0f: 6a:e6:fe:11:9a:6c:25:83:17:65:5d:20:1f:70:72:96:e1:8a: da:a0:55:3e:cc:41:3d:4d:6b:13:83:ee:64:58:71:d1:f9:24: 7b:d2:81:26:07:86:b6:56:af:a2:dc:5a:29:d6:c0:4a:0b:65: 80:97:9c:be:1c:b6:a8:19:f9:de:b0:5e:2d:cf:c8:59:17:00: e3:68:e3:0d:f7:9b:62:33:c7:e9:c8:df:a9:20:2b:ad:81:9d: 89:b1:98:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpqiht4puXobBjJzzRJHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiODBlZGQ0MjUwNTA4NjVlYWZiYTgwODlkYjlkYTNmMzUx OWIzMzQwHhcNMjUxMjIyMjAwMTAzWhcNMjUxMjIzMjAwMTAzWjAzMTEwLwYDVQQD EyhlZjZkMDBjYmYwYjkwMTIwZWEyZTc5YjMzZjcyYjFkZmE5NzBiMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg65t9FiAb3alZo68PM5efZ+OHM40 ynjgg3+FTPlrtuUgfIYyIlJIdt2tIMZoSMHLElSfM7WiX+oVsJR8xhGFdSytNXIF Kgy/u3cz9DEZOzr3/nfPRpQNM9PwmPHIPe+btirzDehxl/ri6Gvcc6vUL4ttE2tT WBG1JcFs04NLrBEBepfYX92BEPRZWDoB3D9dzV4+3u8JyI697+Q8Bsq2NJJJYi8F grAXdZeUFg11lJra0UzDXp0uilUgpIL5C57seKwgXzCJFelOz5vS+A4Anbf6jlDK f51e80ayaNxP/oDQxph2XSh/L3lDekB7zRCiVJalEXqP9fijkd/wFx/YwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9tAMvwuQEg6i55sz9ysd+pcLGjMB8GA1UdIwQY MBaAFDuA7dQlBQhl6vuoCJ252j81GbM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMt YzcxNjFkYzVjMDg3LzEvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMtYzcxNjFkYzVjMDg3 LzEvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRyZh5sG 4gyxQcn5sao/9HhhAHr2E09Yg1Lx3d1jBsNNVXfhgMjMhcNjYNnLzOh15p3FHcf0 7UjIDIusRwULkBQPp8ZUvVNBZK49XN6SSQ+Cotwn5RULBEeUpfDWHLjdciNDssuo LUcb7DVJZqtYnT8yMA5bS4F/F27shxwggwAbK1YZaZbh2x3lD1366Yn0l1YW6+xq U8LNg93dDeexl10Paub+EZpsJYMXZV0gH3ByluGK2qBVPsxBPU1rE4PuZFhx0fkk e9KBJgeGtlavotxaKdbASgtlgJecvhy2qBn53rBeLc/IWRcA42jjDfebYjPH6cjf qSArrYGdibGYLQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:15:29 2025 by rpki-client