This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json) Hash identifier: bXoCd64nhT60IBkkIE4SxZri7NjuDymicmq6W9UfPDc= Subject key identifier: F0:AD:EF:13:BB:A2:BF:B6:13:D3:50:30:1D:09:1E:0A:15:08:27:64 Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Certificate serial: 019B19F1D40308CCB655B9B202B57CC28C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft Manifest number: 0CA3 Signing time: Sat 13 Dec 2025 23:00:37 +0000 Manifest this update: Sat 13 Dec 2025 23:00:37 +0000 Manifest next update: Sun 14 Dec 2025 23:00:37 +0000 Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: 2St7aR/7mKmrbl+Gl6PYg1uAj7MSEaODwqCcMg0TmWo=) 2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:d4:03:08:cc:b6:55:b9:b2:02:b5:7c:c2:8c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Validity Not Before: Dec 13 23:00:37 2025 GMT Not After : Dec 14 23:00:37 2025 GMT Subject: CN=f0adef13bba2bfb613d350301d091e0a15082764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:90:99:ef:44:98:4e:56:5e:85:a5:77:7b:d5: e2:11:7e:75:1c:7e:cf:0c:10:d5:65:ef:79:d0:12: 20:55:ad:b6:48:48:0e:f9:c2:1a:b7:0b:07:7c:91: cc:bc:66:5b:4e:80:75:12:2e:75:2b:20:ca:fc:06: c0:f4:fe:ef:f7:7f:dd:d8:87:a2:97:97:62:e5:8a: db:8e:90:96:15:ea:4f:b8:e1:59:83:7c:6a:22:fd: 3f:7e:06:d8:8c:03:3e:3e:f8:28:e4:90:07:99:a0: d8:4b:be:c3:17:02:ba:45:be:05:53:28:18:7d:b4: 38:b8:94:7a:c1:65:47:85:95:aa:6b:ed:95:01:10: 18:6b:08:0a:08:4d:56:3d:5c:c0:28:b7:de:f0:f4: d5:34:6a:73:7d:8d:b4:b6:cb:e4:00:a3:32:81:ef: 68:b5:84:f4:a1:ad:6b:17:76:64:e2:d8:f3:f9:b7: 8c:9a:45:60:96:b4:a6:be:35:9b:be:71:42:c0:7a: db:cb:4e:58:a6:22:ae:ae:23:b0:be:fb:b7:f6:22: 0d:0f:2e:f4:d4:93:23:0a:cb:64:9e:b4:cf:28:49: 20:f8:e2:61:fc:4a:e1:25:01:b6:8a:9f:90:c8:cc: 47:cd:1e:7f:a9:2c:e2:f8:6a:be:78:ad:00:9f:3a: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AD:EF:13:BB:A2:BF:B6:13:D3:50:30:1D:09:1E:0A:15:08:27:64 X509v3 Authority Key Identifier: keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:89:e9:39:c2:15:15:e0:3c:aa:94:40:58:fa:e7:fa:4d:81: 22:3d:fd:58:99:ce:76:52:3e:5b:3d:d6:ae:8f:87:5d:30:21: cb:54:d9:b0:8b:b9:6a:91:58:5c:43:2a:b2:f5:46:68:5e:82: 38:80:6d:13:98:bd:8b:e2:50:00:aa:71:9c:42:69:8b:34:c5: 0f:39:54:bd:8f:1c:62:ef:94:35:ea:e0:b8:5f:18:ef:0e:32: 6c:f6:a4:7f:95:7b:4c:cb:e0:6d:c5:26:14:17:7f:db:ee:80: c6:21:53:db:9d:9e:97:14:f3:b4:8a:3b:11:0e:cf:2f:fa:84: cb:80:2b:e0:c2:35:6f:5f:af:2e:5d:29:47:2d:f4:7d:80:02: 33:a3:52:b6:48:e0:df:d3:cb:1d:96:33:e9:78:b1:8c:32:10: 9f:4b:21:09:5e:ad:3b:66:8c:d6:8c:19:ac:69:47:b7:6b:38: be:87:bb:9e:7a:64:1a:27:41:9a:db:ed:ab:58:2b:c6:df:af: f9:43:cd:d9:a1:4f:0e:13:b5:4f:33:b0:47:2f:d2:0c:1a:fd: fa:cf:96:3f:7a:d1:d3:9f:6a:58:e6:40:d0:38:7d:51:d2:8b: 4b:01:b9:dc:78:8b:f2:cd:72:25:07:81:b9:c9:5b:82:d6:c2: a0:ce:95:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8dQDCMy2VbmyArV8wowLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk NmM2Y2EwHhcNMjUxMjEzMjMwMDM3WhcNMjUxMjE0MjMwMDM3WjAzMTEwLwYDVQQD EyhmMGFkZWYxM2JiYTJiZmI2MTNkMzUwMzAxZDA5MWUwYTE1MDgyNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JCZ70SYTlZehaV3e9XiEX51HH7P DBDVZe950BIgVa22SEgO+cIatwsHfJHMvGZbToB1Ei51KyDK/AbA9P7v93/d2Iei l5di5YrbjpCWFepPuOFZg3xqIv0/fgbYjAM+Pvgo5JAHmaDYS77DFwK6Rb4FUygY fbQ4uJR6wWVHhZWqa+2VARAYawgKCE1WPVzAKLfe8PTVNGpzfY20tsvkAKMyge9o tYT0oa1rF3Zk4tjz+beMmkVglrSmvjWbvnFCwHrby05YpiKuriOwvvu39iINDy70 1JMjCstknrTPKEkg+OJh/ErhJQG2ip+QyMxHzR5/qSzi+Gq+eK0AnzpZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCt7xO7or+2E9NQMB0JHgoVCCdkMB8GA1UdIwQY MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2 LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYnpOcIV FeA8qpRAWPrn+k2BIj39WJnOdlI+Wz3Wro+HXTAhy1TZsIu5apFYXEMqsvVGaF6C OIBtE5i9i+JQAKpxnEJpizTFDzlUvY8cYu+UNerguF8Y7w4ybPakf5V7TMvgbcUm FBd/2+6AxiFT252elxTztIo7EQ7PL/qEy4Ar4MI1b1+vLl0pRy30fYACM6NStkjg 39PLHZYz6XixjDIQn0shCV6tO2aM1owZrGlHt2s4voe7nnpkGidBmtvtq1grxt+v +UPN2aFPDhO1TzOwRy/SDBr9+s+WP3rR059qWOZA0Dh9UdKLSwG53HiL8s1yJQeB uclbgtbCoM6VtA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:16 2025 by rpki-client