This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json) Hash identifier: JfGOVwDzstNG5tWNlVDm+ck2GMSAFQ7JaVTXVScpuSE= Subject key identifier: 7E:7E:84:5C:20:D6:8A:18:93:F4:C1:1B:38:D4:06:78:02:76:7A:DF Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Certificate serial: 019AF0519CB7599D48784EC62F0EC9A16EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft Manifest number: 0512 Signing time: Fri 05 Dec 2025 21:01:11 +0000 Manifest this update: Fri 05 Dec 2025 21:01:11 +0000 Manifest next update: Sat 06 Dec 2025 21:01:11 +0000 Files and hashes: 1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: r1LfNA0cGs+p7wRZzowPnlN3rlPSOOpTHM9/Vwd8CKY=) 2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=) 3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=) 4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:9c:b7:59:9d:48:78:4e:c6:2f:0e:c9:a1:6e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Validity Not Before: Dec 5 21:01:11 2025 GMT Not After : Dec 6 21:01:11 2025 GMT Subject: CN=7e7e845c20d68a1893f4c11b38d4067802767adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:75:dd:42:e8:4b:f4:08:b8:0b:9d:b6:cb: 2f:c0:44:2a:fd:33:b3:5d:cf:af:86:3e:f0:8a:be: 65:b9:e9:30:55:ed:45:42:99:14:55:25:56:bd:70: d9:fb:e8:c2:25:59:da:35:06:6d:89:62:61:58:cf: b1:b6:b9:1e:5d:98:22:f1:1c:fb:02:17:50:21:50: f1:5b:ed:43:b6:2e:87:6c:36:7a:ab:a8:32:fa:62: 76:d1:1e:e1:5a:49:39:03:4e:39:e0:f9:49:40:c6: 3d:6b:c6:1a:fe:8b:f7:80:48:0d:e0:6d:d9:bc:5d: af:8a:c6:d6:fc:bb:37:2d:1e:15:cc:83:41:da:9d: 70:fb:65:d0:7d:f9:a5:0b:88:9b:1a:52:95:51:dd: 98:3f:00:91:7b:0f:8d:44:80:a4:e8:a0:87:aa:0b: a4:5e:e2:4d:8f:c3:0b:61:3f:d4:dd:8f:3d:88:0d: 9e:f0:a0:1c:2d:4e:88:c0:6b:34:f4:29:9b:34:5c: 52:da:5f:ab:b6:f9:fd:e8:27:5d:c0:4b:80:65:41: a9:01:af:2c:fd:9b:d7:4d:94:57:aa:7a:31:6c:af: 65:d9:7b:5c:56:79:e2:3a:35:f9:88:34:5f:cc:de: ba:f1:15:e4:f5:e0:1b:51:fc:cf:a2:da:55:1c:bc: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7E:84:5C:20:D6:8A:18:93:F4:C1:1B:38:D4:06:78:02:76:7A:DF X509v3 Authority Key Identifier: keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9e:ea:c5:0c:16:f6:52:38:af:86:67:17:10:c4:23:8b:b3: 93:12:9e:ea:63:1a:ae:22:fc:34:1e:eb:ae:42:47:17:de:8e: 7c:0d:a3:65:a8:50:b8:66:6d:52:65:6a:4b:e6:35:31:16:9b: cd:79:c3:8c:d9:0d:c2:17:0d:a1:66:78:70:5b:77:52:80:4e: 91:fb:cd:8f:53:a8:a0:75:10:23:5a:4f:64:69:91:00:30:93: 30:5b:64:3c:4e:26:a8:32:74:a2:fa:12:14:26:bf:1f:90:8b: 89:03:9b:eb:de:1b:70:6a:ad:76:7f:79:e7:7b:e6:3a:e8:fc: 6c:4e:9e:27:50:9a:9b:e6:08:61:62:f5:3d:f6:51:de:9e:e3: 0e:30:84:7d:61:3b:fb:25:59:03:11:3e:5a:0a:81:e3:fa:7c: 2c:44:05:a9:2b:a6:eb:c5:f1:7d:66:e2:07:68:4f:f6:c8:25: ea:e5:09:6d:db:ad:ed:fa:22:94:ff:af:d2:39:2a:45:89:33: b9:7a:53:8f:d5:a3:6b:d4:4c:5b:44:bf:1a:01:d3:28:3c:af: cd:ed:b3:fd:05:f1:5f:64:76:c4:1f:62:11:ca:c1:b9:ed:76: 01:47:71:f4:f0:c7:b3:11:ec:2a:3d:a6:38:2e:6e:2a:1a:b7: 37:ae:70:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUZy3WZ1IeE7GLw7JoW6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1 MzQ5NGEwHhcNMjUxMjA1MjEwMTExWhcNMjUxMjA2MjEwMTExWjAzMTEwLwYDVQQD Eyg3ZTdlODQ1YzIwZDY4YTE4OTNmNGMxMWIzOGQ0MDY3ODAyNzY3YWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscd13ULoS/QIuAudtssvwEQq/TOz Xc+vhj7wir5luekwVe1FQpkUVSVWvXDZ++jCJVnaNQZtiWJhWM+xtrkeXZgi8Rz7 AhdQIVDxW+1Dti6HbDZ6q6gy+mJ20R7hWkk5A0454PlJQMY9a8Ya/ov3gEgN4G3Z vF2visbW/Ls3LR4VzINB2p1w+2XQffmlC4ibGlKVUd2YPwCRew+NRICk6KCHqguk XuJNj8MLYT/U3Y89iA2e8KAcLU6IwGs09CmbNFxS2l+rtvn96CddwEuAZUGpAa8s /ZvXTZRXqnoxbK9l2XtcVnniOjX5iDRfzN668RXk9eAbUfzPotpVHLySCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5+hFwg1ooYk/TBGzjUBngCdnrfMB8GA1UdIwQY MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt Zjk5NDUzYTk1YTk5LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5 LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp7qxQwW 9lI4r4ZnFxDEI4uzkxKe6mMariL8NB7rrkJHF96OfA2jZahQuGZtUmVqS+Y1MRab zXnDjNkNwhcNoWZ4cFt3UoBOkfvNj1OooHUQI1pPZGmRADCTMFtkPE4mqDJ0ovoS FCa/H5CLiQOb694bcGqtdn9553vmOuj8bE6eJ1Cam+YIYWL1PfZR3p7jDjCEfWE7 +yVZAxE+WgqB4/p8LEQFqSum68XxfWbiB2hP9sgl6uUJbdut7foilP+v0jkqRYkz uXpTj9Wja9RMW0S/GgHTKDyvze2z/QXxX2R2xB9iEcrBue12AUdx9PDHsxHsKj2m OC5uKhq3N65wFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:33 2025 by rpki-client