This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json) Hash identifier: Z9OXx1F7y9l5QI3bCyfdMt40pvhIGagpCv1PzBtmGsc= Subject key identifier: F9:8D:4C:02:AF:94:A3:1B:C6:DB:C6:B3:46:AE:47:63:A0:38:BC:06 Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Certificate serial: 019AF12D3257E34DDB9DD9D36A2253A11DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft Manifest number: 0E06 Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=) 2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: 5NJN7daODOG9ZWp9pd74jgxXq9iAi/4phE3794LVrow=) 3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=) 4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:32:57:e3:4d:db:9d:d9:d3:6a:22:53:a1:1d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=f98d4c02af94a31bc6dbc6b346ae4763a038bc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:17:75:76:08:4f:ff:8b:75:01:de:7b:d9: b3:76:b7:5d:5c:b5:47:63:4a:f3:f5:7c:e4:b6:e8: 56:45:af:29:fa:bc:58:6e:c4:0c:01:24:9d:0e:5e: 7a:49:08:dd:fb:b4:6d:dc:a5:cf:b1:3f:24:9a:41: fe:89:1f:19:f5:e9:82:c2:bd:bc:9e:09:19:f2:69: 73:68:48:c2:29:71:13:dc:b1:bc:21:b4:5d:8f:bf: 12:7a:72:cb:d2:3e:14:4e:e7:f5:60:9d:60:36:d7: a9:ac:85:1e:44:d3:c5:e5:72:a1:7b:c8:db:ea:1d: cc:b5:8c:51:fb:a3:93:a9:97:18:81:a0:34:5f:62: 4a:70:87:50:8e:1c:dc:70:75:1f:fd:9d:34:f9:11: b7:d1:da:ee:5f:eb:40:d8:54:4a:15:02:11:07:35: 77:24:db:86:52:78:cc:11:66:4e:80:ed:b2:44:63: cb:82:4c:cf:f8:6e:cf:c0:e4:71:9b:10:92:88:95: 1c:1d:77:c8:bf:ac:3d:3d:76:5f:8a:8e:8f:30:96: 49:d3:01:5d:4a:8c:58:ec:e1:4d:0d:d5:9d:57:c0: cc:58:ca:c5:7f:4c:d8:10:21:e6:03:ad:9b:4f:93: 25:04:88:91:5b:a9:fa:a8:5e:62:2e:ab:e0:61:d0: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:4C:02:AF:94:A3:1B:C6:DB:C6:B3:46:AE:47:63:A0:38:BC:06 X509v3 Authority Key Identifier: keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f7:64:7d:31:4f:9d:3d:81:1d:4e:84:9d:d9:55:cc:14:fc: 24:8e:8d:3c:7e:10:86:da:75:b6:0a:0b:0c:da:92:eb:58:dd: 3e:9e:02:d6:44:ec:5f:93:33:0e:1b:48:8d:3a:23:bf:7f:95: b6:2b:f3:42:d4:db:d0:0e:ad:1f:e9:51:4c:4d:f9:92:50:b0: a2:ea:86:e6:ee:6f:7d:59:fb:c4:2b:f6:0c:d4:5e:3d:62:e3: 15:bd:fc:10:09:87:b9:72:be:e0:4f:7b:20:a0:75:72:da:a4: 5e:93:20:8b:a1:6f:93:34:50:37:97:58:8c:7c:51:90:b2:d8: e2:bc:85:a9:27:0b:4b:4e:3f:3a:51:6c:98:78:0c:e3:cc:45: 43:b1:aa:9b:3d:17:1f:a4:15:ba:76:1b:b2:82:48:f4:ec:e1: 99:96:05:a4:48:cf:b2:92:4f:70:37:54:c3:59:e8:6c:ee:37: d3:bb:d5:78:82:c8:88:ea:ac:3b:4e:5d:48:47:b5:7b:af:02: c9:52:3c:ed:0a:a3:9c:a8:d1:67:de:c0:7a:58:7d:ac:cf:e9: 47:79:84:f9:69:e7:ce:1d:05:9d:cc:6c:cf:a3:74:45:94:ff: 10:06:5b:ee:3f:ba:00:1b:80:51:7e:99:b9:22:42:c7:d1:c9: 12:99:cf:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTJX403bndnTaiJToR3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTQ0Y2EwZTJiZTE4ZTlmZDc0ZTI4MTMyNGEzMGIwZWEy ZDFkNTIwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EyhmOThkNGMwMmFmOTRhMzFiYzZkYmM2YjM0NmFlNDc2M2EwMzhiYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK0XdXYIT/+LdQHee9mzdrddXLVH Y0rz9XzktuhWRa8p+rxYbsQMASSdDl56SQjd+7Rt3KXPsT8kmkH+iR8Z9emCwr28 ngkZ8mlzaEjCKXET3LG8IbRdj78SenLL0j4UTuf1YJ1gNteprIUeRNPF5XKhe8jb 6h3MtYxR+6OTqZcYgaA0X2JKcIdQjhzccHUf/Z00+RG30druX+tA2FRKFQIRBzV3 JNuGUnjMEWZOgO2yRGPLgkzP+G7PwORxmxCSiJUcHXfIv6w9PXZfio6PMJZJ0wFd SoxY7OFNDdWdV8DMWMrFf0zYECHmA62bT5MlBIiRW6n6qF5iLqvgYdDvhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmNTAKvlKMbxtvGs0auR2OgOLwGMB8GA1UdIwQY MBaAFDtUTKDivhjp/XTigTJKMLDqLR1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEt ODc2YTlkNzYyOWY2LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zMDMwYmItNDJjMi00ZTNjLTg1OWEtODc2YTlkNzYyOWY2 LzEvTzFSTW9PSy1HT245ZE9LQk1rb3dzT290SFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfdkfTFP nT2BHU6EndlVzBT8JI6NPH4Qhtp1tgoLDNqS61jdPp4C1kTsX5MzDhtIjTojv3+V tivzQtTb0A6tH+lRTE35klCwouqG5u5vfVn7xCv2DNRePWLjFb38EAmHuXK+4E97 IKB1ctqkXpMgi6FvkzRQN5dYjHxRkLLY4ryFqScLS04/OlFsmHgM48xFQ7Gqmz0X H6QVunYbsoJI9OzhmZYFpEjPspJPcDdUw1nobO4307vVeILIiOqsO05dSEe1e68C yVI87QqjnKjRZ97Aelh9rM/pR3mE+Wnnzh0Fncxsz6N0RZT/EAZb7j+6ABuAUX6Z uSJCx9HJEpnPSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:57 2025 by rpki-client