This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json) Hash identifier: x/IK1g95gKK7jDLdNVO745GhRjS2z+qYL3XVPMdUrds= Subject key identifier: B9:3C:F5:44:69:CC:4E:59:57:E6:41:5C:D2:E0:D2:F6:D9:1A:8D:C7 Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69 Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69 Certificate serial: 019B2D420FC2B2859ECE1B92418EE24ADF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 17:01:02 +0000 Manifest this update: Wed 17 Dec 2025 17:01:02 +0000 Manifest next update: Thu 18 Dec 2025 17:01:02 +0000 Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=) 2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: 7Ff74roJC/M5mLBAEgK/8v4wS5YIxRPTEKef5PFE+qM=) 3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:0f:c2:b2:85:9e:ce:1b:92:41:8e:e2:4a:df:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69 Validity Not Before: Dec 17 17:01:02 2025 GMT Not After : Dec 18 17:01:02 2025 GMT Subject: CN=b93cf54469cc4e5957e6415cd2e0d2f6d91a8dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:cf:dd:0f:d2:b1:d5:c0:10:a2:cf:d8:c2: 33:eb:e1:bd:f6:ab:71:33:c2:16:cc:17:17:77:67: cf:86:fd:5c:23:ac:3e:dd:fc:6b:52:d0:f5:3b:5c: d2:d9:5d:8e:d8:65:31:38:83:42:94:77:60:07:c2: d3:f9:9c:5a:cf:86:48:6b:5b:b7:26:fa:65:03:48: 29:21:46:7f:f7:5a:d9:eb:53:56:55:76:2d:a5:c3: 58:51:ce:1e:33:33:32:68:90:06:c6:23:e9:4b:8f: fe:cf:59:6d:b4:e8:ba:da:28:62:df:61:73:90:6e: 6e:e0:4e:0c:f8:41:7b:af:76:b3:00:ff:57:51:be: e9:7f:ae:47:a0:96:9b:5e:31:b6:b9:48:9b:06:24: 28:a5:60:12:c0:9e:40:a7:74:f7:f8:f6:cf:0d:bc: 98:b8:a3:66:83:f5:a2:0a:80:2a:4f:38:de:e4:f9: 6d:d6:c0:bc:c4:81:a1:43:25:1b:dc:a5:04:4e:c1: a5:22:37:59:1e:c2:03:35:a0:d7:4c:cb:6c:e9:b8: d0:ae:55:dd:6d:62:b3:dc:83:3d:e6:16:ee:3b:8f: fd:09:4f:07:33:50:d4:9e:1f:93:4c:1c:2c:73:f9: b8:78:17:22:ec:7f:f0:31:12:a8:42:7e:67:25:cf: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:F5:44:69:CC:4E:59:57:E6:41:5C:D2:E0:D2:F6:D9:1A:8D:C7 X509v3 Authority Key Identifier: keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:66:11:97:89:c4:7c:a6:2c:48:d6:66:46:98:15:3c:1f:fa: 2e:3f:ee:a5:a7:8e:bd:22:dd:7e:1a:3a:11:53:76:a7:26:81: 22:29:5e:64:41:32:d5:b7:de:c8:8d:26:a8:34:df:ce:10:e8: 74:e2:69:25:08:c1:7e:c6:e9:4d:66:d6:2e:7e:4c:6e:5a:54: a8:28:a2:be:d2:80:a6:f6:0e:b0:fc:cc:79:7d:ea:0d:04:a4: 88:38:f9:38:9a:19:52:9e:e4:65:0c:c2:86:85:7c:69:ba:61: 3e:a5:6b:f5:14:67:86:05:24:84:48:d7:f0:40:d4:d7:b9:b7: 8b:fd:28:18:d8:57:2d:72:38:bb:b0:b5:9f:1c:ec:bb:5b:8a: 15:62:6c:17:d4:8d:6c:0c:76:c0:ac:39:55:28:e0:3f:87:83: 4d:31:ea:ba:a0:e1:fb:af:f6:2a:79:6b:d8:fe:17:ae:ce:42: 3f:6e:c0:54:53:f2:50:17:c8:a0:dd:9b:93:4f:b4:b4:a9:72: dd:fe:88:13:1a:42:88:66:a5:de:ce:ba:29:59:3a:41:51:f6: 22:82:ab:16:d5:e1:ed:0c:29:db:bf:1e:2e:f2:41:73:ed:cc: be:aa:cc:99:2c:4b:92:da:6b:0a:d4:88:ed:2e:94:19:b1:20: a0:42:d6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQg/CsoWezhuSQY7iSt9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc3YTYyNjA3ZmI5NGM4ZTIzYjVhMDYyYzc4ZDkzZGY5 Y2JkNjkwHhcNMjUxMjE3MTcwMTAyWhcNMjUxMjE4MTcwMTAyWjAzMTEwLwYDVQQD EyhiOTNjZjU0NDY5Y2M0ZTU5NTdlNjQxNWNkMmUwZDJmNmQ5MWE4ZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJXP3Q/SsdXAEKLP2MIz6+G99qtx M8IWzBcXd2fPhv1cI6w+3fxrUtD1O1zS2V2O2GUxOINClHdgB8LT+Zxaz4ZIa1u3 JvplA0gpIUZ/91rZ61NWVXYtpcNYUc4eMzMyaJAGxiPpS4/+z1lttOi62ihi32Fz kG5u4E4M+EF7r3azAP9XUb7pf65HoJabXjG2uUibBiQopWASwJ5Ap3T3+PbPDbyY uKNmg/WiCoAqTzje5Plt1sC8xIGhQyUb3KUETsGlIjdZHsIDNaDXTMts6bjQrlXd bWKz3IM95hbuO4/9CU8HM1DUnh+TTBwsc/m4eBci7H/wMRKoQn5nJc/LAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk89URpzE5ZV+ZBXNLg0vbZGo3HMB8GA1UdIwQY MBaAFDtHemJgf7lMjiO1oGLHjZPfnL1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUt MzBhNmMzYWY5MDk1LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUtMzBhNmMzYWY5MDk1 LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGYRl4nE fKYsSNZmRpgVPB/6Lj/upaeOvSLdfho6EVN2pyaBIileZEEy1bfeyI0mqDTfzhDo dOJpJQjBfsbpTWbWLn5MblpUqCiivtKApvYOsPzMeX3qDQSkiDj5OJoZUp7kZQzC hoV8abphPqVr9RRnhgUkhEjX8EDU17m3i/0oGNhXLXI4u7C1nxzsu1uKFWJsF9SN bAx2wKw5VSjgP4eDTTHquqDh+6/2Knlr2P4Xrs5CP27AVFPyUBfIoN2bk0+0tKly 3f6IExpCiGal3s66KVk6QVH2IoKrFtXh7Qwp278eLvJBc+3MvqrMmSxLktprCtSI 7S6UGbEgoELWUA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:14:23 2025 by rpki-client