This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json) Hash identifier: nxy5qrAKQ0obILyQOTc1E40D9PEkJcaKGoU2/kY8E10= Subject key identifier: 73:C6:2C:F0:6B:77:18:BE:E6:55:93:20:12:33:AA:7D:C5:73:6F:0A Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Certificate serial: 019AF088ACF5A69277EC7638083667990BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft Manifest number: 036B Signing time: Fri 05 Dec 2025 22:01:20 +0000 Manifest this update: Fri 05 Dec 2025 22:01:20 +0000 Manifest next update: Sat 06 Dec 2025 22:01:20 +0000 Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: UY01NhWqdAhXcg1d+Im/60glBy7TLPt3EbUcN4NPE9s=) 2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ac:f5:a6:92:77:ec:76:38:08:36:67:99:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Validity Not Before: Dec 5 22:01:20 2025 GMT Not After : Dec 6 22:01:20 2025 GMT Subject: CN=73c62cf06b7718bee65593201233aa7dc5736f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:ec:ce:39:82:f6:ac:5f:8b:c3:c5:13:28: 2a:f1:ae:eb:29:56:c8:3f:70:05:2a:55:2a:4f:af: 3f:54:5d:2e:46:db:fd:ef:de:0a:69:15:cf:9b:20: ec:4e:36:76:e7:33:86:54:aa:1c:19:06:a8:dd:b3: 1b:9c:0b:f3:cd:85:bf:06:7b:de:df:79:e0:e3:4e: d1:37:cc:0e:91:ea:e4:dd:7d:a0:74:34:7f:4a:59: ab:f5:85:04:7e:2f:6a:44:d3:fa:f3:4a:be:e1:ad: 6f:5a:2c:62:c2:e6:10:1b:49:5f:b3:af:51:c1:69: 72:5d:57:4c:33:d3:cf:ae:65:ef:d1:1b:82:94:ba: 2b:0c:f5:00:a5:e1:5c:fe:bd:4f:75:3d:dd:fc:55: 2a:a8:83:e3:2d:33:16:c1:31:fd:84:fc:eb:48:6c: 8c:3d:aa:bf:1c:3a:29:41:c0:cb:5e:a6:ed:56:32: 19:0c:d8:81:52:3f:14:83:cc:d5:23:69:e1:8a:6e: 95:7d:56:c8:ad:42:d2:64:ac:63:0f:03:da:b8:01: 4a:7a:d7:4e:c6:16:20:da:9f:f6:68:a1:9b:14:13: f3:fc:e8:e2:fc:8e:0f:0f:46:18:05:ce:43:63:fd: 1d:c2:2d:24:c8:f2:28:fb:a7:2a:d1:9a:51:95:4e: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C6:2C:F0:6B:77:18:BE:E6:55:93:20:12:33:AA:7D:C5:73:6F:0A X509v3 Authority Key Identifier: keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e2:50:50:5e:31:8e:58:bc:7d:b2:fe:77:8a:9a:a5:f0:d4: c6:74:d7:e6:fc:2d:a7:72:4b:de:14:ce:e0:e6:f0:93:df:75: e5:0d:ae:4d:55:36:be:c7:73:1c:f7:51:77:20:08:a1:d0:c4: d6:26:e4:d7:31:52:3b:80:02:8c:73:ab:35:42:cb:b9:ac:86: e4:5e:c0:35:a2:36:2c:cb:2b:e4:fa:68:e6:5b:af:e6:11:7e: 81:fb:af:97:53:f1:16:4c:23:5f:2f:0d:f6:19:6a:f1:2d:26: f8:c8:ba:34:97:2e:c6:2b:f2:b5:a2:4b:3d:47:25:9b:62:4a: 9f:3f:16:82:32:4e:7d:74:ba:85:c9:c3:b3:d8:b8:8d:c6:10: e3:f5:82:e5:0c:1d:52:2c:9a:63:5a:18:cd:6c:d5:bb:94:ba: 7c:a0:7c:fb:ba:f6:46:9b:cf:02:e1:29:7d:7f:33:28:ae:b0: 3c:30:b8:66:53:c2:9f:a9:3a:03:01:09:4b:ab:18:04:67:ea: 16:da:08:7c:72:fb:cd:61:6c:18:b5:b7:dd:bd:68:36:38:05: 2f:85:d6:32:ed:3b:b2:a2:7a:d0:ca:88:88:86:be:38:77:3c: 5a:17:71:d8:03:df:d0:b5:74:55:90:97:e7:d9:e2:95:dd:6e: 4a:26:38:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKz1ppJ37HY4CDZnmQvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5 NjViOTYwHhcNMjUxMjA1MjIwMTIwWhcNMjUxMjA2MjIwMTIwWjAzMTEwLwYDVQQD Eyg3M2M2MmNmMDZiNzcxOGJlZTY1NTkzMjAxMjMzYWE3ZGM1NzM2ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxLszjmC9qxfi8PFEygq8a7rKVbI P3AFKlUqT68/VF0uRtv9794KaRXPmyDsTjZ25zOGVKocGQao3bMbnAvzzYW/Bnve 33ng407RN8wOkerk3X2gdDR/Slmr9YUEfi9qRNP680q+4a1vWixiwuYQG0lfs69R wWlyXVdMM9PPrmXv0RuClLorDPUApeFc/r1PdT3d/FUqqIPjLTMWwTH9hPzrSGyM Paq/HDopQcDLXqbtVjIZDNiBUj8Ug8zVI2nhim6VfVbIrULSZKxjDwPauAFKetdO xhYg2p/2aKGbFBPz/Oji/I4PD0YYBc5DY/0dwi0kyPIo+6cq0ZpRlU4d8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPGLPBrdxi+5lWTIBIzqn3Fc28KMB8GA1UdIwQY MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5 LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOJQUF4x jli8fbL+d4qapfDUxnTX5vwtp3JL3hTO4Obwk9915Q2uTVU2vsdzHPdRdyAIodDE 1ibk1zFSO4ACjHOrNULLuayG5F7ANaI2LMsr5Ppo5luv5hF+gfuvl1PxFkwjXy8N 9hlq8S0m+Mi6NJcuxivytaJLPUclm2JKnz8WgjJOfXS6hcnDs9i4jcYQ4/WC5Qwd UiyaY1oYzWzVu5S6fKB8+7r2RpvPAuEpfX8zKK6wPDC4ZlPCn6k6AwEJS6sYBGfq FtoIfHL7zWFsGLW33b1oNjgFL4XWMu07sqJ60MqIiIa+OHc8Whdx2APf0LV0VZCX 59nild1uSiY4dA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:00 2025 by rpki-client