This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json) Hash identifier: kfNXz/wsb4lvfpFfuJJloUxDqx/fxCqRFZJ37IegHGc= Subject key identifier: 9D:95:50:87:75:2A:AF:BE:FD:6E:29:27:DD:30:A3:15:32:D8:FD:04 Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe Certificate serial: 019B20994A665FD957A4599B747BF710BF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft Manifest number: 0A8E Signing time: Mon 15 Dec 2025 06:01:15 +0000 Manifest this update: Mon 15 Dec 2025 06:01:15 +0000 Manifest next update: Tue 16 Dec 2025 06:01:15 +0000 Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: SQfKr1EEqKrKD7jfzN3UbWnzsKILq3fsj6FtS/BmIu0=) 2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:4a:66:5f:d9:57:a4:59:9b:74:7b:f7:10:bf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe Validity Not Before: Dec 15 06:01:15 2025 GMT Not After : Dec 16 06:01:15 2025 GMT Subject: CN=9d955087752aafbefd6e2927dd30a31532d8fd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:5e:0a:28:83:fb:72:25:c7:a7:44:93:a4: b9:60:38:94:4b:98:f3:d9:8b:af:87:25:99:43:ac: f4:59:0d:bf:c3:57:86:c2:4d:98:da:e5:d2:01:f7: 59:77:d5:7c:84:71:06:40:5f:2b:44:09:17:60:94: 43:ea:bd:12:58:d3:21:4b:10:e4:d3:4a:14:68:ed: ce:dd:d0:ca:82:4a:0c:ee:94:5b:f5:08:bd:8d:c0: aa:b8:5e:a6:c7:2e:6c:37:69:c3:f2:9b:fa:26:ac: 4e:b1:6c:60:96:1a:29:68:f0:26:c0:ce:5d:90:fb: 56:41:bf:f3:e8:73:27:88:97:01:21:d7:56:d9:63: 4a:3f:3a:af:d2:26:bc:19:51:2a:8e:08:04:ee:37: ca:09:b5:12:94:66:9f:08:66:4a:8f:63:0e:52:e4: 22:18:a7:90:c4:32:4c:95:f5:8a:c1:8b:6d:a5:f3: aa:c5:05:4b:23:b0:20:11:ec:ca:d6:7a:11:5a:88: 07:63:84:cb:56:aa:2a:52:72:8a:97:e6:cb:37:42: eb:28:4e:0d:a3:b1:45:72:be:d3:ff:5d:a8:e0:4a: 2b:c4:fd:d7:cf:bc:d5:47:42:a9:a1:42:6d:58:20: e9:cc:d2:58:88:a1:40:d7:9b:23:89:ef:04:77:95: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:50:87:75:2A:AF:BE:FD:6E:29:27:DD:30:A3:15:32:D8:FD:04 X509v3 Authority Key Identifier: keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:6c:af:48:59:f6:de:44:5f:39:bf:da:31:13:14:54:fd: 1e:30:ef:bf:a0:df:b9:48:68:2f:01:83:48:cb:32:00:f1:8e: 8b:22:61:a3:f8:99:76:4c:4e:a0:b4:45:0e:e7:8a:89:57:a0: 4e:19:43:3f:b0:af:4d:a2:1a:3f:20:a2:ac:32:b3:b7:2d:9b: 46:98:ec:5c:70:82:43:6b:f5:28:13:46:6f:6a:78:0a:86:06: 79:00:99:c9:4f:27:e3:f0:4a:07:ac:e7:c0:78:cf:bf:b4:93: 0e:51:3b:69:c0:30:c3:df:bd:e0:01:70:05:f7:50:85:cf:73: aa:be:d1:8d:d8:a9:69:0b:da:13:99:c8:eb:3e:fc:d7:65:1f: 97:91:a2:82:ba:d8:9a:e8:df:68:c1:58:fa:6c:76:72:1d:35: f5:fe:2a:b2:49:7f:8a:f8:4d:bc:fd:d9:ca:e4:fb:c9:e8:e8: 50:5e:cd:a9:94:5e:bb:3a:35:c4:ec:dd:f2:50:1e:10:05:88: 20:e2:8b:b0:4e:50:b8:69:a2:33:fe:a3:65:a4:e8:53:09:2a: 2a:97:13:60:cb:ab:23:75:5b:48:ed:a5:86:90:72:94:f2:16: ff:92:a0:c4:cb:d0:c1:89:4d:df:4b:36:f7:53:7c:e7:bd:0b: 07:99:9f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmUpmX9lXpFmbdHv3EL91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjFjOGI2MWZmNGFiOTc1YTJmNmM2N2QwYmNlNjM3OTM2 MmUyZmUwHhcNMjUxMjE1MDYwMTE1WhcNMjUxMjE2MDYwMTE1WjAzMTEwLwYDVQQD Eyg5ZDk1NTA4Nzc1MmFhZmJlZmQ2ZTI5MjdkZDMwYTMxNTMyZDhmZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuJeCiiD+3Ilx6dEk6S5YDiUS5jz 2YuvhyWZQ6z0WQ2/w1eGwk2Y2uXSAfdZd9V8hHEGQF8rRAkXYJRD6r0SWNMhSxDk 00oUaO3O3dDKgkoM7pRb9Qi9jcCquF6mxy5sN2nD8pv6JqxOsWxglhopaPAmwM5d kPtWQb/z6HMniJcBIddW2WNKPzqv0ia8GVEqjggE7jfKCbUSlGafCGZKj2MOUuQi GKeQxDJMlfWKwYttpfOqxQVLI7AgEezK1noRWogHY4TLVqoqUnKKl+bLN0LrKE4N o7FFcr7T/12o4EorxP3Xz7zVR0KpoUJtWCDpzNJYiKFA15sjie8Ed5WunQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2VUId1Kq++/W4pJ90woxUy2P0EMB8GA1UdIwQY MBaAFDthyLYf9KuXWi9sZ9C85jeTYuL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2Mt N2I2Mjc1ODJmZDJkLzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2MtN2I2Mjc1ODJmZDJk LzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk5sr0hZ 9t5EXzm/2jETFFT9HjDvv6DfuUhoLwGDSMsyAPGOiyJho/iZdkxOoLRFDueKiVeg ThlDP7CvTaIaPyCirDKzty2bRpjsXHCCQ2v1KBNGb2p4CoYGeQCZyU8n4/BKB6zn wHjPv7STDlE7acAww9+94AFwBfdQhc9zqr7RjdipaQvaE5nI6z7812Ufl5GigrrY mujfaMFY+mx2ch019f4qskl/ivhNvP3ZyuT7yejoUF7NqZReuzo1xOzd8lAeEAWI IOKLsE5QuGmiM/6jZaToUwkqKpcTYMurI3VbSO2lhpBylPIW/5KgxMvQwYlN30s2 91N8570LB5mf6g== -----END CERTIFICATE-----Generated at Mon Dec 15 12:08:00 2025 by rpki-client