This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json) Hash identifier: cMW8uF1ckTx3Esvw4HvJahaNDEpO8vUEsRFl/SA3WRo= Subject key identifier: B5:DF:80:0A:D4:C2:01:3C:99:39:8B:58:D8:9D:6D:2D:F2:1F:0D:80 Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Certificate serial: 019AF389E396EAAA2B62A4B70CFB8F92C998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:31 +0000 Manifest this update: Sat 06 Dec 2025 12:01:31 +0000 Manifest next update: Sun 07 Dec 2025 12:01:31 +0000 Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=) 2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=) 3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: EtzTn1GDbWqnyxk9vuYOcI7BfEbTo3nATjpwuwrNBeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e3:96:ea:aa:2b:62:a4:b7:0c:fb:8f:92:c9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Validity Not Before: Dec 6 12:01:31 2025 GMT Not After : Dec 7 12:01:31 2025 GMT Subject: CN=b5df800ad4c2013c99398b58d89d6d2df21f0d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:1b:3a:85:4d:91:c0:a4:e2:64:79:1a:a7: 04:c8:e4:a5:80:99:71:14:9d:5c:96:3a:0f:90:39: 67:86:0c:df:61:3b:df:82:b2:cd:e6:38:33:0d:3d: 94:f1:24:c9:ea:a1:05:17:45:94:2d:8e:20:65:90: 7e:bf:8e:32:04:5c:d9:7f:60:bd:6d:97:f0:b9:ad: d4:20:89:48:9a:bc:f1:ff:ef:30:c4:77:94:a5:ea: ef:22:1e:f5:78:63:45:c7:39:82:24:ce:5b:b8:42: 3f:a5:2c:78:de:fd:d1:c5:32:b7:63:cb:6d:56:f7: 0b:85:85:e6:66:98:69:d3:ed:68:4c:ec:bb:04:e8: bd:53:97:ca:d1:c1:17:31:3a:25:a2:06:d7:ae:80: 3b:82:33:39:33:d0:30:b3:8a:64:d9:45:1a:1f:34: 6a:46:b9:32:16:06:ea:f2:8e:c8:3d:21:ac:4b:66: 9c:f7:df:3b:d3:25:e3:de:70:7d:f7:77:ad:e0:21: 1f:1a:f2:60:71:84:23:80:6e:88:80:05:f6:32:e2: b3:01:d7:47:5a:27:b6:2c:64:54:dd:aa:ad:0a:d6: 43:31:3c:3c:a4:dc:d7:58:08:5c:3d:97:de:18:26: 9a:3d:8c:d0:90:49:98:2f:07:07:8e:44:18:49:d7: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:80:0A:D4:C2:01:3C:99:39:8B:58:D8:9D:6D:2D:F2:1F:0D:80 X509v3 Authority Key Identifier: keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f9:96:42:92:6b:60:a8:87:61:9c:06:ec:81:45:ff:5e:a0: 1c:e9:ca:87:78:2a:04:c9:4f:99:fa:00:27:cb:75:b7:5b:bb: f1:83:76:83:ad:b0:ff:bc:ab:5b:df:23:3a:4c:56:44:ec:b3: 7a:e0:22:b4:83:01:7c:98:fc:45:ca:6f:ce:69:e2:bb:30:f5: e2:d6:59:8b:46:38:d1:63:af:cf:07:94:92:8e:56:34:ae:10: 24:a3:13:11:e1:cb:0c:8d:14:63:dd:21:6a:73:db:82:d5:de: 01:85:64:22:a0:eb:f1:55:1b:cc:66:ec:54:29:bc:f7:04:ec: 65:b5:e6:6c:7b:2b:a1:9b:68:ad:84:07:19:d6:2c:d0:81:19: 41:43:c1:cd:51:c8:7d:21:3a:48:f9:bc:2a:3c:4b:81:ea:0c: 33:1a:91:12:11:c4:60:e1:c5:1d:bf:44:18:a1:a5:ae:2b:48: 95:0c:8e:f7:a5:16:bf:4f:f3:d4:91:7b:91:94:bc:c4:14:4c: 15:e3:65:24:88:fd:39:23:5d:52:5f:7e:c5:1a:3c:f6:4a:00: 51:41:d6:6f:23:1c:f4:98:ee:e1:b4:57:07:73:a7:53:99:18: 82:76:9e:ea:d1:46:69:83:94:6a:d3:3d:90:25:0e:dd:fc:81: 0b:51:eb:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieOW6qorYqS3DPuPksmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh NWU2ZmMwHhcNMjUxMjA2MTIwMTMxWhcNMjUxMjA3MTIwMTMxWjAzMTEwLwYDVQQD EyhiNWRmODAwYWQ0YzIwMTNjOTkzOThiNThkODlkNmQyZGYyMWYwZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdMbOoVNkcCk4mR5GqcEyOSlgJlx FJ1cljoPkDlnhgzfYTvfgrLN5jgzDT2U8STJ6qEFF0WULY4gZZB+v44yBFzZf2C9 bZfwua3UIIlImrzx/+8wxHeUpervIh71eGNFxzmCJM5buEI/pSx43v3RxTK3Y8tt VvcLhYXmZphp0+1oTOy7BOi9U5fK0cEXMTologbXroA7gjM5M9Aws4pk2UUaHzRq RrkyFgbq8o7IPSGsS2ac99870yXj3nB993et4CEfGvJgcYQjgG6IgAX2MuKzAddH Wie2LGRU3aqtCtZDMTw8pNzXWAhcPZfeGCaaPYzQkEmYLwcHjkQYSdeigQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXfgArUwgE8mTmLWNidbS3yHw2AMB8GA1UdIwQY MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfmWQpJr YKiHYZwG7IFF/16gHOnKh3gqBMlPmfoAJ8t1t1u78YN2g62w/7yrW98jOkxWROyz euAitIMBfJj8RcpvzmniuzD14tZZi0Y40WOvzweUko5WNK4QJKMTEeHLDI0UY90h anPbgtXeAYVkIqDr8VUbzGbsVCm89wTsZbXmbHsroZtorYQHGdYs0IEZQUPBzVHI fSE6SPm8KjxLgeoMMxqREhHEYOHFHb9EGKGlritIlQyO96UWv0/z1JF7kZS8xBRM FeNlJIj9OSNdUl9+xRo89koAUUHWbyMc9Jju4bRXB3OnU5kYgnae6tFGaYOUatM9 kCUO3fyBC1HrOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:07 2025 by rpki-client