This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json) Hash identifier: zMYACqcsiH5lnNQEtY/ouaM9/2GjhMwipHTZa2QlSe8= Subject key identifier: FC:27:5E:2A:FC:A2:A1:5F:EC:90:02:10:F5:AE:35:2B:4E:91:7C:69 Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44 Certificate serial: 019ABE1AF92056F4A6A2C913445A1583D93A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft Manifest number: 1745 Signing time: Wed 26 Nov 2025 03:00:29 +0000 Manifest this update: Wed 26 Nov 2025 03:00:29 +0000 Manifest next update: Thu 27 Nov 2025 03:00:29 +0000 Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: QIrP52CEjDabPJ4Tfqs4C4YMHh9ab6NGuZCLDs/WWVA=) 2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:1a:f9:20:56:f4:a6:a2:c9:13:44:5a:15:83:d9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44 Validity Not Before: Nov 26 03:00:29 2025 GMT Not After : Nov 27 03:00:29 2025 GMT Subject: CN=fc275e2afca2a15fec900210f5ae352b4e917c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:8e:9d:dd:e9:15:59:c5:d6:6b:92:49:f4: 2d:a6:ff:3f:e3:86:b1:00:33:fa:8b:d9:8c:97:99: a0:78:fc:0a:93:85:b9:9c:a8:d3:a1:79:5a:74:22: dc:82:e1:5d:c9:a2:5d:14:52:33:85:a3:31:05:91: bf:f4:63:5a:56:45:f3:44:40:8e:99:69:6f:36:4d: 66:c9:68:39:87:34:cf:07:46:3c:0f:ba:0d:2d:f4: 7b:09:ef:8d:10:92:46:ae:50:3d:44:3e:6b:46:a7: 82:81:2a:cf:4a:a1:d7:f8:39:5a:56:7b:6d:39:bb: fa:37:53:b9:cb:d3:a4:bc:b2:d1:63:e1:55:91:8f: 44:34:e3:d5:3a:49:f3:54:e1:9c:7e:99:20:d3:2a: e6:e0:52:a9:e5:00:43:9b:81:97:f1:b7:97:c5:e4: 7b:59:58:01:a8:1c:75:ea:8d:7d:af:70:6d:ec:91: 7f:80:1e:8a:7b:ac:4c:b4:3f:a7:eb:bc:72:a9:76: fa:a7:2c:6d:8c:3a:ad:7c:34:6d:9d:eb:67:44:eb: 8f:82:06:46:1d:c9:e8:8c:8e:a2:e4:71:5a:79:fa: 8d:88:b8:97:ad:16:7a:42:c2:f0:cd:0f:05:c8:55: 48:3e:48:51:cb:e5:b1:fb:5f:e6:f1:56:a9:bc:44: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:5E:2A:FC:A2:A1:5F:EC:90:02:10:F5:AE:35:2B:4E:91:7C:69 X509v3 Authority Key Identifier: keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:80:27:ee:5b:14:52:a8:29:2a:5d:cf:33:b1:52:49:11: a1:b0:9e:81:b4:00:db:6a:11:a1:d3:ea:22:40:6f:33:b0:7b: 75:7a:60:fb:25:d0:cb:3d:65:e3:ea:ce:83:5f:d0:75:6c:9e: db:2c:58:a8:c6:36:a3:ef:fa:c4:fa:13:da:33:b3:dc:30:33: 6c:45:3d:83:a8:86:ed:03:dd:b2:d6:eb:e5:3f:88:bd:ee:8b: 2c:3a:f1:fd:d7:69:af:de:47:86:0c:63:bd:d9:00:b7:bb:fe: d5:6f:44:67:1e:2d:41:bf:da:4d:a1:48:8c:b7:3f:d6:41:12: 9f:43:a0:ed:d2:88:c3:1d:39:c4:f3:85:a8:bd:1f:7b:6c:bf: 0d:75:29:18:40:93:f7:f1:e3:87:d0:8b:e8:0d:4c:cb:96:67: c9:aa:0c:e4:37:83:41:bc:a4:56:71:23:a9:3b:9d:82:7d:f2: a9:d6:4e:15:14:5d:1c:cf:75:90:44:5a:16:38:e1:e3:ca:ed: 7b:ce:c0:35:39:75:9a:5f:b3:f7:6b:7b:aa:ae:d6:47:77:6a: 0d:2a:95:fc:05:b3:6a:0f:21:97:02:76:7c:e4:8a:3e:e2:cd: 8e:57:38:55:93:16:62:8c:12:e0:6c:98:2e:c9:43:36:55:f9: 62:fc:3a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq+GvkgVvSmoskTRFoVg9k6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy OWJkNDQwHhcNMjUxMTI2MDMwMDI5WhcNMjUxMTI3MDMwMDI5WjAzMTEwLwYDVQQD EyhmYzI3NWUyYWZjYTJhMTVmZWM5MDAyMTBmNWFlMzUyYjRlOTE3YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB+Ond3pFVnF1muSSfQtpv8/44ax ADP6i9mMl5mgePwKk4W5nKjToXladCLcguFdyaJdFFIzhaMxBZG/9GNaVkXzRECO mWlvNk1myWg5hzTPB0Y8D7oNLfR7Ce+NEJJGrlA9RD5rRqeCgSrPSqHX+DlaVntt Obv6N1O5y9OkvLLRY+FVkY9ENOPVOknzVOGcfpkg0yrm4FKp5QBDm4GX8beXxeR7 WVgBqBx16o19r3Bt7JF/gB6Ke6xMtD+n67xyqXb6pyxtjDqtfDRtnetnROuPggZG HcnojI6i5HFaefqNiLiXrRZ6QsLwzQ8FyFVIPkhRy+Wx+1/m8VapvEQlRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwnXir8oqFf7JACEPWuNStOkXxpMB8GA1UdIwQY MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5 LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR+AJ+5b FFKoKSpdzzOxUkkRobCegbQA22oRodPqIkBvM7B7dXpg+yXQyz1l4+rOg1/QdWye 2yxYqMY2o+/6xPoT2jOz3DAzbEU9g6iG7QPdstbr5T+Ive6LLDrx/ddpr95Hhgxj vdkAt7v+1W9EZx4tQb/aTaFIjLc/1kESn0Og7dKIwx05xPOFqL0fe2y/DXUpGECT 9/Hjh9CL6A1My5ZnyaoM5DeDQbykVnEjqTudgn3yqdZOFRRdHM91kERaFjjh48rt e87ANTl1ml+z92t7qq7WR3dqDSqV/AWzag8hlwJ2fOSKPuLNjlc4VZMWYowS4GyY LslDNlX5Yvw6Qw== -----END CERTIFICATE-----Generated at Wed Nov 26 12:15:39 2025 by rpki-client