This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft File: o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json) Hash identifier: 0IiPCbhsBtuyytfmlG6s8yR60uoUlfR7tN4hcKFjK0U= Subject key identifier: BF:F4:6D:02:8C:BA:3D:D5:A3:9D:50:B0:61:DF:29:4F:4D:14:DB:A2 Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Certificate serial: 019B10B874D4947E4B854347B0EFA8F82857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft Manifest number: 14C1 Signing time: Fri 12 Dec 2025 04:01:22 +0000 Manifest this update: Fri 12 Dec 2025 04:01:22 +0000 Manifest next update: Sat 13 Dec 2025 04:01:22 +0000 Files and hashes: 1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=) 2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=) 3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=) 4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=) 5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=) 6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: /lNJMwR+bFMojkMT89PYNyhjaRdsiMB1tY4C8bG/jf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:74:d4:94:7e:4b:85:43:47:b0:ef:a8:f8:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Validity Not Before: Dec 12 04:01:22 2025 GMT Not After : Dec 13 04:01:22 2025 GMT Subject: CN=bff46d028cba3dd5a39d50b061df294f4d14dba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:f4:04:aa:29:f3:a8:7a:d6:db:ba:ff:b6: b1:43:a3:c9:d8:36:40:da:fe:78:d7:8c:5f:21:64: ac:3d:d7:6d:ac:fc:5d:7e:0a:31:0e:3c:35:da:58: 44:15:45:a0:d8:f5:ca:74:12:20:45:b4:8e:9a:01: 07:d7:a6:cd:f6:25:74:79:00:8e:aa:b3:e1:bc:53: 95:0a:8f:18:1a:05:98:7a:dc:ba:1c:d7:d3:56:5e: 57:61:e7:76:10:72:a6:6e:b4:56:6c:1a:62:0e:70: 83:ab:b9:aa:4d:ef:df:e4:f1:45:e0:db:c6:29:df: 5e:14:3e:ef:30:41:8a:3c:83:3a:be:05:8f:21:b7: 8e:65:ec:20:8e:04:dd:a3:e7:35:71:53:6b:50:19: 04:8b:8e:63:ab:61:30:10:b2:71:8c:74:fa:ec:16: c8:bc:55:3e:eb:61:09:21:5b:37:12:07:e7:ae:7b: 9b:78:86:00:7f:3d:ce:75:68:4f:27:59:88:ca:c4: ba:e8:fc:63:82:67:3c:4d:9d:f6:52:ae:f4:6b:94: 45:bd:2d:76:1c:7e:e2:09:be:a6:4a:86:92:36:3b: 24:4a:5b:37:07:3f:68:35:87:bd:1d:9d:b5:e0:f7: ed:17:99:d5:45:3e:35:f0:d8:da:4d:1b:6d:6d:a8: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:6D:02:8C:BA:3D:D5:A3:9D:50:B0:61:DF:29:4F:4D:14:DB:A2 X509v3 Authority Key Identifier: keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b6:d3:56:bd:85:95:55:70:3c:9d:5e:28:f8:db:c0:a5:18: f9:f2:32:77:8b:28:b7:fb:aa:1a:d4:c8:31:72:95:de:b9:f9: 45:6c:9e:10:1f:a1:a6:ab:f2:4d:6c:1d:3b:22:40:21:46:2e: af:e2:0d:60:d3:03:c8:24:54:ed:21:78:13:60:2e:19:28:a9: 19:5f:c5:81:d0:11:c8:4b:0b:48:ae:2f:88:a9:0a:99:4c:0b: 88:f7:76:e1:ed:81:7e:0e:ef:d9:d2:b7:7f:bf:f0:9e:8c:98: 74:cc:f6:2d:cd:33:38:89:1b:e8:35:d6:a7:a4:9d:5c:28:cd: 5e:8f:00:a7:77:6c:1a:73:af:9b:95:69:b1:03:f9:fb:89:13: d3:05:4e:f5:8d:da:97:33:b7:7b:20:18:4b:9b:a4:c9:5c:6f: e4:46:04:16:50:ac:a2:d6:29:b0:86:8d:15:79:99:7f:32:c4: 0d:76:ea:8b:27:d8:60:7b:89:6b:d0:27:59:39:e3:33:e0:06: 71:77:2f:f9:37:7b:31:63:1d:d5:46:02:bd:41:7f:fd:3c:99: da:44:4b:7a:9b:76:d4:f3:93:3b:fb:8a:2f:44:35:e1:50:e2: dc:50:21:e6:44:d0:9c:c0:8d:e3:2a:93:f3:7f:7f:4f:22:12: 43:88:0e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHTUlH5LhUNHsO+o+ChXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj MjAzMmUwHhcNMjUxMjEyMDQwMTIyWhcNMjUxMjEzMDQwMTIyWjAzMTEwLwYDVQQD EyhiZmY0NmQwMjhjYmEzZGQ1YTM5ZDUwYjA2MWRmMjk0ZjRkMTRkYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gf0BKop86h61tu6/7axQ6PJ2DZA 2v5414xfIWSsPddtrPxdfgoxDjw12lhEFUWg2PXKdBIgRbSOmgEH16bN9iV0eQCO qrPhvFOVCo8YGgWYety6HNfTVl5XYed2EHKmbrRWbBpiDnCDq7mqTe/f5PFF4NvG Kd9eFD7vMEGKPIM6vgWPIbeOZewgjgTdo+c1cVNrUBkEi45jq2EwELJxjHT67BbI vFU+62EJIVs3EgfnrnubeIYAfz3OdWhPJ1mIysS66Pxjgmc8TZ32Uq70a5RFvS12 HH7iCb6mSoaSNjskSls3Bz9oNYe9HZ214PftF5nVRT418NjaTRttbaiBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/0bQKMuj3Vo51QsGHfKU9NFNuiMB8GA1UdIwQY MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct OWUyMjBmMDRhOTAxLzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLbTVr2F lVVwPJ1eKPjbwKUY+fIyd4sot/uqGtTIMXKV3rn5RWyeEB+hpqvyTWwdOyJAIUYu r+INYNMDyCRU7SF4E2AuGSipGV/FgdARyEsLSK4viKkKmUwLiPd24e2Bfg7v2dK3 f7/wnoyYdMz2Lc0zOIkb6DXWp6SdXCjNXo8Ap3dsGnOvm5VpsQP5+4kT0wVO9Y3a lzO3eyAYS5ukyVxv5EYEFlCsotYpsIaNFXmZfzLEDXbqiyfYYHuJa9AnWTnjM+AG cXcv+Td7MWMd1UYCvUF//TyZ2kRLept21POTO/uKL0Q14VDi3FAh5kTQnMCN4yqT 839/TyISQ4gOKA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:03 2025 by rpki-client