This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json) Hash identifier: D2EN7Ik8dME0BZlDQ44eIigdWcHxTeZvpGy/ShJHoXc= Subject key identifier: 6A:8A:F3:4F:7E:44:F3:B9:18:02:88:D0:1B:D8:5F:5C:84:CE:27:44 Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Certificate serial: 019B36B45E0A1B09A8A384E709AA261AC82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft Manifest number: 1158 Signing time: Fri 19 Dec 2025 13:02:28 +0000 Manifest this update: Fri 19 Dec 2025 13:02:28 +0000 Manifest next update: Sat 20 Dec 2025 13:02:28 +0000 Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=) 2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=) 3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=) 4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: gZePyt12MDQSmXexfP7PHHZto7S6yQkGJ4bYiglN3j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:5e:0a:1b:09:a8:a3:84:e7:09:aa:26:1a:c8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Validity Not Before: Dec 19 13:02:28 2025 GMT Not After : Dec 20 13:02:28 2025 GMT Subject: CN=6a8af34f7e44f3b9180288d01bd85f5c84ce2744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:4c:ad:88:5e:c8:34:63:b0:74:fa:8d:75: 40:42:10:16:40:01:dd:04:6b:15:a9:93:c3:af:65: f7:2f:42:ce:51:e5:f0:8d:96:33:73:71:5f:30:1d: 06:3e:03:61:d0:10:df:6b:12:b6:ad:3a:5c:e8:1d: 17:2e:b4:9d:63:ef:e8:b7:ff:00:4f:cc:d8:3c:aa: 2e:7e:af:51:bf:01:cf:cb:cb:0a:ce:da:b1:cd:8f: 62:67:06:21:57:bc:fe:a9:e5:88:0d:88:c8:6f:e0: 39:16:eb:a3:99:1b:01:4e:5c:d0:65:2e:c2:c5:00: 07:65:e7:02:4c:be:82:b5:85:e8:63:52:08:c5:4b: 5a:12:d9:47:2d:7f:9f:bf:f3:94:49:0b:c6:7a:fb: 24:b9:fe:f3:37:d7:7a:5b:df:2e:00:9a:4e:a4:b6: 85:c1:68:c0:6d:89:50:ad:31:44:8a:e4:7c:a8:1f: 6c:c3:1e:7e:01:02:d3:a0:db:ea:96:df:43:c3:46: af:1c:86:cf:d3:54:c0:b0:1d:24:20:d9:91:1e:74: 2c:71:ad:ea:ca:b1:cc:95:06:c3:07:56:36:2b:f6: 9c:aa:01:22:c6:b7:af:b5:e1:e4:4e:ce:dc:57:05: f6:48:54:a4:27:ff:14:3f:43:40:b1:9d:b4:74:1e: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8A:F3:4F:7E:44:F3:B9:18:02:88:D0:1B:D8:5F:5C:84:CE:27:44 X509v3 Authority Key Identifier: keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:39:60:13:34:95:fc:b8:52:47:ec:f7:c3:c9:4e:b1:04:12: 25:5e:5b:90:6c:34:95:b9:eb:4a:55:6b:ac:d7:83:16:aa:64: b5:f6:ed:f4:5c:b4:e0:01:7a:fa:1c:25:e6:fb:b8:5c:f5:0a: 19:f7:e3:82:ef:88:64:1e:93:88:59:71:40:99:44:e7:1f:a8: 65:9f:22:47:ac:76:61:27:45:00:53:21:4c:6e:ea:0e:af:97: 81:1f:d6:f5:11:43:c1:35:55:69:e4:a4:d2:d1:6a:ab:79:11: e0:9b:31:6f:aa:ac:bd:2e:e0:c9:1c:76:1a:ea:0a:4f:ad:f9: 1c:d0:d8:48:a0:7b:ae:ae:ba:28:66:f0:41:b1:85:0e:8f:bf: 31:51:b2:6b:58:03:dc:94:a1:d5:1f:d2:01:b9:50:cd:cd:f5: 15:68:fa:c9:27:ee:77:57:68:05:2f:4b:ba:f1:ee:9a:7b:0e: 7d:3a:57:68:5e:bb:5f:8d:d0:d5:f0:8c:a7:d3:35:5c:ee:42: 25:b7:55:94:3e:98:fb:e8:1c:fe:7d:74:84:ca:7e:e1:6a:73: b6:c5:73:a5:86:a5:22:db:7c:7a:e2:cc:7e:68:58:21:56:c8: df:7e:7c:6a:85:12:6c:01:04:93:2f:a6:35:56:0d:ce:51:19: d2:a6:60:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tF4KGwmoo4TnCaomGsgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz ZTgxZjEwHhcNMjUxMjE5MTMwMjI4WhcNMjUxMjIwMTMwMjI4WjAzMTEwLwYDVQQD Eyg2YThhZjM0ZjdlNDRmM2I5MTgwMjg4ZDAxYmQ4NWY1Yzg0Y2UyNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AZMrYheyDRjsHT6jXVAQhAWQAHd BGsVqZPDr2X3L0LOUeXwjZYzc3FfMB0GPgNh0BDfaxK2rTpc6B0XLrSdY+/ot/8A T8zYPKoufq9RvwHPy8sKztqxzY9iZwYhV7z+qeWIDYjIb+A5FuujmRsBTlzQZS7C xQAHZecCTL6CtYXoY1IIxUtaEtlHLX+fv/OUSQvGevskuf7zN9d6W98uAJpOpLaF wWjAbYlQrTFEiuR8qB9swx5+AQLToNvqlt9Dw0avHIbP01TAsB0kINmRHnQsca3q yrHMlQbDB1Y2K/acqgEixrevteHkTs7cVwX2SFSkJ/8UP0NAsZ20dB4nKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqK809+RPO5GAKI0BvYX1yEzidEMB8GA1UdIwQY MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTlgEzSV /LhSR+z3w8lOsQQSJV5bkGw0lbnrSlVrrNeDFqpktfbt9Fy04AF6+hwl5vu4XPUK Gffjgu+IZB6TiFlxQJlE5x+oZZ8iR6x2YSdFAFMhTG7qDq+XgR/W9RFDwTVVaeSk 0tFqq3kR4Jsxb6qsvS7gyRx2GuoKT635HNDYSKB7rq66KGbwQbGFDo+/MVGya1gD 3JSh1R/SAblQzc31FWj6ySfud1doBS9LuvHumnsOfTpXaF67X43Q1fCMp9M1XO5C JbdVlD6Y++gc/n10hMp+4WpztsVzpYalItt8euLMfmhYIVbI3358aoUSbAEEky+m NVYNzlEZ0qZg0A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:52:27 2025 by rpki-client