This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json) Hash identifier: 8VB/mnBddftYMeD2Vkjcw8+cvdXT2ib8mfWE/Xna4a8= Subject key identifier: AD:22:B2:71:60:69:F6:24:5E:B8:D6:54:C0:93:66:5D:05:57:FF:89 Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37 Certificate serial: 019AF276C37B2DBD16E9A39A3CED579E34F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=) 2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: bUr24MNKco3u6BWHsyXCQnwSfi1NGe6H4wcgELIV6jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c3:7b:2d:bd:16:e9:a3:9a:3c:ed:57:9e:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37 Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=ad22b2716069f6245eb8d654c093665d0557ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:07:f0:26:0c:2b:8c:61:41:d2:18:33:6d: e1:e5:f5:0a:5c:24:1a:e6:11:de:fb:fc:9f:d1:61: 7d:ef:03:b0:18:8f:f1:9e:17:c3:5e:69:2d:2d:6c: ab:3e:1f:f5:67:96:92:21:eb:fd:2d:fc:7a:51:e7: 1e:90:4f:53:28:ca:06:d7:4d:d7:a2:9b:a5:32:80: 49:bc:55:37:2a:54:bc:3d:89:34:79:03:63:6e:00: 37:fd:45:ca:a0:60:1a:ee:8a:18:56:ee:4d:41:3e: 28:de:83:5f:0a:fc:f0:e4:7d:0e:a8:fd:9b:30:1f: db:3a:1a:3d:75:f9:a4:b4:df:4f:2a:b7:e1:75:0d: d0:0b:3c:6c:85:91:65:b3:1a:df:91:a4:01:73:f9: 47:87:99:d1:16:1e:fa:f7:29:49:5b:62:58:f8:19: 92:a0:78:52:f8:3e:1b:39:4a:89:44:13:76:94:99: 03:ee:7e:e0:6e:17:ac:d1:cf:be:d5:6e:8b:69:1c: c2:c6:4d:9c:ff:d1:eb:9c:d5:77:04:a2:59:fb:9d: f6:66:8e:19:47:12:30:60:07:a4:87:b3:38:30:b0: 0d:99:ce:af:28:60:f4:42:df:21:5e:37:23:ab:9f: b6:2a:1c:13:bc:d1:b5:d2:fe:5b:fd:72:cf:7c:b9: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:22:B2:71:60:69:F6:24:5E:B8:D6:54:C0:93:66:5D:05:57:FF:89 X509v3 Authority Key Identifier: keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:b9:14:9f:14:52:49:30:f2:37:28:d2:c6:55:55:bd:99: 8e:d8:a6:f4:6c:de:09:79:02:c8:3c:1c:65:e4:72:b3:66:ea: cd:bf:0a:02:fa:87:24:c6:24:4f:1b:44:f9:de:36:57:96:3e: cc:65:53:4e:5b:97:1d:a5:c4:73:57:66:46:23:69:a5:c0:45: d2:90:88:b1:d6:87:9e:bf:e5:a0:56:c7:3a:fb:27:d7:d2:3c: bc:e2:44:c5:38:3f:66:c7:50:eb:a7:b8:c4:49:6c:ce:5d:6c: 53:a7:25:c1:7d:aa:18:6c:c8:49:5e:9a:f1:40:2a:1b:71:d2: f7:dc:90:d8:eb:79:e2:87:08:5c:21:07:13:9e:72:51:77:7d: af:34:14:f9:78:b6:d3:49:ce:48:4a:98:a4:d7:99:5d:1c:ea: 17:9f:16:49:4d:89:72:98:6b:a5:d0:34:89:98:c6:98:4f:cf: 5b:93:1f:35:fc:d1:0f:20:d0:d8:fb:fa:24:96:31:dd:24:2f: 3a:59:4d:de:59:93:0f:21:05:be:79:cc:a7:d5:d6:d2:3a:51: fc:a3:3d:3c:0a:16:d5:dd:2a:4d:21:ea:db:b2:f9:85:9c:38: 25:db:d5:03:9f:85:74:55:4f:09:74:d0:f0:3d:ae:28:57:db: 18:94:10:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsN7Lb0W6aOaPO1XnjTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzN2ExMjZkNzg1NGVjZDU2NWFlODI5NzBjNjkzZjMzNTlm ODVmMzcwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EyhhZDIyYjI3MTYwNjlmNjI0NWViOGQ2NTRjMDkzNjY1ZDA1NTdmZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqcH8CYMK4xhQdIYM23h5fUKXCQa 5hHe+/yf0WF97wOwGI/xnhfDXmktLWyrPh/1Z5aSIev9Lfx6UecekE9TKMoG103X opulMoBJvFU3KlS8PYk0eQNjbgA3/UXKoGAa7ooYVu5NQT4o3oNfCvzw5H0OqP2b MB/bOho9dfmktN9PKrfhdQ3QCzxshZFlsxrfkaQBc/lHh5nRFh769ylJW2JY+BmS oHhS+D4bOUqJRBN2lJkD7n7gbhes0c++1W6LaRzCxk2c/9HrnNV3BKJZ+532Zo4Z RxIwYAekh7M4MLANmc6vKGD0Qt8hXjcjq5+2KhwTvNG10v5b/XLPfLkKPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0isnFgafYkXrjWVMCTZl0FV/+JMB8GA1UdIwQY MBaAFKN6Em14VOzVZa6ClwxpPzNZ+F83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDkt Nzg2Y2IxMjk2ZTU4LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDktNzg2Y2IxMjk2ZTU4 LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1W5FJ8U Ukkw8jco0sZVVb2Zjtim9GzeCXkCyDwcZeRys2bqzb8KAvqHJMYkTxtE+d42V5Y+ zGVTTluXHaXEc1dmRiNppcBF0pCIsdaHnr/loFbHOvsn19I8vOJExTg/ZsdQ66e4 xElszl1sU6clwX2qGGzISV6a8UAqG3HS99yQ2Ot54ocIXCEHE55yUXd9rzQU+Xi2 00nOSEqYpNeZXRzqF58WSU2JcphrpdA0iZjGmE/PW5MfNfzRDyDQ2Pv6JJYx3SQv OllN3lmTDyEFvnnMp9XW0jpR/KM9PAoW1d0qTSHq27L5hZw4JdvVA5+FdFVPCXTQ 8D2uKFfbGJQQug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:41:35 2025 by rpki-client