This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json) Hash identifier: Jf+S6TREGkLw7Gt+pmtd7q6lmwIKAr8gdYccy5Y1oLA= Subject key identifier: AE:13:B0:D7:50:E8:FB:F5:58:8F:1E:72:1E:AA:EA:14:5E:56:3B:CB Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580 Certificate serial: 019B1FF44E25745490EBA5DC447B32775C91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft Manifest number: 0F24 Signing time: Mon 15 Dec 2025 03:01:02 +0000 Manifest this update: Mon 15 Dec 2025 03:01:02 +0000 Manifest next update: Tue 16 Dec 2025 03:01:02 +0000 Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: Q8s3XPgzmbxcUuIHIS2KnsI0U4lf8nhh8vbTH0hm5XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:4e:25:74:54:90:eb:a5:dc:44:7b:32:77:5c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580 Validity Not Before: Dec 15 03:01:02 2025 GMT Not After : Dec 16 03:01:02 2025 GMT Subject: CN=ae13b0d750e8fbf5588f1e721eaaea145e563bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:62:60:d7:cb:8c:5d:c0:27:f6:7a:d5:4f: 47:91:84:65:c8:c2:26:d3:95:9a:22:3b:95:3f:8b: c9:ed:75:25:3c:f5:10:d2:89:9c:ec:f1:9b:7f:3b: 8d:91:2a:87:66:aa:52:27:44:26:48:14:82:fc:a3: 26:bb:6a:e7:f9:d3:53:5b:df:97:f7:d9:0c:f0:f3: 8b:8c:e3:64:ea:44:53:fd:8b:84:35:28:0a:d2:a1: f4:5a:90:26:78:a0:46:cf:26:d5:b4:73:35:a5:5a: f7:10:93:8d:a6:4c:99:ce:b5:91:3f:af:06:e6:93: 5e:9b:1d:82:ac:cf:bc:f3:a8:2a:9d:ef:58:8f:3e: a0:22:93:6c:81:bf:3e:df:0c:5e:22:b5:89:f3:a2: b8:66:72:f2:94:37:96:60:82:fd:99:78:7e:13:60: f3:d5:1a:64:21:f8:6a:48:03:fd:53:0e:dd:51:64: 39:69:2a:b5:30:52:b1:4c:6d:3d:04:05:b8:b5:be: 48:a2:98:3f:27:4f:e4:70:34:f3:6c:b2:f1:50:f1: 6a:4d:b6:1b:30:81:f6:92:21:3f:74:cf:7e:26:24: 9d:e6:27:c4:81:c3:5c:48:e6:25:5d:4c:d4:6d:69: 60:ea:f2:1c:23:02:b0:60:4e:e4:fd:43:66:1e:d0: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:B0:D7:50:E8:FB:F5:58:8F:1E:72:1E:AA:EA:14:5E:56:3B:CB X509v3 Authority Key Identifier: keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:41:9e:5c:24:7c:c3:ef:69:ee:3a:37:be:a0:ad:f2:72:16: 2a:4a:af:1f:3d:37:f6:2a:27:9d:63:b6:f8:b5:d2:24:58:01: fa:64:8d:3f:51:72:15:97:34:2e:f6:56:79:ab:9a:bd:c8:ed: 86:eb:aa:15:29:30:c4:ac:9d:0d:0e:32:e6:56:89:6a:20:e0: 27:9f:3f:aa:88:51:7b:43:1a:0b:7c:f1:fa:a1:3f:e3:a9:b0: a6:af:3f:b9:83:c3:a1:b3:4a:ff:61:f6:35:7b:08:39:be:98: 9d:6c:94:aa:e0:85:ac:81:2d:02:d2:a6:8c:20:ab:85:1c:45: 9d:51:d9:74:af:31:4f:a6:e1:c3:c0:09:55:80:79:ba:60:ed: 27:16:26:fe:42:22:c5:d7:f0:47:b8:8a:65:64:38:d9:37:63: 13:4f:2c:d8:94:b8:ba:d2:a0:47:8b:c7:c9:ae:ac:9e:9f:ce: 42:0b:d1:68:ba:03:32:94:ef:64:de:c6:db:c7:30:5e:93:96: dd:99:85:a2:2c:a8:8e:f3:ff:34:5f:4d:df:ca:bf:51:99:cd: 87:50:d7:35:d1:ef:cc:87:2d:09:91:4e:b7:da:2c:c5:6c:ae: 3f:13:fd:84:96:13:28:6a:dc:ba:de:08:14:5f:f8:da:22:0c: 95:f7:8a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9E4ldFSQ66XcRHsyd1yRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYWRlYjFmMzhlMjUxYTlkOGQ2MTRmMzJkMzZmMjZhZGY0 ZmQ1ODAwHhcNMjUxMjE1MDMwMTAyWhcNMjUxMjE2MDMwMTAyWjAzMTEwLwYDVQQD EyhhZTEzYjBkNzUwZThmYmY1NTg4ZjFlNzIxZWFhZWExNDVlNTYzYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/tiYNfLjF3AJ/Z61U9HkYRlyMIm 05WaIjuVP4vJ7XUlPPUQ0omc7PGbfzuNkSqHZqpSJ0QmSBSC/KMmu2rn+dNTW9+X 99kM8POLjONk6kRT/YuENSgK0qH0WpAmeKBGzybVtHM1pVr3EJONpkyZzrWRP68G 5pNemx2CrM+886gqne9Yjz6gIpNsgb8+3wxeIrWJ86K4ZnLylDeWYIL9mXh+E2Dz 1RpkIfhqSAP9Uw7dUWQ5aSq1MFKxTG09BAW4tb5Iopg/J0/kcDTzbLLxUPFqTbYb MIH2kiE/dM9+JiSd5ifEgcNcSOYlXUzUbWlg6vIcIwKwYE7k/UNmHtDPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4TsNdQ6Pv1WI8ech6q6hReVjvLMB8GA1UdIwQY MBaAFDut6x844lGp2NYU8y028mrfT9WAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUt NGM4N2ZlNWZkYWRjLzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUtNGM4N2ZlNWZkYWRj LzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkGeXCR8 w+9p7jo3vqCt8nIWKkqvHz039ionnWO2+LXSJFgB+mSNP1FyFZc0LvZWeauavcjt huuqFSkwxKydDQ4y5laJaiDgJ58/qohRe0MaC3zx+qE/46mwpq8/uYPDobNK/2H2 NXsIOb6YnWyUquCFrIEtAtKmjCCrhRxFnVHZdK8xT6bhw8AJVYB5umDtJxYm/kIi xdfwR7iKZWQ42TdjE08s2JS4utKgR4vHya6snp/OQgvRaLoDMpTvZN7G28cwXpOW 3ZmFoiyojvP/NF9N38q/UZnNh1DXNdHvzIctCZFOt9osxWyuPxP9hJYTKGrcut4I FF/42iIMlfeKIA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:08:24 2025 by rpki-client