This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json) Hash identifier: GEMFNtUHgN8x7HlNxU85xxPPwZRt2rCJoMYBZk+yajQ= Subject key identifier: F3:1E:4F:7A:B8:6C:9C:C4:EB:15:61:24:C7:33:89:E7:4A:E4:77:E3 Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5 Certificate serial: 019B37211AD6002F85474F1776745A165E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 15:01:14 +0000 Manifest this update: Fri 19 Dec 2025 15:01:14 +0000 Manifest next update: Sat 20 Dec 2025 15:01:14 +0000 Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=) 2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=) 3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: fDHIgOqrAnj+HAR0N5CikUZe+R1kmo3GLWRx2WRPC/0=) 4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:1a:d6:00:2f:85:47:4f:17:76:74:5a:16:5e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5 Validity Not Before: Dec 19 15:01:14 2025 GMT Not After : Dec 20 15:01:14 2025 GMT Subject: CN=f31e4f7ab86c9cc4eb156124c73389e74ae477e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:ed:a0:82:86:50:ce:07:82:b9:f0:99:53: 23:91:59:b3:01:66:28:1a:b6:96:34:0c:23:73:ff: d1:9b:2a:9a:ad:7f:2a:ab:4f:ce:52:b6:3d:83:f6: a3:59:b6:72:07:aa:49:2f:51:ad:f9:3f:5e:a4:96: dc:02:dd:b0:f2:f3:f6:da:d5:7e:40:25:3c:ec:df: a7:55:11:59:a0:9e:cd:89:dd:37:2b:61:1a:be:97: f2:9a:25:96:ca:68:c0:d0:ce:8f:7f:08:33:ce:73: 2a:5c:d4:39:16:dc:ee:f0:1e:68:04:0f:74:97:9a: 74:b2:5d:e2:27:d8:11:1a:f8:5a:85:72:1e:16:3b: 53:f5:81:83:37:a8:92:2f:d1:57:49:98:3e:6d:96: 73:6a:31:7b:60:df:a0:c8:97:22:59:f1:c0:3d:0a: 78:79:81:fb:46:4c:c2:78:ae:e0:9e:29:1a:40:4a: f0:c1:90:76:91:a6:e6:8d:b4:a3:86:b9:cc:78:43: d0:c8:fb:6e:f8:f9:90:f5:f0:8f:69:bd:ac:b9:75: 14:9c:87:05:7f:e2:dd:77:35:80:f0:02:8d:84:8f: cf:1f:59:37:83:ae:fb:96:57:2e:63:f6:88:7d:72: bf:86:a6:d9:70:b4:ff:f1:15:83:e8:4d:1a:24:57: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:4F:7A:B8:6C:9C:C4:EB:15:61:24:C7:33:89:E7:4A:E4:77:E3 X509v3 Authority Key Identifier: keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:51:62:8b:92:05:1d:51:33:4c:c3:e8:1b:27:2b:b9:f1:34: 23:b0:fb:97:52:23:d2:ba:78:26:9d:b1:f2:f0:09:e7:78:f4: 7a:8b:8e:35:ed:09:98:7a:b0:ba:f4:c5:84:44:75:77:9a:f6: 0e:cb:d0:7e:9d:87:35:fa:48:7b:b2:70:41:cb:89:02:87:e9: 48:7e:81:fc:54:cb:ee:8b:98:6d:0f:74:eb:a8:2e:96:4d:89: 0e:2f:c9:cf:0d:c3:43:d2:92:18:28:b6:4f:08:2c:40:e6:5e: 2e:c8:b1:20:cc:a8:4e:74:2a:f8:56:24:21:0f:ae:5b:c5:9f: a3:64:dc:5b:14:87:42:11:14:46:78:b1:ca:7e:8f:b3:d5:e9: 9c:cd:46:cf:77:47:6a:28:89:93:e1:49:94:ef:49:a0:87:b0: 8a:6c:b6:e3:96:46:f6:e4:76:56:5a:7c:84:5b:e1:ec:6c:84: 77:ef:30:50:18:e9:2d:f6:2e:75:0d:9e:e7:d2:11:4c:da:56: 2f:bb:b2:34:51:e1:23:d7:d3:19:a0:5f:41:aa:ab:2a:cc:20: e1:fa:c5:57:c1:00:a0:62:cc:89:e0:70:ab:ca:4e:88:a4:73: d0:4c:e9:48:1c:6c:2a:45:46:82:b4:2b:05:5c:b5:06:58:62: 0a:50:84:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IRrWAC+FR08XdnRaFl5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1 YTNlZDUwHhcNMjUxMjE5MTUwMTE0WhcNMjUxMjIwMTUwMTE0WjAzMTEwLwYDVQQD EyhmMzFlNGY3YWI4NmM5Y2M0ZWIxNTYxMjRjNzMzODllNzRhZTQ3N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4LtoIKGUM4HgrnwmVMjkVmzAWYo GraWNAwjc//RmyqarX8qq0/OUrY9g/ajWbZyB6pJL1Gt+T9epJbcAt2w8vP22tV+ QCU87N+nVRFZoJ7Nid03K2EavpfymiWWymjA0M6PfwgzznMqXNQ5Ftzu8B5oBA90 l5p0sl3iJ9gRGvhahXIeFjtT9YGDN6iSL9FXSZg+bZZzajF7YN+gyJciWfHAPQp4 eYH7RkzCeK7gnikaQErwwZB2kabmjbSjhrnMeEPQyPtu+PmQ9fCPab2suXUUnIcF f+LddzWA8AKNhI/PH1k3g677llcuY/aIfXK/hqbZcLT/8RWD6E0aJFd3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMeT3q4bJzE6xVhJMcziedK5HfjMB8GA1UdIwQY MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalFii5IF HVEzTMPoGycrufE0I7D7l1Ij0rp4Jp2x8vAJ53j0eouONe0JmHqwuvTFhER1d5r2 DsvQfp2HNfpIe7JwQcuJAofpSH6B/FTL7ouYbQ9066gulk2JDi/Jzw3DQ9KSGCi2 TwgsQOZeLsixIMyoTnQq+FYkIQ+uW8Wfo2TcWxSHQhEURnixyn6Ps9XpnM1Gz3dH aiiJk+FJlO9JoIewimy245ZG9uR2Vlp8hFvh7GyEd+8wUBjpLfYudQ2e59IRTNpW L7uyNFHhI9fTGaBfQaqrKswg4frFV8EAoGLMieBwq8pOiKRz0EzpSBxsKkVGgrQr BVy1BlhiClCEQg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:45 2025 by rpki-client