This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json) Hash identifier: IhkxAZi6skWhCrM6i55zJcG1Ak9MqnFT8oyX74KZfwg= Subject key identifier: 8E:5B:D8:2B:AA:F5:FD:11:C9:33:54:5B:15:62:BD:3A:70:C6:AB:8B Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Certificate serial: 019B19F22E33BD1DF0BB4839525F07994100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft Manifest number: 1783 Signing time: Sat 13 Dec 2025 23:01:00 +0000 Manifest this update: Sat 13 Dec 2025 23:01:00 +0000 Manifest next update: Sun 14 Dec 2025 23:01:00 +0000 Files and hashes: 1: 1-DSDcmBiDKFb6VquEmhzF8L0wgY.roa (hash: kn5/yoEkio+rOL/nvOGnA97NLu9l5J3xtE4XD8pwcyQ=) 2: 4Q1d_1qJStY2YgdMtFxWByd43xk.roa (hash: Nb2kU2nUmYaxXRwakXUCnJcu98fiO67U+luM1LfGDUA=) 3: 8lOaqtsjMmULUhV5yRWoYjJ1trY.roa (hash: jysyQu1rsVLf4s/iTj5T9Bz/5UbDn6huVCMVFZ0JofQ=) 4: ET7Ww-Pz-K3BSE0NQA5iLoY01kw.roa (hash: OD/HeBaoQdSLTiyfZzj0e108oz+4+axO1jk3ZlLPhaM=) 5: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=) 6: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: hxsqeedAIOvbDcg+6ottHyPH/9xkjtwyjjp1XX1eR6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:2e:33:bd:1d:f0:bb:48:39:52:5f:07:99:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Validity Not Before: Dec 13 23:01:00 2025 GMT Not After : Dec 14 23:01:00 2025 GMT Subject: CN=8e5bd82baaf5fd11c933545b1562bd3a70c6ab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:ce:61:05:14:14:09:7a:2e:c7:f7:74:d7: 20:93:b4:78:24:8c:48:5f:51:4a:04:78:97:f7:58: f9:63:66:08:ab:4a:a9:ea:99:be:9a:3f:65:76:11: b1:d5:44:89:bb:5c:f7:cb:ee:9e:0a:73:af:ad:db: b6:26:b5:a0:cc:b9:ad:fe:d2:84:fd:c1:b2:59:8a: d0:b4:f2:f2:38:53:3a:87:e5:a2:9d:40:27:d0:5c: cf:85:35:74:2d:88:8c:8c:56:c4:bd:4c:f4:86:a2: 98:8b:d2:6d:18:84:74:e7:63:a4:e8:0a:69:47:e8: f9:0c:ff:0b:08:ad:00:bf:8f:85:47:c1:7e:be:01: 30:83:41:fe:61:9c:b7:0e:9d:2d:9f:09:f7:42:25: 85:04:81:26:c1:31:93:37:b6:7f:80:ec:10:b6:7b: bf:80:b6:55:19:8b:69:73:8f:c1:f6:74:a9:59:85: a0:22:13:2d:b3:3e:86:d9:9e:8c:30:18:7b:43:a7: ea:db:4f:0a:8e:ea:d9:e7:36:37:40:88:b1:f5:31: b9:6e:f3:51:37:f0:04:ee:af:20:4f:c0:d8:9b:e6: 35:26:19:95:f5:4c:35:16:bd:12:e8:fb:68:df:c1: ff:46:47:09:17:77:50:95:4c:cf:94:f9:82:97:82: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:D8:2B:AA:F5:FD:11:C9:33:54:5B:15:62:BD:3A:70:C6:AB:8B X509v3 Authority Key Identifier: keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:3d:ba:7d:19:f0:3b:9f:df:ee:32:a5:75:a1:40:d2:af: 66:66:c9:82:58:dd:51:5c:dd:ab:e4:b0:35:c9:b9:51:31:d3: 6b:3e:18:de:02:50:b9:b0:a6:78:9f:f0:0d:5c:f1:fd:65:61: 36:77:b4:43:ac:42:3e:8d:f2:93:df:e2:3e:09:99:6f:ff:1c: 46:bd:75:f1:b5:8a:30:46:78:62:f8:c3:f3:b1:9e:5d:3d:f4: 33:75:67:17:0e:ab:a9:56:05:2e:9c:22:cb:14:e3:e8:66:8f: 44:19:53:d0:28:ec:66:17:b8:b0:db:8d:43:4d:03:5d:6b:85: 77:68:f5:b0:ff:f3:7e:92:b1:e5:98:30:90:2b:81:ef:57:f2: cd:2c:6f:aa:90:27:4d:3c:b2:cc:a4:e2:80:c7:48:24:ad:ab: 0b:b8:1d:73:3c:6f:8d:c7:2e:79:e0:5a:88:8e:f2:7a:2c:76: 52:71:43:fc:ec:e7:14:69:59:af:f8:9b:cb:3b:f3:26:5d:5c: e5:b5:7e:09:d6:57:db:03:5d:b8:d3:d0:26:e4:64:db:44:ba: 9c:59:84:cc:2e:24:fc:d5:fd:7e:7b:44:2f:e5:66:17:b3:4b: 36:39:25:aa:aa:20:5b:3a:fa:81:70:5b:67:d8:25:78:29:82: 79:fc:be:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8i4zvR3wu0g5Ul8HmUEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk ZjA1NjMwHhcNMjUxMjEzMjMwMTAwWhcNMjUxMjE0MjMwMTAwWjAzMTEwLwYDVQQD Eyg4ZTViZDgyYmFhZjVmZDExYzkzMzU0NWIxNTYyYmQzYTcwYzZhYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBnOYQUUFAl6Lsf3dNcgk7R4JIxI X1FKBHiX91j5Y2YIq0qp6pm+mj9ldhGx1USJu1z3y+6eCnOvrdu2JrWgzLmt/tKE /cGyWYrQtPLyOFM6h+WinUAn0FzPhTV0LYiMjFbEvUz0hqKYi9JtGIR052Ok6App R+j5DP8LCK0Av4+FR8F+vgEwg0H+YZy3Dp0tnwn3QiWFBIEmwTGTN7Z/gOwQtnu/ gLZVGYtpc4/B9nSpWYWgIhMtsz6G2Z6MMBh7Q6fq208KjurZ5zY3QIix9TG5bvNR N/AE7q8gT8DYm+Y1JhmV9Uw1Fr0S6Pto38H/RkcJF3dQlUzPlPmCl4KPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5b2Cuq9f0RyTNUWxVivTpwxquLMB8GA1UdIwQY MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct NTU2NzI2MzRjYmMxLzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch89un0Z 8Duf3+4ypXWhQNKvZmbJgljdUVzdq+SwNcm5UTHTaz4Y3gJQubCmeJ/wDVzx/WVh Nne0Q6xCPo3yk9/iPgmZb/8cRr118bWKMEZ4YvjD87GeXT30M3VnFw6rqVYFLpwi yxTj6GaPRBlT0CjsZhe4sNuNQ00DXWuFd2j1sP/zfpKx5ZgwkCuB71fyzSxvqpAn TTyyzKTigMdIJK2rC7gdczxvjccueeBaiI7yeix2UnFD/OznFGlZr/ibyzvzJl1c 5bV+CdZX2wNduNPQJuRk20S6nFmEzC4k/NX9fntEL+VmF7NLNjklqqogWzr6gXBb Z9gleCmCefy+Cg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:41:51 2025 by rpki-client