This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json) Hash identifier: GwWVB0oXJGRSyaM8zg+xMZyjlEPanNEmbRSBw2ADB9k= Subject key identifier: FF:B9:CF:06:E2:99:31:CE:A6:E9:CB:13:B5:9C:7B:06:71:91:F4:76 Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Certificate serial: 019B40C8B2E24827AE9B80DFA27523871EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft Manifest number: 0C0B Signing time: Sun 21 Dec 2025 12:00:53 +0000 Manifest this update: Sun 21 Dec 2025 12:00:53 +0000 Manifest next update: Mon 22 Dec 2025 12:00:53 +0000 Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=) 2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: x/5VsX8aozXmi68GhUJxuoKax5iu7NNBvYJMwavlcRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:b2:e2:48:27:ae:9b:80:df:a2:75:23:87:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Validity Not Before: Dec 21 12:00:53 2025 GMT Not After : Dec 22 12:00:53 2025 GMT Subject: CN=ffb9cf06e29931cea6e9cb13b59c7b067191f476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:d5:74:f4:78:91:c7:83:8b:1a:a6:8b:0f: e2:ab:7c:f3:49:3f:00:49:00:ab:4e:bc:3b:59:66: 49:e8:24:1f:ee:d7:ef:8a:64:3a:38:5e:42:24:62: 81:ba:fe:0f:32:c0:7e:c4:ca:ee:7a:fb:19:e5:2e: 1e:38:04:38:c2:1c:c0:af:ca:b0:e5:2b:aa:12:b5: da:85:31:af:1c:69:7d:43:a5:c0:3c:de:30:62:71: 33:f2:82:e8:77:54:49:56:20:e5:94:3a:5c:8d:49: b0:54:2a:e0:9c:54:d5:6d:71:72:db:c6:2a:5a:23: 29:7d:fd:bb:f6:6d:9c:f4:8f:90:01:10:56:48:83: 82:00:27:2c:1a:6c:c1:58:33:59:1a:57:cf:bc:32: a8:ab:b3:fe:55:14:9a:81:3c:95:0a:d2:ce:36:75: 24:d8:64:b0:57:26:69:b4:38:a2:82:6d:a3:22:82: 52:3b:cc:0c:32:fe:0f:d0:59:2d:ce:c5:86:3f:41: 6b:c5:63:d8:34:b8:f1:da:28:dc:d7:0f:d6:27:03: 70:1c:c6:19:33:a0:54:36:e6:d7:47:9a:3f:16:82: 8a:7c:d7:c7:17:55:85:7a:c9:b8:dc:59:a8:1e:b1: 00:6c:8c:a0:ae:6d:80:ef:a1:4f:d8:06:17:d5:bc: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B9:CF:06:E2:99:31:CE:A6:E9:CB:13:B5:9C:7B:06:71:91:F4:76 X509v3 Authority Key Identifier: keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ca:9e:1b:6b:5b:55:02:ce:29:0d:2b:47:37:93:82:2d:a4: 55:e5:ad:00:8a:19:de:da:5e:13:a9:78:fb:f4:b9:d9:e4:28: 73:3c:de:a6:63:ff:4d:0c:1e:42:2b:64:26:94:0b:08:c6:dd: 3c:12:76:bf:2c:fe:66:a2:f8:b8:26:d0:0d:8a:e9:68:1e:35: df:a8:49:6d:04:5f:36:52:12:da:e6:c4:2f:ea:e6:6a:0c:39: 43:19:6d:a3:26:65:8a:49:8d:02:ee:06:db:a0:26:fc:21:12: d3:ec:87:9a:b0:b6:51:26:f0:08:f4:94:f1:10:f8:a5:eb:c8: 9e:75:a4:c0:94:b7:8c:74:ce:44:ac:50:6b:6e:71:08:25:07: 93:d2:23:4c:6d:19:01:c7:22:3b:f8:71:e8:cf:bb:1c:78:e8: 21:5e:b3:a2:25:8f:93:31:dc:df:f3:af:19:ce:43:01:80:01: ca:fd:66:53:35:87:1a:f0:6b:f8:c6:ab:92:0b:1e:1e:f4:11: 12:31:b3:05:5f:c1:f1:d1:c6:22:86:29:0e:b6:ce:c8:1f:a6: 17:0a:09:e9:86:5b:eb:e5:62:b7:79:23:9e:3f:e3:3f:be:9d: 27:05:e5:2b:34:3f:b9:e2:33:33:c7:2a:e7:1e:b8:b5:19:b5: d4:e0:d6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyLLiSCeum4DfonUjhx7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTdkZTE3NTEyY2ZhOGJlYmMzZGY4MGIyN2I0NzYyNGVm NDE2OTEwHhcNMjUxMjIxMTIwMDUzWhcNMjUxMjIyMTIwMDUzWjAzMTEwLwYDVQQD EyhmZmI5Y2YwNmUyOTkzMWNlYTZlOWNiMTNiNTljN2IwNjcxOTFmNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaTVdPR4kceDixqmiw/iq3zzST8A SQCrTrw7WWZJ6CQf7tfvimQ6OF5CJGKBuv4PMsB+xMruevsZ5S4eOAQ4whzAr8qw 5SuqErXahTGvHGl9Q6XAPN4wYnEz8oLod1RJViDllDpcjUmwVCrgnFTVbXFy28Yq WiMpff279m2c9I+QARBWSIOCACcsGmzBWDNZGlfPvDKoq7P+VRSagTyVCtLONnUk 2GSwVyZptDiigm2jIoJSO8wMMv4P0FktzsWGP0FrxWPYNLjx2ijc1w/WJwNwHMYZ M6BUNubXR5o/FoKKfNfHF1WFesm43FmoHrEAbIygrm2A76FP2AYX1bwXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+5zwbimTHOpunLE7WcewZxkfR2MB8GA1UdIwQY MBaAFDuX3hdRLPqL68PfgLJ7R2JO9BaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAt OTE1NTEzMmExNzlhLzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAtOTE1NTEzMmExNzlh LzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMqeG2tb VQLOKQ0rRzeTgi2kVeWtAIoZ3tpeE6l4+/S52eQoczzepmP/TQweQitkJpQLCMbd PBJ2vyz+ZqL4uCbQDYrpaB4136hJbQRfNlIS2ubEL+rmagw5QxltoyZlikmNAu4G 26Am/CES0+yHmrC2USbwCPSU8RD4pevInnWkwJS3jHTORKxQa25xCCUHk9IjTG0Z AcciO/hx6M+7HHjoIV6zoiWPkzHc3/OvGc5DAYAByv1mUzWHGvBr+MarkgseHvQR EjGzBV/B8dHGIoYpDrbOyB+mFwoJ6YZb6+Vit3kjnj/jP76dJwXlKzQ/ueIzM8cq 5x64tRm11ODWpg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:38:50 2025 by rpki-client