This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json) Hash identifier: sLhK5AziWsl36nbtY89j1Cv8NuKtTq3zL0AW90I4N34= Subject key identifier: CB:2A:62:91:32:2C:0B:34:DC:C2:D7:B2:54:5D:11:87:E0:73:A0:8B Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1 Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1 Certificate serial: 019AF6FA221B531F60AC792347D52437E290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft Manifest number: 1359 Signing time: Sun 07 Dec 2025 04:02:59 +0000 Manifest this update: Sun 07 Dec 2025 04:02:59 +0000 Manifest next update: Mon 08 Dec 2025 04:02:59 +0000 Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=) 2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: DI/e1bUc1sWX3j074rWYRSfN/TdGdvj/lQVOCvp/w/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:fa:22:1b:53:1f:60:ac:79:23:47:d5:24:37:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1 Validity Not Before: Dec 7 04:02:59 2025 GMT Not After : Dec 8 04:02:59 2025 GMT Subject: CN=cb2a6291322c0b34dcc2d7b2545d1187e073a08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:ed:00:18:6f:2a:fa:00:f9:67:ef:d5:b7: db:ff:15:77:2c:49:ba:1a:bb:ba:26:a9:f0:6a:b9: f4:57:76:6f:84:8a:69:44:d6:50:d7:6d:c1:76:48: 84:a3:23:27:2f:93:39:b7:64:48:09:a0:aa:f2:f3: db:55:d3:67:70:df:f4:f0:90:5e:7c:cd:c1:b8:d3: 19:8f:e7:d0:a0:a5:ae:eb:2c:1a:46:af:50:09:68: 36:2a:bc:70:de:67:6e:f1:ef:d3:5f:7d:4e:b8:c1: cc:b0:93:d0:3d:3e:60:95:9a:e4:3a:70:f4:08:d6: 03:fa:5e:56:40:e0:bd:c8:e8:f5:d3:0d:f3:cb:6b: 1c:57:6e:d0:21:c7:40:36:7c:66:e9:b5:8b:99:5e: 66:c9:a8:aa:db:37:3c:18:ba:5e:a1:dc:04:c6:14: 07:72:3e:c0:22:aa:85:a6:e5:1c:be:30:2d:f6:9c: d6:47:9a:d6:c2:20:98:81:66:9b:f4:a0:84:f3:31: 19:c8:f6:5d:53:e3:3b:af:13:e4:f1:82:1f:52:44: 64:bc:ae:ad:2a:b7:32:a8:65:f2:f2:ac:f4:74:c6: 40:c0:8c:5b:e6:1e:08:e8:26:e9:3e:1a:78:2d:4f: 0f:a8:50:96:42:7a:b9:9f:91:70:61:df:6a:ad:37: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2A:62:91:32:2C:0B:34:DC:C2:D7:B2:54:5D:11:87:E0:73:A0:8B X509v3 Authority Key Identifier: keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a7:52:a6:23:c5:c2:4a:98:30:e5:e5:0f:d8:8e:1a:62:41: a3:19:e0:de:80:15:16:21:b8:f5:75:7a:79:33:29:1f:84:7a: 0a:a3:1b:40:71:55:ce:d0:3a:5a:f1:fc:e1:36:05:59:4c:ea: 76:48:8e:06:ea:c1:e5:f3:f1:68:73:21:46:02:c8:90:6f:52: fd:f9:98:36:f0:1b:7b:1e:e8:fa:b4:44:71:36:d0:3b:ac:6f: 61:ce:97:87:f7:23:4f:96:4b:12:40:32:d8:1f:f4:89:3c:a4: 45:23:f4:59:6a:f2:c9:e0:06:c9:68:86:bb:c3:c0:f9:e1:1f: c8:1f:a7:6c:93:2f:4c:df:e7:21:d0:13:41:93:6a:6f:18:1b: dc:6e:be:79:3c:46:c8:40:44:e1:b3:76:b2:d1:4e:2c:2a:c8: ed:58:76:e4:40:1d:b8:a5:0c:b7:1b:98:2a:e1:44:01:2c:6a: 44:6f:08:a9:d8:44:ef:50:a8:00:31:67:44:88:fc:ea:2b:ad: 80:6a:d9:55:3e:f7:be:c5:3f:b0:42:93:3b:aa:eb:4d:b3:44: da:38:d5:e0:a8:b5:f2:03:3f:b8:0a:b7:0d:51:f5:35:28:72: 42:ed:a4:f3:41:e2:e4:99:f8:e4:0b:bd:cd:a3:1a:d5:fd:51: e6:2a:3b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+iIbUx9grHkjR9UkN+KQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjJmNGRhZWQ3YmVmMmE2YWI0YmJiOWFhZmFjNTY1NGRk YzUzYzEwHhcNMjUxMjA3MDQwMjU5WhcNMjUxMjA4MDQwMjU5WjAzMTEwLwYDVQQD EyhjYjJhNjI5MTMyMmMwYjM0ZGNjMmQ3YjI1NDVkMTE4N2UwNzNhMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7tABhvKvoA+Wfv1bfb/xV3LEm6 Gru6Jqnwarn0V3ZvhIppRNZQ123BdkiEoyMnL5M5t2RICaCq8vPbVdNncN/08JBe fM3BuNMZj+fQoKWu6ywaRq9QCWg2Krxw3mdu8e/TX31OuMHMsJPQPT5glZrkOnD0 CNYD+l5WQOC9yOj10w3zy2scV27QIcdANnxm6bWLmV5myaiq2zc8GLpeodwExhQH cj7AIqqFpuUcvjAt9pzWR5rWwiCYgWab9KCE8zEZyPZdU+M7rxPk8YIfUkRkvK6t KrcyqGXy8qz0dMZAwIxb5h4I6CbpPhp4LU8PqFCWQnq5n5FwYd9qrTcx9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsqYpEyLAs03MLXslRdEYfgc6CLMB8GA1UdIwQY MBaAFKOy9Nrte+8qarS7uar6xWVN3FPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjkt ZDgzMTBkYjk3OTUxLzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjktZDgzMTBkYjk3OTUx LzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqdSpiPF wkqYMOXlD9iOGmJBoxng3oAVFiG49XV6eTMpH4R6CqMbQHFVztA6WvH84TYFWUzq dkiOBurB5fPxaHMhRgLIkG9S/fmYNvAbex7o+rREcTbQO6xvYc6Xh/cjT5ZLEkAy 2B/0iTykRSP0WWryyeAGyWiGu8PA+eEfyB+nbJMvTN/nIdATQZNqbxgb3G6+eTxG yEBE4bN2stFOLCrI7Vh25EAduKUMtxuYKuFEASxqRG8IqdhE71CoADFnRIj86iut gGrZVT73vsU/sEKTO6rrTbNE2jjV4Ki18gM/uAq3DVH1NShyQu2k80Hi5Jn45Au9 zaMa1f1R5io7IQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:05:10 2025 by rpki-client