This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json) Hash identifier: HnCjUdX7I7CfO1esv2VgDP1yHZa7XSdRgjuKEymcevE= Subject key identifier: 7E:B1:4C:AB:6F:14:DD:C9:AE:C5:A9:27:E5:2F:15:80:F8:8D:6C:BF Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961 Certificate serial: 019AF19B7E517A8CC653FEEF2E32FE2B1DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft Manifest number: 14 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: WhVCtuC38FRewwI0P1daIIc2TnMVJ/NmI+luNLg/+KU=) 2: xl2dBFAq27Jc7XAbjqmjx5SGLQg.roa (hash: LWS6130jm9DNYynRHuAyBdYfUPrAY2AEwbKHUYPs/I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:51:7a:8c:c6:53:fe:ef:2e:32:fe:2b:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=7eb14cab6f14ddc9aec5a927e52f1580f88d6cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:65:9b:b3:bc:37:93:5e:e0:b3:62:f0:77: 17:5f:5b:5b:ac:4f:4f:42:ea:f7:bd:47:6b:26:59: 98:3c:77:5c:da:86:d4:6b:a1:03:31:46:e4:22:83: 04:23:d7:e4:56:01:b6:2a:d3:de:8a:93:4f:3c:37: 18:6a:d1:f4:75:a5:9b:e3:28:89:91:4b:f3:6c:3f: 6d:09:74:13:08:44:20:36:d9:c6:ba:ab:03:91:b1: 59:9c:4d:17:cd:e8:df:92:7e:9f:0e:d0:c9:5d:de: 09:21:64:df:d6:49:97:84:54:2d:95:9c:16:bf:2d: 3c:20:04:a2:e4:84:32:0c:19:0a:64:14:45:f9:8d: 59:8d:fd:18:f8:47:a6:15:10:92:04:bb:89:cc:35: be:6d:82:70:25:29:28:9a:4f:7a:4f:ca:b1:1f:4e: 94:58:e5:a1:1e:d0:80:c4:ad:4d:52:34:43:03:f0: 94:13:ef:2c:75:41:8a:54:d9:ca:72:5f:9c:ee:de: 3e:b2:32:11:71:e1:f2:ca:3e:17:b9:40:3a:d8:ff: 42:b1:6c:9b:38:c2:f1:99:56:54:83:cd:20:d0:ea: e9:6c:88:57:10:95:8e:2d:99:7a:9d:10:84:55:ed: 00:f3:c7:7e:77:1f:06:5a:af:2d:aa:49:71:d3:99: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B1:4C:AB:6F:14:DD:C9:AE:C5:A9:27:E5:2F:15:80:F8:8D:6C:BF X509v3 Authority Key Identifier: keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:26:2a:0c:b8:77:0c:54:a9:c9:7b:e3:d9:79:02:f6:55:c3: d1:cc:f6:52:be:97:c2:18:0f:cb:0b:b1:18:cb:da:c3:e2:99: 15:52:01:90:10:e2:c7:4b:04:69:80:de:ef:36:85:9f:a9:94: 58:21:b9:14:44:56:2a:7e:c2:7b:60:82:b5:e4:93:49:03:dd: a1:c3:7c:48:a6:90:9a:ed:05:c1:09:2a:46:c3:99:23:97:19: e4:7d:c3:ad:f9:94:d9:5e:75:e4:9a:01:c2:9e:1f:f4:b6:bd: 87:7b:a8:d5:43:29:47:5e:5f:bc:db:ee:a2:9b:b2:68:a0:04: c8:15:a1:ee:0a:03:51:41:77:51:5c:f8:fb:55:5e:c7:10:85: 48:ff:d1:23:66:a2:05:b9:b8:06:a4:77:59:71:ab:3e:a4:48: 98:e9:83:eb:5a:3b:e3:78:d7:22:07:91:77:e2:6a:66:9f:df: fb:b0:87:3e:7c:b6:3f:18:9b:84:f4:6d:69:cc:83:f9:44:f9: 23:14:5f:f5:23:59:8a:55:a3:3e:fe:ae:ab:21:37:9e:e0:be: 5f:7b:fa:6d:a9:5c:d0:f4:75:92:7c:a5:02:85:e2:33:0b:8c: e0:41:2a:82:c6:ab:46:39:9d:d6:17:6e:85:4f:00:d1:a5:86: ba:43:c0:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm35ReozGU/7vLjL+Kx3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjYxOTQyN2MyODNmYTNiMmJiN2I0NWNjMzVhNTEyODYz OTg5NjEwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg3ZWIxNGNhYjZmMTRkZGM5YWVjNWE5MjdlNTJmMTU4MGY4OGQ2Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6plm7O8N5Ne4LNi8HcXX1tbrE9P Qur3vUdrJlmYPHdc2obUa6EDMUbkIoMEI9fkVgG2KtPeipNPPDcYatH0daWb4yiJ kUvzbD9tCXQTCEQgNtnGuqsDkbFZnE0Xzejfkn6fDtDJXd4JIWTf1kmXhFQtlZwW vy08IASi5IQyDBkKZBRF+Y1Zjf0Y+EemFRCSBLuJzDW+bYJwJSkomk96T8qxH06U WOWhHtCAxK1NUjRDA/CUE+8sdUGKVNnKcl+c7t4+sjIRceHyyj4XuUA62P9CsWyb OMLxmVZUg80g0OrpbIhXEJWOLZl6nRCEVe0A88d+dx8GWq8tqklx05lM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6xTKtvFN3JrsWpJ+UvFYD4jWy/MB8GA1UdIwQY MBaAFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTct M2I4MTc4ZGJiOTRjLzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTctM2I4MTc4ZGJiOTRj LzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyYqDLh3 DFSpyXvj2XkC9lXD0cz2Ur6XwhgPywuxGMvaw+KZFVIBkBDix0sEaYDe7zaFn6mU WCG5FERWKn7Ce2CCteSTSQPdocN8SKaQmu0FwQkqRsOZI5cZ5H3DrfmU2V515JoB wp4f9La9h3uo1UMpR15fvNvuopuyaKAEyBWh7goDUUF3UVz4+1VexxCFSP/RI2ai Bbm4BqR3WXGrPqRImOmD61o743jXIgeRd+JqZp/f+7CHPny2PxibhPRtacyD+UT5 IxRf9SNZilWjPv6uqyE3nuC+X3v6balc0PR1knylAoXiMwuM4EEqgsarRjmd1hdu hU8A0aWGukPADA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:53 2025 by rpki-client