This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json) Hash identifier: rmKrXfO1MgNtBF81Wh3+zIsgBzGoptEhhjRgKRACX98= Subject key identifier: 08:35:F6:6D:56:24:06:8B:7C:32:A9:DC:59:F2:60:4A:E0:53:5F:EB Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Certificate serial: 019B495E0E9163067527EB42D2A2E76EA012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft Manifest number: 0BC7 Signing time: Tue 23 Dec 2025 04:00:59 +0000 Manifest this update: Tue 23 Dec 2025 04:00:59 +0000 Manifest next update: Wed 24 Dec 2025 04:00:59 +0000 Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: Ez2p4Ld1cVf8gyJYgZo7FcwgXWEWhCqDni2iTuZGMc8=) 2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:0e:91:63:06:75:27:eb:42:d2:a2:e7:6e:a0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Validity Not Before: Dec 23 04:00:59 2025 GMT Not After : Dec 24 04:00:59 2025 GMT Subject: CN=0835f66d5624068b7c32a9dc59f2604ae0535feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:1c:1c:37:56:0e:d3:c3:0e:71:64:fd:10: dc:13:43:c1:61:03:18:0c:99:31:61:fc:4a:96:84: 2c:50:7d:22:ef:85:34:a9:c1:cd:78:b6:5f:32:f0: ed:40:0e:70:9e:97:95:68:e3:2c:20:d5:44:34:60: 24:68:fc:57:ac:ec:47:b7:8f:f5:35:4d:8e:40:14: da:74:2d:c9:52:fd:8a:dd:25:3c:c0:2c:85:89:32: ca:70:bc:5e:48:84:74:04:6e:72:56:e5:e3:8d:07: 9d:23:b5:b4:07:fd:64:05:7a:d9:b9:de:ff:69:39: be:bf:e0:9f:40:62:f1:d5:7a:1d:61:a1:40:dd:8c: 70:91:66:de:8f:5e:d7:1a:4c:e9:51:95:99:03:9f: 26:3a:5f:0f:ff:63:8e:be:12:de:c6:1b:c6:9f:c9: 5a:07:96:a8:9a:fc:8d:bc:98:91:d6:e9:5b:48:01: 64:91:70:d5:1f:49:40:f1:54:49:9d:4d:39:59:d2: c3:3d:19:f9:c1:8e:36:38:7b:3d:7e:82:2f:87:64: 4e:35:8f:1a:ee:3f:73:28:c8:25:67:6a:db:1b:67: 9b:b2:96:b1:d7:45:c9:b2:57:19:bd:9b:ca:b9:c9: fc:55:3c:c0:b1:96:b5:be:60:14:47:b0:32:b2:47: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:35:F6:6D:56:24:06:8B:7C:32:A9:DC:59:F2:60:4A:E0:53:5F:EB X509v3 Authority Key Identifier: keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:98:f2:20:b7:42:f1:ac:85:22:9c:f4:47:05:53:b1:7a:0a: 39:f5:7b:26:a4:3f:b1:e0:94:fa:13:b8:5c:c2:b1:8d:7c:fb: f2:0e:76:3b:ef:2e:00:2c:4d:2a:0d:e1:b5:2d:11:9c:1c:e4: f5:6f:c8:c7:39:f9:db:fd:cd:ce:f9:03:fb:47:52:dd:2c:4d: 21:8c:65:55:02:a8:41:50:68:eb:cb:a7:df:07:d4:26:cc:ad: 1d:6d:78:f2:6b:ca:1c:b4:ba:b0:23:1d:d6:d6:ee:ef:74:41: ed:03:34:c3:af:da:b1:60:69:d2:ff:90:25:b0:1d:c1:17:78: 60:88:11:58:0e:83:dd:e2:58:cb:fa:80:17:5f:22:d1:55:c5: 17:71:00:c0:a0:2f:8b:23:0f:09:4b:01:1a:ec:8d:15:ce:c1: 41:84:38:27:70:e4:f4:56:73:56:cc:57:e0:5b:75:3f:7d:35: 1e:42:f6:9f:5d:df:0b:66:64:42:05:f4:7e:f3:93:cf:ff:c2: 25:b1:02:f8:e3:2b:44:fb:c4:98:4c:41:87:0b:e3:28:d2:74: 46:3f:5a:09:60:dc:3b:a1:e9:55:f2:23:95:d1:9a:3c:92:ea: 3c:17:69:b7:32:f1:93:83:54:30:06:5e:6d:2b:77:a1:ec:da: bc:71:11:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXg6RYwZ1J+tC0qLnbqASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj OTgxYjYwHhcNMjUxMjIzMDQwMDU5WhcNMjUxMjI0MDQwMDU5WjAzMTEwLwYDVQQD EygwODM1ZjY2ZDU2MjQwNjhiN2MzMmE5ZGM1OWYyNjA0YWUwNTM1ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ4cHDdWDtPDDnFk/RDcE0PBYQMY DJkxYfxKloQsUH0i74U0qcHNeLZfMvDtQA5wnpeVaOMsINVENGAkaPxXrOxHt4/1 NU2OQBTadC3JUv2K3SU8wCyFiTLKcLxeSIR0BG5yVuXjjQedI7W0B/1kBXrZud7/ aTm+v+CfQGLx1XodYaFA3YxwkWbej17XGkzpUZWZA58mOl8P/2OOvhLexhvGn8la B5aomvyNvJiR1ulbSAFkkXDVH0lA8VRJnU05WdLDPRn5wY42OHs9foIvh2RONY8a 7j9zKMglZ2rbG2ebspax10XJslcZvZvKucn8VTzAsZa1vmAUR7AyskcB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg19m1WJAaLfDKp3FnyYErgU1/rMB8GA1UdIwQY MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpjyILdC 8ayFIpz0RwVTsXoKOfV7JqQ/seCU+hO4XMKxjXz78g52O+8uACxNKg3htS0RnBzk 9W/Ixzn52/3NzvkD+0dS3SxNIYxlVQKoQVBo68un3wfUJsytHW148mvKHLS6sCMd 1tbu73RB7QM0w6/asWBp0v+QJbAdwRd4YIgRWA6D3eJYy/qAF18i0VXFF3EAwKAv iyMPCUsBGuyNFc7BQYQ4J3Dk9FZzVsxX4Ft1P301HkL2n13fC2ZkQgX0fvOTz//C JbEC+OMrRPvEmExBhwvjKNJ0Rj9aCWDcO6HpVfIjldGaPJLqPBdptzLxk4NUMAZe bSt3oezavHER+g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:42:07 2025 by rpki-client