This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json) Hash identifier: 8PgRajuedR6QDtfybMuB1I09cBAJJYYrPADWYlLVWX8= Subject key identifier: 0D:04:05:B7:96:72:C0:B9:DB:11:FF:A5:AE:B8:C6:CD:5F:84:24:98 Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Certificate serial: 019B11942B14B8DBEBCC0757F948A7467D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft Manifest number: 03F4 Signing time: Fri 12 Dec 2025 08:01:21 +0000 Manifest this update: Fri 12 Dec 2025 08:01:21 +0000 Manifest next update: Sat 13 Dec 2025 08:01:21 +0000 Files and hashes: 1: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (hash: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=) 2: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=) 3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: RAkwu4E70QEBoe+zpJytsITNZmKF7Q5uLDyoEvJtG7Y=) 4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:2b:14:b8:db:eb:cc:07:57:f9:48:a7:46:7d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Validity Not Before: Dec 12 08:01:21 2025 GMT Not After : Dec 13 08:01:21 2025 GMT Subject: CN=0d0405b79672c0b9db11ffa5aeb8c6cd5f842498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:70:b0:fa:e5:7d:b1:3e:52:84:4a:5a:c8: 7c:c0:5f:4b:1b:53:23:f1:9c:25:6d:a1:df:c3:bc: 81:a6:90:57:e2:59:27:63:20:0d:4a:36:de:d0:82: b0:43:da:ad:e2:f1:d0:f1:80:8c:61:c6:ae:fe:f4: f0:8f:5e:b6:99:5b:60:e5:6c:00:72:e9:88:43:5c: 0d:41:b5:94:c6:ec:c0:8d:6a:51:bc:be:17:85:b3: d4:4e:5a:6f:ec:78:1a:0c:9f:cf:ef:ea:8e:08:b3: 14:90:38:a1:96:c7:90:01:d7:0a:e2:85:7b:57:b1: 48:1c:cc:23:0e:7b:73:7b:63:0b:81:e1:ab:21:e9: cf:84:b6:fb:09:2f:7f:e3:bc:47:00:5c:ca:a1:7a: 84:de:fb:b3:4c:da:58:d0:40:29:e6:04:13:95:43: 3e:d7:fb:ef:e6:3e:d7:14:54:d7:4c:64:8b:2d:37: e5:9a:21:2b:37:f4:39:6c:0f:30:f3:ff:72:c1:7a: e1:2d:b6:c3:6c:37:e8:f5:b5:29:9a:ba:4c:c3:2e: 48:a0:fc:de:32:16:b7:30:bb:60:2e:9e:e4:b7:32: 08:0b:78:1f:df:69:cb:42:d6:c0:d8:4e:99:d9:9d: fa:24:09:63:ea:0a:88:13:25:45:05:43:67:6e:83: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:04:05:B7:96:72:C0:B9:DB:11:FF:A5:AE:B8:C6:CD:5F:84:24:98 X509v3 Authority Key Identifier: keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bf:c4:c9:83:b1:75:16:d8:09:db:cc:68:fc:90:b2:b0:57: 42:fc:d5:c5:ad:c2:7f:40:1c:a1:b0:2e:98:24:4d:ad:c3:59: f4:ad:77:45:49:00:9a:dd:03:73:9c:ed:1a:f6:d3:ff:3e:c0: 6a:53:1c:4d:ef:fc:f2:0b:2d:65:50:83:17:63:ea:b2:93:9d: 6f:e2:8c:05:e1:9a:c2:0c:80:98:c5:8d:36:73:0f:da:94:54: d6:4c:2b:17:b4:3b:c8:d0:95:3b:0f:ff:8c:a5:b3:f4:08:30: 32:33:76:37:d0:87:0e:e8:cb:5a:f5:4d:d9:8d:a7:57:20:d2: 25:d7:65:f8:5d:b3:c4:a1:c0:64:93:1c:89:3d:7d:e0:98:f5: 7a:87:25:10:8d:41:19:7a:09:86:ba:12:0a:25:c3:3d:c3:9b: a1:72:47:99:ea:b1:90:0e:90:be:42:1b:dc:6f:b8:fc:17:7a: e8:3a:14:12:fb:d5:2f:81:50:4d:b4:4f:2d:03:97:bb:7c:77: 40:41:ef:e9:9a:4f:2d:43:5b:92:f6:f1:81:47:81:65:1e:aa: f0:6b:bc:1c:f0:8b:b5:dd:82:36:04:29:c6:31:01:d9:fd:63: 90:59:97:71:25:b6:28:ed:76:80:ec:24:b2:20:2c:cc:af:eb: b5:40:39:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlCsUuNvrzAdX+UinRn0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3 YjljYmYwHhcNMjUxMjEyMDgwMTIxWhcNMjUxMjEzMDgwMTIxWjAzMTEwLwYDVQQD EygwZDA0MDViNzk2NzJjMGI5ZGIxMWZmYTVhZWI4YzZjZDVmODQyNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa5wsPrlfbE+UoRKWsh8wF9LG1Mj 8ZwlbaHfw7yBppBX4lknYyANSjbe0IKwQ9qt4vHQ8YCMYcau/vTwj162mVtg5WwA cumIQ1wNQbWUxuzAjWpRvL4XhbPUTlpv7HgaDJ/P7+qOCLMUkDihlseQAdcK4oV7 V7FIHMwjDntze2MLgeGrIenPhLb7CS9/47xHAFzKoXqE3vuzTNpY0EAp5gQTlUM+ 1/vv5j7XFFTXTGSLLTflmiErN/Q5bA8w8/9ywXrhLbbDbDfo9bUpmrpMwy5IoPze Mha3MLtgLp7ktzIIC3gf32nLQtbA2E6Z2Z36JAlj6gqIEyVFBUNnboP//QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0EBbeWcsC52xH/pa64xs1fhCSYMB8GA1UdIwQY MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt NTRiNGNhNTBkMjQ4LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4 LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvL/EyYOx dRbYCdvMaPyQsrBXQvzVxa3Cf0AcobAumCRNrcNZ9K13RUkAmt0Dc5ztGvbT/z7A alMcTe/88gstZVCDF2PqspOdb+KMBeGawgyAmMWNNnMP2pRU1kwrF7Q7yNCVOw// jKWz9AgwMjN2N9CHDujLWvVN2Y2nVyDSJddl+F2zxKHAZJMciT194Jj1eoclEI1B GXoJhroSCiXDPcOboXJHmeqxkA6QvkIb3G+4/Bd66DoUEvvVL4FQTbRPLQOXu3x3 QEHv6ZpPLUNbkvbxgUeBZR6q8Gu8HPCLtd2CNgQpxjEB2f1jkFmXcSW2KO12gOwk siAszK/rtUA5mA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:45:36 2025 by rpki-client