This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json) Hash identifier: i0abdms5sd2r7C7X7AC3R7O3OVOxzT0BVIb8Ve3vyuk= Subject key identifier: 1D:F4:26:D2:9B:D6:00:71:8D:3A:91:F2:C0:6C:F3:8E:E1:58:4B:58 Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Certificate serial: 019B06D973BAF9882E172DE61BA8893162AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft Manifest number: 126C Signing time: Wed 10 Dec 2025 06:01:12 +0000 Manifest this update: Wed 10 Dec 2025 06:01:12 +0000 Manifest next update: Thu 11 Dec 2025 06:01:12 +0000 Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=) 2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: Eln23aL8JGglzth/Gpn3EnAC13un2+M1zuDjieJdeM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:73:ba:f9:88:2e:17:2d:e6:1b:a8:89:31:62:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Validity Not Before: Dec 10 06:01:12 2025 GMT Not After : Dec 11 06:01:12 2025 GMT Subject: CN=1df426d29bd600718d3a91f2c06cf38ee1584b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:b9:19:a1:45:0c:9b:00:d4:7a:e4:22:ef: 40:ef:99:8e:e8:e6:f9:05:42:e5:a2:77:dd:ae:09: 86:bb:ad:a5:0b:a3:2f:85:2b:08:06:16:f9:74:3c: a7:64:2a:52:74:93:33:45:b0:4f:87:a6:93:e2:58: 07:6d:cc:37:14:01:d3:2a:31:33:14:02:47:36:62: af:37:5c:7b:3c:65:4d:f3:89:c1:54:27:17:a9:60: 12:10:e5:bb:b6:c2:bd:ce:b6:48:b5:14:fe:1e:3f: 25:44:48:0a:6b:2c:e8:73:46:85:83:b9:cc:81:13: 30:82:2d:7c:96:64:bc:1f:ea:1e:cd:ae:d1:c3:89: b6:10:19:67:5d:a9:88:3e:60:18:06:ed:71:3f:63: be:87:f5:ac:95:02:75:8b:37:ef:96:22:38:f8:48: 10:50:84:96:a2:a4:de:a0:60:cb:52:f4:31:a8:bd: da:f1:0b:9a:3a:a0:ce:a0:a9:b2:9f:85:87:8b:55: 4a:20:40:a0:76:30:07:5a:bb:d0:50:b1:10:f1:1d: e6:ad:e2:e7:5e:fd:4f:cf:ab:9c:cf:32:63:92:88: 0a:62:bc:bb:b3:df:d3:2e:fa:a0:84:3e:00:92:70: 2e:e8:21:48:bc:50:fa:b2:9d:5c:e0:c9:22:9c:d4: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F4:26:D2:9B:D6:00:71:8D:3A:91:F2:C0:6C:F3:8E:E1:58:4B:58 X509v3 Authority Key Identifier: keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:3f:73:49:7e:0f:b9:0e:ce:52:53:84:bd:ec:be:72:a0: 24:8c:2d:49:4f:b9:d8:7a:85:4c:2e:48:21:46:42:f7:d8:40: 09:a5:b8:6c:37:63:e3:3f:d9:66:6c:a4:55:aa:d4:3c:70:71: 54:d2:a6:25:e1:2d:cb:46:cc:6f:fe:0c:b7:83:06:2d:6c:48: 3d:fb:e8:80:eb:c8:12:61:ef:dd:12:66:77:0c:d7:e9:ba:17: cb:1f:1f:72:aa:43:04:73:49:7e:b9:cb:f2:39:16:43:fa:55: 1e:ed:31:9a:3e:43:85:2c:c8:3d:f2:f0:0b:59:69:11:0b:8a: e4:e0:b2:e4:84:93:5f:eb:bd:39:e2:30:5d:ba:93:81:31:a8: 98:7b:df:a3:fa:73:de:3e:00:36:45:d4:81:57:9f:5c:e7:18: 50:a3:bf:be:0b:d1:7c:b0:b9:9b:94:4e:2c:7a:b2:7c:80:1b: ec:07:19:a2:f0:e7:73:14:03:16:4f:5c:b0:c2:ef:28:41:7b: 31:b6:c2:a8:05:da:ce:e2:51:7e:23:89:4d:a9:09:a5:f7:b4: cf:ef:73:91:ba:3a:21:50:b1:50:1a:fd:84:89:0e:0b:02:04: e2:22:e3:ff:2b:53:c7:73:0b:09:7b:9d:22:91:00:2d:6c:89: d8:74:0a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2XO6+YguFy3mG6iJMWKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjg4MzA1ZmVkNWM5OTc2MGFlYzdjODk0YzZiYTIxZTRl YWQ2NzUwHhcNMjUxMjEwMDYwMTEyWhcNMjUxMjExMDYwMTEyWjAzMTEwLwYDVQQD EygxZGY0MjZkMjliZDYwMDcxOGQzYTkxZjJjMDZjZjM4ZWUxNTg0YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVW5GaFFDJsA1HrkIu9A75mO6Ob5 BULlonfdrgmGu62lC6MvhSsIBhb5dDynZCpSdJMzRbBPh6aT4lgHbcw3FAHTKjEz FAJHNmKvN1x7PGVN84nBVCcXqWASEOW7tsK9zrZItRT+Hj8lREgKayzoc0aFg7nM gRMwgi18lmS8H+oeza7Rw4m2EBlnXamIPmAYBu1xP2O+h/WslQJ1izfvliI4+EgQ UISWoqTeoGDLUvQxqL3a8QuaOqDOoKmyn4WHi1VKIECgdjAHWrvQULEQ8R3mreLn Xv1Pz6uczzJjkogKYry7s9/TLvqghD4AknAu6CFIvFD6sp1c4MkinNSghQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB30JtKb1gBxjTqR8sBs847hWEtYMB8GA1UdIwQY MBaAFKNogwX+1cmXYK7HyJTGuiHk6tZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQt ZGVjOTc5NmY2MjIzLzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQtZGVjOTc5NmY2MjIz LzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz4/c0l+ D7kOzlJThL3svnKgJIwtSU+52HqFTC5IIUZC99hACaW4bDdj4z/ZZmykVarUPHBx VNKmJeEty0bMb/4Mt4MGLWxIPfvogOvIEmHv3RJmdwzX6boXyx8fcqpDBHNJfrnL 8jkWQ/pVHu0xmj5DhSzIPfLwC1lpEQuK5OCy5ISTX+u9OeIwXbqTgTGomHvfo/pz 3j4ANkXUgVefXOcYUKO/vgvRfLC5m5ROLHqyfIAb7AcZovDncxQDFk9csMLvKEF7 MbbCqAXazuJRfiOJTakJpfe0z+9zkbo6IVCxUBr9hIkOCwIE4iLj/ytTx3MLCXud IpEALWyJ2HQKsg== -----END CERTIFICATE-----Generated at Wed Dec 10 09:50:40 2025 by rpki-client