This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json) Hash identifier: vq2EFo3UH9yHOx4os5/RMqro+XrTyLXFut2pmXuQPqU= Subject key identifier: D8:95:2B:F0:8C:97:B1:31:1D:4E:C8:9D:4F:37:60:B4:D6:63:7B:10 Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Certificate serial: 019B3532DB50CDC8DE440F0883B3C8EF0A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft Manifest number: 1284 Signing time: Fri 19 Dec 2025 06:01:23 +0000 Manifest this update: Fri 19 Dec 2025 06:01:23 +0000 Manifest next update: Sat 20 Dec 2025 06:01:23 +0000 Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=) 2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: VzNitplyyySsyKLkb72RsaMlzJFLmtGwG5TBZUOlanE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:db:50:cd:c8:de:44:0f:08:83:b3:c8:ef:0a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Validity Not Before: Dec 19 06:01:23 2025 GMT Not After : Dec 20 06:01:23 2025 GMT Subject: CN=d8952bf08c97b1311d4ec89d4f3760b4d6637b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:c0:2c:cd:71:3c:55:74:f4:a7:2f:48:0c: c7:32:8b:f4:73:c2:ef:36:18:66:24:33:4e:bb:b3: d5:cf:d2:e5:92:d2:7a:3b:67:45:ac:08:c8:23:f9: db:a5:1a:91:ff:ef:96:cd:e8:8e:16:3e:c3:45:76: ea:82:8c:af:fb:2b:a9:fe:28:27:50:85:1c:31:3c: f2:b5:12:11:8c:b6:14:67:49:47:cf:ca:cd:d6:2a: 9b:ce:45:a5:a1:c7:71:01:06:28:8f:be:40:1c:e8: de:f6:ed:7a:18:44:dd:61:1b:01:c5:84:63:ae:c5: d3:3f:91:a6:3c:b2:61:09:b8:82:0d:6f:b2:27:f2: 97:a0:53:b6:6b:d5:aa:c7:80:7b:3a:e9:46:c4:54: ea:38:a9:20:a7:6c:40:34:b8:9f:21:95:96:3f:f8: e8:04:87:06:ee:b8:6b:8f:db:c0:a4:d1:a6:19:96: 23:2f:33:84:3c:43:db:15:c0:4c:99:fb:2c:50:ea: 48:58:8c:ed:4f:2a:7b:86:d9:c2:24:39:44:4b:30: 7a:22:92:76:d2:73:e3:d8:a6:5d:bc:43:3a:6d:22: 4c:ad:ee:31:92:d7:c7:e0:01:ae:15:ec:a0:34:63: 96:6a:45:e5:f9:53:36:66:59:5c:6e:df:42:53:c7: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:2B:F0:8C:97:B1:31:1D:4E:C8:9D:4F:37:60:B4:D6:63:7B:10 X509v3 Authority Key Identifier: keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:67:12:fa:5b:39:a8:81:f7:52:ed:0c:71:dc:ca:5b:bb:d3: 7d:1b:8e:0c:97:5e:84:53:dc:21:95:7a:b8:4a:9d:72:42:b3: 03:3c:a4:5e:a9:29:a9:40:53:b9:59:fe:f3:ef:29:2a:eb:7a: 19:44:f6:5e:1c:06:46:6b:e3:6c:f9:33:2a:4e:9e:73:52:f8: ee:55:2c:23:57:63:3d:9e:23:6b:69:c4:54:fd:20:99:67:de: fe:76:a5:9a:11:93:ca:3f:07:2e:64:14:8b:9f:da:3d:72:16: 1b:68:fb:87:9f:d4:14:b8:4c:9a:c0:bd:11:48:ad:6d:e1:3c: c7:94:b3:c9:75:46:30:4c:41:b8:42:90:9c:f8:69:66:5b:64: b4:49:d9:b0:c7:b6:43:17:82:3a:b8:d3:cb:61:41:e3:a3:2d: f4:fe:25:54:6a:ae:85:0a:fb:5c:f8:73:99:b2:15:27:bb:97: 89:ff:9f:28:5e:ce:97:30:ea:51:4c:41:c7:04:14:4a:7a:01: 45:f9:07:16:67:f2:5f:02:15:eb:71:ea:36:48:fe:8f:7b:94: 79:ad:23:ff:f6:fc:2c:f0:48:10:86:68:fa:02:7d:da:63:46: c0:d2:63:59:13:76:a3:a5:f5:14:37:a8:ab:3b:db:8f:96:27: 99:61:df:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MttQzcjeRA8Ig7PI7wozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjg4MzA1ZmVkNWM5OTc2MGFlYzdjODk0YzZiYTIxZTRl YWQ2NzUwHhcNMjUxMjE5MDYwMTIzWhcNMjUxMjIwMDYwMTIzWjAzMTEwLwYDVQQD EyhkODk1MmJmMDhjOTdiMTMxMWQ0ZWM4OWQ0ZjM3NjBiNGQ2NjM3YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2jALM1xPFV09KcvSAzHMov0c8Lv NhhmJDNOu7PVz9LlktJ6O2dFrAjII/nbpRqR/++WzeiOFj7DRXbqgoyv+yup/ign UIUcMTzytRIRjLYUZ0lHz8rN1iqbzkWlocdxAQYoj75AHOje9u16GETdYRsBxYRj rsXTP5GmPLJhCbiCDW+yJ/KXoFO2a9Wqx4B7OulGxFTqOKkgp2xANLifIZWWP/jo BIcG7rhrj9vApNGmGZYjLzOEPEPbFcBMmfssUOpIWIztTyp7htnCJDlESzB6IpJ2 0nPj2KZdvEM6bSJMre4xktfH4AGuFeygNGOWakXl+VM2Zllcbt9CU8daPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiVK/CMl7ExHU7InU83YLTWY3sQMB8GA1UdIwQY MBaAFKNogwX+1cmXYK7HyJTGuiHk6tZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQt ZGVjOTc5NmY2MjIzLzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQtZGVjOTc5NmY2MjIz LzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWcS+ls5 qIH3Uu0McdzKW7vTfRuODJdehFPcIZV6uEqdckKzAzykXqkpqUBTuVn+8+8pKut6 GUT2XhwGRmvjbPkzKk6ec1L47lUsI1djPZ4ja2nEVP0gmWfe/nalmhGTyj8HLmQU i5/aPXIWG2j7h5/UFLhMmsC9EUitbeE8x5SzyXVGMExBuEKQnPhpZltktEnZsMe2 QxeCOrjTy2FB46Mt9P4lVGquhQr7XPhzmbIVJ7uXif+fKF7OlzDqUUxBxwQUSnoB RfkHFmfyXwIV63HqNkj+j3uUea0j//b8LPBIEIZo+gJ92mNGwNJjWRN2o6X1FDeo qzvbj5YnmWHfPA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:37 2025 by rpki-client