This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json) Hash identifier: Y/nZikTdzTvuvQc0bF/0eJnKMssH48uBiyQHBjzNN4Y= Subject key identifier: A6:A6:F9:BF:E7:4C:04:77:8C:39:1F:F8:CF:9F:09:CA:EA:05:EE:9B Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f Certificate serial: 019AF276BDCA69EF23C5109BFB75F72D648E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft Manifest number: 1466 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: oyZvSpP5x4UlBfCDurEPTXDMhghO2e3DEXoGquRypF4=) 2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bd:ca:69:ef:23:c5:10:9b:fb:75:f7:2d:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=a6a6f9bfe74c04778c391ff8cf9f09caea05ee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:c7:86:19:5d:4c:df:8e:e5:4d:1a:05:e6: 23:c1:d3:55:81:e8:77:fd:5b:d0:73:8e:61:87:72: 93:24:1a:3f:7b:1f:ae:99:06:2b:d3:68:c2:0f:d3: 29:88:d3:59:91:a7:e7:77:b8:61:07:a3:ab:a5:46: 34:6d:78:89:6c:c6:33:43:8e:ff:5c:39:95:5d:de: 43:8e:94:8c:00:bc:3f:96:5d:c4:18:6b:28:8d:f5: 9e:cc:5c:b4:4a:47:b0:70:8f:f6:da:b8:42:5c:22: 06:0a:30:fb:cd:79:fb:81:52:8c:94:a0:37:6e:b1: 75:e1:ac:72:b5:99:b0:1c:4c:2f:75:65:82:03:02: f9:00:41:56:2f:6a:ad:a9:f1:b7:b9:98:40:39:02: a6:12:f6:f6:25:2d:36:73:86:2a:7b:3e:87:e0:8d: 6e:ae:1c:eb:2f:ac:0d:0c:0a:69:bb:61:76:eb:d8: 95:d2:56:b2:f6:f2:4f:f7:e7:dd:9d:45:4c:02:0f: 06:5a:d8:00:0e:c6:16:48:d3:db:22:c8:6e:3d:73: 5f:da:f9:7e:ba:59:8b:7f:a1:f7:60:c2:28:41:1c: c1:f9:6b:8b:0d:dd:47:da:9c:68:21:9b:74:05:be: 4b:3f:32:92:38:e1:fc:34:68:ad:a9:51:97:8a:27: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:F9:BF:E7:4C:04:77:8C:39:1F:F8:CF:9F:09:CA:EA:05:EE:9B X509v3 Authority Key Identifier: keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0a:8f:d6:55:1f:e2:f7:ae:93:4e:40:03:23:fc:23:69:5c: a6:05:bc:c8:c1:c2:11:50:cc:61:fc:7f:46:58:bb:57:33:5d: 41:8f:15:65:89:e2:f6:4b:a7:7d:9a:e1:eb:bd:d8:28:af:5a: eb:cf:a0:3a:fd:4c:a9:34:1c:0f:5d:8c:8d:58:40:4e:15:21: 39:0f:bc:b3:2e:49:26:b3:b2:63:de:c3:0e:4a:d2:a5:da:d1: d3:b7:dd:8f:9f:b0:6e:96:9a:ba:ec:72:6a:25:95:48:b1:39: b6:3a:aa:41:84:2f:c9:7a:2e:74:49:bd:9d:30:fc:a5:6a:9a: b9:82:37:68:73:01:8a:b2:3e:14:ba:22:c9:74:8e:5d:35:0f: ba:9b:7a:aa:33:37:88:1f:9d:0b:a7:39:55:bb:2f:c4:00:47: 25:3b:e4:ca:be:a1:92:56:27:02:06:89:c8:95:8c:fa:7c:17: 86:c1:28:14:44:2d:85:8a:5a:51:02:c5:0f:b9:c1:6d:11:e2: ec:1b:9c:47:de:78:f4:bc:e6:78:e5:72:b9:f2:03:32:a7:60: 9c:34:33:f5:a7:65:4d:99:6b:35:6e:7b:61:f3:7b:0e:98:d7: 62:8f:78:e7:92:02:c7:ec:3c:00:8d:45:40:5b:9d:d1:bb:b6: 3f:e6:71:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr3Kae8jxRCb+3X3LWSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDEzMTY0YTEzYzI0Y2E3Nzg0Nzc3NGE2ZWI1NzEwNWVl NzgwOWYwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhhNmE2ZjliZmU3NGMwNDc3OGMzOTFmZjhjZjlmMDljYWVhMDVlZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4DHhhldTN+O5U0aBeYjwdNVgeh3 /VvQc45hh3KTJBo/ex+umQYr02jCD9MpiNNZkafnd7hhB6OrpUY0bXiJbMYzQ47/ XDmVXd5DjpSMALw/ll3EGGsojfWezFy0SkewcI/22rhCXCIGCjD7zXn7gVKMlKA3 brF14axytZmwHEwvdWWCAwL5AEFWL2qtqfG3uZhAOQKmEvb2JS02c4Yqez6H4I1u rhzrL6wNDAppu2F269iV0lay9vJP9+fdnUVMAg8GWtgADsYWSNPbIshuPXNf2vl+ ulmLf6H3YMIoQRzB+WuLDd1H2pxoIZt0Bb5LPzKSOOH8NGitqVGXiiejPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKam+b/nTAR3jDkf+M+fCcrqBe6bMB8GA1UdIwQY MBaAFDtBMWShPCTKd4R3dKbrVxBe54CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTIt YzY4ZDdmOWM3ODE4LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTItYzY4ZDdmOWM3ODE4 LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAqP1lUf 4veuk05AAyP8I2lcpgW8yMHCEVDMYfx/Rli7VzNdQY8VZYni9kunfZrh673YKK9a 68+gOv1MqTQcD12MjVhAThUhOQ+8sy5JJrOyY97DDkrSpdrR07fdj5+wbpaauuxy aiWVSLE5tjqqQYQvyXoudEm9nTD8pWqauYI3aHMBirI+FLoiyXSOXTUPupt6qjM3 iB+dC6c5VbsvxABHJTvkyr6hklYnAgaJyJWM+nwXhsEoFEQthYpaUQLFD7nBbRHi 7BucR9549LzmeOVyufIDMqdgnDQz9adlTZlrNW57YfN7DpjXYo9455ICx+w8AI1F QFud0bu2P+ZxTA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:31 2025 by rpki-client