This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json) Hash identifier: SmCum9k4qVhHIg2PePeY32A0S7QYoyetYf0RGrmvey8= Subject key identifier: 08:FE:98:CD:50:41:66:D3:F3:5F:6B:15:6A:7D:6E:B7:6A:24:C1:BB Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589 Certificate serial: 019B21755CF47E55BB46093C7836416A7C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 10:01:38 +0000 Manifest this update: Mon 15 Dec 2025 10:01:38 +0000 Manifest next update: Tue 16 Dec 2025 10:01:38 +0000 Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: L/68KvqIySrWF8cNS1f0usDyI2faYLV90r/eXmzDNpw=) 2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:5c:f4:7e:55:bb:46:09:3c:78:36:41:6a:7c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be9593d290e0250278a73b313550329327bd589 Validity Not Before: Dec 15 10:01:38 2025 GMT Not After : Dec 16 10:01:38 2025 GMT Subject: CN=08fe98cd504166d3f35f6b156a7d6eb76a24c1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:8f:7e:53:32:08:f7:ca:0e:04:bd:82:81: 86:05:d5:92:58:d6:c4:93:66:8e:1d:67:11:22:ef: 6d:d5:b8:c5:09:0b:a9:20:60:74:1a:4c:a9:1e:17: b7:bb:98:ff:a0:d4:9b:3d:fc:24:98:b2:e6:a1:bd: 6f:54:64:30:bc:e8:6d:4c:70:a2:fa:e6:7b:b3:52: 80:1c:d0:b7:d8:fe:1e:7c:ca:e0:87:c8:83:cb:3b: a1:74:76:03:bb:1e:8d:f8:d6:56:82:21:cf:e1:bb: 65:22:5a:5c:4e:54:ac:64:7c:d5:01:6a:ab:6a:35: 4e:2f:77:4d:b9:5a:de:83:d2:5d:ad:80:41:65:83: 30:fa:95:9b:bd:53:31:90:31:ae:3c:cb:a5:30:d6: cf:1a:d9:e3:0a:9b:45:88:ae:72:c5:9e:39:cb:c2: 17:bc:fc:24:af:3a:6d:6b:79:65:9c:18:c8:7a:36: ed:8a:8c:89:ed:04:31:8a:1b:f7:44:20:13:b8:a0: c0:78:40:25:f3:99:b8:2a:a3:25:11:86:d1:3e:41: 3c:61:b5:5a:42:98:7f:61:96:85:02:46:12:f2:d4: 56:9c:48:3a:46:62:3b:dc:58:bd:fa:bc:46:4c:14: 1e:7d:66:16:95:9b:0d:04:fc:ab:85:51:06:47:aa: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:98:CD:50:41:66:D3:F3:5F:6B:15:6A:7D:6E:B7:6A:24:C1:BB X509v3 Authority Key Identifier: keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:6b:8d:58:8d:c5:3b:a8:0d:c4:5f:49:2f:98:26:c9:b7:87: e2:7a:cf:e5:60:39:0f:87:94:a9:d3:d8:d9:40:bb:44:45:ad: 9d:d6:9a:1c:8c:f8:97:c1:5a:c0:0e:f8:de:26:b4:b2:bd:81: 5c:12:24:b4:5d:32:bd:5b:45:42:a1:86:e5:93:ea:b7:a7:a2: e7:63:ae:a0:4d:7b:29:af:72:2d:a6:e7:cf:12:0f:45:1d:b4: 84:41:d0:91:75:ab:dc:ea:18:52:8d:c6:32:11:d7:e9:a3:88: d5:c1:64:5f:94:6c:c2:4a:5d:b7:ec:da:90:c1:76:49:1b:16: 05:66:fc:8d:ce:32:68:07:08:22:95:c3:f0:b8:60:85:1f:97: 5b:18:89:cf:43:b4:24:11:ac:70:fa:12:4b:cd:e6:6c:5f:6f: 87:6e:f8:6e:f3:5f:23:b7:b2:6d:0a:1c:08:2f:4c:51:1a:50: b5:fb:25:50:6e:65:cf:dd:82:8d:51:35:50:9a:9a:cb:2a:52: e6:a6:c7:f1:98:ab:10:20:4b:f0:47:cb:ca:5f:9b:f8:b9:d5: 4d:df:eb:99:63:40:fe:85:62:2e:3a:1e:3b:f0:11:e6:93:cc: cb:a7:3b:85:1e:a7:8b:f6:76:e3:5f:14:13:c4:e8:29:1a:bf: 36:69:b7:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdVz0flW7Rgk8eDZBanwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTk1OTNkMjkwZTAyNTAyNzhhNzNiMzEzNTUwMzI5MzI3 YmQ1ODkwHhcNMjUxMjE1MTAwMTM4WhcNMjUxMjE2MTAwMTM4WjAzMTEwLwYDVQQD EygwOGZlOThjZDUwNDE2NmQzZjM1ZjZiMTU2YTdkNmViNzZhMjRjMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotGPflMyCPfKDgS9goGGBdWSWNbE k2aOHWcRIu9t1bjFCQupIGB0GkypHhe3u5j/oNSbPfwkmLLmob1vVGQwvOhtTHCi +uZ7s1KAHNC32P4efMrgh8iDyzuhdHYDux6N+NZWgiHP4btlIlpcTlSsZHzVAWqr ajVOL3dNuVreg9JdrYBBZYMw+pWbvVMxkDGuPMulMNbPGtnjCptFiK5yxZ45y8IX vPwkrzpta3llnBjIejbtioyJ7QQxihv3RCATuKDAeEAl85m4KqMlEYbRPkE8YbVa Qph/YZaFAkYS8tRWnEg6RmI73Fi9+rxGTBQefWYWlZsNBPyrhVEGR6pmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj+mM1QQWbT819rFWp9brdqJMG7MB8GA1UdIwQY MBaAFDvpWT0pDgJQJ4pzsxNVAykye9WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUt NGVhYjA2MGYxNWZhLzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUtNGVhYjA2MGYxNWZh LzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2muNWI3F O6gNxF9JL5gmybeH4nrP5WA5D4eUqdPY2UC7REWtndaaHIz4l8FawA743ia0sr2B XBIktF0yvVtFQqGG5ZPqt6ei52OuoE17Ka9yLabnzxIPRR20hEHQkXWr3OoYUo3G MhHX6aOI1cFkX5Rswkpdt+zakMF2SRsWBWb8jc4yaAcIIpXD8LhghR+XWxiJz0O0 JBGscPoSS83mbF9vh274bvNfI7eybQocCC9MURpQtfslUG5lz92CjVE1UJqayypS 5qbH8ZirECBL8EfLyl+b+LnVTd/rmWNA/oViLjoeO/AR5pPMy6c7hR6ni/Z2418U E8ToKRq/Nmm3WA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:59 2025 by rpki-client