This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json) Hash identifier: u8LsvDcz6Q4POzGQX/H6/kOZRhWcEcCBbOhqd/dJTCU= Subject key identifier: F9:DA:79:DE:B4:0D:E9:BF:0C:45:E3:01:B9:F3:30:B4:E3:81:4E:92 Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Certificate serial: 019B2EF9363AADEEF1A0A782F1D8B74D1E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft Manifest number: 0E26 Signing time: Thu 18 Dec 2025 01:00:42 +0000 Manifest this update: Thu 18 Dec 2025 01:00:42 +0000 Manifest next update: Fri 19 Dec 2025 01:00:42 +0000 Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=) 2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: ZyenWrZiU/LwsA7ZDCgGAnJznoUY+DJ53+3BUvxzoZc=) 3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=) 4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:36:3a:ad:ee:f1:a0:a7:82:f1:d8:b7:4d:1e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Validity Not Before: Dec 18 01:00:42 2025 GMT Not After : Dec 19 01:00:42 2025 GMT Subject: CN=f9da79deb40de9bf0c45e301b9f330b4e3814e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:b5:d1:0c:2f:29:9b:f3:68:40:20:06:7e: 99:09:d0:28:60:5b:bb:eb:f8:ab:eb:aa:38:8c:fd: 7a:0e:9e:ae:65:be:a0:d3:1b:65:d9:f4:92:c9:3c: 18:c9:7d:bc:88:df:fc:c8:9c:af:a8:56:0a:b7:70: 86:18:cd:46:71:72:51:e0:d2:ce:bd:19:a2:af:ab: a8:e9:34:7d:5d:30:52:af:d2:82:e9:cf:e4:a8:f5: 77:83:1c:f8:f3:e8:71:01:f4:22:7c:dc:77:d2:02: 24:e7:9f:c2:67:86:bf:26:e9:26:4d:c5:36:67:45: 9c:25:d9:67:1c:09:2b:09:c9:6f:4a:91:fb:ff:a6: bb:b2:46:c3:a5:71:8a:cf:b3:97:96:67:cd:62:c2: c5:93:5f:12:c4:d7:5b:75:11:b2:6e:b3:bf:06:e8: d8:c5:f2:52:73:b3:2c:e6:9a:65:71:db:53:3e:55: ce:1a:dd:9a:9c:13:35:2a:39:dd:7a:46:29:05:5a: 3f:5d:5c:9d:e8:0d:fd:75:77:7b:d3:6f:8e:e3:3a: 4f:fd:7d:ff:5f:49:16:a5:e7:62:be:c6:dd:30:0b: 2d:6c:5b:71:9e:51:9b:95:0e:c7:b7:a9:41:0c:6e: 07:fa:ff:93:3f:78:d6:cf:10:d5:f4:e3:ae:fa:f0: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DA:79:DE:B4:0D:E9:BF:0C:45:E3:01:B9:F3:30:B4:E3:81:4E:92 X509v3 Authority Key Identifier: keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f8:9c:79:de:27:59:49:3c:12:f1:09:0a:c3:07:d4:b4:c3: a0:c4:eb:9e:7e:1f:6e:79:dd:de:15:35:bb:08:fd:cd:a4:2f: 5f:59:96:df:8a:5f:04:ab:23:f0:83:dd:32:5f:f1:40:1f:ac: df:2e:81:61:ef:9d:1b:48:fe:b7:4a:21:b3:8f:59:d1:50:df: 6b:cd:2b:64:45:3f:8c:3b:c4:b3:3e:01:b0:49:2d:bf:db:5f: f5:e5:39:23:37:42:c2:89:0d:69:2f:5f:5f:16:ee:ca:a9:5f: ec:da:16:31:bc:c3:59:e3:c6:80:41:65:ed:f1:19:ae:e8:5f: a9:dd:a6:dc:f8:d7:b6:b5:ac:a7:85:60:67:63:88:dd:3c:25: 96:07:12:28:e2:0f:0c:07:f3:df:0a:53:cd:89:5e:ae:83:27: a7:b2:c4:85:d2:e8:e2:00:7e:ed:de:81:92:78:17:93:3a:cb: 17:26:8b:27:ef:5b:1f:9d:cd:82:ec:5c:99:cf:89:22:5d:05: 2d:a9:91:ba:40:b5:73:0d:7b:08:67:66:d4:dc:7b:1b:4f:83: 69:1a:03:41:61:bb:ec:8e:5e:77:0f:5d:6f:4e:d2:51:7b:52: 4b:17:a9:a8:af:36:5f:97:8f:8b:0c:79:bb:d7:3b:d3:91:18: 29:1d:6b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+TY6re7xoKeC8di3TR6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy ZDFkNTIwHhcNMjUxMjE4MDEwMDQyWhcNMjUxMjE5MDEwMDQyWjAzMTEwLwYDVQQD EyhmOWRhNzlkZWI0MGRlOWJmMGM0NWUzMDFiOWYzMzBiNGUzODE0ZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU210QwvKZvzaEAgBn6ZCdAoYFu7 6/ir66o4jP16Dp6uZb6g0xtl2fSSyTwYyX28iN/8yJyvqFYKt3CGGM1GcXJR4NLO vRmir6uo6TR9XTBSr9KC6c/kqPV3gxz48+hxAfQifNx30gIk55/CZ4a/JukmTcU2 Z0WcJdlnHAkrCclvSpH7/6a7skbDpXGKz7OXlmfNYsLFk18SxNdbdRGybrO/BujY xfJSc7Ms5pplcdtTPlXOGt2anBM1KjndekYpBVo/XVyd6A39dXd702+O4zpP/X3/ X0kWpedivsbdMAstbFtxnlGblQ7Ht6lBDG4H+v+TP3jWzxDV9OOu+vAHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnaed60Dem/DEXjAbnzMLTjgU6SMB8GA1UdIwQY MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt ODc2YTlkNzYyOWY2LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2 LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPiced4n WUk8EvEJCsMH1LTDoMTrnn4fbnnd3hU1uwj9zaQvX1mW34pfBKsj8IPdMl/xQB+s 3y6BYe+dG0j+t0ohs49Z0VDfa80rZEU/jDvEsz4BsEktv9tf9eU5IzdCwokNaS9f Xxbuyqlf7NoWMbzDWePGgEFl7fEZruhfqd2m3PjXtrWsp4VgZ2OI3TwllgcSKOIP DAfz3wpTzYleroMnp7LEhdLo4gB+7d6BkngXkzrLFyaLJ+9bH53Nguxcmc+JIl0F LamRukC1cw17CGdm1Nx7G0+DaRoDQWG77I5edw9db07SUXtSSxepqK82X5ePiwx5 u9c705EYKR1rpw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:02 2025 by rpki-client