This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json) Hash identifier: u0u1+FEnA/9JOX8T6RmeqTV4mKCItwuyYVVjgNZyJBg= Subject key identifier: D9:A4:03:B5:A0:9B:E9:70:5E:34:D3:9E:9C:85:7E:17:36:2A:C1:97 Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7 Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7 Certificate serial: 019B2EFA2A0C2D395607C17E77CF262C51B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft Manifest number: 0EDB Signing time: Thu 18 Dec 2025 01:01:45 +0000 Manifest this update: Thu 18 Dec 2025 01:01:45 +0000 Manifest next update: Fri 19 Dec 2025 01:01:45 +0000 Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: x9BQDnYFqRJoVtl3q3G2rB6IP2Pi7S+8lhrS8YRXM9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:2a:0c:2d:39:56:07:c1:7e:77:cf:26:2c:51:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7 Validity Not Before: Dec 18 01:01:45 2025 GMT Not After : Dec 19 01:01:45 2025 GMT Subject: CN=d9a403b5a09be9705e34d39e9c857e17362ac197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:c4:3e:e2:27:14:b8:62:6d:6e:2a:0f:fb: d2:07:ed:25:ce:6c:62:08:48:f3:4f:5f:b8:75:ca: 59:04:79:59:54:63:90:2b:87:12:4c:35:64:44:13: 21:89:5a:7a:52:30:42:bd:1c:bc:90:6c:a8:14:72: f5:7a:af:82:25:f6:aa:22:19:61:74:02:65:38:95: 08:17:3a:1f:31:bf:76:87:d5:cd:92:fa:07:7f:c5: 4a:27:18:b3:89:de:4a:73:ef:d4:16:0a:48:cb:39: 91:33:d2:10:10:71:e6:f3:6d:cb:33:b8:c0:04:81: 08:45:1b:47:42:d2:9f:36:04:0f:ac:e2:9c:66:af: ae:5d:31:df:6a:e7:d8:4d:8a:e7:eb:7b:02:a1:10: 32:4f:be:0c:59:53:fc:58:fc:24:02:77:85:6d:cc: 57:d1:4b:ca:00:a2:b6:7e:72:5a:75:56:17:c7:ff: ee:5c:d6:92:17:39:52:2b:7e:41:d3:8b:b6:f4:30: f7:8e:8d:81:df:99:6c:13:6f:4d:8a:4c:d1:35:9d: ae:8e:a8:3c:44:19:1b:31:64:e5:c7:ea:50:7a:b4: 17:2f:9f:e5:db:75:13:9c:06:20:05:ba:91:8d:e3: 38:d4:d6:6c:c2:ac:ba:fc:48:49:63:03:c0:ea:af: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:03:B5:A0:9B:E9:70:5E:34:D3:9E:9C:85:7E:17:36:2A:C1:97 X509v3 Authority Key Identifier: keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:68:0f:db:55:b6:69:6b:d2:1d:d8:ce:40:63:d1:3c:89: fc:e0:98:b1:d8:3e:08:b7:e6:c2:94:58:ec:48:8e:c2:e6:15: 2a:15:b6:d4:7a:1f:b8:43:20:98:c3:88:92:53:48:21:b2:36: 65:ef:1a:bd:67:14:b0:a3:08:b4:b6:5d:48:e2:13:fa:e7:a6: fb:fe:da:ae:05:40:d8:14:77:25:66:7d:e5:f8:c8:11:33:7d: 06:79:e9:05:4b:87:01:b2:8f:b3:83:73:b1:be:a5:47:fd:f0: 46:3c:da:19:0b:02:31:ec:1d:cb:41:e8:3e:88:81:48:f0:6e: b9:d0:b6:76:9f:26:7b:b8:d1:0c:fd:05:60:fd:20:f8:79:42: bc:b8:cf:15:ea:7c:c5:02:be:61:79:a7:03:a8:11:72:29:dc: 69:b0:d0:f1:78:2f:a9:22:73:b9:e2:da:a6:a9:5a:37:0f:bb: 9c:92:ba:ea:68:50:ea:8a:f1:dd:e4:92:b8:da:42:16:de:e1: 25:75:a5:5c:29:cb:8c:dd:1a:81:cd:1d:19:a3:b8:44:79:7d: 8a:3f:59:45:df:84:6a:04:69:41:74:19:c0:23:f5:b0:6b:14: c4:be:b1:b4:6b:bd:6a:ab:74:f1:91:38:d0:5a:4d:27:84:90: 5a:64:ad:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ioMLTlWB8F+d88mLFG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTFlZGMwNTBlNGY5ODVmYmRkNTc4Y2NlMDJhZGM4ODBj NmM4YTcwHhcNMjUxMjE4MDEwMTQ1WhcNMjUxMjE5MDEwMTQ1WjAzMTEwLwYDVQQD EyhkOWE0MDNiNWEwOWJlOTcwNWUzNGQzOWU5Yzg1N2UxNzM2MmFjMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGDEPuInFLhibW4qD/vSB+0lzmxi CEjzT1+4dcpZBHlZVGOQK4cSTDVkRBMhiVp6UjBCvRy8kGyoFHL1eq+CJfaqIhlh dAJlOJUIFzofMb92h9XNkvoHf8VKJxizid5Kc+/UFgpIyzmRM9IQEHHm823LM7jA BIEIRRtHQtKfNgQPrOKcZq+uXTHfaufYTYrn63sCoRAyT74MWVP8WPwkAneFbcxX 0UvKAKK2fnJadVYXx//uXNaSFzlSK35B04u29DD3jo2B35lsE29NikzRNZ2ujqg8 RBkbMWTlx+pQerQXL5/l23UTnAYgBbqRjeM41NZswqy6/EhJYwPA6q/GvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmkA7Wgm+lwXjTTnpyFfhc2KsGXMB8GA1UdIwQY MBaAFDtR7cBQ5PmF+91XjM4CrciAxsinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFIdHdGRGstWVg3M1ZlTXpnS3R5SURHeUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYTcxYzgtMTNiYS00NzFiLWFmOTgt YmNjYTYxZTM5Y2MzLzEvTzFIdHdGRGstWVg3M1ZlTXpnS3R5SURHeUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jYTcxYzgtMTNiYS00NzFiLWFmOTgtYmNjYTYxZTM5Y2Mz LzEvTzFIdHdGRGstWVg3M1ZlTXpnS3R5SURHeUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNtoD9tV tmlr0h3YzkBj0TyJ/OCYsdg+CLfmwpRY7EiOwuYVKhW21HofuEMgmMOIklNIIbI2 Ze8avWcUsKMItLZdSOIT+uem+/7argVA2BR3JWZ95fjIETN9BnnpBUuHAbKPs4Nz sb6lR/3wRjzaGQsCMewdy0HoPoiBSPBuudC2dp8me7jRDP0FYP0g+HlCvLjPFep8 xQK+YXmnA6gRcincabDQ8XgvqSJzueLapqlaNw+7nJK66mhQ6orx3eSSuNpCFt7h JXWlXCnLjN0agc0dGaO4RHl9ij9ZRd+EagRpQXQZwCP1sGsUxL6xtGu9aqt08ZE4 0FpNJ4SQWmStLw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:25:18 2025 by rpki-client