This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json) Hash identifier: Y48a98c3ZkoExs7ATXp7zkEGSbu7TEPhLSK1MXidrSk= Subject key identifier: CC:0E:48:3C:04:53:07:68:3C:21:E0:43:21:55:62:33:5B:A8:A2:E9 Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6 Certificate serial: 019B5A885482732CF2D00F8FDEDA8CCE8F5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft Manifest number: 0688 Signing time: Fri 26 Dec 2025 12:00:42 +0000 Manifest this update: Fri 26 Dec 2025 12:00:42 +0000 Manifest next update: Sat 27 Dec 2025 12:00:42 +0000 Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=) 2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: F6Cou8feWMad1A9vvnRZyJ+23d8yIhbsKMVoYUKYn/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:54:82:73:2c:f2:d0:0f:8f:de:da:8c:ce:8f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6 Validity Not Before: Dec 26 12:00:42 2025 GMT Not After : Dec 27 12:00:42 2025 GMT Subject: CN=cc0e483c045307683c21e043215562335ba8a2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:7f:13:fc:07:eb:2b:a1:5d:bd:99:ab:7b: d5:18:a9:f7:f7:b3:8e:4d:36:d9:94:33:d2:b5:4c: ea:e8:a3:f6:35:c9:d1:50:2c:9a:c1:4b:c5:b6:cd: 2a:c7:93:b5:ab:03:95:81:79:4d:5a:cb:54:98:4e: cb:01:83:22:48:73:dc:ec:4c:54:12:89:58:f2:c0: 36:33:68:91:d9:6e:c0:fa:51:3e:08:e7:31:50:62: 8d:a1:b9:91:ec:38:9b:c1:aa:ab:b0:35:03:d9:f0: 66:b6:9f:20:d1:53:70:74:e6:8a:3d:9d:b5:48:75: 77:27:2e:1d:4c:3a:65:79:ab:dc:6e:d9:ed:6a:24: 4c:98:2b:8a:fc:6b:98:5f:b5:70:78:26:71:c3:a0: 3d:60:91:65:fc:5b:42:25:4c:26:d7:19:91:49:2c: b4:fd:16:0b:d3:b6:6d:22:f1:99:f0:79:c7:32:70: e0:28:ac:44:b2:bf:30:57:75:4f:e4:0a:49:0d:18: 9b:31:34:54:eb:b6:92:40:76:e2:89:74:c8:bf:12: 68:a4:fa:7e:0f:62:fb:98:a0:ac:96:cd:56:a8:d3: d2:0e:e2:cc:53:8c:cc:9f:6e:8f:e7:a0:48:e1:34: 37:1e:85:0e:1c:c2:77:45:e6:78:b3:9b:ed:8a:3a: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0E:48:3C:04:53:07:68:3C:21:E0:43:21:55:62:33:5B:A8:A2:E9 X509v3 Authority Key Identifier: keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:43:e1:a2:ee:cf:28:eb:f9:bc:0e:b9:df:95:00:86:c8:53: 0e:2d:99:6d:43:ba:c8:57:49:97:f0:c6:5c:b3:09:3c:9a:e6: b9:f0:a2:66:46:31:d1:dc:0c:93:41:46:c3:c9:b6:07:6e:b7: 78:52:56:ee:51:f1:ef:b1:d6:2e:3e:60:e4:8e:2c:60:75:a4: 14:73:97:39:20:9b:a5:97:ca:db:51:c3:85:6b:07:20:97:26: bc:bd:d7:b4:6a:d6:d7:04:34:c7:aa:39:42:b6:a1:ef:51:2d: ac:7e:d2:44:45:6d:23:99:dc:5f:47:e7:37:af:0d:a9:d0:64: 65:20:53:ab:e5:1a:45:c4:3e:64:3e:c4:f8:0c:cd:09:6c:ab: b4:86:65:57:de:13:71:66:cd:e5:0d:60:35:21:ca:74:55:02: 7d:25:34:d6:36:bc:6a:69:53:02:bd:9a:33:8e:f5:2c:67:72: d8:00:7b:f9:59:55:23:49:1f:78:5a:df:19:e4:36:80:7b:bd: 3b:4c:24:84:5d:31:92:c4:58:27:45:fb:ee:90:fb:74:e9:8a: c0:e9:fe:ea:21:78:8a:ec:06:fd:5a:69:1d:b6:ee:c4:78:5e: 69:63:ed:71:01:99:36:16:47:4b:fd:44:9a:39:c8:dc:49:c3: 3d:54:fc:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiFSCcyzy0A+P3tqMzo9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTMwOTM2OGE4YWQxM2JiMDgyNjQ0OTdmYzJlNDMxNTFl NmQ1YTYwHhcNMjUxMjI2MTIwMDQyWhcNMjUxMjI3MTIwMDQyWjAzMTEwLwYDVQQD EyhjYzBlNDgzYzA0NTMwNzY4M2MyMWUwNDMyMTU1NjIzMzViYThhMmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiB/E/wH6yuhXb2Zq3vVGKn397OO TTbZlDPStUzq6KP2NcnRUCyawUvFts0qx5O1qwOVgXlNWstUmE7LAYMiSHPc7ExU EolY8sA2M2iR2W7A+lE+COcxUGKNobmR7DibwaqrsDUD2fBmtp8g0VNwdOaKPZ21 SHV3Jy4dTDpleavcbtntaiRMmCuK/GuYX7VweCZxw6A9YJFl/FtCJUwm1xmRSSy0 /RYL07ZtIvGZ8HnHMnDgKKxEsr8wV3VP5ApJDRibMTRU67aSQHbiiXTIvxJopPp+ D2L7mKCsls1WqNPSDuLMU4zMn26P56BI4TQ3HoUOHMJ3ReZ4s5vtijoPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwOSDwEUwdoPCHgQyFVYjNbqKLpMB8GA1UdIwQY MBaAFKNTCTaKitE7sIJkSX/C5DFR5tWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDIt MTcxNDIyM2I5NDllLzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDItMTcxNDIyM2I5NDll LzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUPhou7P KOv5vA6535UAhshTDi2ZbUO6yFdJl/DGXLMJPJrmufCiZkYx0dwMk0FGw8m2B263 eFJW7lHx77HWLj5g5I4sYHWkFHOXOSCbpZfK21HDhWsHIJcmvL3XtGrW1wQ0x6o5 Qrah71EtrH7SREVtI5ncX0fnN68NqdBkZSBTq+UaRcQ+ZD7E+AzNCWyrtIZlV94T cWbN5Q1gNSHKdFUCfSU01ja8amlTAr2aM471LGdy2AB7+VlVI0kfeFrfGeQ2gHu9 O0wkhF0xksRYJ0X77pD7dOmKwOn+6iF4iuwG/VppHbbuxHheaWPtcQGZNhZHS/1E mjnI3EnDPVT8sA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client