This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: kQGDI08ugxlDoUz5DEuRJzZ1LaNt/K4QbluFTO0nPW8= Subject key identifier: 09:B7:74:21:76:8D:E1:F3:3E:5E:F7:74:34:28:1A:76:1B:2B:BE:04 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019AF1D1E2A058B2164671970F973ADB4339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14AA Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: 1qdKZuTETvAq9ISKtvEGQpIJs/qB1XMgdt9KS1KSglM=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e2:a0:58:b2:16:46:71:97:0f:97:3a:db:43:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=09b77421768de1f33e5ef77434281a761b2bbe04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:1f:35:b1:1c:3a:e9:6b:98:00:52:a7:9f: ce:da:19:cc:42:0b:46:38:43:cb:31:9c:3e:d9:25: 87:d9:06:f1:ef:82:5c:30:b1:22:6e:80:2b:d9:77: 5e:26:86:4a:7a:57:c9:06:33:45:02:7a:e5:50:a3: 6e:bd:5a:4b:e7:04:84:5a:77:0b:a5:55:69:62:74: 12:dd:ce:b0:46:d3:96:e7:6f:64:74:f3:d0:2b:25: e9:37:fd:28:fd:e7:13:2b:da:67:d8:03:e3:9c:ce: 66:ef:16:cc:5b:b9:40:12:d9:03:e5:3e:a1:cb:7c: 03:d2:a1:3d:70:7b:6f:c6:46:7e:20:ec:c5:30:7b: f3:d9:08:cd:43:63:2e:a9:2b:35:2a:e1:03:72:38: 48:32:e6:b3:f3:5b:57:30:c2:0a:81:5f:6c:77:8e: c8:a3:46:89:a7:0f:d9:96:39:af:1c:a5:2c:89:22: f1:84:d6:08:2b:65:d1:0b:21:52:96:fc:01:0a:c3: e1:a9:24:05:0e:95:ff:4f:36:2f:40:fd:2f:cc:ec: 5e:8b:24:da:78:76:71:b3:50:ae:1b:c9:49:39:00: 45:47:0e:99:ad:e0:81:f6:90:31:eb:a5:68:0c:a4: dd:95:a7:6d:3c:cc:9c:f9:ef:2f:d7:52:0e:8f:6a: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:74:21:76:8D:E1:F3:3E:5E:F7:74:34:28:1A:76:1B:2B:BE:04 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9b:12:a5:21:70:4e:be:1f:66:2d:bf:a2:59:9f:56:20:56: 60:9d:af:90:3a:f7:b2:a2:fe:88:fd:27:f0:c6:39:72:7e:ae: 9e:1a:44:12:e6:e0:b0:02:73:5a:44:5a:d8:86:cc:1b:55:ff: f1:49:a6:0d:ff:46:e5:8c:04:d5:15:dd:b0:93:86:bf:19:39: 01:3e:12:ca:b6:fb:6a:2c:f5:82:e2:05:94:ad:b6:1a:ec:89: 56:68:f5:cb:02:44:bb:6e:31:a5:7a:46:14:71:5a:57:99:17: ae:b8:64:d3:cc:4e:8b:01:70:90:87:29:af:bc:83:19:75:fa: b1:7b:c6:0c:a9:98:7c:9c:c7:82:04:4b:1c:67:88:98:38:1a: 53:10:9f:e3:4c:45:d9:f1:19:aa:92:ba:f6:a6:bf:12:28:82: 24:fc:b9:a3:de:a7:e2:e1:68:ac:42:34:bc:83:f8:01:82:5a: 5e:bf:c0:19:e2:e5:73:f0:1c:46:42:54:2e:7b:a8:91:81:c3: 14:0d:e9:aa:a5:a8:6a:10:0b:44:bd:62:53:83:69:f0:8f:76: 94:81:a7:f6:9a:a3:dc:29:06:7a:73:37:3a:20:10:3b:22:c3: 20:5b:01:e5:a9:3e:0f:8e:34:25:f9:27:b4:b9:bb:8c:a6:e3: 68:6c:de:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eKgWLIWRnGXD5c620M5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EygwOWI3NzQyMTc2OGRlMWYzM2U1ZWY3NzQzNDI4MWE3NjFiMmJiZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSAfNbEcOulrmABSp5/O2hnMQgtG OEPLMZw+2SWH2Qbx74JcMLEiboAr2XdeJoZKelfJBjNFAnrlUKNuvVpL5wSEWncL pVVpYnQS3c6wRtOW529kdPPQKyXpN/0o/ecTK9pn2APjnM5m7xbMW7lAEtkD5T6h y3wD0qE9cHtvxkZ+IOzFMHvz2QjNQ2MuqSs1KuEDcjhIMuaz81tXMMIKgV9sd47I o0aJpw/ZljmvHKUsiSLxhNYIK2XRCyFSlvwBCsPhqSQFDpX/TzYvQP0vzOxeiyTa eHZxs1CuG8lJOQBFRw6ZreCB9pAx66VoDKTdladtPMyc+e8v11IOj2rn1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm3dCF2jeHzPl73dDQoGnYbK74EMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpsSpSFw Tr4fZi2/olmfViBWYJ2vkDr3sqL+iP0n8MY5cn6unhpEEubgsAJzWkRa2IbMG1X/ 8UmmDf9G5YwE1RXdsJOGvxk5AT4Syrb7aiz1guIFlK22GuyJVmj1ywJEu24xpXpG FHFaV5kXrrhk08xOiwFwkIcpr7yDGXX6sXvGDKmYfJzHggRLHGeImDgaUxCf40xF 2fEZqpK69qa/EiiCJPy5o96n4uForEI0vIP4AYJaXr/AGeLlc/AcRkJULnuokYHD FA3pqqWoahALRL1iU4Np8I92lIGn9pqj3CkGenM3OiAQOyLDIFsB5ak+D440Jfkn tLm7jKbjaGze5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:37 2025 by rpki-client