This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json) Hash identifier: JGgpP+Qnf7ITClDCrbsDok7t2AgLpB2cjFvaPMPQlmo= Subject key identifier: 0A:A8:4C:0A:D3:D4:B4:49:B8:8B:45:12:34:10:7C:86:66:CB:B6:E4 Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Certificate serial: 019B33E8CCEE562DEE740BE48A3BAE5DD12D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft Manifest number: 0F49 Signing time: Fri 19 Dec 2025 00:00:53 +0000 Manifest this update: Fri 19 Dec 2025 00:00:53 +0000 Manifest next update: Sat 20 Dec 2025 00:00:53 +0000 Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: rE3BeB+spYtQ3JawoINXBawgBIx5gfb0E/PgOFoJPnw=) 2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:cc:ee:56:2d:ee:74:0b:e4:8a:3b:ae:5d:d1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Validity Not Before: Dec 19 00:00:53 2025 GMT Not After : Dec 20 00:00:53 2025 GMT Subject: CN=0aa84c0ad3d4b449b88b451234107c8666cbb6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:24:85:f3:01:ca:91:db:1a:8d:29:d7:53: 70:0e:2a:b2:4e:52:7f:84:2a:36:ed:8f:d2:da:c2: 42:c9:3d:0d:9b:5c:18:c2:86:56:be:d3:5d:8e:ca: dd:a6:01:c4:c9:62:3e:77:42:51:93:3d:74:97:d9: 17:55:53:85:ef:3c:04:61:c1:60:5b:f8:cd:32:26: a4:2e:b0:18:e2:f6:bc:0d:3a:d9:48:dd:fc:70:6a: 53:88:93:71:71:19:19:88:39:c8:cf:dc:28:7a:21: 1e:3b:94:3b:26:4d:00:14:09:ff:3e:4d:93:5c:f0: ff:f0:53:e7:88:cc:ac:4a:59:c6:23:28:27:b6:7d: 1e:fe:c4:57:97:ac:5e:aa:5b:58:f1:30:52:48:ae: 2d:53:18:52:fa:e9:09:4c:11:ff:50:3a:8b:ee:2c: 49:e9:c1:2e:b9:08:8c:cf:49:40:ad:5b:4e:74:57: 7a:5c:89:3b:e5:92:bf:0c:d1:2b:41:c6:80:85:92: 68:6b:2f:b8:06:68:60:5f:ca:c6:e9:ac:1f:e0:2f: ed:56:e4:e3:bf:34:7d:0c:36:d1:93:75:87:ad:ea: 48:54:b1:10:cd:6c:25:81:76:88:4d:88:c4:f2:6d: d1:d4:e8:d2:c1:d2:2c:2d:92:88:6e:c6:83:a4:e6: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A8:4C:0A:D3:D4:B4:49:B8:8B:45:12:34:10:7C:86:66:CB:B6:E4 X509v3 Authority Key Identifier: keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:95:f6:ee:75:95:75:27:78:db:15:9e:68:d2:55:a4:a0:9a: 81:52:e9:75:0c:35:62:ce:a3:e8:d7:71:0a:34:a8:5c:99:3d: 8f:d1:8b:83:bb:41:a3:94:0a:a2:25:d4:89:fb:0c:aa:ba:15: d6:d9:e3:6b:16:29:d6:5e:2d:15:57:86:0d:d5:be:91:23:c3: 6b:ce:f4:ea:51:d2:6b:dd:9c:a3:e4:ff:c6:50:21:af:77:0e: b8:19:1c:0a:ad:0e:75:6d:3b:71:42:f9:55:60:fb:35:f5:9a: 00:f2:82:2d:7e:ca:91:40:51:0f:ae:ba:9b:b3:1a:36:d2:76: 58:e8:99:25:7a:47:ad:4d:3c:2c:69:7e:ac:75:82:a3:44:31: 84:4c:1c:f4:fc:52:c2:69:b6:c9:2c:1a:2c:bf:e4:08:5b:59: ab:a9:c3:b4:47:d3:c2:52:9d:2a:25:dd:7a:1f:9f:96:4e:63: 8f:a1:44:f3:a9:3a:0e:55:15:ba:e9:95:5c:37:02:1c:94:8d: c2:68:8f:41:e9:45:36:45:d8:a2:0e:3c:f7:31:45:17:91:45: c8:32:d9:0a:7d:7e:aa:78:c5:cc:af:7b:a3:a4:af:50:a2:6b: 75:15:c6:0d:52:eb:b6:e9:71:a7:f5:11:d7:7f:10:86:24:de: b1:4c:d2:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6MzuVi3udAvkijuuXdEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0 Y2ViNWUwHhcNMjUxMjE5MDAwMDUzWhcNMjUxMjIwMDAwMDUzWjAzMTEwLwYDVQQD EygwYWE4NGMwYWQzZDRiNDQ5Yjg4YjQ1MTIzNDEwN2M4NjY2Y2JiNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nwkhfMBypHbGo0p11NwDiqyTlJ/ hCo27Y/S2sJCyT0Nm1wYwoZWvtNdjsrdpgHEyWI+d0JRkz10l9kXVVOF7zwEYcFg W/jNMiakLrAY4va8DTrZSN38cGpTiJNxcRkZiDnIz9woeiEeO5Q7Jk0AFAn/Pk2T XPD/8FPniMysSlnGIygntn0e/sRXl6xeqltY8TBSSK4tUxhS+ukJTBH/UDqL7ixJ 6cEuuQiMz0lArVtOdFd6XIk75ZK/DNErQcaAhZJoay+4BmhgX8rG6awf4C/tVuTj vzR9DDbRk3WHrepIVLEQzWwlgXaITYjE8m3R1OjSwdIsLZKIbsaDpOa05wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqoTArT1LRJuItFEjQQfIZmy7bkMB8GA1UdIwQY MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJX27nWV dSd42xWeaNJVpKCagVLpdQw1Ys6j6NdxCjSoXJk9j9GLg7tBo5QKoiXUifsMqroV 1tnjaxYp1l4tFVeGDdW+kSPDa8706lHSa92co+T/xlAhr3cOuBkcCq0OdW07cUL5 VWD7NfWaAPKCLX7KkUBRD666m7MaNtJ2WOiZJXpHrU08LGl+rHWCo0QxhEwc9PxS wmm2ySwaLL/kCFtZq6nDtEfTwlKdKiXdeh+flk5jj6FE86k6DlUVuumVXDcCHJSN wmiPQelFNkXYog489zFFF5FFyDLZCn1+qnjFzK97o6SvUKJrdRXGDVLrtulxp/UR 138QhiTesUzS+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:33 2025 by rpki-client