This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json) Hash identifier: nZ0C1X42hwIlKfc6YDzi3o5I8AWeEk6k5tOx+vMFxno= Subject key identifier: AD:2E:D2:34:5B:12:C0:97:19:CE:4D:3F:8F:D6:65:BD:30:05:0C:B0 Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Certificate serial: 019B20D04BBDA9E92C301684FACF41F39439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft Manifest number: 0384 Signing time: Mon 15 Dec 2025 07:01:20 +0000 Manifest this update: Mon 15 Dec 2025 07:01:20 +0000 Manifest next update: Tue 16 Dec 2025 07:01:20 +0000 Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: aEz/r5MO5yQu7uotCaqaURGx6KRolH9TfaKBAXyllZQ=) 2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:4b:bd:a9:e9:2c:30:16:84:fa:cf:41:f3:94:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Validity Not Before: Dec 15 07:01:20 2025 GMT Not After : Dec 16 07:01:20 2025 GMT Subject: CN=ad2ed2345b12c09719ce4d3f8fd665bd30050cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:28:a9:8d:74:1d:97:2f:c1:20:62:0e:22: 69:8c:62:77:49:f2:f2:3f:c0:41:23:f8:d4:2b:f0: 41:7a:fa:1b:77:f9:7f:2e:5b:5e:d9:bf:a3:b8:f5: dd:30:68:7d:0f:aa:e5:db:2d:87:3a:6d:53:cb:86: a2:a6:50:49:55:a7:43:8f:eb:6b:ac:cf:0a:09:64: 95:e1:b3:27:19:d9:85:eb:46:e3:17:11:e0:a6:14: 2b:3a:bc:2f:55:4d:50:d7:f1:17:aa:c5:3d:4f:49: 5d:8e:e8:ea:0a:4f:08:a8:b4:ca:e0:64:46:0a:8b: fe:51:40:38:6b:3d:9b:8e:41:19:5d:84:af:d7:22: c4:f2:41:a2:6b:f8:f5:df:10:2f:0a:55:aa:8a:9f: 3b:e1:75:b8:af:1f:f7:00:21:7a:a9:8c:0f:6d:45: ca:16:05:29:34:9f:a4:85:56:c5:03:82:4e:fe:48: 62:42:99:cd:fd:c4:0c:96:8f:f4:64:7d:e4:bf:a1: 4d:78:c1:3e:bf:1d:3e:7d:1f:f8:74:07:67:e0:40: 5e:b0:3b:90:60:90:ac:4e:b7:61:a5:a4:12:f4:3d: 9e:0f:59:2b:51:bf:34:d5:45:33:8c:e7:b9:19:6f: 35:65:f5:fb:98:1a:7a:83:58:7a:b4:c4:55:b6:08: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:D2:34:5B:12:C0:97:19:CE:4D:3F:8F:D6:65:BD:30:05:0C:B0 X509v3 Authority Key Identifier: keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a5:b4:ac:07:5c:eb:05:3f:0c:32:e3:73:fc:fc:9e:5a:d7: 2f:cc:66:dc:8f:4b:e7:08:86:8f:19:4d:e2:ce:0d:32:d9:aa: 8f:92:16:0a:f0:b4:74:aa:91:f1:60:bf:d5:ff:ee:6b:91:29: bf:5e:4c:6d:00:49:d5:22:0b:15:81:5f:4e:b1:2c:7a:bf:73: d2:72:45:56:ac:c7:b1:67:61:d0:44:94:1f:6a:06:0d:20:e7: e1:87:eb:1b:cf:29:5e:f0:b3:b6:9f:c0:62:2e:60:ed:4f:62: 6a:4f:41:d1:36:2b:ae:c0:3c:65:04:50:82:df:83:e6:1f:d4: b5:41:0d:2e:35:50:59:d8:f9:9d:4c:f9:e5:7a:a7:f1:b5:38: 57:c8:44:c1:6b:11:ae:22:19:ed:3d:0c:4a:39:ce:61:15:3b: 24:d1:72:99:b1:5f:c4:c9:31:b2:87:9a:86:4f:bf:45:67:89: 59:f4:a3:5c:14:02:1f:33:96:01:94:63:d8:28:9d:3b:d2:eb: 3c:fc:7d:0d:2b:3a:f3:e2:5f:64:88:25:60:14:e3:1a:c5:fa: 96:7e:9d:36:fd:5f:b9:28:10:4e:0d:6a:a1:34:ce:db:12:8c: e7:42:58:8b:ab:b3:81:c5:a7:dc:0f:2f:fa:c1:44:92:36:42: fd:f6:ab:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0Eu9qeksMBaE+s9B85Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5 NjViOTYwHhcNMjUxMjE1MDcwMTIwWhcNMjUxMjE2MDcwMTIwWjAzMTEwLwYDVQQD EyhhZDJlZDIzNDViMTJjMDk3MTljZTRkM2Y4ZmQ2NjViZDMwMDUwY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxwoqY10HZcvwSBiDiJpjGJ3SfLy P8BBI/jUK/BBevobd/l/Llte2b+juPXdMGh9D6rl2y2HOm1Ty4aiplBJVadDj+tr rM8KCWSV4bMnGdmF60bjFxHgphQrOrwvVU1Q1/EXqsU9T0ldjujqCk8IqLTK4GRG Cov+UUA4az2bjkEZXYSv1yLE8kGia/j13xAvClWqip874XW4rx/3ACF6qYwPbUXK FgUpNJ+khVbFA4JO/khiQpnN/cQMlo/0ZH3kv6FNeME+vx0+fR/4dAdn4EBesDuQ YJCsTrdhpaQS9D2eD1krUb801UUzjOe5GW81ZfX7mBp6g1h6tMRVtgidBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0u0jRbEsCXGc5NP4/WZb0wBQywMB8GA1UdIwQY MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5 LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqW0rAdc 6wU/DDLjc/z8nlrXL8xm3I9L5wiGjxlN4s4NMtmqj5IWCvC0dKqR8WC/1f/ua5Ep v15MbQBJ1SILFYFfTrEser9z0nJFVqzHsWdh0ESUH2oGDSDn4YfrG88pXvCztp/A Yi5g7U9iak9B0TYrrsA8ZQRQgt+D5h/UtUENLjVQWdj5nUz55Xqn8bU4V8hEwWsR riIZ7T0MSjnOYRU7JNFymbFfxMkxsoeahk+/RWeJWfSjXBQCHzOWAZRj2CidO9Lr PPx9DSs68+JfZIglYBTjGsX6ln6dNv1fuSgQTg1qoTTO2xKM50JYi6uzgcWn3A8v +sFEkjZC/farSg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:40:22 2025 by rpki-client