This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json) Hash identifier: HHsbB3mZThxrNxFlWOmxqIQaxtwG3DkSflOSVk3HtcM= Subject key identifier: A4:A8:8D:CC:C6:CB:42:76:4A:0C:3D:A5:F8:46:7D:15:9E:00:9C:4A Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Certificate serial: 019AF23FFDB3EF71205AF3EA1A73C873D954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft Manifest number: 91 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: cErth6LGJ37Tdtl1lcefLoJD4nM.roa (hash: OoCTZM3oJW/h0+9oZEB+kSNNGcZqSaTzGyAN+23CU/M=) 2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: irV65T+kunlJv56o8YVzpbfNLKFq9nocfOPopXDqwVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fd:b3:ef:71:20:5a:f3:ea:1a:73:c8:73:d9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=a4a88dccc6cb42764a0c3da5f8467d159e009c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:9b:0a:4c:d9:c2:22:a2:96:8b:88:ed:b7: 93:b2:cc:17:fa:fc:1a:5a:32:cf:a1:65:5c:db:9d: a3:32:57:26:a6:a3:5a:39:d3:8f:4e:e6:eb:14:92: 6e:09:99:dd:97:c8:c0:2a:68:0a:39:71:fe:7a:17: 78:75:74:00:0f:c1:84:38:09:b1:33:1b:bd:6a:23: 53:c9:8f:43:f5:f4:3d:34:a0:4b:62:24:ed:81:26: 87:b6:97:5e:58:02:70:82:5d:50:79:57:57:c6:bf: 0f:a5:2f:ac:d8:05:96:74:e7:55:a7:1d:1f:58:44: ab:16:9e:41:0c:fb:ae:b2:e3:9f:68:24:44:6f:e8: 76:a7:28:2a:f9:f9:db:d3:76:8c:3a:4e:88:58:ca: b1:87:ad:8e:ca:c9:03:e7:14:a4:d2:1b:97:8a:cb: bd:c9:af:00:73:43:06:2a:b5:2f:88:ff:3d:c4:43: b2:75:19:73:67:20:9c:be:d5:d1:82:8d:10:d7:89: e1:91:a0:79:47:fd:70:32:72:f5:ae:87:71:e5:20: 90:5a:4c:8a:ad:ec:ae:8b:af:37:c7:0f:7d:81:fd: 67:48:2b:61:82:c7:70:9c:d0:01:46:c8:78:c1:6a: 4c:1c:2e:d5:ba:1e:c4:14:1f:b0:a5:50:f1:17:6f: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A8:8D:CC:C6:CB:42:76:4A:0C:3D:A5:F8:46:7D:15:9E:00:9C:4A X509v3 Authority Key Identifier: keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a0:e9:99:f8:80:0d:be:06:52:49:1c:47:f8:30:64:9d:d0: 07:6a:7d:3d:7b:a1:20:29:86:3c:da:06:54:3f:06:20:7e:c6: 6c:a2:e0:5e:c8:e8:aa:db:70:86:f5:7e:ce:78:05:0d:ce:e9: 24:81:1f:81:d1:3d:9a:e3:88:9c:58:e3:3b:7d:0f:c9:b6:e0: 39:20:0a:5f:40:1d:a4:d3:c4:39:fe:6b:b3:2b:e9:f3:eb:ca: ee:09:1f:ad:8d:67:c3:2c:41:b0:6a:ea:99:93:45:ab:4e:7f: be:9b:c9:fd:82:2b:e4:6d:e1:ea:75:65:6a:07:b2:11:20:90: 90:38:07:49:03:e8:64:ff:26:86:80:38:01:7c:dd:0e:e5:6f: 95:71:84:af:b8:a5:89:c1:d8:9e:b1:1a:36:56:e2:dd:a1:7d: 44:87:d3:5d:b5:8c:97:cd:dc:b5:85:0a:40:f1:e6:72:37:0d: 00:a6:f2:b3:9e:8f:72:17:d6:6c:f9:99:e8:c5:ef:59:cb:ff: 64:aa:bc:5a:c2:ac:ec:84:72:2b:25:e0:ef:6a:e6:15:e2:78: 76:59:83:72:01:cd:da:92:14:40:cf:4d:b4:69:f8:50:0e:c2: e1:25:51:e2:23:d7:5a:e1:b3:76:4d:45:9b:24:b6:b2:b6:f0: 29:3e:ce:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/2z73EgWvPqGnPIc9lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw ZmFmOWQwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD EyhhNGE4OGRjY2M2Y2I0Mjc2NGEwYzNkYTVmODQ2N2QxNTllMDA5YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIKbCkzZwiKilouI7beTsswX+vwa WjLPoWVc252jMlcmpqNaOdOPTubrFJJuCZndl8jAKmgKOXH+ehd4dXQAD8GEOAmx Mxu9aiNTyY9D9fQ9NKBLYiTtgSaHtpdeWAJwgl1QeVdXxr8PpS+s2AWWdOdVpx0f WESrFp5BDPuusuOfaCREb+h2pygq+fnb03aMOk6IWMqxh62OyskD5xSk0huXisu9 ya8Ac0MGKrUviP89xEOydRlzZyCcvtXRgo0Q14nhkaB5R/1wMnL1rodx5SCQWkyK reyui683xw99gf1nSCthgsdwnNABRsh4wWpMHC7Vuh7EFB+wpVDxF29c2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSojczGy0J2Sgw9pfhGfRWeAJxKMB8GA1UdIwQY MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6DpmfiA Db4GUkkcR/gwZJ3QB2p9PXuhICmGPNoGVD8GIH7GbKLgXsjoqttwhvV+zngFDc7p JIEfgdE9muOInFjjO30PybbgOSAKX0AdpNPEOf5rsyvp8+vK7gkfrY1nwyxBsGrq mZNFq05/vpvJ/YIr5G3h6nVlageyESCQkDgHSQPoZP8mhoA4AXzdDuVvlXGEr7il icHYnrEaNlbi3aF9RIfTXbWMl83ctYUKQPHmcjcNAKbys56PchfWbPmZ6MXvWcv/ ZKq8WsKs7IRyKyXg72rmFeJ4dlmDcgHN2pIUQM9NtGn4UA7C4SVR4iPXWuGzdk1F myS2srbwKT7OKw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:57 2025 by rpki-client