This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json) Hash identifier: /t5u1tBNw1HiDH/neZZoDAXb53bnFkZM2rC6R8nodFk= Subject key identifier: 32:7D:8B:A3:FD:9F:91:74:44:1C:F1:8B:82:7C:3B:8C:07:E5:F8:21 Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf Certificate serial: 019AF1D195EC4BBE1C523962A77D16DD7C9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft Manifest number: 078A Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=) 2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: ZKGmKWZMl32DFvDi922S1VznZq0L4A9H1qfAhrF97M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:ec:4b:be:1c:52:39:62:a7:7d:16:dd:7c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=327d8ba3fd9f9174441cf18b827c3b8c07e5f821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:1a:8e:f9:c6:87:c8:f9:35:8e:bf:d2:83: b2:73:90:6b:bd:bb:c5:d6:8d:70:8f:dd:8c:ee:fb: f7:73:b0:2a:ee:59:d5:7e:06:69:27:a8:45:98:11: cc:f9:77:23:d3:79:62:6e:8c:c4:c0:84:2f:6b:7f: 9b:d5:e7:7c:e2:f0:b7:cb:8f:1b:b5:35:7a:4e:ba: fe:67:1f:b7:00:3f:66:51:d5:31:85:83:8a:19:1a: c5:c5:e8:60:fa:56:60:e7:be:a9:2a:3a:29:24:66: e3:ac:20:71:33:ab:6a:84:69:05:de:11:5e:c4:d5: dd:11:69:9b:50:78:63:7e:69:06:8d:6f:65:9e:51: b2:c7:2a:63:35:4c:7d:99:3c:9e:1f:96:26:d8:7b: 98:69:9d:87:4a:a0:b3:fd:e3:44:ee:20:8d:ba:87: 2a:25:ea:5c:65:42:1e:af:77:af:43:51:98:60:2f: fc:6b:64:f6:f9:83:b9:44:e7:9b:d5:23:3d:ae:58: d5:55:f5:eb:a9:32:43:9f:58:82:76:78:73:8a:ca: 79:b6:ec:9c:95:dc:6a:bd:df:26:26:6a:14:03:a8: f8:52:ee:5f:e8:5f:8b:cb:27:cb:94:3e:ac:d0:c7: 73:26:a9:f4:bc:a8:a6:7c:ab:96:64:4a:ae:4f:00: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:8B:A3:FD:9F:91:74:44:1C:F1:8B:82:7C:3B:8C:07:E5:F8:21 X509v3 Authority Key Identifier: keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4c:e3:9d:8c:3c:5e:e3:a4:8b:bd:c1:e7:a4:5a:db:4e:4f: b5:ab:17:d9:e7:ac:b2:aa:00:fb:79:87:a0:47:1b:d6:97:65: 55:f1:8a:6f:17:60:a3:65:ff:69:13:33:eb:a4:e9:21:af:32: 9d:3d:6e:d6:7f:28:20:39:a4:9a:cb:cc:0b:0d:b9:99:05:04: 77:0a:64:a5:9b:ee:08:e0:3e:cd:dd:3c:5c:3f:44:cf:24:7d: 5f:18:56:14:89:25:b9:a8:b0:06:56:be:8a:da:20:08:a4:e3: f2:ea:40:16:66:43:8d:a6:c4:fa:22:2a:49:77:c1:12:a8:86: ab:8e:57:d4:df:03:9e:22:7c:51:c9:a2:b2:c6:1a:cd:74:e0: 60:42:3d:77:ee:90:e6:1d:4f:0b:ad:20:5e:2c:48:9b:89:95: 40:b1:5f:23:ca:33:6b:cd:f1:ce:52:38:14:86:aa:c9:4c:bc: 1c:25:59:0a:96:09:67:54:c7:27:dd:54:5f:2f:c6:b9:e3:8e: d3:95:91:21:5e:57:6e:2b:83:fb:76:f4:ee:7b:f2:93:e6:84: eb:53:c3:2f:d6:42:51:00:4e:8c:79:26:3b:05:43:b2:6e:18: d0:80:bb:4a:73:9d:58:cc:be:ba:ab:24:4d:14:25:c8:37:69: c6:b0:60:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZXsS74cUjlip30W3XyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTQ3NjFkNDRkODA2YzNmOWU0ZTc2Yjc5YzhmMjI5NmNj N2JiY2YwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EygzMjdkOGJhM2ZkOWY5MTc0NDQxY2YxOGI4MjdjM2I4YzA3ZTVmODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0UajvnGh8j5NY6/0oOyc5BrvbvF 1o1wj92M7vv3c7Aq7lnVfgZpJ6hFmBHM+Xcj03libozEwIQva3+b1ed84vC3y48b tTV6Trr+Zx+3AD9mUdUxhYOKGRrFxehg+lZg576pKjopJGbjrCBxM6tqhGkF3hFe xNXdEWmbUHhjfmkGjW9lnlGyxypjNUx9mTyeH5Ym2HuYaZ2HSqCz/eNE7iCNuocq JepcZUIer3evQ1GYYC/8a2T2+YO5ROeb1SM9rljVVfXrqTJDn1iCdnhzisp5tuyc ldxqvd8mJmoUA6j4Uu5f6F+LyyfLlD6s0MdzJqn0vKimfKuWZEquTwBl6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ9i6P9n5F0RBzxi4J8O4wH5fghMB8GA1UdIwQY MBaAFDvkdh1E2AbD+eTna3nI8ilsx7vPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1SMkhVVFlCc1A1NU9kcmVjanlLV3pIdTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kMmMzOGUtMGFhZi00ZTNiLThlZDgt YjU0YWU2ZjA4ZjRmLzEvTy1SMkhVVFlCc1A1NU9kcmVjanlLV3pIdTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kMmMzOGUtMGFhZi00ZTNiLThlZDgtYjU0YWU2ZjA4ZjRm LzEvTy1SMkhVVFlCc1A1NU9kcmVjanlLV3pIdTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUzjnYw8 XuOki73B56Ra205PtasX2eessqoA+3mHoEcb1pdlVfGKbxdgo2X/aRMz66TpIa8y nT1u1n8oIDmkmsvMCw25mQUEdwpkpZvuCOA+zd08XD9EzyR9XxhWFIkluaiwBla+ itogCKTj8upAFmZDjabE+iIqSXfBEqiGq45X1N8DniJ8UcmissYazXTgYEI9d+6Q 5h1PC60gXixIm4mVQLFfI8oza83xzlI4FIaqyUy8HCVZCpYJZ1THJ91UXy/GueOO 05WRIV5XbiuD+3b07nvyk+aE61PDL9ZCUQBOjHkmOwVDsm4Y0IC7SnOdWMy+uqsk TRQlyDdpxrBgBw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:24 2025 by rpki-client