This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json) Hash identifier: fOGEf4IWXA5VKnQ6/PvDgnArB1a788zUEJatYSKIb8Y= Subject key identifier: D3:B5:61:1D:5B:7E:10:0C:65:07:39:C9:CF:6B:18:D9:72:29:98:84 Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Certificate serial: 019B33E90FB42AED6B28F51A56C2F7C29560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft Manifest number: 0535 Signing time: Fri 19 Dec 2025 00:01:10 +0000 Manifest this update: Fri 19 Dec 2025 00:01:10 +0000 Manifest next update: Sat 20 Dec 2025 00:01:10 +0000 Files and hashes: 1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: aNec2SN3gyKpwSm4U/YRW88hPpLHLFGdRXQrzxjG+XI=) 2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=) 3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=) 4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:0f:b4:2a:ed:6b:28:f5:1a:56:c2:f7:c2:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Validity Not Before: Dec 19 00:01:10 2025 GMT Not After : Dec 20 00:01:10 2025 GMT Subject: CN=d3b5611d5b7e100c650739c9cf6b18d972299884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:01:64:13:89:5f:86:ab:91:f6:38:50:1f: 3f:d7:c8:f9:1f:66:71:59:84:a5:51:fa:89:85:8b: 69:9d:88:70:5f:a6:36:ea:d5:c1:7f:1b:85:53:36: f0:10:ff:d8:9c:c0:98:47:32:1d:fd:9e:74:59:8e: c8:ca:8f:49:94:70:81:58:b4:45:c7:d8:48:ec:42: 0d:4c:26:f0:98:4a:8c:88:42:17:a7:10:d8:8d:10: 7f:bb:84:ca:25:25:11:b1:ef:95:f5:f7:c3:32:30: 7a:0e:fb:64:f8:66:68:9f:68:5d:c8:81:72:af:dc: 16:80:09:0a:ad:9a:22:d1:e8:8e:bd:58:27:05:84: c2:b0:88:e5:5c:48:9c:68:0c:b1:0e:60:8f:2c:7b: 35:13:9f:ef:7b:76:9c:05:49:73:49:16:ee:13:46: 71:56:98:de:08:01:40:91:80:d0:70:09:88:5c:97: 69:79:00:6a:97:d0:3a:bc:f7:38:85:d0:2d:cf:93: b1:0e:cf:81:79:10:5e:4c:fd:f1:97:23:c8:92:4e: cd:c7:cf:cd:90:53:f2:e9:7c:0b:a4:b8:2a:d0:00: 38:e4:e8:ea:15:03:e0:85:04:21:ec:a7:9a:b4:1c: 85:2e:ec:80:9b:5b:f7:69:2d:07:6e:b6:17:ef:ba: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B5:61:1D:5B:7E:10:0C:65:07:39:C9:CF:6B:18:D9:72:29:98:84 X509v3 Authority Key Identifier: keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fd:1c:47:0e:48:4c:a4:1f:73:9a:e5:8a:03:1e:72:11:4d: dd:08:6f:3d:d4:48:7a:71:aa:dc:cb:07:28:e0:d3:9f:92:4a: ce:3b:5e:55:ab:01:d8:a2:f9:15:a4:e7:74:6a:33:1f:07:3a: 9d:ca:0c:fd:c8:59:78:ce:af:ef:7d:75:81:d8:ef:5d:37:91: 33:c9:40:35:9b:00:bd:fb:c5:95:13:da:5e:d8:01:05:5d:6a: a0:48:4a:db:9d:13:6e:92:9f:d7:28:a6:7d:06:ea:50:fe:49: d1:5f:05:72:8a:b3:2f:5f:9d:67:63:2f:b7:95:05:df:e8:93: 65:56:3d:eb:ee:5c:7d:8c:ad:4c:41:29:8d:b0:81:ae:55:d2: ac:00:02:d4:da:4f:8c:f0:ea:4c:60:c6:6f:3c:f8:05:c7:1c: af:88:8a:3b:4e:1a:96:16:c9:a9:92:a4:e7:c5:c0:d6:1d:35: 59:f6:17:b9:bb:de:54:06:85:c2:02:19:05:ba:9d:bc:d9:6f: 14:80:24:8c:6e:ba:13:02:a7:ba:f0:36:a3:df:fd:cf:13:a6: 14:5b:0d:33:8f:1d:ad:61:a7:99:cf:3b:3d:e0:2a:ee:ad:e1: 8d:d2:76:e3:a5:04:cd:2e:b5:2b:88:6b:05:e7:1a:70:a8:a2: 00:43:21:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Q+0Ku1rKPUaVsL3wpVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1 MzQ5NGEwHhcNMjUxMjE5MDAwMTEwWhcNMjUxMjIwMDAwMTEwWjAzMTEwLwYDVQQD EyhkM2I1NjExZDViN2UxMDBjNjUwNzM5YzljZjZiMThkOTcyMjk5ODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlcBZBOJX4arkfY4UB8/18j5H2Zx WYSlUfqJhYtpnYhwX6Y26tXBfxuFUzbwEP/YnMCYRzId/Z50WY7Iyo9JlHCBWLRF x9hI7EINTCbwmEqMiEIXpxDYjRB/u4TKJSURse+V9ffDMjB6Dvtk+GZon2hdyIFy r9wWgAkKrZoi0eiOvVgnBYTCsIjlXEicaAyxDmCPLHs1E5/ve3acBUlzSRbuE0Zx VpjeCAFAkYDQcAmIXJdpeQBql9A6vPc4hdAtz5OxDs+BeRBeTP3xlyPIkk7Nx8/N kFPy6XwLpLgq0AA45OjqFQPghQQh7KeatByFLuyAm1v3aS0HbrYX77p1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO1YR1bfhAMZQc5yc9rGNlyKZiEMB8GA1UdIwQY MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt Zjk5NDUzYTk1YTk5LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5 LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANv0cRw5I TKQfc5rligMechFN3QhvPdRIenGq3MsHKODTn5JKzjteVasB2KL5FaTndGozHwc6 ncoM/chZeM6v7311gdjvXTeRM8lANZsAvfvFlRPaXtgBBV1qoEhK250TbpKf1yim fQbqUP5J0V8FcoqzL1+dZ2Mvt5UF3+iTZVY96+5cfYytTEEpjbCBrlXSrAAC1NpP jPDqTGDGbzz4Bcccr4iKO04alhbJqZKk58XA1h01WfYXubveVAaFwgIZBbqdvNlv FIAkjG66EwKnuvA2o9/9zxOmFFsNM48drWGnmc87PeAq7q3hjdJ246UEzS61K4hr BecacKiiAEMhvw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:59:36 2025 by rpki-client