This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json) Hash identifier: y7UEV4rOmhqFUV+9yqe/b4SP3Dq0ZJAVa3Rhf47n/PE= Subject key identifier: D9:79:4F:9D:65:8F:95:12:0E:92:59:3B:00:77:0E:61:30:30:D7:B7 Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5 Certificate serial: 019B3532AF0078CCE090D6DA3DFB5AAB7EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 06:01:12 +0000 Manifest this update: Fri 19 Dec 2025 06:01:12 +0000 Manifest next update: Sat 20 Dec 2025 06:01:12 +0000 Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=) 2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=) 3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: lWcs2Twrqa04WzGp/YEHdPwQZbdmsnzHR4DYVaGveKQ=) 4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:af:00:78:cc:e0:90:d6:da:3d:fb:5a:ab:7e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5 Validity Not Before: Dec 19 06:01:12 2025 GMT Not After : Dec 20 06:01:12 2025 GMT Subject: CN=d9794f9d658f95120e92593b00770e613030d7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:90:9c:cf:8d:90:e7:96:67:2e:e1:40:39: a1:53:e8:e2:f0:47:24:d3:1c:02:b0:b2:1a:b1:bb: c4:32:8d:06:f6:5c:3c:d1:5b:e3:df:92:7f:b6:ed: 52:9e:ea:3e:cc:72:58:8d:1f:2c:c4:d6:c1:13:ca: 59:e1:be:c3:8c:c6:76:3b:19:2c:e5:e7:9d:15:f6: 4e:1f:31:62:34:d9:1d:e4:45:b6:43:be:b9:68:23: 3e:08:4c:66:79:68:c0:ff:85:05:33:48:be:79:5c: 8d:34:3b:a8:4c:7b:14:11:dd:92:ad:1e:15:a3:b9: 94:e6:b8:71:14:cb:6d:02:59:bd:b6:a7:00:6c:3c: bc:40:22:c3:1a:0e:ee:21:ed:c3:18:80:66:34:46: c1:f4:2a:05:ad:89:4f:4c:2f:f6:06:a2:c8:23:22: 15:d2:9e:44:76:5e:09:2b:b0:90:ac:04:18:84:49: f8:20:23:9f:63:fb:96:b0:2f:16:6b:01:a6:57:c7: 07:13:66:7e:7a:84:c4:e4:05:c4:33:6e:a9:37:94: 51:41:52:13:8b:0c:ab:f2:38:6e:6b:a2:e4:ba:bb: dd:f6:2c:b1:8d:08:f2:23:d3:d0:d0:7e:50:fb:bf: e2:73:e0:36:7f:1d:70:2d:fe:78:4d:38:a7:83:cb: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:4F:9D:65:8F:95:12:0E:92:59:3B:00:77:0E:61:30:30:D7:B7 X509v3 Authority Key Identifier: keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b7:68:63:05:75:f5:74:1f:ad:50:2b:84:10:6c:3f:ac:5a: 8b:bb:71:77:e6:50:89:94:10:3d:12:7c:46:93:ee:06:3b:3e: ce:3e:3c:be:63:20:51:db:a9:10:8b:c7:6f:76:8d:38:76:d9: 87:5f:ef:c8:27:c8:3f:0a:e5:a9:e4:02:17:26:0f:17:92:ad: f8:e6:b0:04:18:4a:fd:e1:38:3e:9a:a9:de:82:65:87:0c:4f: b1:a2:92:fa:d5:dc:72:9b:29:ad:af:b5:65:fb:57:6a:fd:ab: be:88:ed:7d:0a:68:df:25:3e:72:cf:bc:b3:d8:c0:cf:c5:f2: 48:63:95:04:c9:fe:23:dd:1b:87:05:2f:11:24:05:d5:cd:28: 6a:5f:72:49:38:89:89:2e:1b:38:8d:e5:1d:29:ad:d0:01:58: df:29:a7:85:d2:cf:32:4d:89:d5:ea:30:4f:64:98:08:2b:83: e8:c2:bc:bd:5a:70:6f:64:95:e1:f9:fb:70:a4:14:ae:3e:a3: 19:2b:1d:04:8c:d4:04:79:21:65:b7:4e:7a:9a:2d:99:f1:79: d5:42:de:b0:ba:76:1a:6e:d0:60:0e:2a:11:bb:ab:d1:d6:80: a0:7b:bf:1a:91:0e:e9:ba:f4:d1:7c:d7:e9:ff:99:d5:2e:9e: a6:f9:1e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mq8AeMzgkNbaPftaq37dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1 YTNlZDUwHhcNMjUxMjE5MDYwMTEyWhcNMjUxMjIwMDYwMTEyWjAzMTEwLwYDVQQD EyhkOTc5NGY5ZDY1OGY5NTEyMGU5MjU5M2IwMDc3MGU2MTMwMzBkN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2euQnM+NkOeWZy7hQDmhU+ji8Eck 0xwCsLIasbvEMo0G9lw80Vvj35J/tu1Snuo+zHJYjR8sxNbBE8pZ4b7DjMZ2Oxks 5eedFfZOHzFiNNkd5EW2Q765aCM+CExmeWjA/4UFM0i+eVyNNDuoTHsUEd2SrR4V o7mU5rhxFMttAlm9tqcAbDy8QCLDGg7uIe3DGIBmNEbB9CoFrYlPTC/2BqLIIyIV 0p5Edl4JK7CQrAQYhEn4ICOfY/uWsC8WawGmV8cHE2Z+eoTE5AXEM26pN5RRQVIT iwyr8jhua6Lkurvd9iyxjQjyI9PQ0H5Q+7/ic+A2fx1wLf54TTing8uk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl5T51lj5USDpJZOwB3DmEwMNe3MB8GA1UdIwQY MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLdoYwV1 9XQfrVArhBBsP6xai7txd+ZQiZQQPRJ8RpPuBjs+zj48vmMgUdupEIvHb3aNOHbZ h1/vyCfIPwrlqeQCFyYPF5Kt+OawBBhK/eE4Ppqp3oJlhwxPsaKS+tXccpspra+1 ZftXav2rvojtfQpo3yU+cs+8s9jAz8XySGOVBMn+I90bhwUvESQF1c0oal9ySTiJ iS4bOI3lHSmt0AFY3ymnhdLPMk2J1eowT2SYCCuD6MK8vVpwb2SV4fn7cKQUrj6j GSsdBIzUBHkhZbdOepotmfF51ULesLp2Gm7QYA4qEbur0daAoHu/GpEO6br00XzX 6f+Z1S6epvkesg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:48:12 2025 by rpki-client