This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json) Hash identifier: HhPA4L6vsfk/zuTUcTk7QL9molhln/Gjy4TicdSRLIo= Subject key identifier: 42:F5:DD:2D:CF:4C:9D:E9:BB:14:CC:00:2D:07:EE:D6:C0:37:41:C2 Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Certificate serial: 019AF42DD7ACD50E7F84E98F45C7DFF0AA71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 15:00:36 +0000 Manifest this update: Sat 06 Dec 2025 15:00:36 +0000 Manifest next update: Sun 07 Dec 2025 15:00:36 +0000 Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=) 2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: WBp5Ui48HRrDlpSJ2CLbqMaCnzz38NqnyDeDenx5Buo=) 3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d7:ac:d5:0e:7f:84:e9:8f:45:c7:df:f0:aa:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Validity Not Before: Dec 6 15:00:36 2025 GMT Not After : Dec 7 15:00:36 2025 GMT Subject: CN=42f5dd2dcf4c9de9bb14cc002d07eed6c03741c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:d2:64:92:f8:a0:24:93:d3:b1:6a:1d:c6: 4b:b9:92:df:8f:9e:29:58:bb:00:0a:32:9e:3f:aa: e4:59:bd:a8:c2:1f:e0:57:ba:77:09:c9:4c:86:ee: ca:42:aa:f9:c6:0a:f9:4d:76:eb:6e:eb:2a:1a:74: 38:6f:71:a3:98:a4:df:e7:06:ee:1d:f5:51:bc:59: 7a:6b:f3:c2:dd:ed:51:53:a0:62:eb:df:30:0b:9b: 2d:4d:2a:f6:95:e1:74:30:f7:13:0e:0f:4a:de:fc: 7d:eb:f0:e6:1a:f3:04:94:d8:95:f0:a2:07:76:0d: 1b:6d:2c:c7:75:e9:d3:50:73:2c:5b:62:dc:b6:68: 10:c6:e4:28:76:4f:a7:de:95:45:e7:2b:25:c6:95: ab:ce:55:ea:5d:8b:96:41:63:e2:6a:bb:ac:3e:42: 97:9a:82:2e:74:5a:d6:60:72:42:37:3b:3a:36:1d: 8f:d9:26:ba:2a:36:30:68:b1:37:6e:29:d6:65:3d: 0a:06:66:05:87:45:18:e9:be:61:cd:e0:6c:f0:54: 54:9e:06:37:d6:0d:2a:3c:87:05:5e:31:d4:19:31: f4:a1:84:31:61:85:7f:87:27:86:c3:b7:69:d5:f5: 1c:13:e3:d8:b5:3d:59:bb:3f:b5:6f:b1:c2:cf:7c: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:DD:2D:CF:4C:9D:E9:BB:14:CC:00:2D:07:EE:D6:C0:37:41:C2 X509v3 Authority Key Identifier: keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:de:85:56:d2:9c:7e:40:32:9e:92:5b:39:9d:04:a4:b9:82: 93:b0:a7:c7:ee:8c:0a:1f:28:bc:2c:8f:5a:6e:5f:b2:68:6f: 48:03:6a:fc:d6:1e:80:3a:d0:b8:1a:66:d9:d6:2f:2a:81:43: 47:02:09:5b:f1:d4:d8:4d:a5:e3:a6:28:fd:3f:59:de:07:e6: ce:4c:56:21:bc:02:a1:c8:ad:af:98:19:c0:67:84:9d:e6:86: 40:09:07:c2:76:c0:9e:f6:09:65:9d:56:3c:10:3a:5e:2b:89: 44:92:56:9b:df:37:fb:3a:c0:93:f0:b3:00:3f:4c:02:75:29: c7:06:bf:97:f7:6d:4d:a9:44:1d:7e:93:48:6e:ba:2e:89:00: fd:c6:e6:8a:7f:b7:8b:21:f8:65:0f:e4:f4:8e:77:20:9b:d7: 12:53:6d:81:30:4c:96:fa:16:b4:d0:17:15:d4:5f:74:62:70: 63:1c:b1:d7:93:13:91:e7:72:16:b7:ab:18:6a:6a:fa:94:fa: 5f:e1:bf:d0:f5:ed:02:21:0f:22:95:43:14:9d:42:cf:3d:03: 10:f4:0f:fe:5d:db:fa:3b:c8:13:12:1a:82:b0:44:d0:54:f4: 4b:a9:61:63:b2:63:05:ff:17:86:ef:fa:48:46:c2:44:8b:f0: ca:77:6f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ldes1Q5/hOmPRcff8KpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5 NGFmNzQwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD Eyg0MmY1ZGQyZGNmNGM5ZGU5YmIxNGNjMDAyZDA3ZWVkNmMwMzc0MWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3SZJL4oCST07FqHcZLuZLfj54p WLsACjKeP6rkWb2owh/gV7p3CclMhu7KQqr5xgr5TXbrbusqGnQ4b3GjmKTf5wbu HfVRvFl6a/PC3e1RU6Bi698wC5stTSr2leF0MPcTDg9K3vx96/DmGvMElNiV8KIH dg0bbSzHdenTUHMsW2LctmgQxuQodk+n3pVF5yslxpWrzlXqXYuWQWPiarusPkKX moIudFrWYHJCNzs6Nh2P2Sa6KjYwaLE3binWZT0KBmYFh0UY6b5hzeBs8FRUngY3 1g0qPIcFXjHUGTH0oYQxYYV/hyeGw7dp1fUcE+PYtT1Zuz+1b7HCz3zbrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL13S3PTJ3puxTMAC0H7tbAN0HCMB8GA1UdIwQY MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3 LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN96FVtKc fkAynpJbOZ0EpLmCk7Cnx+6MCh8ovCyPWm5fsmhvSANq/NYegDrQuBpm2dYvKoFD RwIJW/HU2E2l46Yo/T9Z3gfmzkxWIbwCocitr5gZwGeEneaGQAkHwnbAnvYJZZ1W PBA6XiuJRJJWm983+zrAk/CzAD9MAnUpxwa/l/dtTalEHX6TSG66LokA/cbmin+3 iyH4ZQ/k9I53IJvXElNtgTBMlvoWtNAXFdRfdGJwYxyx15MTkedyFrerGGpq+pT6 X+G/0PXtAiEPIpVDFJ1Czz0DEPQP/l3b+jvIExIagrBE0FT0S6lhY7JjBf8Xhu/6 SEbCRIvwyndvQw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:02 2025 by rpki-client