This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json) Hash identifier: 0ZRXc8YDgE8YRjiisZwynUeHQr0PUESuGkgd+2+b8L8= Subject key identifier: 97:61:3F:79:B8:DC:17:5D:94:39:06:1F:45:3D:98:6D:86:58:93:25 Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Certificate serial: 019AACB9543DE8B27A8A4A685DB39AD19501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft Manifest number: 1745 Signing time: Sat 22 Nov 2025 18:00:18 +0000 Manifest this update: Sat 22 Nov 2025 18:00:18 +0000 Manifest next update: Sun 23 Nov 2025 18:00:18 +0000 Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=) 2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: pMJO66Z/gKSg9z5USfn02pqLgqE8RjZz7lLIZFEUvMI=) 3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:54:3d:e8:b2:7a:8a:4a:68:5d:b3:9a:d1:95:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Validity Not Before: Nov 22 18:00:18 2025 GMT Not After : Nov 23 18:00:18 2025 GMT Subject: CN=97613f79b8dc175d9439061f453d986d86589325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:61:18:8c:e4:bd:c0:0e:74:bf:dd:c3:80: 50:a6:64:59:a2:d7:4d:b0:92:8e:60:6e:78:57:5c: 83:79:c7:ab:b1:1b:37:aa:5d:e8:44:5e:36:d0:76: 68:c7:1f:38:28:3e:5a:84:8b:67:95:df:81:99:15: 99:db:af:d3:52:41:75:a6:91:d5:90:42:3c:83:17: 5a:b8:5c:84:97:4a:31:4f:f0:bc:07:07:27:3c:5c: e3:d0:4b:08:09:e8:cb:a1:cb:d9:4a:00:0a:45:2e: 5f:15:22:d7:8b:27:72:7e:0b:89:72:92:67:c9:86: ac:20:ed:29:39:f8:16:70:06:c7:43:1b:35:0d:34: 21:03:a6:ed:33:68:b0:04:9c:c7:67:64:a8:f1:4c: 79:5e:cf:a6:90:17:e2:f4:f1:d6:1e:21:8b:b7:3e: 49:b9:36:03:6e:a3:1e:5f:99:54:76:4d:e9:ef:3b: d6:34:92:10:03:3d:de:1d:f7:90:9e:38:f5:c8:72: f8:26:b5:bb:71:ce:8c:73:21:bb:65:9a:dd:d0:8e: bd:01:6f:56:6f:df:c7:93:99:45:00:be:db:be:95: 09:72:8b:f7:7a:d5:38:90:6e:7d:da:93:f7:e5:68: 22:4c:9a:fe:d7:45:e5:ba:d6:38:3c:20:0d:5c:e6: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:3F:79:B8:DC:17:5D:94:39:06:1F:45:3D:98:6D:86:58:93:25 X509v3 Authority Key Identifier: keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:e8:59:13:a5:8e:53:9f:81:41:a1:5a:8c:49:a5:49:f6: cc:a8:6c:be:77:c5:2e:a0:be:98:6b:92:f8:bf:de:10:57:29: d6:31:08:87:63:4b:cf:63:75:9a:60:72:7d:e4:7c:29:ce:3d: a8:a3:cd:04:ab:fa:fe:a6:f2:aa:7b:79:f8:24:85:ec:f0:74: 9a:1b:15:19:9c:1d:e2:ab:fa:04:fb:d0:5a:7e:6f:48:41:06: 15:3b:f4:1d:46:d9:35:94:24:5b:11:f0:5f:00:53:3b:1b:be: 10:d1:78:96:da:3f:4e:f4:42:de:f4:c8:46:9a:a9:21:a7:87: 72:6b:1c:51:b0:c7:f2:f4:dc:37:43:72:79:f5:b2:36:47:51: 3b:9a:a6:85:8b:63:50:a4:2d:fb:b9:78:39:2d:23:d8:2d:36: a4:50:78:93:bb:bf:97:d2:ef:cf:73:e9:2a:e7:6c:43:8f:c4: e7:9b:25:05:4b:23:a3:f7:31:56:cb:03:66:da:a0:fc:1b:28: ea:87:27:2c:e4:b8:ae:53:32:60:ff:ee:1f:18:d6:0f:a0:ef: 88:0f:ec:78:35:42:97:27:84:1f:0d:e3:60:0f:36:4a:da:36: c4:a9:47:bc:73:26:40:67:2b:99:a5:34:80:4b:a3:4b:fd:28: 50:43:50:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuVQ96LJ6ikpoXbOa0ZUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5 NGFmNzQwHhcNMjUxMTIyMTgwMDE4WhcNMjUxMTIzMTgwMDE4WjAzMTEwLwYDVQQD Eyg5NzYxM2Y3OWI4ZGMxNzVkOTQzOTA2MWY0NTNkOTg2ZDg2NTg5MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9JhGIzkvcAOdL/dw4BQpmRZotdN sJKOYG54V1yDecersRs3ql3oRF420HZoxx84KD5ahItnld+BmRWZ26/TUkF1ppHV kEI8gxdauFyEl0oxT/C8BwcnPFzj0EsICejLocvZSgAKRS5fFSLXiydyfguJcpJn yYasIO0pOfgWcAbHQxs1DTQhA6btM2iwBJzHZ2So8Ux5Xs+mkBfi9PHWHiGLtz5J uTYDbqMeX5lUdk3p7zvWNJIQAz3eHfeQnjj1yHL4JrW7cc6McyG7ZZrd0I69AW9W b9/Hk5lFAL7bvpUJcov3etU4kG592pP35WgiTJr+10XlutY4PCANXOYy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdhP3m43BddlDkGH0U9mG2GWJMlMB8GA1UdIwQY MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3 LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdADoWROl jlOfgUGhWoxJpUn2zKhsvnfFLqC+mGuS+L/eEFcp1jEIh2NLz2N1mmByfeR8Kc49 qKPNBKv6/qbyqnt5+CSF7PB0mhsVGZwd4qv6BPvQWn5vSEEGFTv0HUbZNZQkWxHw XwBTOxu+ENF4lto/TvRC3vTIRpqpIaeHcmscUbDH8vTcN0NyefWyNkdRO5qmhYtj UKQt+7l4OS0j2C02pFB4k7u/l9Lvz3PpKudsQ4/E55slBUsjo/cxVssDZtqg/Bso 6ocnLOS4rlMyYP/uHxjWD6DviA/seDVClyeEHw3jYA82Sto2xKlHvHMmQGcrmaU0 gEujS/0oUENQqw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:19 2025 by rpki-client