This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json) Hash identifier: nIunXJQyhu1p4+zD1q2/mIcXB7Pjhivp1hSAD4NZt1g= Subject key identifier: FF:E3:F8:92:05:5D:FF:04:3C:34:FF:FC:F6:28:2B:32:38:57:94:75 Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Certificate serial: 019B41A48264EBDA387906556FC281F8069F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft Manifest number: 0BC3 Signing time: Sun 21 Dec 2025 16:00:58 +0000 Manifest this update: Sun 21 Dec 2025 16:00:58 +0000 Manifest next update: Mon 22 Dec 2025 16:00:58 +0000 Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: 35vcP2PZY8tfURlDnTVAGwsXTlyNoBSY51cd2CfhQBU=) 2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:82:64:eb:da:38:79:06:55:6f:c2:81:f8:06:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Validity Not Before: Dec 21 16:00:58 2025 GMT Not After : Dec 22 16:00:58 2025 GMT Subject: CN=ffe3f892055dff043c34fffcf6282b3238579475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:b6:2c:89:15:cb:5d:ba:0c:78:8e:93:bd: ea:62:f4:4e:64:86:dc:cc:e8:3c:de:da:0d:0f:a9: 71:ed:1c:3b:3d:77:82:f6:85:ec:7f:b5:d5:da:44: f2:10:c7:12:da:d4:cc:d0:6a:ed:44:dd:bc:2a:8b: 6a:1d:b2:45:62:95:38:9f:31:9f:71:ec:cd:90:6a: ee:0d:97:aa:2d:86:7c:87:b7:ad:9f:c7:45:ca:8c: 54:5d:d8:f3:a0:59:a4:05:a1:bd:2c:c5:5a:5c:95: 7f:97:7c:a0:f0:51:ee:80:6e:cb:43:bf:13:b6:7b: bd:0e:d6:e7:3e:cf:16:9e:1f:18:8d:35:6b:35:13: 0e:7b:ab:61:54:bd:33:b8:bc:c5:5a:b3:a9:04:0e: 8a:b5:60:b3:5f:4d:73:d0:d1:15:45:40:71:d1:69: b4:c2:5e:d4:ef:01:c3:77:f9:56:cf:c6:0c:0c:f6: 98:b1:af:8b:be:d8:8f:f6:54:27:02:d8:37:fc:a6: 1e:ff:56:8d:73:ae:eb:e6:b9:ef:40:6a:36:58:47: 75:b2:5e:b5:cd:89:18:5c:64:23:23:0e:31:bb:e2: b7:6d:bd:a8:7a:5c:b7:f2:56:2c:c3:8a:c4:ba:e5: 5c:e4:42:d4:9f:4c:06:ce:bb:b5:3f:29:48:71:8e: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E3:F8:92:05:5D:FF:04:3C:34:FF:FC:F6:28:2B:32:38:57:94:75 X509v3 Authority Key Identifier: keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:77:de:ff:72:58:6d:a4:2c:4e:cc:27:d4:38:68:59:5a: 74:21:72:1f:79:ec:66:b1:25:46:2d:20:d9:e5:bf:33:82:74: c8:c4:be:87:ec:94:63:cb:d5:61:e3:10:84:a2:95:4f:1a:0b: 9f:75:17:55:1f:08:20:98:da:46:8f:38:bd:86:73:b7:44:b7: 0f:c5:9e:d6:c8:3c:e3:61:38:ab:31:10:9b:7d:20:3d:f8:2c: 0b:ec:73:2b:c1:cb:d5:3d:a9:69:18:bf:d4:49:01:f7:4e:ca: bc:01:a9:68:99:55:0e:b4:36:50:60:88:c8:19:2b:2c:f0:2c: ee:f5:a9:d4:bf:84:07:7f:83:78:09:c3:60:b0:62:e9:01:1e: f2:ce:5b:8b:35:53:93:a2:35:64:5d:c2:90:53:44:00:c1:82: 3b:2c:d4:c3:ab:86:73:1e:d9:1d:9f:93:8c:ab:d2:d0:c6:d0: 61:fa:46:54:d5:e5:72:ea:39:5f:1a:c6:84:57:dc:5c:52:d0: 4e:ca:48:e8:3a:43:bf:9a:01:33:71:9e:4c:13:b5:88:29:3e: 9a:c0:ad:9f:3a:80:e1:bf:89:d8:77:b6:ae:ee:52:5f:73:f5: 22:db:83:43:d5:ec:d7:48:aa:7d:a1:fe:52:70:4f:70:69:95: 54:e4:25:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpIJk69o4eQZVb8KB+AafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj OTgxYjYwHhcNMjUxMjIxMTYwMDU4WhcNMjUxMjIyMTYwMDU4WjAzMTEwLwYDVQQD EyhmZmUzZjg5MjA1NWRmZjA0M2MzNGZmZmNmNjI4MmIzMjM4NTc5NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxO2LIkVy126DHiOk73qYvROZIbc zOg83toND6lx7Rw7PXeC9oXsf7XV2kTyEMcS2tTM0GrtRN28KotqHbJFYpU4nzGf cezNkGruDZeqLYZ8h7etn8dFyoxUXdjzoFmkBaG9LMVaXJV/l3yg8FHugG7LQ78T tnu9DtbnPs8Wnh8YjTVrNRMOe6thVL0zuLzFWrOpBA6KtWCzX01z0NEVRUBx0Wm0 wl7U7wHDd/lWz8YMDPaYsa+LvtiP9lQnAtg3/KYe/1aNc67r5rnvQGo2WEd1sl61 zYkYXGQjIw4xu+K3bb2oely38lYsw4rEuuVc5ELUn0wGzru1PylIcY7PsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/j+JIFXf8EPDT//PYoKzI4V5R1MB8GA1UdIwQY MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmt33v9y WG2kLE7MJ9Q4aFladCFyH3nsZrElRi0g2eW/M4J0yMS+h+yUY8vVYeMQhKKVTxoL n3UXVR8IIJjaRo84vYZzt0S3D8We1sg842E4qzEQm30gPfgsC+xzK8HL1T2paRi/ 1EkB907KvAGpaJlVDrQ2UGCIyBkrLPAs7vWp1L+EB3+DeAnDYLBi6QEe8s5bizVT k6I1ZF3CkFNEAMGCOyzUw6uGcx7ZHZ+TjKvS0MbQYfpGVNXlcuo5XxrGhFfcXFLQ TspI6DpDv5oBM3GeTBO1iCk+msCtnzqA4b+J2He2ru5SX3P1ItuDQ9Xs10iqfaH+ UnBPcGmVVOQlzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:06:23 2025 by rpki-client