This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json) Hash identifier: 41jqTZ8fjVj+VDq/EtLYPH9ZrqoZWDuyUo1CNCafvf0= Subject key identifier: 72:2F:70:B6:5E:B6:DB:C5:00:14:8F:CB:91:78:93:E4:0A:7C:35:E1 Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b Certificate serial: 019B1B3C02DDEDA6569C4101B995D7B785F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft Manifest number: 0351 Signing time: Sun 14 Dec 2025 05:01:16 +0000 Manifest this update: Sun 14 Dec 2025 05:01:16 +0000 Manifest next update: Mon 15 Dec 2025 05:01:16 +0000 Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=) 2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: JRDQUc6cZme0dsTo44j1IZ7vEIKLd7V0IrHQEoq7ULA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:02:dd:ed:a6:56:9c:41:01:b9:95:d7:b7:85:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b Validity Not Before: Dec 14 05:01:16 2025 GMT Not After : Dec 15 05:01:16 2025 GMT Subject: CN=722f70b65eb6dbc500148fcb917893e40a7c35e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:32:87:0c:94:9f:c1:b1:ae:2b:63:76:ec: b7:73:8e:d7:d4:51:f0:16:96:bf:98:ed:d6:f4:ba: 27:e4:f5:d8:73:f3:c1:73:b4:eb:c0:2b:50:ba:0e: 5c:47:85:2d:49:47:0a:83:74:71:bd:ff:b8:ee:43: ed:79:45:15:cb:75:12:26:f9:a9:e9:f9:3a:b2:c3: ce:57:c8:d8:d0:f1:17:23:e8:91:56:c8:d0:d6:ed: 63:8c:56:29:01:01:57:b0:9c:02:dc:3d:a5:c2:16: bb:52:ca:f5:3c:70:17:73:9a:d6:82:1c:5b:64:14: 65:f9:b1:b0:40:39:9a:c1:70:b2:3e:b8:c5:e8:a2: 37:33:52:ba:9d:19:3f:f6:ad:dd:76:32:bb:8b:4f: c4:0b:6a:d8:87:a2:e4:69:7c:48:2f:3c:9d:1a:f7: 37:d6:c7:95:2a:b4:cb:ae:12:55:e1:62:cd:d9:7e: 2d:72:e5:75:d6:2a:6d:d7:7a:18:b7:af:76:ee:2e: 5c:41:af:b3:40:0f:08:72:7f:e0:38:ae:54:df:95: 48:4e:2a:52:e7:6c:9d:61:3b:18:7a:13:0d:c2:07: ac:d6:b1:44:35:65:88:81:c8:aa:b1:2f:b3:70:8f: bb:fb:c2:86:c6:1e:b3:ae:29:93:3f:6e:cd:35:29: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:70:B6:5E:B6:DB:C5:00:14:8F:CB:91:78:93:E4:0A:7C:35:E1 X509v3 Authority Key Identifier: keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:00:3d:30:f7:f4:d8:f8:14:cf:0c:d0:0f:45:92:2d:ec:f9: 56:16:22:c7:34:72:43:94:75:5d:07:cb:a3:06:5f:39:1a:a6: 3a:17:3a:da:bb:c7:a8:94:72:af:67:a3:22:d1:87:90:29:38: fa:28:2b:f0:2d:08:e1:fc:8d:f2:04:91:59:8e:12:62:70:eb: ac:7b:31:c9:37:75:17:7a:3a:7f:27:9f:d7:33:1f:35:19:4f: 48:f0:8a:e2:94:58:78:e9:6d:18:b7:8a:04:55:41:7f:1a:5c: 87:58:15:f4:34:4b:09:c3:fa:95:53:cc:57:1f:1c:9d:a6:ee: 11:02:6a:4a:62:bd:bb:17:f1:8d:25:70:3e:3b:90:87:fa:52: f5:37:44:d5:a7:ba:d0:f4:46:17:d5:b6:c2:ff:b0:e4:46:a5: 89:ff:95:64:d2:d4:35:fc:af:35:aa:58:2a:4e:89:3d:27:08: 07:ad:06:4f:e2:54:08:b2:4e:c7:39:05:39:26:1c:15:93:00: be:c3:18:3d:a7:ca:9c:97:a7:08:7f:15:4b:98:af:1f:42:13: 61:76:93:7e:94:e7:31:30:51:d5:ef:12:43:f8:08:16:0c:a8: 22:34:3e:9d:10:eb:9e:db:4c:28:1b:46:e1:ed:90:b4:e2:77: e4:23:f0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPALd7aZWnEEBuZXXt4X4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTc3YzFlNGU3MDEzOTkyZDRjNGQwZjMzY2NkNzcyZmFj OGQ5M2IwHhcNMjUxMjE0MDUwMTE2WhcNMjUxMjE1MDUwMTE2WjAzMTEwLwYDVQQD Eyg3MjJmNzBiNjVlYjZkYmM1MDAxNDhmY2I5MTc4OTNlNDBhN2MzNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpwyhwyUn8Gxritjduy3c47X1FHw Fpa/mO3W9Lon5PXYc/PBc7TrwCtQug5cR4UtSUcKg3Rxvf+47kPteUUVy3USJvmp 6fk6ssPOV8jY0PEXI+iRVsjQ1u1jjFYpAQFXsJwC3D2lwha7Usr1PHAXc5rWghxb ZBRl+bGwQDmawXCyPrjF6KI3M1K6nRk/9q3ddjK7i0/EC2rYh6LkaXxILzydGvc3 1seVKrTLrhJV4WLN2X4tcuV11ipt13oYt6927i5cQa+zQA8Icn/gOK5U35VITipS 52ydYTsYehMNwges1rFENWWIgciqsS+zcI+7+8KGxh6zrimTP27NNSkCMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIvcLZettvFABSPy5F4k+QKfDXhMB8GA1UdIwQY MBaAFKKXfB5OcBOZLUxNDzPM13L6yNk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTIt MjYzZTQ2NmU0YWQ2LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTItMjYzZTQ2NmU0YWQ2 LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQA9MPf0 2PgUzwzQD0WSLez5VhYixzRyQ5R1XQfLowZfORqmOhc62rvHqJRyr2ejItGHkCk4 +igr8C0I4fyN8gSRWY4SYnDrrHsxyTd1F3o6fyef1zMfNRlPSPCK4pRYeOltGLeK BFVBfxpch1gV9DRLCcP6lVPMVx8cnabuEQJqSmK9uxfxjSVwPjuQh/pS9TdE1ae6 0PRGF9W2wv+w5Ealif+VZNLUNfyvNapYKk6JPScIB60GT+JUCLJOxzkFOSYcFZMA vsMYPafKnJenCH8VS5ivH0ITYXaTfpTnMTBR1e8SQ/gIFgyoIjQ+nRDrnttMKBtG 4e2QtOJ35CPwSw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:10 2025 by rpki-client