This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: r8PlZC1Jf+LAsqvZ8XyV7dBrSJKJT7PvUtoCavr2Tl8= Subject key identifier: B8:6A:75:A3:77:7D:72:93:A1:EE:9D:7D:89:66:5F:75:B3:14:FC:44 Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019B1049DA19166DA1EE1BE838A92B13ACD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 16A3 Signing time: Fri 12 Dec 2025 02:00:33 +0000 Manifest this update: Fri 12 Dec 2025 02:00:33 +0000 Manifest next update: Sat 13 Dec 2025 02:00:33 +0000 Files and hashes: 1: Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa (hash: QbfTd/kjJdOYrA4Hvyf36D6w4D1v8xL290MIRPSar4I=) 2: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 3: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: teuRyIcoh7vQeEpqWGn1+bcP/EqUwZ94lywaCO9SP34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:da:19:16:6d:a1:ee:1b:e8:38:a9:2b:13:ac:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Dec 12 02:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=b86a75a3777d7293a1ee9d7d89665f75b314fc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:ff:a9:bb:66:d1:9a:92:1b:6f:f3:2b:75: 49:3b:42:9a:c0:98:8f:b8:05:9c:4a:c0:a2:d3:6e: a8:b5:db:49:18:30:df:6b:19:dd:ff:83:14:7a:6f: c4:a1:13:45:bf:6a:46:9a:a1:ee:8f:6b:c4:2b:29: 65:1f:e9:0d:12:3b:d1:f3:57:97:ed:4d:29:66:33: 5b:fe:5a:0f:67:b2:73:2d:2b:84:ef:75:13:5b:d8: b4:5d:67:b0:61:d0:62:e8:43:0b:35:6d:d1:1a:fd: b7:55:19:4d:89:61:28:d2:21:3b:e5:1f:a1:64:e3: b9:cc:5c:8a:86:e0:ea:1a:a4:59:13:49:7d:a8:9b: c2:ea:c9:26:28:20:a6:b6:ec:ce:e9:2e:14:40:67: 0a:f6:f6:37:52:99:78:55:9d:9a:0b:79:51:b0:fa: b8:ef:13:2f:3a:94:76:52:85:73:00:04:08:65:90: ec:db:4a:04:08:94:1e:87:e1:74:3d:8b:f5:d6:cd: ba:02:b1:4f:70:f6:3a:a5:c0:69:ec:0c:5f:4f:16: 25:c5:46:3f:52:20:76:6a:42:cc:cc:bf:5f:0d:9a: 86:64:a1:47:ad:ed:29:78:aa:05:fe:8e:01:07:25: 0b:9e:f2:76:ec:57:73:5b:c4:4b:1b:62:7f:5c:cb: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6A:75:A3:77:7D:72:93:A1:EE:9D:7D:89:66:5F:75:B3:14:FC:44 X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:71:e4:d0:b9:6e:79:6a:cb:79:bb:e0:44:d6:1b:cb:c9:27: da:97:c0:a8:72:b7:84:9b:04:ac:61:85:08:30:41:5b:3a:52: 31:30:34:ab:7c:9d:04:e0:75:2b:b0:55:5a:20:86:88:b4:8a: 8d:02:16:44:06:bb:f8:79:e9:11:a6:be:e4:a1:f2:36:4d:98: 4c:3e:65:95:aa:d8:56:04:28:be:f5:87:33:f6:0a:8e:34:60: da:bb:ba:85:5c:fb:b7:8e:bb:24:09:bc:fc:32:20:94:7b:51: 1c:06:eb:21:1b:c9:e7:dd:01:33:56:cb:ce:3a:f2:19:ba:04: 89:13:34:c4:40:5d:5a:b6:33:b2:07:dd:07:37:23:9a:c6:41: 3e:53:e1:72:bb:67:7e:15:7a:1d:19:2d:0c:50:32:f9:99:52: 8b:3b:09:da:12:2c:c1:df:27:c0:3e:49:35:da:d7:4a:4a:c2: 96:2e:48:5f:3c:03:90:c3:e6:f4:3e:b0:bd:78:ab:45:1c:bf: 3f:5b:6c:d5:18:7b:5b:b2:7a:fc:0a:fa:ee:3f:ec:2d:14:67: e8:7c:ab:f6:c0:f7:24:d3:3c:a8:e7:18:c8:93:7b:17:91:ce: 69:23:19:49:e7:94:5d:f3:35:ee:e3:d8:96:2b:c2:a0:1a:7a: 7b:a6:f3:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSdoZFm2h7hvoOKkrE6zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUxMjEyMDIwMDMzWhcNMjUxMjEzMDIwMDMzWjAzMTEwLwYDVQQD EyhiODZhNzVhMzc3N2Q3MjkzYTFlZTlkN2Q4OTY2NWY3NWIzMTRmYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq3/qbtm0ZqSG2/zK3VJO0KawJiP uAWcSsCi026otdtJGDDfaxnd/4MUem/EoRNFv2pGmqHuj2vEKyllH+kNEjvR81eX 7U0pZjNb/loPZ7JzLSuE73UTW9i0XWewYdBi6EMLNW3RGv23VRlNiWEo0iE75R+h ZOO5zFyKhuDqGqRZE0l9qJvC6skmKCCmtuzO6S4UQGcK9vY3Upl4VZ2aC3lRsPq4 7xMvOpR2UoVzAAQIZZDs20oECJQeh+F0PYv11s26ArFPcPY6pcBp7AxfTxYlxUY/ UiB2akLMzL9fDZqGZKFHre0peKoF/o4BByULnvJ27FdzW8RLG2J/XMt+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhqdaN3fXKToe6dfYlmX3WzFPxEMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3Hk0Llu eWrLebvgRNYby8kn2pfAqHK3hJsErGGFCDBBWzpSMTA0q3ydBOB1K7BVWiCGiLSK jQIWRAa7+HnpEaa+5KHyNk2YTD5llarYVgQovvWHM/YKjjRg2ru6hVz7t467JAm8 /DIglHtRHAbrIRvJ590BM1bLzjryGboEiRM0xEBdWrYzsgfdBzcjmsZBPlPhcrtn fhV6HRktDFAy+ZlSizsJ2hIswd8nwD5JNdrXSkrCli5IXzwDkMPm9D6wvXirRRy/ P1ts1Rh7W7J6/Ar67j/sLRRn6Hyr9sD3JNM8qOcYyJN7F5HOaSMZSeeUXfM17uPY livCoBp6e6bz2g== -----END CERTIFICATE-----Generated at Fri Dec 12 05:34:30 2025 by rpki-client