This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json) Hash identifier: t4Kdc5RK4FrjZhzD+nml0lT/TbfjlvRmrO4eYEQp69A= Subject key identifier: 34:0C:B1:43:6F:9A:FA:E8:21:E1:64:FE:96:B0:FD:E2:79:BE:89:6A Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Certificate serial: 019AF3C0488FC032E20F683CF11812157992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:56 +0000 Manifest this update: Sat 06 Dec 2025 13:00:56 +0000 Manifest next update: Sun 07 Dec 2025 13:00:56 +0000 Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: TzbPJncmx2S95MUgN9YjWmNhuPbsrwpERti64iGwQyc=) 2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:48:8f:c0:32:e2:0f:68:3c:f1:18:12:15:79:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Validity Not Before: Dec 6 13:00:56 2025 GMT Not After : Dec 7 13:00:56 2025 GMT Subject: CN=340cb1436f9afae821e164fe96b0fde279be896a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:07:21:a7:a1:dd:d6:14:76:f2:bd:08:7b:46: 20:41:2d:bc:65:34:07:84:8b:47:b0:72:29:fb:74: 39:14:d2:ee:75:80:5f:ce:19:c5:39:75:a8:be:40: 34:78:c6:8a:e9:6e:34:f1:e7:de:ed:b1:46:6b:5f: a6:1a:61:eb:d7:ab:9c:52:ff:44:16:a7:f6:de:76: 0a:e5:4c:bb:41:63:75:98:e2:66:a8:85:f4:3f:29: a9:92:a1:f7:22:36:0c:75:6f:6b:be:8e:6c:0d:f3: 0e:cb:35:f6:03:fe:88:9d:9b:fb:91:c2:de:0d:51: cc:73:10:4e:ca:3a:a1:07:f7:cf:f6:5d:1f:ab:68: 45:a7:e7:b8:2e:71:be:b5:08:67:b9:bf:ab:bc:9c: f9:12:51:ef:c6:bf:3a:28:d0:13:e9:c1:5d:07:01: 46:e9:4a:e5:dc:32:26:53:75:c2:5a:70:8f:48:25: 0e:e8:8e:5e:82:e8:c7:3f:c3:84:ba:aa:8b:85:82: d2:7c:90:89:03:d3:3f:86:04:df:6a:36:10:40:fc: c5:bc:67:26:bf:a4:6b:ef:e9:05:bf:48:76:7f:3d: 39:a8:ed:64:d7:80:7b:10:a6:0a:5c:87:c2:89:73: 04:5b:30:3b:3f:6e:3a:4b:e1:1f:77:4b:c4:f7:2b: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0C:B1:43:6F:9A:FA:E8:21:E1:64:FE:96:B0:FD:E2:79:BE:89:6A X509v3 Authority Key Identifier: keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:aa:f9:29:42:f2:65:df:d6:f5:42:bc:e0:49:8d:a2:cc:95: 41:4d:df:26:a3:e4:02:ef:b0:d8:5e:62:d0:8b:1a:3c:0f:62: d7:bc:fa:e7:c9:02:e7:ea:f1:d3:2a:51:fd:e4:bb:31:db:e2: 70:45:0d:26:9b:fd:0b:c3:77:02:64:33:e4:b4:32:25:e6:ae: f8:e4:6e:fa:fc:e1:6d:1f:79:b9:72:6c:a3:bb:aa:62:31:23: 12:d5:79:48:b3:ea:07:ec:cb:d2:cb:c0:ff:dc:07:9b:26:44: 3d:ed:d0:28:d9:69:1b:d1:a2:49:13:39:ce:11:bd:38:36:06: 07:a5:7c:ec:de:4f:34:66:91:b1:00:8f:a9:57:7a:17:39:9e: 87:79:03:27:8d:d2:d4:4b:10:b3:9c:19:92:a7:8e:b1:cd:5a: 01:ab:5a:79:21:d1:7e:f3:3a:e8:86:eb:83:f3:15:ca:e4:95: 99:51:ec:80:eb:6f:7f:5e:f2:19:be:91:3e:32:75:92:f1:eb: c5:f3:fc:93:9d:71:79:a5:2e:9c:5a:1a:ec:93:ee:40:70:25: b4:34:32:d6:cf:2c:bf:e6:a4:b6:38:f1:7c:01:cd:b5:55:f5: 5b:a4:db:e1:3f:b6:aa:09:4d:2d:a1:85:f3:17:95:99:6f:9b: c1:2c:69:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEiPwDLiD2g88RgSFXmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl MDZmYzEwHhcNMjUxMjA2MTMwMDU2WhcNMjUxMjA3MTMwMDU2WjAzMTEwLwYDVQQD EygzNDBjYjE0MzZmOWFmYWU4MjFlMTY0ZmU5NmIwZmRlMjc5YmU4OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wchp6Hd1hR28r0Ie0YgQS28ZTQH hItHsHIp+3Q5FNLudYBfzhnFOXWovkA0eMaK6W408efe7bFGa1+mGmHr16ucUv9E Fqf23nYK5Uy7QWN1mOJmqIX0PympkqH3IjYMdW9rvo5sDfMOyzX2A/6InZv7kcLe DVHMcxBOyjqhB/fP9l0fq2hFp+e4LnG+tQhnub+rvJz5ElHvxr86KNAT6cFdBwFG 6Url3DImU3XCWnCPSCUO6I5egujHP8OEuqqLhYLSfJCJA9M/hgTfajYQQPzFvGcm v6Rr7+kFv0h2fz05qO1k14B7EKYKXIfCiXMEWzA7P246S+Efd0vE9yuWVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQMsUNvmvroIeFk/paw/eJ5volqMB8GA1UdIwQY MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqr5KULy Zd/W9UK84EmNosyVQU3fJqPkAu+w2F5i0IsaPA9i17z658kC5+rx0ypR/eS7Mdvi cEUNJpv9C8N3AmQz5LQyJeau+ORu+vzhbR95uXJso7uqYjEjEtV5SLPqB+zL0svA /9wHmyZEPe3QKNlpG9GiSRM5zhG9ODYGB6V87N5PNGaRsQCPqVd6Fzmeh3kDJ43S 1EsQs5wZkqeOsc1aAataeSHRfvM66Ibrg/MVyuSVmVHsgOtvf17yGb6RPjJ1kvHr xfP8k51xeaUunFoa7JPuQHAltDQy1s8sv+aktjjxfAHNtVX1W6Tb4T+2qglNLaGF 8xeVmW+bwSxpwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:50 2025 by rpki-client