This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json) Hash identifier: IQQ3q2K6p+ly1btTVn71EeXx5/t6T9WK6wrD54/yt8E= Subject key identifier: DE:0A:B7:FF:1F:1A:A3:AF:9B:AF:0B:52:DC:0F:53:F6:B1:C9:CF:D7 Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8 Certificate serial: 019AF2ADAFD6367473794FA4FDC72F180066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft Manifest number: 04F3 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=) 2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: cKvUHikn2dbrv+UXihmyqSweyRfc8FgvwdmdVWXq/6E=) 3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=) 4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:af:d6:36:74:73:79:4f:a4:fd:c7:2f:18:00:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=de0ab7ff1f1aa3af9baf0b52dc0f53f6b1c9cfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:ac:2e:46:84:32:38:e8:17:a8:98:25:ef: 67:a0:2a:45:f5:96:97:1b:da:4c:76:46:3e:8e:49: 77:b0:47:56:2d:1f:03:1f:d2:65:fc:94:35:75:6e: b9:36:37:83:29:f0:ab:8a:bd:42:a4:41:52:18:d8: fd:8c:98:30:73:e9:29:fe:ef:78:ad:45:3f:78:33: cd:65:67:44:4e:0d:e5:1d:21:07:b1:5d:4a:a3:02: db:c5:87:59:65:ef:f5:45:81:f3:d9:10:d6:b1:bf: a4:19:41:5c:8b:98:05:5c:6e:8b:dd:89:1b:3f:a2: 0f:1c:e8:25:14:2d:f3:c4:2a:0c:bb:42:b6:a4:0a: 2e:96:db:92:0a:7a:a7:12:a7:3c:a9:f5:f6:0a:31: 92:89:8b:8b:70:03:17:95:31:46:d8:a4:a0:da:c4: 20:2a:60:39:a0:83:6c:0f:7e:7e:63:5b:ef:da:1b: a7:84:81:ea:d8:bf:1b:76:39:38:0c:d9:53:19:07: f4:32:34:37:6d:70:3f:7e:3e:fc:30:4e:d5:77:6d: e6:1b:a6:9f:0f:c5:f5:b2:4f:aa:22:b3:02:5d:38: 95:66:6f:d6:17:42:ab:e0:b8:95:89:c8:83:61:d9: 5d:3e:3c:9e:11:c7:65:18:13:2d:3b:bc:0c:c4:d3: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0A:B7:FF:1F:1A:A3:AF:9B:AF:0B:52:DC:0F:53:F6:B1:C9:CF:D7 X509v3 Authority Key Identifier: keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:25:ac:43:13:67:1c:23:0f:d6:b6:b3:52:52:70:71:4c:dd: 3f:63:19:e4:c3:22:75:c9:33:53:37:21:9f:d8:59:36:56:84: 5b:4f:34:c8:3b:38:22:aa:fc:f6:43:fa:49:6f:57:8d:ce:1b: 9a:98:bf:6c:db:30:af:ec:5d:22:8e:1c:59:69:29:0b:fb:4c: ae:25:be:00:0c:e7:46:3e:88:42:e4:8a:81:cb:ca:f5:fa:6c: e0:77:94:90:2c:0b:64:9a:79:87:a1:d4:ba:73:e4:1c:5f:9e: 02:ac:14:07:f8:55:2a:8f:16:fb:00:77:be:ba:ae:bd:62:a5: dc:37:0b:4b:e5:81:e7:eb:a8:1c:cd:75:6d:a1:ed:f7:38:91: 0d:86:7a:d2:58:55:9e:e6:8f:08:88:7a:87:1d:71:c6:63:c4: ab:2c:4f:e2:8e:3d:6d:ed:49:76:fa:0f:a1:bc:01:0c:75:d5: b0:79:3d:8a:17:ad:af:4e:79:d4:21:f5:15:cb:58:43:c3:c6: d3:f4:bb:f0:ee:63:5f:f7:68:1e:ca:26:69:7b:c1:3a:b9:e3: 3a:f3:eb:42:1c:50:c6:a7:70:2d:e6:71:be:1b:dc:8d:db:4e: ea:49:30:ae:06:5f:ea:cd:fd:95:93:0c:ef:f2:38:a0:f2:18: 22:99:57:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra/WNnRzeU+k/ccvGABmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0 NzcxZDgwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EyhkZTBhYjdmZjFmMWFhM2FmOWJhZjBiNTJkYzBmNTNmNmIxYzljZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqsLkaEMjjoF6iYJe9noCpF9ZaX G9pMdkY+jkl3sEdWLR8DH9Jl/JQ1dW65NjeDKfCrir1CpEFSGNj9jJgwc+kp/u94 rUU/eDPNZWdETg3lHSEHsV1KowLbxYdZZe/1RYHz2RDWsb+kGUFci5gFXG6L3Ykb P6IPHOglFC3zxCoMu0K2pAoultuSCnqnEqc8qfX2CjGSiYuLcAMXlTFG2KSg2sQg KmA5oINsD35+Y1vv2hunhIHq2L8bdjk4DNlTGQf0MjQ3bXA/fj78ME7Vd23mG6af D8X1sk+qIrMCXTiVZm/WF0Kr4LiViciDYdldPjyeEcdlGBMtO7wMxNOvlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4Kt/8fGqOvm68LUtwPU/axyc/XMB8GA1UdIwQY MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt ZTYxNTQ5MzExN2QyLzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiWsQxNn HCMP1razUlJwcUzdP2MZ5MMidckzUzchn9hZNlaEW080yDs4Iqr89kP6SW9Xjc4b mpi/bNswr+xdIo4cWWkpC/tMriW+AAznRj6IQuSKgcvK9fps4HeUkCwLZJp5h6HU unPkHF+eAqwUB/hVKo8W+wB3vrquvWKl3DcLS+WB5+uoHM11baHt9ziRDYZ60lhV nuaPCIh6hx1xxmPEqyxP4o49be1JdvoPobwBDHXVsHk9ihetr0551CH1FctYQ8PG 0/S78O5jX/doHsomaXvBOrnjOvPrQhxQxqdwLeZxvhvcjdtO6kkwrgZf6s39lZMM 7/I4oPIYIplXVA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:04 2025 by rpki-client