This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json) Hash identifier: hNGSWQ1M8+j/6bmSaWHrHhv3DS/fTmrih1iQ+UNdWPI= Subject key identifier: 8B:34:ED:5D:0F:8C:CB:C3:48:96:36:D4:A4:CA:4A:E3:28:77:44:79 Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab Certificate serial: 019AF50B73F070C38D3A643AC7ECA8DC6E5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft Manifest number: 1755 Signing time: Sat 06 Dec 2025 19:02:39 +0000 Manifest this update: Sat 06 Dec 2025 19:02:39 +0000 Manifest next update: Sun 07 Dec 2025 19:02:39 +0000 Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=) 2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: SlzqT9QOL1MZNcVwUajci9JtVRV6oI1iHpj2zLJ9lcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:73:f0:70:c3:8d:3a:64:3a:c7:ec:a8:dc:6e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab Validity Not Before: Dec 6 19:02:39 2025 GMT Not After : Dec 7 19:02:39 2025 GMT Subject: CN=8b34ed5d0f8ccbc3489636d4a4ca4ae328774479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:2b:ef:79:be:7f:93:0c:af:21:71:7a:64: 6e:a3:99:c1:e8:d1:8d:7e:7b:4e:a3:c4:77:75:9c: 39:c6:6b:9b:bb:b3:eb:85:0d:fd:3a:6b:e4:b8:26: 42:55:e9:2c:5c:1b:ea:42:96:fc:b6:f6:43:4a:a8: de:a7:98:c7:83:31:aa:03:68:c1:d7:d9:3d:08:da: 37:4c:db:68:15:b1:e9:23:ce:26:23:73:ed:09:48: 28:73:5d:14:14:f8:fc:47:fe:5b:2c:ea:8a:6f:c9: fb:12:1b:cb:ee:f6:28:d2:a1:d3:d9:bd:05:76:55: 0f:20:af:43:61:05:0d:c9:20:81:7a:8f:88:bb:30: af:2e:d5:30:b9:f3:0c:c2:c0:3d:40:9b:59:6c:e0: 0f:75:1a:c3:e9:7f:c1:ae:d5:6a:b4:55:a0:e9:7f: 4c:13:2f:a8:e5:22:f9:0e:c5:bb:66:b1:e3:11:b4: 19:91:9a:a5:bc:de:e3:bb:dd:ba:62:ef:86:0d:ba: 39:63:b0:f9:aa:21:62:81:99:ae:c8:db:77:43:55: 70:5b:29:79:9f:b4:d1:67:ed:20:f2:35:dc:87:10: 9d:fc:d6:7d:27:9f:bd:d4:ec:29:f9:b9:e1:ca:87: c3:fd:53:cd:64:89:ba:5b:65:f3:2b:e0:c7:30:28: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:ED:5D:0F:8C:CB:C3:48:96:36:D4:A4:CA:4A:E3:28:77:44:79 X509v3 Authority Key Identifier: keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:89:be:89:82:b2:17:40:63:d9:32:40:af:3f:96:8a:79: b2:c1:16:9b:27:2c:d8:99:6e:f1:a8:7f:98:bf:33:4a:92:05: a7:6f:c8:16:e1:82:d8:03:19:eb:ba:d3:5f:5a:53:bd:a9:12: 96:4b:81:59:24:72:1a:c9:42:85:a0:83:30:ac:d4:2b:ea:8c: ee:46:4a:88:75:b1:73:44:14:a0:1f:c7:20:2a:89:e5:e7:b1: 08:74:cc:9d:da:ec:da:3c:7b:0c:1d:b5:e5:32:f1:02:5a:17: 05:9e:4a:23:ab:6a:e5:41:f0:7b:5d:41:bf:9f:86:5d:c9:20: 5e:ef:22:b5:b2:7f:7a:36:e1:f4:f2:0c:04:2b:b7:ce:39:1f: e6:1b:4d:48:74:16:7a:23:80:ad:82:3c:34:0f:d3:19:bd:d4: 51:0b:7f:a1:30:f2:83:33:bb:67:ae:4d:f1:6b:64:99:33:7d: 47:81:57:f6:c2:e1:13:4d:4a:90:65:b2:ce:08:9f:0c:71:04: 72:2b:ca:99:f5:2f:8e:4d:59:15:b1:1c:2f:05:57:38:c0:29: a8:23:7c:71:b7:a2:4d:c1:ec:fd:43:11:03:12:8d:f7:a0:8a: b8:4d:4c:56:9a:b8:a5:af:c3:c8:40:60:b7:26:8d:e1:55:41: 25:b3:f4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3PwcMONOmQ6x+yo3G5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjZmMzViYWM2MWEwYWJmNzFkMThkNmIxMDYzZDVjOTMz YTI0YWIwHhcNMjUxMjA2MTkwMjM5WhcNMjUxMjA3MTkwMjM5WjAzMTEwLwYDVQQD Eyg4YjM0ZWQ1ZDBmOGNjYmMzNDg5NjM2ZDRhNGNhNGFlMzI4Nzc0NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb8r73m+f5MMryFxemRuo5nB6NGN fntOo8R3dZw5xmubu7PrhQ39OmvkuCZCVeksXBvqQpb8tvZDSqjep5jHgzGqA2jB 19k9CNo3TNtoFbHpI84mI3PtCUgoc10UFPj8R/5bLOqKb8n7EhvL7vYo0qHT2b0F dlUPIK9DYQUNySCBeo+IuzCvLtUwufMMwsA9QJtZbOAPdRrD6X/BrtVqtFWg6X9M Ey+o5SL5DsW7ZrHjEbQZkZqlvN7ju926Yu+GDbo5Y7D5qiFigZmuyNt3Q1VwWyl5 n7TRZ+0g8jXchxCd/NZ9J5+91Owp+bnhyofD/VPNZIm6W2XzK+DHMChs8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs07V0PjMvDSJY21KTKSuMod0R5MB8GA1UdIwQY MBaAFKNm81usYaCr9x0Y1rEGPVyTOiSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEt MzE5MDc5NWU4NjNiLzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEtMzE5MDc5NWU4NjNi LzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL6JvomC shdAY9kyQK8/lop5ssEWmycs2Jlu8ah/mL8zSpIFp2/IFuGC2AMZ67rTX1pTvakS lkuBWSRyGslChaCDMKzUK+qM7kZKiHWxc0QUoB/HICqJ5eexCHTMndrs2jx7DB21 5TLxAloXBZ5KI6tq5UHwe11Bv5+GXckgXu8itbJ/ejbh9PIMBCu3zjkf5htNSHQW eiOArYI8NA/TGb3UUQt/oTDygzO7Z65N8WtkmTN9R4FX9sLhE01KkGWyzgifDHEE civKmfUvjk1ZFbEcLwVXOMApqCN8cbeiTcHs/UMRAxKN96CKuE1MVpq4pa/DyEBg tyaN4VVBJbP03w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:15 2025 by rpki-client