This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json) Hash identifier: ZI51XDX/DEhdM5tyVtYHx4rGanvezYw0wm7aMsvfehU= Subject key identifier: B2:15:55:E7:B5:06:EA:CF:87:66:35:B5:C4:41:C9:0D:5D:E9:72:37 Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019B05589E324C99291F6A36EDCD9CA96C54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft Manifest number: 142E Signing time: Tue 09 Dec 2025 23:00:52 +0000 Manifest this update: Tue 09 Dec 2025 23:00:52 +0000 Manifest next update: Wed 10 Dec 2025 23:00:52 +0000 Files and hashes: 1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=) 2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=) 3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=) 4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: FVebdBrDNpZSEXCcKSSpdlVKQjrFLAYDoTz1X0lVHjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:58:9e:32:4c:99:29:1f:6a:36:ed:cd:9c:a9:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Dec 9 23:00:52 2025 GMT Not After : Dec 10 23:00:52 2025 GMT Subject: CN=b21555e7b506eacf876635b5c441c90d5de97237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:a6:15:30:73:4d:88:3a:be:52:7f:76:17: dd:24:26:29:c6:d4:8c:5f:2b:62:56:30:60:e1:17: 62:66:84:52:a1:42:37:e3:54:69:2c:06:a5:ce:f5: fe:80:b3:e8:8c:9d:35:4b:aa:83:c4:67:b7:02:49: e4:5c:fb:ff:35:48:2a:28:4f:be:ad:62:d1:0b:15: 19:04:71:5a:aa:72:9b:d5:8c:61:f3:49:af:98:fa: 43:e6:70:74:b8:e5:ce:09:24:79:88:a9:61:8f:72: cc:ba:ed:41:86:7b:31:94:58:f6:71:7e:4f:66:8b: 1c:b9:a1:1a:f5:74:93:e5:8b:d4:ed:27:30:13:86: 28:6a:8a:0f:a0:ae:1c:28:58:cd:4b:60:44:9b:6d: 33:7f:81:58:a8:fe:95:00:16:06:29:83:52:d3:b0: e8:76:9c:2a:ef:3a:2f:97:97:7a:f8:e7:61:2c:e8: d7:dc:cf:5d:76:3f:fa:bb:1b:cc:c6:6d:28:a9:a0: a6:f7:b1:ed:18:59:91:26:4f:fe:96:48:c3:60:29: 2e:3e:2c:fb:64:7a:62:34:1a:28:4a:0c:70:cc:22: c1:9f:89:d7:5e:e9:0d:a1:1e:37:a7:8b:0d:42:47: a5:f7:e8:d0:16:db:0f:92:54:60:c7:dd:d4:0e:9c: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:55:E7:B5:06:EA:CF:87:66:35:B5:C4:41:C9:0D:5D:E9:72:37 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c9:14:12:d7:68:06:7b:b2:a2:cd:02:81:13:98:1c:5c:86: 2d:ec:d8:3b:28:04:06:80:81:53:fe:25:75:28:75:c1:30:12: 00:aa:e9:ce:df:ba:17:43:ef:6f:3c:bf:7c:d1:a2:a0:42:7b: 37:4a:a1:13:e3:85:86:0f:6c:bf:b4:f9:cd:3f:53:61:4d:c3: 7a:71:3b:51:c2:24:8c:75:d9:82:21:61:f7:6f:cd:c6:33:c6: 3d:ca:e3:a3:98:82:b9:d2:89:8d:a9:a6:e2:05:33:4d:05:5a: 9b:80:58:f0:6f:6e:41:56:67:3c:a5:f0:a5:3a:7a:d5:ab:19: b6:ec:15:7d:18:ec:dc:08:19:e3:7a:45:7f:5a:75:f3:5c:07: 4c:ed:56:95:77:53:db:1b:3e:0b:27:87:0c:9d:e2:0b:b9:cc: b1:94:85:7b:f1:ef:7b:89:b0:98:b4:7f:d5:93:c4:2c:d7:dd: 06:95:ef:37:f2:64:70:14:8b:99:3a:14:35:70:26:91:2f:92: 2e:68:60:f9:66:0c:33:ea:e5:50:f0:74:46:e9:20:23:fc:3e: 66:4f:74:0d:48:96:63:83:57:c7:4e:87:e9:89:51:cd:76:67: 6e:76:c4:f9:35:1e:19:9d:79:36:90:d5:7c:29:df:96:b5:39: 6d:6e:c5:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWJ4yTJkpH2o27c2cqWxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjUxMjA5MjMwMDUyWhcNMjUxMjEwMjMwMDUyWjAzMTEwLwYDVQQD EyhiMjE1NTVlN2I1MDZlYWNmODc2NjM1YjVjNDQxYzkwZDVkZTk3MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY+mFTBzTYg6vlJ/dhfdJCYpxtSM XytiVjBg4RdiZoRSoUI341RpLAalzvX+gLPojJ01S6qDxGe3AknkXPv/NUgqKE++ rWLRCxUZBHFaqnKb1Yxh80mvmPpD5nB0uOXOCSR5iKlhj3LMuu1BhnsxlFj2cX5P ZoscuaEa9XST5YvU7ScwE4YoaooPoK4cKFjNS2BEm20zf4FYqP6VABYGKYNS07Do dpwq7zovl5d6+OdhLOjX3M9ddj/6uxvMxm0oqaCm97HtGFmRJk/+lkjDYCkuPiz7 ZHpiNBooSgxwzCLBn4nXXukNoR43p4sNQkel9+jQFtsPklRgx93UDpyFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIVVee1BurPh2Y1tcRByQ1d6XI3MB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8kUEtdo Bnuyos0CgROYHFyGLezYOygEBoCBU/4ldSh1wTASAKrpzt+6F0Pvbzy/fNGioEJ7 N0qhE+OFhg9sv7T5zT9TYU3DenE7UcIkjHXZgiFh92/NxjPGPcrjo5iCudKJjamm 4gUzTQVam4BY8G9uQVZnPKXwpTp61asZtuwVfRjs3AgZ43pFf1p181wHTO1WlXdT 2xs+CyeHDJ3iC7nMsZSFe/Hve4mwmLR/1ZPELNfdBpXvN/JkcBSLmToUNXAmkS+S Lmhg+WYMM+rlUPB0RukgI/w+Zk90DUiWY4NXx06H6YlRzXZnbnbE+TUeGZ15NpDV fCnflrU5bW7Fmg== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:17 2025 by rpki-client