This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json) Hash identifier: mh4Is4qcfihd7+QPtYCA/SHNgoZbCUWyj5+Nh0x2zmY= Subject key identifier: A6:4F:B9:DD:5F:88:40:CD:97:6E:28:B1:8D:28:DD:87:62:ED:03:C5 Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1 Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1 Certificate serial: 019B2EFAE78FAF6673C143BF5E29D28BF997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:02:33 +0000 Manifest this update: Thu 18 Dec 2025 01:02:33 +0000 Manifest next update: Fri 19 Dec 2025 01:02:33 +0000 Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: reBCqvunacZyJ9TqUyeGQbODSfF9BjOwj2n9qbKFy/I=) 2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:e7:8f:af:66:73:c1:43:bf:5e:29:d2:8b:f9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1 Validity Not Before: Dec 18 01:02:33 2025 GMT Not After : Dec 19 01:02:33 2025 GMT Subject: CN=a64fb9dd5f8840cd976e28b18d28dd8762ed03c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:be:4c:bd:e6:44:63:13:62:c2:2a:16:43: c4:d4:6b:88:f4:15:88:0f:8a:67:20:43:fa:80:23: b8:fc:96:3f:cb:85:2b:d4:46:81:2b:9a:df:e7:b8: 58:2c:cf:70:ae:7a:39:3a:1d:c9:83:1b:86:f6:a1: 91:24:94:1c:d0:f1:ea:ba:bb:bf:86:92:d3:11:7b: 93:f8:6a:1d:68:2e:08:30:2a:e8:b7:82:14:3b:9e: 13:30:1a:60:8b:73:cc:f8:43:72:10:39:04:eb:d4: e2:b7:54:b6:74:62:90:fa:5c:03:85:46:48:4d:50: 76:26:3f:8e:e5:ab:7f:ac:7d:ed:db:89:b3:a5:13: 3c:16:cd:5b:ad:f1:59:e7:48:80:46:b2:f0:34:c7: c4:b7:d9:f5:a8:85:9d:0a:29:c0:88:0c:16:4e:d2: 31:b3:af:67:cf:61:cb:f9:ad:1a:f7:78:3e:67:aa: f8:9a:8a:68:8c:e1:79:1c:aa:cb:21:9d:cb:1f:65: b6:36:cd:c7:8c:a2:81:44:ea:f8:5e:c7:57:cf:7c: 8c:5a:95:17:23:46:c8:aa:23:54:3b:15:5b:80:3c: 65:01:c6:c6:70:73:1d:a0:83:70:64:58:2c:d1:04: e8:98:62:49:67:6e:09:0a:3d:3f:d1:f6:9b:bc:21: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4F:B9:DD:5F:88:40:CD:97:6E:28:B1:8D:28:DD:87:62:ED:03:C5 X509v3 Authority Key Identifier: keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:06:48:6d:d3:a6:5e:40:02:e2:15:30:08:f1:8a:34:6d:01: 05:e6:08:bd:45:0b:f3:1a:67:07:7a:ab:10:08:8e:58:40:f0: 7b:63:84:cf:b3:26:af:ab:70:56:1c:06:73:28:f2:bb:78:af: 69:5d:64:4e:6f:67:8f:22:dd:4f:4e:80:61:c9:c3:58:29:54: 58:ee:ca:88:65:19:5e:24:e0:1e:ed:4b:d9:66:9d:25:9e:b0: c2:a5:fd:43:1a:84:67:c2:b0:b4:c1:6a:98:4d:17:c4:c9:11: 40:ed:ef:6b:86:37:7b:f7:dc:d1:96:30:11:2f:39:8e:fc:fc: a1:02:4c:78:54:26:47:7a:59:a0:2c:0b:a2:54:cb:15:f4:00: 41:fd:72:1e:34:21:3e:12:dd:9e:80:19:eb:7f:1a:02:e1:0e: 1b:10:00:f6:69:cb:fe:eb:82:e5:d5:39:73:81:f5:cd:a1:7b: d5:e5:96:d1:bf:28:90:05:60:b0:65:6b:80:9a:59:fc:70:6a: 9f:fb:53:12:e5:fd:e0:24:f1:ec:93:e6:c7:ad:5a:64:a4:45: 4c:26:50:43:bb:63:92:7d:8d:95:d3:e3:0e:90:ef:ad:3e:d9: e9:c5:cb:c5:af:f9:87:90:8c:86:95:6e:ce:c0:26:2b:32:0b: 77:ca:a6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+uePr2ZzwUO/XinSi/mXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl ZjQ4YzEwHhcNMjUxMjE4MDEwMjMzWhcNMjUxMjE5MDEwMjMzWjAzMTEwLwYDVQQD EyhhNjRmYjlkZDVmODg0MGNkOTc2ZTI4YjE4ZDI4ZGQ4NzYyZWQwM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzy+TL3mRGMTYsIqFkPE1GuI9BWI D4pnIEP6gCO4/JY/y4Ur1EaBK5rf57hYLM9wrno5Oh3JgxuG9qGRJJQc0PHquru/ hpLTEXuT+GodaC4IMCrot4IUO54TMBpgi3PM+ENyEDkE69Tit1S2dGKQ+lwDhUZI TVB2Jj+O5at/rH3t24mzpRM8Fs1brfFZ50iARrLwNMfEt9n1qIWdCinAiAwWTtIx s69nz2HL+a0a93g+Z6r4mopojOF5HKrLIZ3LH2W2Ns3HjKKBROr4XsdXz3yMWpUX I0bIqiNUOxVbgDxlAcbGcHMdoINwZFgs0QTomGJJZ24JCj0/0fabvCH4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZPud1fiEDNl24osY0o3Ydi7QPFMB8GA1UdIwQY MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQZIbdOm XkAC4hUwCPGKNG0BBeYIvUUL8xpnB3qrEAiOWEDwe2OEz7Mmr6twVhwGcyjyu3iv aV1kTm9njyLdT06AYcnDWClUWO7KiGUZXiTgHu1L2WadJZ6wwqX9QxqEZ8KwtMFq mE0XxMkRQO3va4Y3e/fc0ZYwES85jvz8oQJMeFQmR3pZoCwLolTLFfQAQf1yHjQh PhLdnoAZ638aAuEOGxAA9mnL/uuC5dU5c4H1zaF71eWW0b8okAVgsGVrgJpZ/HBq n/tTEuX94CTx7JPmx61aZKRFTCZQQ7tjkn2NldPjDpDvrT7Z6cXLxa/5h5CMhpVu zsAmKzILd8qmBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:58 2025 by rpki-client