This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json) Hash identifier: p5X4LaDyWPFsH9ZSm1uRVStPabe+Fu7aLCwTqBNbCPU= Subject key identifier: 3C:AA:EF:74:8A:CA:84:5C:5C:FA:8F:B9:42:01:2C:10:39:1A:7D:66 Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Certificate serial: 019B0F6E424C53CEB16DB71AF6F54F53DCA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft Manifest number: 040B Signing time: Thu 11 Dec 2025 22:00:42 +0000 Manifest this update: Thu 11 Dec 2025 22:00:42 +0000 Manifest next update: Fri 12 Dec 2025 22:00:42 +0000 Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: IJojpQrnxzUlUU+7/oawg1mx8dlXGojaXx6rDpeqNZw=) 2: aqZglDYGnEsB53FUZu6hOgHFRNI.roa (hash: PiTo1HXxs70zjyTF54PbMNKhREuF1Fd5QySzyhgibes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:42:4c:53:ce:b1:6d:b7:1a:f6:f5:4f:53:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Validity Not Before: Dec 11 22:00:42 2025 GMT Not After : Dec 12 22:00:42 2025 GMT Subject: CN=3caaef748aca845c5cfa8fb942012c10391a7d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:ba:42:89:16:00:55:78:77:35:8c:db:60: f2:9e:a8:67:2d:dc:65:d3:11:a8:0f:ba:52:07:e9: 09:14:20:b7:bc:c5:2e:0b:5f:ab:1c:8a:14:a0:5c: 54:3c:e6:ed:21:27:c7:b3:56:19:07:47:62:53:51: 4e:bc:5e:61:a6:4b:b3:f0:11:42:86:07:f2:44:87: bf:8c:52:29:b6:33:19:79:93:aa:07:e0:d4:3c:50: 1e:d1:d9:bc:30:16:99:79:d2:af:85:3f:62:f5:02: 15:5d:e4:0a:36:25:cb:89:d8:bb:c0:44:96:24:79: 34:c6:c4:68:30:3e:23:11:fd:f0:62:a3:12:36:4a: 38:50:71:25:eb:4f:2e:c7:96:4f:a8:5f:09:55:d1: 41:d7:04:cd:75:05:59:1e:0e:e5:53:02:7d:ce:ae: 23:4b:99:14:0b:1a:00:11:86:88:3d:88:61:84:1e: d4:4e:d2:ed:dd:06:4c:3f:12:79:5a:57:8c:a9:a4: 52:a7:67:97:97:75:1d:25:70:ab:26:c6:1e:e8:de: ee:7f:0d:8e:b4:6c:c9:1b:f9:94:77:e3:39:73:36: 78:83:7e:ab:67:5a:70:09:40:fc:87:94:83:4f:36: 55:d4:21:ee:e3:87:89:50:63:f7:c1:79:d9:92:3b: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:EF:74:8A:CA:84:5C:5C:FA:8F:B9:42:01:2C:10:39:1A:7D:66 X509v3 Authority Key Identifier: keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d2:ce:55:0c:00:1d:71:25:d7:34:32:23:85:a8:d4:2d:c9: a8:2b:bd:9f:d3:47:1c:f7:64:82:36:a5:b9:7a:63:4f:1a:e1: ba:73:7e:77:9e:3e:d4:e9:72:2a:ad:f6:03:4e:7b:45:e8:50: 5b:0d:11:12:f0:fc:0c:73:a6:ac:80:dc:56:cf:3b:3f:1e:e4: 48:f9:cd:44:ac:81:9c:e8:a6:04:55:bf:93:a9:61:c4:f1:f3: 50:57:19:77:e0:45:ee:f6:98:3f:a2:70:f4:99:02:c6:ce:60: 0e:d1:9b:3d:a5:b1:62:f3:7b:f3:4a:75:3a:ab:d5:a3:e6:bb: 60:48:01:4c:fd:28:13:78:b4:87:0b:19:89:56:55:95:fa:a5: 91:b6:92:98:19:06:57:58:4b:e7:51:bc:11:79:4f:a2:dd:c6: c7:cd:05:40:4f:b4:ce:7e:16:a3:e2:e7:98:e4:57:34:7b:68: 83:cb:04:ab:58:40:bf:24:ed:eb:6f:56:13:2e:63:c2:60:e2: bc:fd:ad:8d:6e:71:81:4e:d5:d8:2f:bc:26:9a:fc:75:64:a5: df:28:96:d8:c8:55:9b:0e:c4:48:0d:d4:a6:ea:25:e0:62:38: ed:08:d9:a7:bb:c1:36:e0:f5:72:58:bd:00:5c:e8:6f:6a:68: bf:cc:e6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbkJMU86xbbca9vVPU9ygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2UzZDQ3NGE3NzVjZTQ3NzYzNzE2MzJiYzE5NmNhMWY0 ZWMyM2IwHhcNMjUxMjExMjIwMDQyWhcNMjUxMjEyMjIwMDQyWjAzMTEwLwYDVQQD EygzY2FhZWY3NDhhY2E4NDVjNWNmYThmYjk0MjAxMmMxMDM5MWE3ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzba6QokWAFV4dzWM22DynqhnLdxl 0xGoD7pSB+kJFCC3vMUuC1+rHIoUoFxUPObtISfHs1YZB0diU1FOvF5hpkuz8BFC hgfyRIe/jFIptjMZeZOqB+DUPFAe0dm8MBaZedKvhT9i9QIVXeQKNiXLidi7wESW JHk0xsRoMD4jEf3wYqMSNko4UHEl608ux5ZPqF8JVdFB1wTNdQVZHg7lUwJ9zq4j S5kUCxoAEYaIPYhhhB7UTtLt3QZMPxJ5WleMqaRSp2eXl3UdJXCrJsYe6N7ufw2O tGzJG/mUd+M5czZ4g36rZ1pwCUD8h5SDTzZV1CHu44eJUGP3wXnZkjsWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyq73SKyoRcXPqPuUIBLBA5Gn1mMB8GA1UdIwQY MBaAFDvOPUdKd1zkd2NxYyvBlsofTsI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEt NjNjYzZjNjdjOTk1LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEtNjNjYzZjNjdjOTk1 LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9LOVQwA HXEl1zQyI4Wo1C3JqCu9n9NHHPdkgjaluXpjTxrhunN+d54+1OlyKq32A057RehQ Ww0REvD8DHOmrIDcVs87Px7kSPnNRKyBnOimBFW/k6lhxPHzUFcZd+BF7vaYP6Jw 9JkCxs5gDtGbPaWxYvN780p1OqvVo+a7YEgBTP0oE3i0hwsZiVZVlfqlkbaSmBkG V1hL51G8EXlPot3Gx80FQE+0zn4Wo+LnmORXNHtog8sEq1hAvyTt629WEy5jwmDi vP2tjW5xgU7V2C+8Jpr8dWSl3yiW2MhVmw7ESA3Upuol4GI47QjZp7vBNuD1cli9 AFzob2pov8zmsg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:00 2025 by rpki-client