This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json) Hash identifier: iXQXDKWVJfVV5IWD/KxKgy3Vikg/stk7dBLXnvqvQFQ= Subject key identifier: 76:CA:EA:55:E4:72:EA:0C:9B:BE:91:66:E7:93:2B:C5:DE:F7:55:A0 Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Certificate serial: 019B300C662DCDD413B3E1C30031FA331B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft Manifest number: 0F47 Signing time: Thu 18 Dec 2025 06:01:17 +0000 Manifest this update: Thu 18 Dec 2025 06:01:17 +0000 Manifest next update: Fri 19 Dec 2025 06:01:17 +0000 Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: TD4ObvluvYafP+WrqPXzk4+5o2ZYI2H202WZpW2MKhM=) 2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:66:2d:cd:d4:13:b3:e1:c3:00:31:fa:33:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Validity Not Before: Dec 18 06:01:17 2025 GMT Not After : Dec 19 06:01:17 2025 GMT Subject: CN=76caea55e472ea0c9bbe9166e7932bc5def755a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:aa:3f:4e:65:10:c6:04:5b:b1:a4:41:bf: dc:02:16:a9:de:4e:bd:62:8b:5f:1d:db:b0:a1:dc: 3c:aa:95:e6:d5:d2:e6:b4:55:95:85:fb:5c:ef:f2: be:c6:a0:59:85:03:2a:09:fb:7c:eb:3f:ae:0e:fb: b6:9a:fa:87:67:00:0b:9f:aa:a8:eb:69:67:d3:36: 19:ab:4b:77:47:7c:8e:30:ac:a8:ff:0f:0d:39:ce: c5:36:af:c7:b1:ef:bd:5e:34:a6:ae:87:9b:9b:cb: 6d:8a:7b:f9:a0:d5:6d:b7:0a:02:8b:e9:1d:fe:2c: 44:a2:12:10:ad:fd:bd:db:bf:a9:19:fc:41:37:7c: f8:e6:26:73:6f:2f:05:ac:de:56:07:0b:41:56:0b: 7c:f3:81:e3:61:b2:68:43:86:8d:a8:9f:d8:08:79: 36:fa:a9:48:bb:3b:3c:6f:ae:49:7e:87:7b:63:91: 7a:c6:aa:bb:8b:a7:25:ac:13:02:47:d9:8c:fa:7c: d4:46:89:ea:71:af:ac:47:da:06:18:10:d2:ad:2e: 68:79:af:be:bb:31:e1:54:30:ff:07:af:c2:55:25: 0a:bb:1e:24:20:a8:22:30:6a:00:bd:92:2b:72:03: 4e:ba:34:97:cd:ed:92:b7:76:1d:30:66:d2:fc:ce: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:EA:55:E4:72:EA:0C:9B:BE:91:66:E7:93:2B:C5:DE:F7:55:A0 X509v3 Authority Key Identifier: keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:09:23:bf:42:f7:51:94:8f:d4:fb:bb:03:22:b8:45:29:23: 78:7a:69:7a:a9:fb:fd:55:56:56:e1:66:f1:12:ba:a4:ef:9a: 7f:19:35:18:50:b8:3a:19:23:ba:4e:a4:c8:3f:91:b4:9d:ed: 86:11:01:c8:ac:53:ca:52:95:cb:35:a6:d9:f5:ed:fe:0e:c3: bd:e3:00:33:dd:41:ee:4c:4e:7b:2c:95:ae:11:8e:88:1f:7d: 41:68:7c:b7:19:12:ec:83:17:c6:43:d8:10:0d:94:25:12:20: a4:4b:b7:75:32:ab:dd:22:aa:97:98:f3:d9:c6:2d:69:24:e3: 00:f4:c4:31:73:af:47:d2:a1:89:b2:82:2c:3f:1c:02:40:66: 8e:fb:05:a8:e6:fa:20:86:7e:4e:8b:00:fe:b7:1c:7a:04:23: e7:76:84:17:57:c8:e0:1a:a1:3f:0f:d2:1f:91:f8:85:17:c0: 0c:12:bf:fd:ba:4c:c2:2f:f9:8f:2f:ae:05:ce:53:33:70:66: 80:ef:2f:0f:80:0f:c4:59:d0:3a:1c:23:c4:72:a7:29:27:f1: d2:db:b2:26:37:40:1c:d3:ad:1c:49:26:e0:ab:35:e8:83:a6: 64:67:f4:c8:e2:44:ed:28:93:f9:bf:39:aa:8b:eb:45:7a:f1: c5:b9:7d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDGYtzdQTs+HDADH6Mxt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0 Y2ViNWUwHhcNMjUxMjE4MDYwMTE3WhcNMjUxMjE5MDYwMTE3WjAzMTEwLwYDVQQD Eyg3NmNhZWE1NWU0NzJlYTBjOWJiZTkxNjZlNzkzMmJjNWRlZjc1NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlumqP05lEMYEW7GkQb/cAhap3k69 YotfHduwodw8qpXm1dLmtFWVhftc7/K+xqBZhQMqCft86z+uDvu2mvqHZwALn6qo 62ln0zYZq0t3R3yOMKyo/w8NOc7FNq/Hse+9XjSmroebm8ttinv5oNVttwoCi+kd /ixEohIQrf2927+pGfxBN3z45iZzby8FrN5WBwtBVgt884HjYbJoQ4aNqJ/YCHk2 +qlIuzs8b65Jfod7Y5F6xqq7i6clrBMCR9mM+nzURonqca+sR9oGGBDSrS5oea++ uzHhVDD/B6/CVSUKux4kIKgiMGoAvZIrcgNOujSXze2St3YdMGbS/M6B7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbK6lXkcuoMm76RZueTK8Xe91WgMB8GA1UdIwQY MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQkjv0L3 UZSP1Pu7AyK4RSkjeHppeqn7/VVWVuFm8RK6pO+afxk1GFC4Ohkjuk6kyD+RtJ3t hhEByKxTylKVyzWm2fXt/g7DveMAM91B7kxOeyyVrhGOiB99QWh8txkS7IMXxkPY EA2UJRIgpEu3dTKr3SKql5jz2cYtaSTjAPTEMXOvR9KhibKCLD8cAkBmjvsFqOb6 IIZ+TosA/rccegQj53aEF1fI4BqhPw/SH5H4hRfADBK//bpMwi/5jy+uBc5TM3Bm gO8vD4APxFnQOhwjxHKnKSfx0tuyJjdAHNOtHEkm4Ks16IOmZGf0yOJE7SiT+b85 qovrRXrxxbl9CQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:05 2025 by rpki-client