This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json) Hash identifier: 16aNciashiECwQvTNxj80QHahOowD4imJr6Fh9l7dB0= Subject key identifier: 69:66:37:92:88:A3:6A:2C:01:D5:63:81:7F:F2:B7:3E:85:9C:B6:DB Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722 Certificate serial: 019B43C9B22492A2E5B52974A323A0CC1FB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft Manifest number: 0AB7 Signing time: Mon 22 Dec 2025 02:00:50 +0000 Manifest this update: Mon 22 Dec 2025 02:00:50 +0000 Manifest next update: Tue 23 Dec 2025 02:00:50 +0000 Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=) 2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: NZoDrkCBK3X/czy0GVlh+hsL+wKrk/6PS/9RkzjQK0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:b2:24:92:a2:e5:b5:29:74:a3:23:a0:cc:1f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722 Validity Not Before: Dec 22 02:00:50 2025 GMT Not After : Dec 23 02:00:50 2025 GMT Subject: CN=6966379288a36a2c01d563817ff2b73e859cb6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:8c:32:ac:db:b2:07:49:5d:c8:9c:bd:44: dd:5f:c5:46:7f:55:d8:05:f9:10:d5:13:ce:82:ae: b2:ed:37:7f:14:be:46:92:83:a5:07:7e:a7:31:90: 9f:dc:65:c1:e2:f8:5b:71:d8:68:82:88:d5:5f:fb: 1d:64:e3:3b:c2:ab:ec:8f:77:4a:03:f0:f6:46:38: dc:5a:fa:e6:10:f7:1c:02:d7:e8:c3:ce:56:0f:19: ea:37:95:4a:9e:d1:78:c8:d5:c5:f9:cc:aa:5c:49: 76:17:a5:d9:a9:ab:70:64:8d:0c:01:17:6c:50:db: 35:0f:36:aa:9d:84:63:58:90:59:09:19:57:a8:1f: 20:03:62:6c:cf:89:bd:8b:c1:d4:56:ef:75:e0:01: c4:1b:68:27:39:e7:8f:40:24:fc:dd:d1:4f:3c:58: 65:6d:5c:66:85:4c:19:df:9c:a0:3c:3a:4f:5a:8d: 78:20:6d:52:40:a2:89:56:ac:0f:a2:c5:65:ae:1f: a1:0f:f0:77:d2:77:d6:8a:20:af:58:0c:00:88:ef: f8:ba:03:f9:70:4a:5a:56:b5:f0:65:d7:42:64:33: 31:c8:d3:ea:73:4a:fe:43:18:30:11:fe:7b:ca:b2: 59:2e:6d:7c:6e:88:5d:c3:36:4b:ca:23:c5:42:b0: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:66:37:92:88:A3:6A:2C:01:D5:63:81:7F:F2:B7:3E:85:9C:B6:DB X509v3 Authority Key Identifier: keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:7c:c4:98:97:15:b5:6f:a2:96:0c:0c:49:38:d6:ad:13: 6d:03:14:1f:bf:34:23:6f:37:91:2e:8a:3d:46:65:af:90:5b: 2e:ce:cd:aa:34:ed:ea:55:06:e0:50:cf:ff:43:6c:a3:68:92: 6f:b0:29:ba:7b:e2:8e:58:60:ed:29:84:5e:ec:c0:bc:56:9a: 02:fe:9b:cf:13:af:2a:87:b5:51:17:97:25:59:df:bb:70:3f: ea:3f:c1:53:15:8f:ad:48:8b:4d:f7:ef:f9:7d:e1:5d:99:5e: 63:1e:4d:75:1d:ce:d9:14:0c:f9:c5:e8:5f:d0:3a:1b:ab:80: 98:05:97:58:6c:8c:f1:c0:fd:88:7e:3f:5f:e1:2d:bd:5b:74: 4f:ef:5e:97:59:b0:c3:d1:5a:be:6a:71:76:b8:e0:76:20:e5: e0:81:5c:7b:fe:99:47:f9:ae:da:46:1b:89:73:39:a9:08:11: a2:29:13:21:b5:99:70:36:af:4d:c6:b4:90:4d:c5:f7:82:3f: 88:61:f4:9a:3d:57:ea:8e:ea:40:c3:d5:eb:ea:eb:97:a1:57: d7:2d:ca:9f:63:a9:91:c3:c8:2e:0c:de:d4:4c:a4:49:89:9d: 5b:66:d4:e5:1b:7e:49:f7:6b:2f:29:77:20:0d:1e:07:37:8b: 3f:ad:7c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDybIkkqLltSl0oyOgzB+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzI0NDM0OGU3MWVjMWJlNWY1MDA3YzhkNWVmZTcxMjU5 MjA3MjIwHhcNMjUxMjIyMDIwMDUwWhcNMjUxMjIzMDIwMDUwWjAzMTEwLwYDVQQD Eyg2OTY2Mzc5Mjg4YTM2YTJjMDFkNTYzODE3ZmYyYjczZTg1OWNiNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzOMMqzbsgdJXcicvUTdX8VGf1XY BfkQ1RPOgq6y7Td/FL5GkoOlB36nMZCf3GXB4vhbcdhogojVX/sdZOM7wqvsj3dK A/D2RjjcWvrmEPccAtfow85WDxnqN5VKntF4yNXF+cyqXEl2F6XZqatwZI0MARds UNs1DzaqnYRjWJBZCRlXqB8gA2Jsz4m9i8HUVu914AHEG2gnOeePQCT83dFPPFhl bVxmhUwZ35ygPDpPWo14IG1SQKKJVqwPosVlrh+hD/B30nfWiiCvWAwAiO/4ugP5 cEpaVrXwZddCZDMxyNPqc0r+QxgwEf57yrJZLm18bohdwzZLyiPFQrAJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlmN5KIo2osAdVjgX/ytz6FnLbbMB8GA1UdIwQY MBaAFKNyRDSOcewb5fUAfI1e/nElkgciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzct ODg1MmE1MzJhZDQ1LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzctODg1MmE1MzJhZDQ1 LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8V8xJiX FbVvopYMDEk41q0TbQMUH780I283kS6KPUZlr5BbLs7NqjTt6lUG4FDP/0Nso2iS b7Apunvijlhg7SmEXuzAvFaaAv6bzxOvKoe1UReXJVnfu3A/6j/BUxWPrUiLTffv +X3hXZleYx5NdR3O2RQM+cXoX9A6G6uAmAWXWGyM8cD9iH4/X+EtvVt0T+9el1mw w9FavmpxdrjgdiDl4IFce/6ZR/mu2kYbiXM5qQgRoikTIbWZcDavTca0kE3F94I/ iGH0mj1X6o7qQMPV6+rrl6FX1y3Kn2OpkcPILgze1EykSYmdW2bU5Rt+SfdrLyl3 IA0eBzeLP618Mg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:08 2025 by rpki-client