This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json) Hash identifier: JVf8zfpq0ZjzL3LADOuuPa+T4YdNwickvtdaOwblA28= Subject key identifier: A4:2B:E9:DD:6A:F3:85:6C:A7:4A:0D:62:4D:45:3A:03:97:68:1D:2C Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3 Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3 Certificate serial: 019AF12D5327ED32251F950D1F86957EDE28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: sF0/t/dNoviElw03mhzOxfa6noiuBpkKXVWWvXUlwJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:53:27:ed:32:25:1f:95:0d:1f:86:95:7e:de:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=a42be9dd6af3856ca74a0d624d453a0397681d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:01:2e:9b:3f:56:07:fd:02:ec:25:13:b6: 20:63:bc:f9:39:5c:ac:f2:55:95:db:82:f9:78:7e: 7a:15:68:4c:f2:fd:b3:1f:c8:99:09:1d:54:07:54: a5:2d:eb:b3:8e:8b:92:8c:e9:73:24:5f:f1:ee:20: 31:ac:a9:66:42:6b:f0:84:ca:c1:12:07:ed:5c:81: 11:40:92:66:46:b6:c1:26:a5:71:b0:9e:2c:d1:06: 9e:4d:01:17:8c:78:07:b4:09:e9:52:30:34:92:6d: c6:eb:eb:32:aa:8d:71:90:61:05:9f:ef:48:2b:9b: bd:ce:7e:5d:3d:34:02:2a:77:ad:d4:7f:01:05:d9: ce:a3:e6:b3:44:2f:dc:5b:1e:65:16:c8:4c:e2:16: 5d:1b:69:73:34:96:f6:3d:53:4a:f7:f0:4c:68:b1: e6:25:49:2a:64:ea:6c:60:23:e6:8b:d1:10:9f:0e: d0:14:2f:e3:00:0f:b2:70:3e:fa:e6:36:f8:f4:a9: 5b:30:3b:41:31:b7:f8:68:c0:14:4a:e4:3d:00:60: b0:ba:30:a4:3b:7f:5d:93:a2:2c:9f:d0:0c:70:39: 98:ec:74:44:02:41:f3:91:c3:d7:33:2e:ef:0b:ed: 6a:ac:b4:6a:7e:be:8a:9f:81:7f:89:29:c5:e7:31: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:E9:DD:6A:F3:85:6C:A7:4A:0D:62:4D:45:3A:03:97:68:1D:2C X509v3 Authority Key Identifier: keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cc:ac:90:0f:e7:cd:c5:1c:19:a8:de:09:35:33:6f:20:97: 68:7e:0f:b0:f9:c7:c7:85:36:07:ef:09:84:56:9b:75:f6:3f: 33:05:39:f0:4d:25:bb:3d:dd:a5:e8:1b:2d:ad:2e:48:ac:b4: b4:52:ea:7d:a6:1a:b3:54:22:33:04:d0:2f:f7:1f:9a:cb:d4: 80:79:c6:68:6d:d9:c4:1b:f4:5c:54:e6:0d:c2:de:b2:af:3d: 0c:bb:d5:8c:cd:ee:13:35:66:12:a1:ec:6d:46:3f:f7:ab:00: 85:5e:23:19:f6:8e:79:b7:48:ec:d8:65:37:48:96:ae:ce:ff: 1d:55:5b:71:34:ff:d8:64:dd:b7:0e:00:e6:db:08:2a:d4:d9: 47:53:f5:8e:76:7c:fe:b0:42:52:4b:8a:28:37:b5:86:9f:70: 52:77:ac:86:67:4d:83:22:a9:8e:31:66:b2:ee:05:e8:d9:3c: a7:71:42:c6:7d:44:31:70:d9:ca:4f:43:1b:30:32:20:11:97: 3a:f4:9a:8f:f9:d6:4e:de:72:ef:d4:f3:4a:e1:0d:96:80:b2: 81:91:8d:09:46:68:d0:57:5f:6f:b6:2b:f6:ad:0c:31:05:f6: 00:76:c1:c8:0f:a6:42:0e:03:50:bd:f4:e7:61:93:c4:82:e2: a9:92:8b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVMn7TIlH5UNH4aVft4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWU2MDY2YmI2NTJjNjQ4YzdhODcwOTlkMGQ5MzU0NTQ2 MDYwZDMwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EyhhNDJiZTlkZDZhZjM4NTZjYTc0YTBkNjI0ZDQ1M2EwMzk3NjgxZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SgBLps/Vgf9AuwlE7YgY7z5OVys 8lWV24L5eH56FWhM8v2zH8iZCR1UB1SlLeuzjouSjOlzJF/x7iAxrKlmQmvwhMrB EgftXIERQJJmRrbBJqVxsJ4s0QaeTQEXjHgHtAnpUjA0km3G6+syqo1xkGEFn+9I K5u9zn5dPTQCKnet1H8BBdnOo+azRC/cWx5lFshM4hZdG2lzNJb2PVNK9/BMaLHm JUkqZOpsYCPmi9EQnw7QFC/jAA+ycD765jb49KlbMDtBMbf4aMAUSuQ9AGCwujCk O39dk6Isn9AMcDmY7HREAkHzkcPXMy7vC+1qrLRqfr6Kn4F/iSnF5zGNgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQr6d1q84Vsp0oNYk1FOgOXaB0sMB8GA1UdIwQY MBaAFDvuYGa7ZSxkjHqHCZ0Nk1RUYGDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMt MTE2NDZiZTE2NzIzLzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMtMTE2NDZiZTE2NzIz LzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsyskA/n zcUcGajeCTUzbyCXaH4PsPnHx4U2B+8JhFabdfY/MwU58E0luz3dpegbLa0uSKy0 tFLqfaYas1QiMwTQL/cfmsvUgHnGaG3ZxBv0XFTmDcLesq89DLvVjM3uEzVmEqHs bUY/96sAhV4jGfaOebdI7NhlN0iWrs7/HVVbcTT/2GTdtw4A5tsIKtTZR1P1jnZ8 /rBCUkuKKDe1hp9wUneshmdNgyKpjjFmsu4F6Nk8p3FCxn1EMXDZyk9DGzAyIBGX OvSaj/nWTt5y79TzSuENloCygZGNCUZo0Fdfb7Yr9q0MMQX2AHbByA+mQg4DUL30 52GTxILiqZKLLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:27 2025 by rpki-client