This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json) Hash identifier: DTXdOR+qrDtIXseIlJB4WG9aU94u8+ogal1tUgxaCUI= Subject key identifier: CF:02:1A:B8:BA:31:43:DF:1A:31:BB:EE:F1:81:0C:26:0E:09:77:86 Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37 Certificate serial: 019B3231B27716A7EF71E511C3FCEE0578B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 16:01:16 +0000 Manifest this update: Thu 18 Dec 2025 16:01:16 +0000 Manifest next update: Fri 19 Dec 2025 16:01:16 +0000 Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=) 2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: cFkx+3gK3cCvyv8EB1Oi+3yOydRgTm8FE+jt0P9YVTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:b2:77:16:a7:ef:71:e5:11:c3:fc:ee:05:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37 Validity Not Before: Dec 18 16:01:16 2025 GMT Not After : Dec 19 16:01:16 2025 GMT Subject: CN=cf021ab8ba3143df1a31bbeef1810c260e097786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:ba:9e:6d:f1:2e:15:01:9b:83:53:ea:e8: 72:d6:46:cd:4d:95:76:8b:eb:74:2e:0a:99:c8:c7: b4:b8:a0:0d:01:39:3c:e3:48:b9:7d:82:e0:a8:71: da:c8:ea:e5:18:d3:b6:04:91:c2:3a:8d:cf:25:4b: 15:b1:13:83:38:f3:c8:d8:4f:3a:a9:b4:0c:1c:99: f7:ab:f9:cf:92:e9:73:95:7a:e0:1e:3a:f1:0c:aa: 3a:0a:10:c6:0a:0a:fe:60:f1:4f:4f:9f:35:78:a7: ea:dc:11:54:36:54:8a:34:a1:fe:f6:d1:37:47:60: 0e:fc:29:1b:89:a7:41:2a:e0:47:d4:c0:cb:ff:44: 60:f1:fe:ee:79:b0:ab:da:1b:6e:fa:3a:ab:68:c0: a3:21:4a:fa:b2:81:c7:b1:bb:7e:34:c7:01:23:36: 34:7e:e3:33:b0:48:c4:30:da:26:65:0c:aa:0a:6d: b3:df:e4:41:93:37:89:21:ff:a1:64:d9:f0:c5:51: e5:03:10:07:4d:45:11:a1:b3:a0:03:e3:99:ca:25: 61:15:3c:cb:1a:b2:aa:84:8f:f7:b1:75:8d:dc:d4: 0c:dc:b3:74:b5:ef:d2:26:bf:42:7a:f8:10:da:79: 45:f8:b8:26:97:0f:f1:7b:2a:0d:e4:ac:53:1f:1c: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:1A:B8:BA:31:43:DF:1A:31:BB:EE:F1:81:0C:26:0E:09:77:86 X509v3 Authority Key Identifier: keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c1:9c:cf:61:97:df:ab:02:ed:11:b7:33:e3:db:cd:ff:f0: d8:20:c8:16:27:8f:33:b1:9f:07:76:57:dd:2b:18:50:18:c7: ee:9b:c2:f0:92:6f:2b:f1:88:4a:54:c8:da:90:17:2d:37:42: 96:bd:0a:e7:a4:47:0c:3b:40:55:b5:d1:12:88:a1:77:a3:0a: b5:26:8e:e3:80:46:a5:0e:7f:8f:d0:74:60:c5:fb:02:48:6c: dc:b1:48:95:ed:b5:b7:4b:6b:6e:cd:dc:ca:81:ea:31:b4:52: a7:e0:34:df:24:7d:ac:d7:71:5b:36:4f:d4:d9:fb:ea:34:1e: 20:e3:7f:b0:8a:35:9e:24:6e:79:1b:2b:b9:03:b6:6d:ba:b0: 3e:2b:8f:42:b1:4a:8c:50:88:15:89:6b:70:14:9d:74:35:de: d3:02:af:64:ae:0f:cf:5a:55:ca:07:ed:73:00:03:3d:05:be: a0:94:d5:d0:a1:26:bf:b0:69:71:9e:91:56:5e:4c:76:9a:99: 1d:f5:0c:86:e2:88:bb:b0:35:84:4d:2c:fa:b5:6d:13:c2:4b: ca:74:a4:a0:b7:e2:24:a5:18:98:1e:60:3e:d8:27:2b:d0:02: 04:3a:bf:b8:38:a2:47:9a:7a:72:c9:6b:24:89:02:84:16:11: 51:9e:df:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMbJ3FqfvceURw/zuBXiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzN2ExMjZkNzg1NGVjZDU2NWFlODI5NzBjNjkzZjMzNTlm ODVmMzcwHhcNMjUxMjE4MTYwMTE2WhcNMjUxMjE5MTYwMTE2WjAzMTEwLwYDVQQD EyhjZjAyMWFiOGJhMzE0M2RmMWEzMWJiZWVmMTgxMGMyNjBlMDk3Nzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfq6nm3xLhUBm4NT6uhy1kbNTZV2 i+t0LgqZyMe0uKANATk840i5fYLgqHHayOrlGNO2BJHCOo3PJUsVsRODOPPI2E86 qbQMHJn3q/nPkulzlXrgHjrxDKo6ChDGCgr+YPFPT581eKfq3BFUNlSKNKH+9tE3 R2AO/CkbiadBKuBH1MDL/0Rg8f7uebCr2htu+jqraMCjIUr6soHHsbt+NMcBIzY0 fuMzsEjEMNomZQyqCm2z3+RBkzeJIf+hZNnwxVHlAxAHTUURobOgA+OZyiVhFTzL GrKqhI/3sXWN3NQM3LN0te/SJr9CevgQ2nlF+Lgmlw/xeyoN5KxTHxxpkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8CGri6MUPfGjG77vGBDCYOCXeGMB8GA1UdIwQY MBaAFKN6Em14VOzVZa6ClwxpPzNZ+F83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDkt Nzg2Y2IxMjk2ZTU4LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDktNzg2Y2IxMjk2ZTU4 LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMGcz2GX 36sC7RG3M+Pbzf/w2CDIFiePM7GfB3ZX3SsYUBjH7pvC8JJvK/GISlTI2pAXLTdC lr0K56RHDDtAVbXREoihd6MKtSaO44BGpQ5/j9B0YMX7Akhs3LFIle21t0trbs3c yoHqMbRSp+A03yR9rNdxWzZP1Nn76jQeION/sIo1niRueRsruQO2bbqwPiuPQrFK jFCIFYlrcBSddDXe0wKvZK4Pz1pVygftcwADPQW+oJTV0KEmv7BpcZ6RVl5MdpqZ HfUMhuKIu7A1hE0s+rVtE8JLynSkoLfiJKUYmB5gPtgnK9ACBDq/uDiiR5p6cslr JIkChBYRUZ7fzQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:06:22 2025 by rpki-client