This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json) Hash identifier: B1Eq08IJuUJAR9Xa9PIcZYoO9KcFkfgFrVNvno0QU/s= Subject key identifier: 00:C7:8C:22:61:41:C3:4E:96:4D:E9:DE:42:EB:CF:CB:57:FE:08:E5 Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Certificate serial: 019B0F00400B4113076BE81042085A88F448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 20:00:33 +0000 Manifest this update: Thu 11 Dec 2025 20:00:33 +0000 Manifest next update: Fri 12 Dec 2025 20:00:33 +0000 Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: jSVS0BXeZwcHK8fyC9GP6a1SUTqzAoAdGvhJ/Gmy7aA=) 2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:40:0b:41:13:07:6b:e8:10:42:08:5a:88:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Validity Not Before: Dec 11 20:00:33 2025 GMT Not After : Dec 12 20:00:33 2025 GMT Subject: CN=00c78c226141c34e964de9de42ebcfcb57fe08e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:e9:8a:5d:aa:5b:ff:57:d7:82:d8:72:dc: a1:f2:17:df:4c:b4:9c:e4:a4:d3:04:68:48:99:69: 58:95:2b:83:72:41:fe:79:63:9b:ca:11:cb:9c:1d: aa:02:6b:8c:41:4d:b4:d5:4b:f1:df:b8:49:84:47: b2:4b:21:59:48:69:43:09:4f:24:7d:56:54:2a:68: 75:05:9c:79:0f:04:46:fc:b9:aa:a6:dd:36:15:11: 7a:bf:c3:e0:0d:a0:56:7e:40:37:f5:a6:e3:7a:5d: 3e:7f:93:54:81:51:4b:c6:fa:b6:d5:26:64:84:e0: a9:8c:4a:b1:5f:6b:73:68:6a:16:ac:59:85:dd:9f: 53:6b:88:3d:d5:e5:06:4f:d4:94:06:f6:f2:a3:22: 24:e7:75:fe:f6:01:41:6a:42:63:50:7a:e5:c0:95: 88:43:62:9c:55:3c:e2:23:9f:cb:e5:5c:0f:d1:4c: 48:11:49:8d:40:86:3d:1b:62:bc:77:fd:89:bd:90: 8d:da:8c:14:39:8d:9c:61:d6:91:4d:9b:e9:c7:ec: 1e:d2:51:04:7f:58:d6:46:9d:60:0a:05:26:b1:31: ee:81:fd:48:69:55:dc:d0:b0:3d:d6:3d:1b:03:85: bf:16:6f:14:18:01:c6:2f:46:3b:fe:b8:8b:3f:8a: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:8C:22:61:41:C3:4E:96:4D:E9:DE:42:EB:CF:CB:57:FE:08:E5 X509v3 Authority Key Identifier: keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:c1:00:eb:ff:c8:e6:d4:b1:e8:ce:1e:3e:78:43:b1:a3: 03:9e:c5:c3:2e:d1:39:99:fd:6b:7b:c3:97:29:6f:2a:6a:17: 0b:e1:82:f8:7b:25:50:4a:64:08:92:d2:83:3f:fd:8f:bf:6a: 45:84:40:c3:be:0c:7d:61:45:cd:fb:80:f7:1e:ee:58:ed:fb: 3d:53:00:b3:d4:00:79:86:fa:88:19:ac:6e:85:b7:38:c2:6a: 33:95:6c:9d:e5:70:6e:60:d1:18:8e:82:2f:e2:43:23:e5:b1: ed:0d:26:ab:3c:08:f8:67:cc:1c:ac:51:98:e0:ff:8f:ce:e9: 45:0e:03:c9:52:0e:df:d4:04:e5:b9:fb:c9:b7:e6:19:58:b9: bc:e3:6e:9a:e0:4f:b3:4c:78:cd:f3:fe:48:27:52:b1:de:8a: 21:82:e1:6c:5a:80:05:c9:3a:0f:89:33:58:41:fd:1f:51:c2: dc:e7:5b:76:4b:0f:92:52:d2:f7:fd:27:11:77:2e:a9:77:66: 6a:56:4a:a5:16:f7:d5:ec:de:43:57:b6:5e:40:69:79:92:ed: fc:aa:4a:1c:c7:e1:1e:08:02:97:2c:be:4e:05:32:c3:ef:39: c6:22:16:55:34:3f:9a:e9:71:17:fe:05:eb:6d:89:5f:e0:84: 1f:d8:c3:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAEALQRMHa+gQQghaiPRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi NTFhNWEwHhcNMjUxMjExMjAwMDMzWhcNMjUxMjEyMjAwMDMzWjAzMTEwLwYDVQQD EygwMGM3OGMyMjYxNDFjMzRlOTY0ZGU5ZGU0MmViY2ZjYjU3ZmUwOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB3pil2qW/9X14LYctyh8hffTLSc 5KTTBGhImWlYlSuDckH+eWObyhHLnB2qAmuMQU201Uvx37hJhEeySyFZSGlDCU8k fVZUKmh1BZx5DwRG/Lmqpt02FRF6v8PgDaBWfkA39abjel0+f5NUgVFLxvq21SZk hOCpjEqxX2tzaGoWrFmF3Z9Ta4g91eUGT9SUBvbyoyIk53X+9gFBakJjUHrlwJWI Q2KcVTziI5/L5VwP0UxIEUmNQIY9G2K8d/2JvZCN2owUOY2cYdaRTZvpx+we0lEE f1jWRp1gCgUmsTHugf1IaVXc0LA91j0bA4W/Fm8UGAHGL0Y7/riLP4qHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADHjCJhQcNOlk3p3kLrz8tX/gjlMB8GA1UdIwQY MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlarBAOv/ yObUsejOHj54Q7GjA57Fwy7ROZn9a3vDlylvKmoXC+GC+HslUEpkCJLSgz/9j79q RYRAw74MfWFFzfuA9x7uWO37PVMAs9QAeYb6iBmsboW3OMJqM5VsneVwbmDRGI6C L+JDI+Wx7Q0mqzwI+GfMHKxRmOD/j87pRQ4DyVIO39QE5bn7ybfmGVi5vONumuBP s0x4zfP+SCdSsd6KIYLhbFqABck6D4kzWEH9H1HC3OdbdksPklLS9/0nEXcuqXdm alZKpRb31ezeQ1e2XkBpeZLt/KpKHMfhHggClyy+TgUyw+85xiIWVTQ/mulxF/4F 622JX+CEH9jDEA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:25:55 2025 by rpki-client