This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: psBlf8siNEvXl99+WQ5Htl1xuj3Apg5+7/RbTrScT1Q= Subject key identifier: 26:53:64:17:E1:61:7E:CB:7B:07:D6:4E:EC:D9:A7:C6:CE:96:38:CD Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B1E057EE19C457AC73B6AAFB59CE8B418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1780 Signing time: Sun 14 Dec 2025 18:00:35 +0000 Manifest this update: Sun 14 Dec 2025 18:00:35 +0000 Manifest next update: Mon 15 Dec 2025 18:00:35 +0000 Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=) 2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: OizOw1vwH7eOfGbhAMBto3rv11b5ION9YV7a01JT3dc=) 3: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=) 4: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=) 5: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=) 6: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=) 7: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=) 8: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=) 9: xEqqXsYbNZoaeb1j-5HleNNIZTs.roa (hash: DriMeptRhAZWNYYwFItNxlYBiBVqZaoh9EMF2d4ArFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:7e:e1:9c:45:7a:c7:3b:6a:af:b5:9c:e8:b4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Dec 14 18:00:35 2025 GMT Not After : Dec 15 18:00:35 2025 GMT Subject: CN=26536417e1617ecb7b07d64eecd9a7c6ce9638cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:ba:75:00:84:06:56:6f:94:dd:21:db:fe: 65:bb:1e:8f:70:52:c9:09:f2:b6:f9:8f:c7:e1:45: 7b:5c:de:44:72:87:1d:c0:48:63:b4:11:fe:5f:1d: e7:0b:e6:5b:b7:ad:63:fd:09:eb:eb:1c:0c:f4:4e: 91:aa:6c:82:f4:91:78:22:da:fd:23:23:25:0b:40: e4:d5:7c:65:d3:c3:60:2f:da:42:23:a1:39:78:08: 4c:84:f9:1f:85:ee:4e:91:7e:7f:7c:29:aa:90:64: b7:75:38:06:44:77:b2:a0:70:27:9a:03:23:cc:4a: ab:29:52:dd:3c:50:54:46:4d:b3:c7:97:7b:8b:d9: 1f:db:25:be:3b:d2:d3:17:2d:d8:f2:a2:13:1b:83: 0c:c6:3b:d5:94:4a:c8:48:22:53:58:58:8b:12:ce: 7b:eb:fd:2b:4a:b1:fd:a1:91:b4:5c:78:f3:f7:f3: e9:3f:c0:d9:39:95:36:33:97:eb:93:99:d7:58:84: 47:70:bc:df:12:49:d9:bb:62:be:20:5a:99:95:1d: 95:8c:71:57:81:ff:3e:6f:23:d3:28:60:c6:03:a4: 1b:f9:da:fa:0d:a2:b0:42:57:65:98:d8:04:db:7c: 5f:70:84:ca:ca:02:bd:a2:cc:a5:00:d8:02:15:3e: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:53:64:17:E1:61:7E:CB:7B:07:D6:4E:EC:D9:A7:C6:CE:96:38:CD X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9b:b7:49:fe:d0:30:1d:35:94:1f:4d:45:f0:3a:07:38:e4: 4b:45:dd:7f:4a:05:58:aa:8e:ac:76:ea:20:fc:82:2b:81:77: 7d:b6:26:9d:f5:72:bc:c3:11:98:ac:6a:5e:35:ab:42:e9:35: 8b:ed:10:be:43:9d:e6:49:f0:9d:0d:94:d9:ff:49:97:03:ac: f7:27:67:61:ee:84:8d:84:db:b8:6b:d5:20:8a:0e:43:e9:7b: 98:2c:f5:42:35:54:64:fa:99:fd:ad:d2:ab:df:c1:e6:30:2e: 30:2d:0a:9a:58:da:59:ac:1b:e4:76:5d:df:8f:e2:47:ce:ff: ff:6d:ce:3f:c2:15:ec:5e:48:f4:b4:1c:0b:f2:98:b5:e2:2f: 59:b4:97:63:6f:25:e8:d6:d0:d2:0e:6a:d5:e5:44:e8:ca:1f: a0:f9:58:b4:58:b9:a4:9f:0e:58:1d:8e:c8:1a:be:bc:4f:50: ce:38:cc:45:2c:a1:ba:b1:aa:de:b7:ae:ce:ef:0a:f7:1c:ba: 14:bf:06:f0:49:a0:d2:b4:ec:78:d1:e5:28:4d:83:a5:dc:4b: e7:80:ea:4a:22:36:09:ed:57:aa:1c:1c:f0:89:2d:70:c1:c0: c1:64:f5:b7:46:3f:3d:07:0f:e6:aa:00:0e:58:ee:8f:d7:1e: 2d:e0:be:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBX7hnEV6xztqr7Wc6LQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjUxMjE0MTgwMDM1WhcNMjUxMjE1MTgwMDM1WjAzMTEwLwYDVQQD EygyNjUzNjQxN2UxNjE3ZWNiN2IwN2Q2NGVlY2Q5YTdjNmNlOTYzOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoa6dQCEBlZvlN0h2/5lux6PcFLJ CfK2+Y/H4UV7XN5EcocdwEhjtBH+Xx3nC+Zbt61j/Qnr6xwM9E6RqmyC9JF4Itr9 IyMlC0Dk1Xxl08NgL9pCI6E5eAhMhPkfhe5OkX5/fCmqkGS3dTgGRHeyoHAnmgMj zEqrKVLdPFBURk2zx5d7i9kf2yW+O9LTFy3Y8qITG4MMxjvVlErISCJTWFiLEs57 6/0rSrH9oZG0XHjz9/PpP8DZOZU2M5frk5nXWIRHcLzfEknZu2K+IFqZlR2VjHFX gf8+byPTKGDGA6Qb+dr6DaKwQldlmNgE23xfcITKygK9osylANgCFT763QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZTZBfhYX7LewfWTuzZp8bOljjNMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJu3Sf7Q MB01lB9NRfA6BzjkS0Xdf0oFWKqOrHbqIPyCK4F3fbYmnfVyvMMRmKxqXjWrQuk1 i+0QvkOd5knwnQ2U2f9JlwOs9ydnYe6EjYTbuGvVIIoOQ+l7mCz1QjVUZPqZ/a3S q9/B5jAuMC0KmljaWawb5HZd34/iR87//23OP8IV7F5I9LQcC/KYteIvWbSXY28l 6NbQ0g5q1eVE6MofoPlYtFi5pJ8OWB2OyBq+vE9QzjjMRSyhurGq3reuzu8K9xy6 FL8G8Emg0rTseNHlKE2DpdxL54DqSiI2Ce1Xqhwc8IktcMHAwWT1t0Y/PQcP5qoA Dljuj9ceLeC+kQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:30 2025 by rpki-client