This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json) Hash identifier: YwNFKQ1m6uqdooHaQRWHPdJ16sSBO6rI40DQo1L60P0= Subject key identifier: 56:32:DE:5D:AE:30:81:6E:EC:76:C8:D0:00:8F:39:07:C9:3D:A4:86 Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe Certificate serial: 019AF2401E63D61A3CF2DEC758B7E37C4FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft Manifest number: 0A76 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: 1ogP861HKHDEodEYfbhr5S+xQXvq8RH8wMKvfuI7/E8=) 2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1e:63:d6:1a:3c:f2:de:c7:58:b7:e3:7c:4f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=5632de5dae30816eec76c8d0008f3907c93da486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:9f:a4:00:0d:26:cc:10:e3:1f:27:d6:32: 0f:1d:aa:fb:2c:5e:e0:2d:9b:f7:b7:43:28:b1:45: 72:14:7c:04:b2:d4:1a:75:e2:45:63:4a:39:6f:25: d0:1e:cb:86:1f:e0:0d:66:ee:08:43:86:07:08:81: 77:2a:0f:99:b2:d3:ca:df:57:b2:1a:d3:05:4b:bf: 95:29:2c:c8:7b:98:b3:2c:d7:ee:d2:eb:5e:18:79: 1e:ab:b0:e3:94:d2:76:81:a1:a8:f3:3a:75:bc:c1: 06:52:3d:8e:6b:5e:49:e7:81:93:d1:1b:83:83:ef: a1:8c:32:71:66:ff:5f:83:08:57:d7:0b:5b:25:93: f1:f4:fc:7a:a2:11:51:6d:e0:14:e8:ba:a7:8b:8d: f8:76:55:15:58:06:35:e5:d8:4c:55:44:7a:64:9c: e3:37:97:86:b5:fe:72:35:61:ab:f7:34:18:61:36: 13:b2:ee:50:9c:42:4f:a6:f1:b7:98:37:ad:77:31: b7:11:da:d9:d6:95:c0:b6:c0:f0:20:68:f1:aa:ca: f3:27:be:33:59:3d:2d:f5:e1:6d:be:ed:b5:5d:13: d6:fa:e8:a7:cd:18:46:56:b9:6a:45:62:61:24:4f: 92:5c:f5:14:0d:b3:4a:30:a8:3b:e1:f5:56:0b:cd: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:32:DE:5D:AE:30:81:6E:EC:76:C8:D0:00:8F:39:07:C9:3D:A4:86 X509v3 Authority Key Identifier: keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:8b:60:8f:8a:0f:f6:ae:8c:d0:d8:8c:29:a5:93:0f:f0: b5:fd:d5:c7:99:39:8d:bc:23:13:3f:bd:02:0d:5f:6d:1c:0f: 35:2c:06:de:0c:78:60:11:a2:f4:cf:19:11:30:99:bf:8d:d3: 7f:5a:d9:a6:d0:fe:12:93:1b:63:90:3d:a1:3d:9a:ca:df:dd: a5:63:e3:35:19:1e:2f:2f:91:53:94:45:16:09:5b:83:e7:10: 08:6e:5d:56:22:ab:73:05:ff:73:ae:d0:89:f1:7d:08:20:c8: 51:fd:3b:bf:06:b1:b2:95:63:21:d7:13:c4:a0:42:14:40:98: ab:85:43:dd:9d:f5:cb:06:3c:ba:c7:b2:8a:10:d8:ae:86:0a: 96:86:58:d4:1f:a0:5e:db:a6:31:ac:35:6e:cc:6d:59:cb:65: 5f:06:e4:aa:a2:45:05:42:6e:9e:57:60:1f:64:ae:ba:0b:67: ab:aa:9d:a0:2c:99:eb:c7:bd:69:b2:cf:68:43:10:95:51:54: b2:37:bb:e7:c3:ca:18:00:fa:e0:c7:bf:0a:af:8c:84:2c:91: ed:dc:ab:59:75:63:ff:29:68:26:59:ec:3c:56:0a:57:0d:87: 0d:04:55:78:44:a9:a2:f0:8f:f5:38:19:90:f7:6b:d1:6f:ac: ee:5b:84:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB5j1ho88t7HWLfjfE/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjFjOGI2MWZmNGFiOTc1YTJmNmM2N2QwYmNlNjM3OTM2 MmUyZmUwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg1NjMyZGU1ZGFlMzA4MTZlZWM3NmM4ZDAwMDhmMzkwN2M5M2RhNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jmfpAANJswQ4x8n1jIPHar7LF7g LZv3t0MosUVyFHwEstQadeJFY0o5byXQHsuGH+ANZu4IQ4YHCIF3Kg+ZstPK31ey GtMFS7+VKSzIe5izLNfu0uteGHkeq7DjlNJ2gaGo8zp1vMEGUj2Oa15J54GT0RuD g++hjDJxZv9fgwhX1wtbJZPx9Px6ohFRbeAU6Lqni434dlUVWAY15dhMVUR6ZJzj N5eGtf5yNWGr9zQYYTYTsu5QnEJPpvG3mDetdzG3EdrZ1pXAtsDwIGjxqsrzJ74z WT0t9eFtvu21XRPW+uinzRhGVrlqRWJhJE+SXPUUDbNKMKg74fVWC80GIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYy3l2uMIFu7HbI0ACPOQfJPaSGMB8GA1UdIwQY MBaAFDthyLYf9KuXWi9sZ9C85jeTYuL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2Mt N2I2Mjc1ODJmZDJkLzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2MtN2I2Mjc1ODJmZDJk LzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJiLYI+K D/aujNDYjCmlkw/wtf3Vx5k5jbwjEz+9Ag1fbRwPNSwG3gx4YBGi9M8ZETCZv43T f1rZptD+EpMbY5A9oT2ayt/dpWPjNRkeLy+RU5RFFglbg+cQCG5dViKrcwX/c67Q ifF9CCDIUf07vwaxspVjIdcTxKBCFECYq4VD3Z31ywY8useyihDYroYKloZY1B+g XtumMaw1bsxtWctlXwbkqqJFBUJunldgH2Suugtnq6qdoCyZ68e9abLPaEMQlVFU sje758PKGAD64Me/Cq+MhCyR7dyrWXVj/yloJlnsPFYKVw2HDQRVeESpovCP9TgZ kPdr0W+s7luEJA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:05 2025 by rpki-client