This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json) Hash identifier: k6icnavDA1+1OVj5gYdft2XIonCE+IdffXPjoPwE0hY= Subject key identifier: F6:FD:39:40:2F:B8:2D:7E:0F:CC:09:41:E7:A9:C0:7C:28:8B:65:D2 Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019B2C2F9BE0734ECA32B7F8FC84E5EDEB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft Manifest number: 0D9F Signing time: Wed 17 Dec 2025 12:01:16 +0000 Manifest this update: Wed 17 Dec 2025 12:01:16 +0000 Manifest next update: Thu 18 Dec 2025 12:01:16 +0000 Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=) 2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=) 3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=) 4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: v8agGnkv/vjX4pApVO5A3/gKueAnp4lIxC/uvYRT74o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:9b:e0:73:4e:ca:32:b7:f8:fc:84:e5:ed:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Dec 17 12:01:16 2025 GMT Not After : Dec 18 12:01:16 2025 GMT Subject: CN=f6fd39402fb82d7e0fcc0941e7a9c07c288b65d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:7e:e9:93:e1:d5:ba:8c:9d:9e:f8:58:ff: 50:a7:92:27:28:3e:35:73:b4:f2:96:c3:e7:bb:cf: 9e:5e:30:15:30:f7:24:38:55:9a:a2:6e:5b:9b:b2: 1c:ba:70:b8:4e:4f:a1:22:02:75:55:f6:d7:20:07: b8:74:d6:aa:a1:d3:be:fc:c4:8f:45:f7:09:6e:a9: c4:77:90:87:10:18:c3:89:a6:b1:b7:4a:01:a0:cc: 69:81:89:37:e7:ef:92:62:b6:63:dd:11:18:36:5a: 8d:b1:7f:9b:2d:72:80:4f:ac:8c:e6:67:b9:dc:a4: e3:e1:23:80:be:35:14:e6:55:20:fd:06:dc:3f:f3: fa:ee:f2:68:9f:77:0b:74:4b:c7:3c:8b:e7:ad:6e: b2:15:80:16:87:d1:18:0c:91:cf:2b:4d:59:30:26: 30:98:83:04:94:fb:72:49:69:e6:db:c8:a8:cc:c2: 51:fc:a5:ac:90:b8:00:19:65:06:7d:0d:ab:42:12: 11:ac:a2:ca:6e:f9:e1:11:27:80:a5:b3:95:13:1b: 40:b1:8e:1f:d7:b1:45:8e:35:25:40:7a:c4:14:75: da:48:e6:df:11:f7:a8:8b:3e:83:6d:06:30:0e:fc: 14:28:5e:17:d2:28:0b:c6:5d:10:43:1e:8c:de:57: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FD:39:40:2F:B8:2D:7E:0F:CC:09:41:E7:A9:C0:7C:28:8B:65:D2 X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ee:61:3c:bb:92:01:87:08:30:46:c4:e2:6c:60:b6:ec:fc: f2:64:73:bf:7f:49:14:48:79:02:92:06:fe:28:ea:f9:dc:c2: 96:c5:41:91:b6:4c:6d:9a:e8:9a:2d:24:c2:b3:bc:83:73:00: e0:a6:73:a3:a9:56:96:b0:2d:c9:93:28:57:63:48:aa:0e:d1: e4:b3:f8:27:00:0b:40:8c:4e:ca:f4:9a:15:bf:9d:aa:ec:90: 07:d4:a1:e0:0f:c5:4d:9d:7d:19:eb:d4:fc:cb:67:86:e2:fb: 2d:b9:f2:dd:93:56:a2:2b:d6:8d:6f:0f:78:83:59:22:6c:fc: 60:df:7e:01:93:db:7c:45:c9:68:da:24:b3:22:ed:23:3e:bc: 78:fa:9e:50:35:76:07:f4:24:b2:03:5d:cc:d3:d9:c6:de:de: ca:b1:ef:39:61:c6:13:ea:97:56:59:65:f0:81:c6:a4:48:a9: 63:4b:33:50:f3:2c:3c:d3:7c:12:bc:bb:05:f2:bc:3b:4c:80: 70:db:92:ba:6a:6b:36:a4:35:0c:8e:e0:30:0f:a7:d2:b9:5a: b6:95:aa:9f:83:cf:ab:96:7a:ca:53:e2:89:a0:4a:72:8d:1d: 8f:d0:cf:55:c7:37:ae:f6:7b:e9:8c:b9:68:f0:9d:b9:1d:d7: 18:b4:3c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5vgc07KMrf4/ITl7esFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjUxMjE3MTIwMTE2WhcNMjUxMjE4MTIwMTE2WjAzMTEwLwYDVQQD EyhmNmZkMzk0MDJmYjgyZDdlMGZjYzA5NDFlN2E5YzA3YzI4OGI2NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhZ+6ZPh1bqMnZ74WP9Qp5InKD41 c7TylsPnu8+eXjAVMPckOFWaom5bm7IcunC4Tk+hIgJ1VfbXIAe4dNaqodO+/MSP RfcJbqnEd5CHEBjDiaaxt0oBoMxpgYk35++SYrZj3REYNlqNsX+bLXKAT6yM5me5 3KTj4SOAvjUU5lUg/QbcP/P67vJon3cLdEvHPIvnrW6yFYAWh9EYDJHPK01ZMCYw mIMElPtySWnm28iozMJR/KWskLgAGWUGfQ2rQhIRrKLKbvnhESeApbOVExtAsY4f 17FFjjUlQHrEFHXaSObfEfeoiz6DbQYwDvwUKF4X0igLxl0QQx6M3lc2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb9OUAvuC1+D8wJQeepwHwoi2XSMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+5hPLuS AYcIMEbE4mxgtuz88mRzv39JFEh5ApIG/ijq+dzClsVBkbZMbZromi0kwrO8g3MA 4KZzo6lWlrAtyZMoV2NIqg7R5LP4JwALQIxOyvSaFb+dquyQB9Sh4A/FTZ19GevU /MtnhuL7Lbny3ZNWoivWjW8PeINZImz8YN9+AZPbfEXJaNoksyLtIz68ePqeUDV2 B/QksgNdzNPZxt7eyrHvOWHGE+qXVlll8IHGpEipY0szUPMsPNN8Ery7BfK8O0yA cNuSumprNqQ1DI7gMA+n0rlatpWqn4PPq5Z6ylPiiaBKco0dj9DPVcc3rvZ76Yy5 aPCduR3XGLQ8AA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:57:03 2025 by rpki-client