This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: on3rO4QBOdGH/FgRbyXn8JDX3vWDILM2UmRlcPZYzKY= Subject key identifier: CB:D9:28:59:FC:6D:8C:D9:88:EC:FF:54:1C:DB:2C:71:49:2E:74:B8 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B2D794875D0BB74E93946B12BE6819CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 18:01:21 +0000 Manifest this update: Wed 17 Dec 2025 18:01:21 +0000 Manifest next update: Thu 18 Dec 2025 18:01:21 +0000 Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=) 2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: SN19yy4JScYR9R1U4FMK5T+GW1VT7cwhbGvIAFDMBJs=) 3: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=) 4: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=) 5: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=) 6: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=) 7: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=) 8: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=) 9: xEqqXsYbNZoaeb1j-5HleNNIZTs.roa (hash: DriMeptRhAZWNYYwFItNxlYBiBVqZaoh9EMF2d4ArFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:48:75:d0:bb:74:e9:39:46:b1:2b:e6:81:9c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Dec 17 18:01:21 2025 GMT Not After : Dec 18 18:01:21 2025 GMT Subject: CN=cbd92859fc6d8cd988ecff541cdb2c71492e74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:a8:de:23:8d:b7:da:ab:09:a9:eb:69:8c: a8:c7:a8:44:00:aa:95:01:51:f1:d3:27:1f:cd:c8: fb:b0:6b:77:06:66:62:84:cf:78:c0:ad:22:93:eb: 70:e7:27:af:7d:68:e2:4b:3b:34:3c:40:01:ca:07: ed:c8:7a:1c:b3:c3:7c:42:a6:24:9f:df:25:0a:57: 78:e6:58:70:22:a0:18:ab:13:d6:ab:d1:8b:7b:55: eb:14:33:7a:e8:71:c3:92:4b:f3:05:f9:cc:98:04: e8:ec:f6:32:ed:f5:84:d9:f5:01:8c:b1:41:6c:f9: e3:bb:36:bd:6d:b9:47:b3:d1:7c:fc:ef:78:70:b2: ef:14:ba:9a:16:82:f1:30:1c:88:6a:10:5b:ca:44: 9e:63:92:20:33:f2:b7:a2:bd:f6:e2:30:35:12:a2: f1:4c:b1:05:59:6e:8c:97:11:ba:7e:5c:21:25:6a: 05:a7:d3:a6:9b:fb:d2:ea:51:a7:30:a9:66:4f:5f: 12:c4:78:30:e2:db:7d:85:00:53:5a:01:f9:2a:b9: 57:78:ab:19:c2:9b:db:85:8e:98:5c:59:cb:41:9b: f0:35:8c:c3:73:a7:0f:2d:b4:12:cd:9d:1c:f7:1a: e0:67:e2:8e:4d:87:71:27:34:9b:9d:c5:96:16:5b: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:28:59:FC:6D:8C:D9:88:EC:FF:54:1C:DB:2C:71:49:2E:74:B8 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c4:53:4f:61:75:0c:df:45:12:92:1e:85:75:be:35:36:d4: b1:ab:36:c2:ec:00:0c:ef:af:74:dc:11:8a:30:90:c2:32:61: 90:d1:c8:61:94:d2:b0:0d:5b:df:94:41:af:9d:57:96:1a:12: d2:03:9b:6c:e5:da:2b:31:7f:09:f4:82:ac:55:c3:f8:18:ae: 8e:d5:c7:b5:29:33:09:b8:3a:85:ad:a2:18:f0:b7:cc:67:8b: 23:03:2c:56:21:20:b5:cc:94:87:99:e5:a5:71:8d:81:dd:45: ce:87:fc:22:66:8b:3a:af:81:18:60:4b:4e:43:b7:16:d2:51: 3d:98:34:90:0c:39:45:55:de:c4:83:8e:32:4d:51:f2:ed:29: 7b:fc:8e:53:af:eb:89:9b:e9:c9:0c:08:73:ff:eb:76:9a:32: 75:7d:a3:ef:a0:43:b3:77:90:cd:37:7b:84:23:46:1b:6b:2f: 17:23:25:5b:e1:55:4d:f7:43:8c:18:b5:ff:16:51:85:d2:b6: 3b:8b:c2:cc:69:0e:5d:6c:2d:2a:5e:78:ac:96:eb:56:c4:cb: c6:5d:95:31:5a:0b:b1:6f:b1:3c:69:5d:b1:63:60:08:90:df: bc:98:26:b0:08:6b:88:a1:4c:27:e7:c6:f0:94:c8:23:ea:2b: ff:e0:5a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteUh10Lt06TlGsSvmgZzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjUxMjE3MTgwMTIxWhcNMjUxMjE4MTgwMTIxWjAzMTEwLwYDVQQD EyhjYmQ5Mjg1OWZjNmQ4Y2Q5ODhlY2ZmNTQxY2RiMmM3MTQ5MmU3NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL+o3iONt9qrCanraYyox6hEAKqV AVHx0ycfzcj7sGt3BmZihM94wK0ik+tw5yevfWjiSzs0PEABygftyHocs8N8QqYk n98lCld45lhwIqAYqxPWq9GLe1XrFDN66HHDkkvzBfnMmATo7PYy7fWE2fUBjLFB bPnjuza9bblHs9F8/O94cLLvFLqaFoLxMByIahBbykSeY5IgM/K3or324jA1EqLx TLEFWW6MlxG6flwhJWoFp9Omm/vS6lGnMKlmT18SxHgw4tt9hQBTWgH5KrlXeKsZ wpvbhY6YXFnLQZvwNYzDc6cPLbQSzZ0c9xrgZ+KOTYdxJzSbncWWFltrgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvZKFn8bYzZiOz/VBzbLHFJLnS4MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsRTT2F1 DN9FEpIehXW+NTbUsas2wuwADO+vdNwRijCQwjJhkNHIYZTSsA1b35RBr51XlhoS 0gObbOXaKzF/CfSCrFXD+BiujtXHtSkzCbg6ha2iGPC3zGeLIwMsViEgtcyUh5nl pXGNgd1Fzof8ImaLOq+BGGBLTkO3FtJRPZg0kAw5RVXexIOOMk1R8u0pe/yOU6/r iZvpyQwIc//rdpoydX2j76BDs3eQzTd7hCNGG2svFyMlW+FVTfdDjBi1/xZRhdK2 O4vCzGkOXWwtKl54rJbrVsTLxl2VMVoLsW+xPGldsWNgCJDfvJgmsAhriKFMJ+fG 8JTII+or/+BaMQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:59 2025 by rpki-client