This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json) Hash identifier: hmNAobNL0WJ85weF4mhkg/SU52wNRygfaOr9qNjiHCk= Subject key identifier: 1C:75:1E:B2:6C:F3:0D:AB:33:14:AC:0C:8B:11:62:9C:09:18:CA:99 Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1 Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1 Certificate serial: 019B3A90A3EF60F0DEE55A7AC502ED950E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:56 +0000 Manifest this update: Sat 20 Dec 2025 07:01:56 +0000 Manifest next update: Sun 21 Dec 2025 07:01:56 +0000 Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: q22kqYJuONeXLfCftNzbGurRTqs5JfPLLhFFq426m7A=) 2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:a3:ef:60:f0:de:e5:5a:7a:c5:02:ed:95:0e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1 Validity Not Before: Dec 20 07:01:56 2025 GMT Not After : Dec 21 07:01:56 2025 GMT Subject: CN=1c751eb26cf30dab3314ac0c8b11629c0918ca99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:f9:ef:e5:6e:51:f3:92:6a:12:34:9e:a8: 75:6b:04:9f:36:e3:c1:3c:cf:a0:71:c8:b1:b6:ec: 7a:df:1f:77:51:ff:7d:ed:ac:34:be:a3:f7:df:41: 89:73:ab:a2:e9:5e:c2:8e:7d:bc:07:8f:59:74:71: 10:64:4b:82:72:b1:53:ee:77:5a:ff:c0:e3:23:f9: af:89:5b:6a:71:88:5f:33:00:2f:2b:a1:f7:fb:d9: 64:37:b1:76:da:0f:a9:a7:4f:81:27:e9:4d:11:67: 66:20:6f:e2:4d:db:a3:39:77:94:59:ed:d0:0d:c6: a8:3d:3b:7a:70:1f:d7:50:6b:23:0b:68:6b:0a:e1: 91:f7:bc:ee:4a:f9:0a:bc:e0:8a:8b:a8:90:7c:07: 88:48:ce:38:04:db:42:7a:c6:79:93:3b:d4:8f:cd: d4:09:cf:01:49:88:9a:c7:28:26:3a:0a:c1:94:81: ab:f9:7a:22:59:82:cd:31:b5:14:d2:e8:46:f0:d2: 49:6d:38:b6:37:ba:12:85:e9:d0:0f:b2:be:91:12: 52:5b:c1:2c:e1:79:9a:6e:b3:4f:18:2a:1b:e2:73: c8:11:06:41:96:a8:d8:ef:6d:e4:76:1e:78:7e:3f: 4b:4b:41:4c:18:68:e5:c7:fd:37:45:09:5c:fd:83: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:75:1E:B2:6C:F3:0D:AB:33:14:AC:0C:8B:11:62:9C:09:18:CA:99 X509v3 Authority Key Identifier: keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4e:30:45:4a:7f:bc:b9:c1:61:4e:2f:bf:c9:12:93:91:8c: 95:0f:59:f0:25:c9:bf:d2:28:df:19:46:f8:60:da:58:4c:60: d1:23:e3:38:9c:87:71:34:06:df:cd:bc:24:60:d9:39:09:b1: 3a:e9:0f:63:5e:8c:a2:18:c4:f7:e3:30:db:78:7d:9a:d0:8a: aa:a3:a5:e8:28:9f:a1:92:a8:45:25:38:7b:0f:77:62:b7:de: ad:4d:a4:09:cb:8a:bd:f4:69:6a:48:a3:e5:cd:bb:28:53:70: 6b:48:43:af:9c:7c:dd:0d:68:b8:0e:82:39:69:4a:97:f7:43: fd:3a:e8:5d:fe:17:57:6b:77:fe:4d:de:0b:0b:d0:c8:f3:9f: 25:4f:7c:d7:d7:ab:70:6a:d7:c5:5b:a3:b9:68:8a:48:38:c9: 6a:a0:7f:5e:0a:fd:c8:9a:b7:2e:f1:b5:d4:bf:f2:54:bd:d8: 98:12:a6:c0:21:34:7d:40:3a:ff:5a:0c:22:b2:92:3d:61:8d: 36:24:3a:91:a5:38:34:36:a0:d8:33:44:bb:81:ad:19:9a:7b: f1:bd:d9:82:7c:5c:05:73:9e:4c:46:72:62:72:a6:21:b8:76: 02:14:78:45:cb:ed:29:28:54:c8:5a:e6:72:be:4b:03:c6:e0: 00:d2:15:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kKPvYPDe5Vp6xQLtlQ6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl ZjQ4YzEwHhcNMjUxMjIwMDcwMTU2WhcNMjUxMjIxMDcwMTU2WjAzMTEwLwYDVQQD EygxYzc1MWViMjZjZjMwZGFiMzMxNGFjMGM4YjExNjI5YzA5MThjYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F357+VuUfOSahI0nqh1awSfNuPB PM+gccixtux63x93Uf997aw0vqP330GJc6ui6V7Cjn28B49ZdHEQZEuCcrFT7nda /8DjI/mviVtqcYhfMwAvK6H3+9lkN7F22g+pp0+BJ+lNEWdmIG/iTdujOXeUWe3Q DcaoPTt6cB/XUGsjC2hrCuGR97zuSvkKvOCKi6iQfAeISM44BNtCesZ5kzvUj83U Cc8BSYiaxygmOgrBlIGr+XoiWYLNMbUU0uhG8NJJbTi2N7oShenQD7K+kRJSW8Es 4XmabrNPGCob4nPIEQZBlqjY723kdh54fj9LS0FMGGjlx/03RQlc/YNGuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx1HrJs8w2rMxSsDIsRYpwJGMqZMB8GA1UdIwQY MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKk4wRUp/ vLnBYU4vv8kSk5GMlQ9Z8CXJv9Io3xlG+GDaWExg0SPjOJyHcTQG3828JGDZOQmx OukPY16MohjE9+Mw23h9mtCKqqOl6CifoZKoRSU4ew93YrferU2kCcuKvfRpakij 5c27KFNwa0hDr5x83Q1ouA6COWlKl/dD/TroXf4XV2t3/k3eCwvQyPOfJU9819er cGrXxVujuWiKSDjJaqB/Xgr9yJq3LvG11L/yVL3YmBKmwCE0fUA6/1oMIrKSPWGN NiQ6kaU4NDag2DNEu4GtGZp78b3ZgnxcBXOeTEZyYnKmIbh2AhR4RcvtKShUyFrm cr5LA8bgANIVrA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:24:09 2025 by rpki-client