This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json) Hash identifier: UMYtuk2oiShPBIGOGtCZzOzmIc6o9T9vTmesFG8WvPQ= Subject key identifier: DB:59:65:0C:D4:DE:44:51:09:5E:CC:39:43:26:9C:11:C5:9F:64:83 Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69 Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469 Certificate serial: 019AF3C00FD87BD8C09A836CE507542F8C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=) 2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: Lt5JZUdvbZuP/HcsA5zFOzaOUg2PYXogluNvpX/9548=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0f:d8:7b:d8:c0:9a:83:6c:e5:07:54:2f:8c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469 Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=db59650cd4de4451095ecc3943269c11c59f6483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:12:b5:a4:ef:f0:b7:c4:e9:cf:94:01:4b:88: fb:49:93:1a:6f:c9:7b:ff:61:94:aa:32:5a:18:99: 2b:18:d9:21:bc:de:23:44:21:ff:34:5f:5b:23:9e: ee:f2:61:2b:9c:08:0f:e0:ef:53:43:93:c3:9a:ba: a2:38:58:38:32:d0:df:9d:53:5d:12:ea:1a:2a:dd: 7f:c0:11:7f:1a:66:9f:ba:3a:9b:fe:3a:01:84:75: 54:6e:44:a7:80:3e:3b:c6:35:94:84:88:28:e5:85: e2:f6:77:6c:1a:0b:64:5f:60:e0:0d:de:59:70:33: ba:34:73:32:75:cf:d4:ae:76:51:b1:a1:46:74:f3: e1:bf:f0:ea:b4:9c:22:b2:11:b5:84:66:b6:30:e4: fa:36:f7:a8:08:5b:38:5b:7e:76:9c:2f:6f:4e:2e: fb:a9:ba:68:72:d3:d3:03:b9:79:b2:3d:b7:af:e1: 2f:cc:8e:61:88:c6:c5:4a:8c:75:d4:1f:3b:5f:1c: 80:d4:11:7a:73:d3:0a:c5:de:21:66:b9:67:5b:dc: 12:c5:5d:2c:ae:7c:04:c1:9c:ba:77:c6:7b:7a:c4: 73:fc:93:62:c6:43:95:8d:34:36:5e:4f:d9:d4:e0: 84:9f:0a:e5:98:cb:80:6d:7e:a9:0f:b5:55:d4:84: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:65:0C:D4:DE:44:51:09:5E:CC:39:43:26:9C:11:C5:9F:64:83 X509v3 Authority Key Identifier: keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6d:ba:9e:d4:dc:bf:fa:99:7b:fd:63:97:62:be:91:fb:19: 00:bf:ab:7f:01:1b:d0:33:8d:33:10:be:dd:71:c5:dc:ce:6f: 9e:dd:23:85:c4:ae:0d:67:95:56:d1:7d:9e:fe:6b:27:11:84: 11:3d:3d:b0:78:e1:0a:be:b0:c6:35:0b:4a:4b:64:91:7e:54: bb:b9:ff:58:31:ba:d4:52:0c:de:d6:3a:9e:3a:5b:57:0b:77: 70:9e:2e:4f:e0:72:73:97:be:3f:53:02:9f:46:01:c9:dd:a7: 82:3f:9f:3d:13:91:08:76:d5:7d:b2:be:b1:af:30:1d:36:e3: 92:0d:ce:05:1f:61:cf:a2:bc:0b:e5:43:80:9b:06:07:d2:52: 36:a2:f4:da:f9:34:4e:6d:7e:a9:a1:33:bc:19:08:94:49:18: 00:c7:29:f0:d9:b9:92:b4:98:84:0a:af:8d:75:bd:ec:0f:33: 78:dd:74:b2:03:61:b6:9b:03:20:fd:4c:28:82:8d:44:fc:94: 34:b1:2c:b9:af:84:ee:11:aa:1f:67:5f:db:89:39:4b:e2:83: 2b:21:f4:64:41:07:1e:d7:26:2d:99:02:29:a5:55:b6:25:63: 42:30:f3:bc:c2:de:2e:14:61:9d:67:e9:09:cd:e3:f9:8f:5b: 4c:e6:c2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwA/Ye9jAmoNs5QdUL4yDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmNjZDRhMDA0MjJjODY1ZjUwOTNiODViYjg2OGMyYmIz MGM0NjkwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD EyhkYjU5NjUwY2Q0ZGU0NDUxMDk1ZWNjMzk0MzI2OWMxMWM1OWY2NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xK1pO/wt8Tpz5QBS4j7SZMab8l7 /2GUqjJaGJkrGNkhvN4jRCH/NF9bI57u8mErnAgP4O9TQ5PDmrqiOFg4MtDfnVNd EuoaKt1/wBF/Gmafujqb/joBhHVUbkSngD47xjWUhIgo5YXi9ndsGgtkX2DgDd5Z cDO6NHMydc/UrnZRsaFGdPPhv/DqtJwishG1hGa2MOT6NveoCFs4W352nC9vTi77 qbpoctPTA7l5sj23r+EvzI5hiMbFSox11B87XxyA1BF6c9MKxd4hZrlnW9wSxV0s rnwEwZy6d8Z7esRz/JNixkOVjTQ2Xk/Z1OCEnwrlmMuAbX6pD7VV1ISqwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtZZQzU3kRRCV7MOUMmnBHFn2SDMB8GA1UdIwQY MBaAFDv8zUoAQiyGX1CTuFu4aMK7MMRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgt NjNhZTBiZmMxNjlmLzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgtNjNhZTBiZmMxNjlm LzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy226ntTc v/qZe/1jl2K+kfsZAL+rfwEb0DONMxC+3XHF3M5vnt0jhcSuDWeVVtF9nv5rJxGE ET09sHjhCr6wxjULSktkkX5Uu7n/WDG61FIM3tY6njpbVwt3cJ4uT+Byc5e+P1MC n0YByd2ngj+fPRORCHbVfbK+sa8wHTbjkg3OBR9hz6K8C+VDgJsGB9JSNqL02vk0 Tm1+qaEzvBkIlEkYAMcp8Nm5krSYhAqvjXW97A8zeN10sgNhtpsDIP1MKIKNRPyU NLEsua+E7hGqH2df24k5S+KDKyH0ZEEHHtcmLZkCKaVVtiVjQjDzvMLeLhRhnWfp Cc3j+Y9bTObCXw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:56 2025 by rpki-client