This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json) Hash identifier: YvA0u1Dn8UNliV8HojJyKszyWewbno3L8W/a9fI+cCs= Subject key identifier: F4:4D:39:60:3E:86:99:8E:30:46:AE:A0:21:A4:3C:F4:6D:3C:EC:0E Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37 Certificate serial: 019B0F6E886F94ABCC7E064E4383231A1672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 22:01:00 +0000 Manifest this update: Thu 11 Dec 2025 22:01:00 +0000 Manifest next update: Fri 12 Dec 2025 22:01:00 +0000 Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=) 2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: aHBpzgIZZaBwSf1Bo4rE+OvbxyjGnDwVPHkDpS2150g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:88:6f:94:ab:cc:7e:06:4e:43:83:23:1a:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37 Validity Not Before: Dec 11 22:01:00 2025 GMT Not After : Dec 12 22:01:00 2025 GMT Subject: CN=f44d39603e86998e3046aea021a43cf46d3cec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:4e:98:0d:f7:43:63:57:45:16:e3:bf:0a: 0a:67:ba:46:dc:8e:75:c3:c8:27:22:44:64:48:0e: e4:7a:85:8d:4b:1a:9a:c2:9d:bc:49:be:de:f8:79: 92:9e:5c:5c:0e:b8:31:d5:27:77:e4:c2:77:9d:1c: 09:17:88:a5:23:1b:a4:78:d2:4a:56:ef:f4:ff:1a: 95:db:11:1d:33:7c:11:05:b4:01:77:04:e2:9f:6b: ce:f9:df:a8:3d:b7:0e:7d:45:3e:63:4f:31:63:7f: b8:90:f6:e9:d6:33:06:fe:3c:c7:15:f6:ce:87:60: ac:0a:f6:56:00:42:f5:f0:71:a3:40:68:fe:34:0b: ca:f3:49:d2:a8:d9:95:2f:0b:a5:23:5a:04:6c:16: b4:01:f2:9a:6d:e4:eb:73:a3:67:e4:09:a7:29:9f: e1:79:0e:de:dd:dd:9b:bd:35:2e:f9:e5:dc:d0:6c: b2:d9:27:f0:89:1b:79:e0:94:66:b4:43:69:e9:7f: 55:30:8e:6c:87:8c:d6:13:58:76:a8:90:0e:29:e1: 2e:9d:61:4b:5d:c9:1d:dd:71:ad:77:68:6e:66:b6: b5:9e:f5:53:81:dd:67:fe:37:c9:08:fb:e9:15:02: f1:de:26:7a:97:b6:84:f8:59:57:34:a4:c6:81:73: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4D:39:60:3E:86:99:8E:30:46:AE:A0:21:A4:3C:F4:6D:3C:EC:0E X509v3 Authority Key Identifier: keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f8:18:95:d9:96:77:c9:b0:89:94:0c:80:06:d4:ba:be:40: a9:18:e1:c9:3a:f7:06:af:51:bc:16:9f:be:cb:9f:51:46:23: ea:36:67:32:b1:73:e2:77:7f:c4:03:96:0e:4f:e9:8e:23:57: 26:3e:f4:0f:33:39:57:84:c0:b1:5c:33:8f:87:77:e8:eb:09: c3:c0:69:d1:67:d2:50:93:8e:0e:37:b8:56:f7:4d:bb:83:f6: bd:97:88:cb:46:03:82:b1:fd:af:19:79:ef:a5:ce:ec:0b:2b: 67:a5:a9:fc:bb:ab:bd:6f:3d:a7:ab:ef:52:72:ca:0c:86:7a: 46:3b:22:71:ef:c9:d4:69:65:e0:2a:0d:92:11:c2:20:37:bb: c3:5e:81:b9:5c:fa:16:9c:53:a2:7e:e8:fc:18:79:a4:c9:78: 62:50:32:d6:ab:96:b4:a9:6b:78:d2:9e:dc:cb:bb:75:7d:0e: eb:d2:7c:76:0d:cf:5b:dd:e7:29:61:23:2c:91:d0:e5:34:c3: 08:ba:08:a0:d2:30:73:dd:8f:e7:95:1a:1e:d4:67:2c:6f:d1: 90:1f:20:bd:b3:9c:d8:ca:18:ef:4a:2d:00:8c:8b:9e:7c:83: 06:36:c1:b0:dc:88:16:e9:93:03:77:c8:f0:f3:58:30:6f:e2: 83:29:89:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbohvlKvMfgZOQ4MjGhZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzN2ExMjZkNzg1NGVjZDU2NWFlODI5NzBjNjkzZjMzNTlm ODVmMzcwHhcNMjUxMjExMjIwMTAwWhcNMjUxMjEyMjIwMTAwWjAzMTEwLwYDVQQD EyhmNDRkMzk2MDNlODY5OThlMzA0NmFlYTAyMWE0M2NmNDZkM2NlYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ1OmA33Q2NXRRbjvwoKZ7pG3I51 w8gnIkRkSA7keoWNSxqawp28Sb7e+HmSnlxcDrgx1Sd35MJ3nRwJF4ilIxukeNJK Vu/0/xqV2xEdM3wRBbQBdwTin2vO+d+oPbcOfUU+Y08xY3+4kPbp1jMG/jzHFfbO h2CsCvZWAEL18HGjQGj+NAvK80nSqNmVLwulI1oEbBa0AfKabeTrc6Nn5AmnKZ/h eQ7e3d2bvTUu+eXc0Gyy2SfwiRt54JRmtENp6X9VMI5sh4zWE1h2qJAOKeEunWFL Xckd3XGtd2huZra1nvVTgd1n/jfJCPvpFQLx3iZ6l7aE+FlXNKTGgXO8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRNOWA+hpmOMEauoCGkPPRtPOwOMB8GA1UdIwQY MBaAFKN6Em14VOzVZa6ClwxpPzNZ+F83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDkt Nzg2Y2IxMjk2ZTU4LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDktNzg2Y2IxMjk2ZTU4 LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/gYldmW d8mwiZQMgAbUur5AqRjhyTr3Bq9RvBafvsufUUYj6jZnMrFz4nd/xAOWDk/pjiNX Jj70DzM5V4TAsVwzj4d36OsJw8Bp0WfSUJOODje4VvdNu4P2vZeIy0YDgrH9rxl5 76XO7AsrZ6Wp/LurvW89p6vvUnLKDIZ6Rjsice/J1Gll4CoNkhHCIDe7w16BuVz6 FpxTon7o/Bh5pMl4YlAy1quWtKlreNKe3Mu7dX0O69J8dg3PW93nKWEjLJHQ5TTD CLoIoNIwc92P55UaHtRnLG/RkB8gvbOc2MoY70otAIyLnnyDBjbBsNyIFumTA3fI 8PNYMG/igymJYg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:52:53 2025 by rpki-client