This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json) Hash identifier: VHXXV5pb/yl1k0Mq4FXDf/lz8crOWzD1bZFe/ydjmw0= Subject key identifier: A4:C0:5D:15:F0:FE:93:AF:7C:7E:49:95:61:A6:DA:18:16:CD:60:1F Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019AF42E6930B74CB09FC9669522E2AAEF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft Manifest number: 0D82 Signing time: Sat 06 Dec 2025 15:01:13 +0000 Manifest this update: Sat 06 Dec 2025 15:01:13 +0000 Manifest next update: Sun 07 Dec 2025 15:01:13 +0000 Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=) 2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=) 3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=) 4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: Pb8ERsuJ2qMlYxQEbZPIxYH/OFQt9W3nRZ8raKrBfd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:69:30:b7:4c:b0:9f:c9:66:95:22:e2:aa:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Dec 6 15:01:13 2025 GMT Not After : Dec 7 15:01:13 2025 GMT Subject: CN=a4c05d15f0fe93af7c7e499561a6da1816cd601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:55:fb:5f:61:38:f3:ea:d9:75:e7:07:bf: 7d:77:3c:4b:08:57:ce:ee:3f:ef:68:2a:ae:33:c5: 09:51:9b:b5:bf:de:6c:44:38:4f:3c:9d:9f:9e:77: df:16:2b:42:c7:02:87:92:66:09:01:07:f8:cd:be: 39:05:c4:8b:d1:70:f5:ed:df:04:87:ea:a9:59:eb: 05:86:e9:ea:44:fe:8a:14:f0:4a:ad:c9:ce:31:02: b9:1d:4d:b7:01:81:17:a5:71:a2:b8:06:1b:ee:24: 8b:b7:e1:ca:8b:ce:07:06:9a:52:6f:a1:2b:b4:cc: bb:a9:34:a3:e9:50:4c:61:77:ef:5a:99:61:5f:26: 30:ca:9c:b6:e1:9e:0c:4d:da:1c:ea:52:3a:e1:89: 60:3d:59:11:62:cc:13:3d:6f:98:6d:ab:3f:f9:c2: 28:56:65:7f:e6:7a:2d:c4:d9:ef:74:c4:2a:32:dc: e7:76:56:e1:87:39:03:ee:19:35:86:06:24:c8:59: 2f:c5:27:90:3d:e9:08:89:2e:7f:97:19:cb:10:76: be:37:9e:9d:82:a2:8f:6d:1d:79:73:da:c2:ec:32: 6d:d7:1b:fc:20:32:33:dd:ff:d9:29:04:b6:82:ce: 95:b7:37:71:95:44:26:71:ae:2c:57:fc:4c:37:17: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C0:5D:15:F0:FE:93:AF:7C:7E:49:95:61:A6:DA:18:16:CD:60:1F X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3d:0a:08:c0:4a:fa:83:1b:61:25:7c:85:55:6d:57:be:bd: 5c:23:d2:97:48:02:2b:28:be:bb:36:47:ec:ff:82:49:df:b1: 71:99:6b:c5:e9:17:a3:aa:90:ac:b0:5a:73:e9:01:77:c4:26: 51:b9:07:40:57:ea:8a:65:dd:30:f4:b2:6b:c8:0b:09:5a:40: 46:7b:5b:68:3b:8f:e8:fe:c2:fa:c7:c6:ec:5b:bf:d5:59:95: 84:23:8a:10:26:30:19:53:7e:8b:26:aa:0a:3f:98:ef:14:8a: 27:5e:fe:87:d1:14:7b:95:e4:93:76:04:61:91:3d:1d:49:c4: b1:7e:2c:79:3c:fc:9a:b8:2a:48:02:37:ce:d3:e9:73:5f:f5: a8:fe:c2:9f:fd:08:e8:35:65:db:73:9c:7b:9f:58:42:54:8c: 45:7d:50:42:3f:71:d4:53:fc:3e:15:db:83:c4:ff:26:a1:38: e0:64:ec:76:a0:14:da:4f:17:61:e3:ab:2f:a8:b5:ae:cd:59: 3a:67:b1:b3:c3:76:4f:fa:63:47:0c:c2:5e:23:a3:bb:72:85: 26:65:71:e6:da:d4:3d:9d:e8:14:79:50:c9:f7:14:13:fc:d1: 2f:25:45:8d:d1:09:fa:7f:14:83:fb:b1:e1:bf:32:f5:d4:be: 6a:32:58:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lmkwt0ywn8lmlSLiqu8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjUxMjA2MTUwMTEzWhcNMjUxMjA3MTUwMTEzWjAzMTEwLwYDVQQD EyhhNGMwNWQxNWYwZmU5M2FmN2M3ZTQ5OTU2MWE2ZGExODE2Y2Q2MDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN9V+19hOPPq2XXnB799dzxLCFfO 7j/vaCquM8UJUZu1v95sRDhPPJ2fnnffFitCxwKHkmYJAQf4zb45BcSL0XD17d8E h+qpWesFhunqRP6KFPBKrcnOMQK5HU23AYEXpXGiuAYb7iSLt+HKi84HBppSb6Er tMy7qTSj6VBMYXfvWplhXyYwypy24Z4MTdoc6lI64YlgPVkRYswTPW+Ybas/+cIo VmV/5notxNnvdMQqMtzndlbhhzkD7hk1hgYkyFkvxSeQPekIiS5/lxnLEHa+N56d gqKPbR15c9rC7DJt1xv8IDIz3f/ZKQS2gs6VtzdxlUQmca4sV/xMNxeHNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTAXRXw/pOvfH5JlWGm2hgWzWAfMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJD0KCMBK +oMbYSV8hVVtV769XCPSl0gCKyi+uzZH7P+CSd+xcZlrxekXo6qQrLBac+kBd8Qm UbkHQFfqimXdMPSya8gLCVpARntbaDuP6P7C+sfG7Fu/1VmVhCOKECYwGVN+iyaq Cj+Y7xSKJ17+h9EUe5Xkk3YEYZE9HUnEsX4seTz8mrgqSAI3ztPpc1/1qP7Cn/0I 6DVl23Oce59YQlSMRX1QQj9x1FP8PhXbg8T/JqE44GTsdqAU2k8XYeOrL6i1rs1Z Omexs8N2T/pjRwzCXiOju3KFJmVx5trUPZ3oFHlQyfcUE/zRLyVFjdEJ+n8Ug/ux 4b8y9dS+ajJYsw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:51 2025 by rpki-client