This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json) Hash identifier: pFrwiI3LIbItjoFqvB91oViuLDsa52WohnDQvlgqvs0= Subject key identifier: 93:0E:3D:72:94:0D:80:0A:0A:46:1C:49:C2:AD:B5:D1:82:36:37:B9 Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Certificate serial: 019B202AF16F04B44464983C3F89FF88C416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 04:00:43 +0000 Manifest this update: Mon 15 Dec 2025 04:00:43 +0000 Manifest next update: Tue 16 Dec 2025 04:00:43 +0000 Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: 3Ih0NqHcZJlFwKpX4xb4wVfY7xMPYtKs1TozTL+Pne4=) 2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2a:f1:6f:04:b4:44:64:98:3c:3f:89:ff:88:c4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Validity Not Before: Dec 15 04:00:43 2025 GMT Not After : Dec 16 04:00:43 2025 GMT Subject: CN=930e3d72940d800a0a461c49c2adb5d1823637b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:b8:ed:ce:07:71:c3:20:65:13:9f:51:fc: 0e:61:9e:54:81:47:d5:d3:bc:83:25:f6:ad:85:1b: f9:73:38:7b:38:95:16:43:fb:2e:91:a4:5f:89:c0: 99:12:a1:34:22:39:19:d7:48:89:a2:6e:de:5a:2c: 7e:3f:b2:61:06:5f:a1:a0:8c:ed:e5:69:f4:fb:f4: 9b:b5:a2:12:98:7d:31:66:07:ac:10:6e:2f:fe:82: f4:6b:40:c4:24:67:cf:e5:67:61:ae:64:6d:3f:99: 55:d9:6c:db:74:e2:db:d8:37:60:5a:80:0f:a6:1a: 66:42:7d:66:84:00:a9:62:6a:ba:b4:87:bd:78:22: 54:b8:31:74:33:90:f2:33:64:08:49:4f:8f:ba:23: ee:4b:35:ed:69:ba:77:ab:bd:a4:ea:c8:2d:69:43: de:a8:58:ef:77:e3:4c:1e:ab:d7:4c:45:2f:8f:a3: e2:17:f6:48:b4:d9:79:97:dd:87:f4:83:9e:70:70: 33:ff:65:4f:df:ef:70:02:61:60:db:f2:7b:bf:f9: dd:54:dc:51:cf:5e:0e:12:99:5d:06:b2:2e:b1:d5: c1:3c:cc:aa:06:e5:c9:ea:e7:dc:37:fd:94:44:d8: f2:4b:53:12:0d:e9:19:eb:4c:0f:8b:9a:96:08:b3: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:3D:72:94:0D:80:0A:0A:46:1C:49:C2:AD:B5:D1:82:36:37:B9 X509v3 Authority Key Identifier: keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ab:d6:31:fd:00:d8:a2:15:d6:34:a9:9e:6d:a4:e5:3a:f8: 38:ff:09:8a:be:90:58:56:e2:77:13:b9:e3:cb:6d:7b:91:bd: 98:89:1d:1d:12:ea:1b:f1:ad:78:53:f0:6f:3e:c7:fd:13:5e: 81:4c:e7:eb:8a:d6:d9:3f:2b:8d:76:41:e6:be:ad:11:89:2c: 9a:d3:eb:3b:1d:ad:68:12:65:63:97:65:42:67:e6:90:01:7a: 88:63:86:dc:fd:47:44:33:81:ba:09:44:6a:cb:bf:24:38:36: 64:7f:c7:00:ca:8d:94:f8:63:95:99:1b:0a:11:d4:91:d3:03: d1:a8:b4:b2:25:7f:43:65:82:fb:40:66:ee:58:3d:7f:02:2b: 17:0e:ac:67:68:c5:74:db:2d:3e:99:b9:f2:84:70:b1:8a:5e: b5:d2:c3:1a:79:aa:fb:ef:25:7b:b4:5a:a2:93:15:7b:af:eb: fc:36:e1:c9:6c:38:f9:18:82:03:04:e6:e6:73:49:6f:da:ed: d9:d6:68:7d:82:6a:44:db:a5:43:ee:a9:02:6d:24:2d:61:b3: cc:0a:ff:2c:34:65:b4:0b:d8:37:b1:e5:ca:b6:e1:7e:d6:cf: eb:e6:cc:31:46:32:f3:20:c0:f7:cd:30:a7:d0:e0:9a:73:a1: c5:a7:06:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKvFvBLREZJg8P4n/iMQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl MDZmYzEwHhcNMjUxMjE1MDQwMDQzWhcNMjUxMjE2MDQwMDQzWjAzMTEwLwYDVQQD Eyg5MzBlM2Q3Mjk0MGQ4MDBhMGE0NjFjNDljMmFkYjVkMTgyMzYzN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpW47c4HccMgZROfUfwOYZ5UgUfV 07yDJfathRv5czh7OJUWQ/sukaRficCZEqE0IjkZ10iJom7eWix+P7JhBl+hoIzt 5Wn0+/SbtaISmH0xZgesEG4v/oL0a0DEJGfP5WdhrmRtP5lV2WzbdOLb2DdgWoAP phpmQn1mhACpYmq6tIe9eCJUuDF0M5DyM2QISU+PuiPuSzXtabp3q72k6sgtaUPe qFjvd+NMHqvXTEUvj6PiF/ZItNl5l92H9IOecHAz/2VP3+9wAmFg2/J7v/ndVNxR z14OEpldBrIusdXBPMyqBuXJ6ufcN/2URNjyS1MSDekZ60wPi5qWCLOEfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMOPXKUDYAKCkYcScKttdGCNje5MB8GA1UdIwQY MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKvWMf0A 2KIV1jSpnm2k5Tr4OP8Jir6QWFbidxO548tte5G9mIkdHRLqG/GteFPwbz7H/RNe gUzn64rW2T8rjXZB5r6tEYksmtPrOx2taBJlY5dlQmfmkAF6iGOG3P1HRDOBuglE asu/JDg2ZH/HAMqNlPhjlZkbChHUkdMD0ai0siV/Q2WC+0Bm7lg9fwIrFw6sZ2jF dNstPpm58oRwsYpetdLDGnmq++8le7RaopMVe6/r/DbhyWw4+RiCAwTm5nNJb9rt 2dZofYJqRNulQ+6pAm0kLWGzzAr/LDRltAvYN7HlyrbhftbP6+bMMUYy8yDA980w p9DgmnOhxacGsw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:37 2025 by rpki-client