This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json) Hash identifier: avXF5LGMGLqrjxKrxHHWp2CHHTi/k5BQnrpBkRi7NBM= Subject key identifier: 7B:CB:2C:C2:25:76:CC:DF:D2:A4:5A:23:79:29:04:67:BB:B2:13:27 Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1 Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1 Certificate serial: 019B410022C2F8CF76144571B53B79899B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 13:01:26 +0000 Manifest this update: Sun 21 Dec 2025 13:01:26 +0000 Manifest next update: Mon 22 Dec 2025 13:01:26 +0000 Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: /IqFSB/T5BpEe4TcSyBK5kL2k31/heWZgCC+PZfKuEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:22:c2:f8:cf:76:14:45:71:b5:3b:79:89:9b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1 Validity Not Before: Dec 21 13:01:26 2025 GMT Not After : Dec 22 13:01:26 2025 GMT Subject: CN=7bcb2cc22576ccdfd2a45a2379290467bbb21327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:84:fc:2d:76:b6:5d:2e:5a:07:e6:26:93: 4f:42:f7:ec:72:73:dc:0a:21:af:b9:75:6e:85:ad: 2d:59:98:df:79:72:e2:6d:65:50:b1:21:6d:15:1d: 7b:1a:e5:c9:81:92:5b:b0:40:c4:a9:d8:f5:7b:5e: 20:3b:9a:a3:1f:96:0f:e2:62:79:fb:dd:e7:7c:70: 31:19:fc:37:fe:cc:3e:52:3c:50:92:e1:5a:9e:c4: 28:bc:e0:95:44:b6:d9:19:7f:6b:0a:91:24:52:8a: 7e:2e:e2:87:a6:ba:d5:dc:93:37:fe:10:38:5a:36: 3e:51:d0:52:ea:2c:ca:db:cb:d1:2c:72:3f:fb:5d: 91:bf:91:89:60:1d:25:ce:7a:00:27:e1:14:e1:ac: bb:35:8c:97:95:29:78:e5:d7:75:5c:db:ba:42:be: 9e:92:77:b2:fb:61:d8:9f:80:ed:64:1b:cc:62:05: 16:65:af:27:88:d3:ad:3c:69:86:5d:b1:3b:eb:0d: f0:30:75:b6:43:ab:8a:f0:6a:e3:fb:6e:5d:e2:a6: a3:10:af:dd:e9:df:94:43:37:f7:db:64:84:d8:66: 26:a0:71:18:e1:5d:1f:67:ae:79:f3:3c:5b:47:d1: 04:1d:10:e7:e7:31:6b:44:6a:f8:0f:c9:4a:dc:88: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:2C:C2:25:76:CC:DF:D2:A4:5A:23:79:29:04:67:BB:B2:13:27 X509v3 Authority Key Identifier: keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:65:8b:09:89:f7:db:54:d4:dc:83:83:a8:dd:b5:79:69:18: 6c:56:9b:13:48:10:75:df:ba:1b:5a:03:8b:2b:ce:85:94:d0: 53:e3:1f:1c:89:13:04:b4:21:79:e8:36:ae:3d:a3:f0:48:9c: 0a:ed:d1:62:49:25:02:d8:d1:fb:3e:f6:59:18:6f:79:52:0f: 9d:2a:e2:c2:2e:a7:79:45:3a:13:a8:c6:79:39:88:58:d9:ce: d2:1c:c5:e9:60:60:14:97:06:5e:5e:96:48:5a:e9:37:d3:90: 7b:13:cf:0c:76:cd:67:24:ae:7f:9b:56:7c:4f:a3:2d:01:83: 21:8b:36:e4:a6:22:47:bc:53:bd:1c:62:bf:8d:1c:aa:ae:2d: d6:da:19:5d:84:50:75:b8:ac:a3:8c:27:7e:f1:fe:48:8b:89: e7:15:0b:8e:cd:d9:73:90:02:61:6c:2d:7d:c7:ef:ef:6d:79: d6:06:21:fc:17:d8:32:42:59:a8:8e:36:8f:dd:7b:e8:23:d5: 7a:87:24:bf:93:fa:ca:92:8d:6a:34:2e:d8:a9:fa:cc:61:cb: b3:86:d0:b2:bd:8a:58:71:cd:30:11:9a:38:7b:a6:40:11:cd: f6:bf:36:b7:13:6c:1b:a7:cc:4d:09:03:2f:24:92:91:52:1b: b2:b3:25:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBACLC+M92FEVxtTt5iZsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTczNmFhMjRjZGExODkzYWM1YzVkZDBlZmZkNmVjYWZk OTRmZTEwHhcNMjUxMjIxMTMwMTI2WhcNMjUxMjIyMTMwMTI2WjAzMTEwLwYDVQQD Eyg3YmNiMmNjMjI1NzZjY2RmZDJhNDVhMjM3OTI5MDQ2N2JiYjIxMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtqE/C12tl0uWgfmJpNPQvfscnPc CiGvuXVuha0tWZjfeXLibWVQsSFtFR17GuXJgZJbsEDEqdj1e14gO5qjH5YP4mJ5 +93nfHAxGfw3/sw+UjxQkuFansQovOCVRLbZGX9rCpEkUop+LuKHprrV3JM3/hA4 WjY+UdBS6izK28vRLHI/+12Rv5GJYB0lznoAJ+EU4ay7NYyXlSl45dd1XNu6Qr6e kney+2HYn4DtZBvMYgUWZa8niNOtPGmGXbE76w3wMHW2Q6uK8Grj+25d4qajEK/d 6d+UQzf322SE2GYmoHEY4V0fZ6558zxbR9EEHRDn5zFrRGr4D8lK3IhOlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvLLMIldszf0qRaI3kpBGe7shMnMB8GA1UdIwQY MBaAFDuXNqokzaGJOsXF3Q7/1uyv2U/hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNWUzYTItODAwYS00MGRlLWFkYWMt NWIzZjBhMDE1OWNkLzEvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNWUzYTItODAwYS00MGRlLWFkYWMtNWIzZjBhMDE1OWNk LzEvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWWLCYn3 21TU3IODqN21eWkYbFabE0gQdd+6G1oDiyvOhZTQU+MfHIkTBLQheeg2rj2j8Eic Cu3RYkklAtjR+z72WRhveVIPnSriwi6neUU6E6jGeTmIWNnO0hzF6WBgFJcGXl6W SFrpN9OQexPPDHbNZySuf5tWfE+jLQGDIYs25KYiR7xTvRxiv40cqq4t1toZXYRQ dbiso4wnfvH+SIuJ5xULjs3Zc5ACYWwtfcfv72151gYh/BfYMkJZqI42j9176CPV eockv5P6ypKNajQu2Kn6zGHLs4bQsr2KWHHNMBGaOHumQBHN9r82txNsG6fMTQkD LySSkVIbsrMlQw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:00 2025 by rpki-client