This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: NuaBcEdvHv36WD6sh3f8OsblF8xrUlbMvk+q4RlvG2c= Subject key identifier: BC:6C:05:E7:71:4C:B7:C6:43:49:99:41:51:A1:CF:4C:F8:67:92:09 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B0EC9E72A859BFB2038B6ABBF3C18A73D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14B9 Signing time: Thu 11 Dec 2025 19:01:11 +0000 Manifest this update: Thu 11 Dec 2025 19:01:11 +0000 Manifest next update: Fri 12 Dec 2025 19:01:11 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: jVoKi9e6kyPzy90CxZZHDUxJ6/x5UM6fewd+3QhFQzI=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:e7:2a:85:9b:fb:20:38:b6:ab:bf:3c:18:a7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 11 19:01:11 2025 GMT Not After : Dec 12 19:01:11 2025 GMT Subject: CN=bc6c05e7714cb7c64349994151a1cf4cf8679209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:ae:45:64:91:29:08:92:c7:52:4e:81:89: 1b:cb:fd:ae:b7:87:32:a7:fa:7e:e8:6e:3a:d6:a1: 75:23:54:d5:c6:98:b1:6a:49:64:c4:23:67:fe:53: b9:02:ea:da:b1:70:58:5f:65:95:b7:fb:2e:4e:cb: e5:b4:58:8f:22:c6:86:89:69:ff:ba:68:72:f9:ae: 2b:68:a4:78:50:13:2c:46:25:f1:b1:08:73:02:9a: 70:4a:a9:0d:fb:f9:a1:d3:33:80:82:81:15:2e:70: 67:a7:5e:bc:72:e0:cf:86:c0:6f:1d:a5:ad:50:9b: c4:25:5c:a2:79:8a:e6:82:36:8b:6b:f9:5c:28:e3: cf:a1:87:f8:4f:06:93:5c:83:65:df:78:06:cd:9c: 6f:83:4d:82:1a:b2:2e:94:b4:32:e6:d3:1f:8d:22: fa:07:97:7a:34:dd:f7:9c:69:66:4b:42:0f:0c:03: 1a:c9:7d:4a:86:4f:68:fe:f4:26:45:43:f6:c2:d0: 53:83:44:b0:e8:f5:c2:8c:17:91:2c:72:11:f0:68: 54:cf:b8:a6:dc:c8:bf:3d:38:93:15:dd:3f:3b:4c: 42:c2:9e:29:7a:50:95:e9:fa:52:dd:17:37:b5:88: 5d:e5:a1:58:dc:10:e0:54:f8:37:e1:af:9a:9c:38: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:05:E7:71:4C:B7:C6:43:49:99:41:51:A1:CF:4C:F8:67:92:09 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9e:08:6b:af:8f:1c:11:4e:37:ce:4b:13:68:8d:ae:f2:1d: 5b:24:fd:23:01:d6:97:c6:5e:94:53:37:ea:46:ba:9a:28:17: 7f:3f:48:9a:3e:b6:74:3f:f9:52:a0:92:94:52:3c:ce:c7:ed: e5:4b:14:ae:4f:37:94:44:4b:ab:31:11:02:52:56:67:18:26: 5a:35:cb:7c:92:fa:2f:59:b2:6e:04:fa:53:95:27:c1:0e:fb: 3d:2e:9b:e1:9a:20:d4:15:86:40:64:38:5c:18:7d:49:f8:32: 10:78:c4:22:d3:a4:35:c5:87:34:24:c4:8c:51:4a:6d:04:21: 81:d3:ff:98:85:4c:99:4e:d3:60:26:8f:0c:9d:05:a6:bf:dc: 4f:ef:77:4f:bf:df:8d:99:c6:60:28:73:65:43:b2:e1:39:e7: 16:f3:b1:2c:73:a1:b6:f5:89:5a:2a:ad:92:aa:65:a9:2a:1b: 92:58:39:33:4f:fd:d4:5d:c1:c9:9f:4a:25:4c:09:00:95:f4: e8:a3:ad:bb:39:72:8f:dd:0b:f6:aa:f8:e6:45:52:ff:86:f1: ce:02:af:c5:88:2e:5e:9f:aa:a6:c1:c8:01:2d:b8:e9:b2:07: 0d:4a:33:ee:75:1a:f3:2b:77:30:31:cb:a8:48:f5:04:81:47: 4f:87:02:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyecqhZv7IDi2q788GKc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjExMTkwMTExWhcNMjUxMjEyMTkwMTExWjAzMTEwLwYDVQQD EyhiYzZjMDVlNzcxNGNiN2M2NDM0OTk5NDE1MWExY2Y0Y2Y4Njc5MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iuRWSRKQiSx1JOgYkby/2ut4cy p/p+6G461qF1I1TVxpixaklkxCNn/lO5AurasXBYX2WVt/suTsvltFiPIsaGiWn/ umhy+a4raKR4UBMsRiXxsQhzAppwSqkN+/mh0zOAgoEVLnBnp168cuDPhsBvHaWt UJvEJVyieYrmgjaLa/lcKOPPoYf4TwaTXINl33gGzZxvg02CGrIulLQy5tMfjSL6 B5d6NN33nGlmS0IPDAMayX1Khk9o/vQmRUP2wtBTg0Sw6PXCjBeRLHIR8GhUz7im 3Mi/PTiTFd0/O0xCwp4pelCV6fpS3Rc3tYhd5aFY3BDgVPg34a+anDhx5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxsBedxTLfGQ0mZQVGhz0z4Z5IJMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ4Ia6+P HBFON85LE2iNrvIdWyT9IwHWl8ZelFM36ka6migXfz9Imj62dD/5UqCSlFI8zsft 5UsUrk83lERLqzERAlJWZxgmWjXLfJL6L1mybgT6U5UnwQ77PS6b4Zog1BWGQGQ4 XBh9SfgyEHjEItOkNcWHNCTEjFFKbQQhgdP/mIVMmU7TYCaPDJ0Fpr/cT+93T7/f jZnGYChzZUOy4TnnFvOxLHOhtvWJWiqtkqplqSobklg5M0/91F3ByZ9KJUwJAJX0 6KOtuzlyj90L9qr45kVS/4bxzgKvxYguXp+qpsHIAS246bIHDUoz7nUa8yt3MDHL qEj1BIFHT4cCJg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:21 2025 by rpki-client