This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json) Hash identifier: 8Z+LVeI+YJooryq6kYcHjp0gygM67a/fsge2QamOSu8= Subject key identifier: 84:3F:15:E4:44:18:C7:4F:17:73:C9:3C:84:4E:C8:FD:64:10:DD:07 Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Certificate serial: 019B35323FDE8E8C774D9D06D01165EBCCC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft Manifest number: 141F Signing time: Fri 19 Dec 2025 06:00:44 +0000 Manifest this update: Fri 19 Dec 2025 06:00:44 +0000 Manifest next update: Sat 20 Dec 2025 06:00:44 +0000 Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=) 2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=) 3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: oK5Tnz1x1pgNjjcffsJ93R8l0kLOH6X/DJqJZ/saw6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:3f:de:8e:8c:77:4d:9d:06:d0:11:65:eb:cc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Validity Not Before: Dec 19 06:00:44 2025 GMT Not After : Dec 20 06:00:44 2025 GMT Subject: CN=843f15e44418c74f1773c93c844ec8fd6410dd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:b6:5d:9b:74:6c:ff:8e:a5:5e:fa:29:83: d9:14:70:3f:49:78:7f:3a:c9:bc:73:7d:4a:91:a3: 1c:f4:ad:6a:e2:a7:dd:0c:fd:87:1e:39:03:0a:24: cf:40:1a:5d:ea:fe:38:39:3f:8c:6d:9b:d2:15:69: 4e:ef:ea:8c:64:f0:83:40:2c:17:fb:ca:c7:d2:cc: 8b:25:fd:21:77:69:79:16:d1:89:cd:33:d2:0b:89: 83:10:af:9d:33:69:03:f4:7b:0b:7e:f1:38:e4:73: 9c:f8:f8:ae:55:6e:53:57:c5:c2:ad:7a:0c:f3:30: f0:1a:2f:3c:5e:45:b8:0a:4e:72:91:cf:0f:f9:4e: d8:f8:92:f0:4c:f9:fe:15:49:a4:80:55:fe:a1:e5: d6:f6:5d:b9:87:83:b0:92:05:c7:26:76:d9:a7:8d: 33:e6:a2:d2:09:d7:be:7c:f7:52:0f:1f:0f:67:6a: c9:80:f1:2c:f6:65:5b:6b:4b:da:86:60:04:28:42: 2e:ff:04:cd:e4:0c:a2:a7:b7:32:99:ba:41:16:3e: f3:d8:2a:09:ae:2d:eb:94:9b:d7:7c:f1:1e:78:d2: cf:50:9c:f4:b6:64:90:30:9c:54:74:82:cc:15:19: 3e:19:b9:21:dc:e5:f3:7c:9a:21:d4:aa:4b:b3:6c: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3F:15:E4:44:18:C7:4F:17:73:C9:3C:84:4E:C8:FD:64:10:DD:07 X509v3 Authority Key Identifier: keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:61:77:26:56:99:f7:00:d2:3a:da:35:d7:24:f7:db:71: cf:a1:8a:f9:c1:cd:cf:53:7c:bb:61:ff:df:fc:9d:f0:93:af: fb:65:10:44:da:77:f7:f9:d9:d7:1c:27:c2:e8:a8:c7:0b:2c: b3:3e:3e:3b:e2:9d:76:f8:d2:c4:8f:26:82:70:5d:14:52:45: 62:1d:7f:9c:6e:eb:f3:df:4f:29:53:db:a3:38:6c:12:46:fe: 77:c3:26:30:cd:e0:2d:26:57:6e:1c:60:04:7a:24:c9:b2:3e: 7c:7c:e3:06:68:65:77:b6:04:4d:85:4b:e2:ff:0c:a0:58:5b: 5f:b4:ab:f7:fb:b1:bc:42:5a:cf:bf:f7:d8:43:7a:83:68:59: 20:10:9c:b6:68:d1:7c:4a:22:10:09:9b:80:5f:65:60:81:f5: 15:cc:d2:0c:df:52:b1:6a:fa:de:d4:36:7a:f2:04:c6:ce:61: d1:0d:29:a2:07:24:e4:39:7d:f1:82:2a:2b:bd:4b:10:71:87: 5d:74:77:ee:06:50:48:a6:58:c4:f4:2a:fa:9a:31:b0:0a:11: 70:54:7f:88:91:7b:86:fc:d3:de:ef:e3:a3:4b:db:69:26:33: f5:0c:62:11:4b:10:a5:91:fe:98:54:57:fd:8c:3a:3f:65:30: 60:dc:5f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mj/ejox3TZ0G0BFl68zDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx MDk3NDYwHhcNMjUxMjE5MDYwMDQ0WhcNMjUxMjIwMDYwMDQ0WjAzMTEwLwYDVQQD Eyg4NDNmMTVlNDQ0MThjNzRmMTc3M2M5M2M4NDRlYzhmZDY0MTBkZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xK2XZt0bP+OpV76KYPZFHA/SXh/ Osm8c31KkaMc9K1q4qfdDP2HHjkDCiTPQBpd6v44OT+MbZvSFWlO7+qMZPCDQCwX +8rH0syLJf0hd2l5FtGJzTPSC4mDEK+dM2kD9HsLfvE45HOc+PiuVW5TV8XCrXoM 8zDwGi88XkW4Ck5ykc8P+U7Y+JLwTPn+FUmkgFX+oeXW9l25h4OwkgXHJnbZp40z 5qLSCde+fPdSDx8PZ2rJgPEs9mVba0vahmAEKEIu/wTN5Ayip7cymbpBFj7z2CoJ ri3rlJvXfPEeeNLPUJz0tmSQMJxUdILMFRk+Gbkh3OXzfJoh1KpLs2yHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ/FeREGMdPF3PJPIROyP1kEN0HMB8GA1UdIwQY MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt NzZiYjcxZWIwYTVhLzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEJhdyZW mfcA0jraNdck99txz6GK+cHNz1N8u2H/3/yd8JOv+2UQRNp39/nZ1xwnwuioxwss sz4+O+KddvjSxI8mgnBdFFJFYh1/nG7r899PKVPbozhsEkb+d8MmMM3gLSZXbhxg BHokybI+fHzjBmhld7YETYVL4v8MoFhbX7Sr9/uxvEJaz7/32EN6g2hZIBCctmjR fEoiEAmbgF9lYIH1FczSDN9SsWr63tQ2evIExs5h0Q0pogck5Dl98YIqK71LEHGH XXR37gZQSKZYxPQq+poxsAoRcFR/iJF7hvzT3u/jo0vbaSYz9QxiEUsQpZH+mFRX /Yw6P2UwYNxfGA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:06:57 2025 by rpki-client