This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: yhNr/OwZiZdse56pjXKyblfWo5IepxFFiwHY5OdyOpI= Subject key identifier: 88:52:40:D1:2F:D5:E2:B5:57:81:9C:7D:A4:6B:4F:1B:ED:30:71:AE Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B337AE33A3694C1200E7DACBA377D7517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14CC Signing time: Thu 18 Dec 2025 22:00:50 +0000 Manifest this update: Thu 18 Dec 2025 22:00:50 +0000 Manifest next update: Fri 19 Dec 2025 22:00:50 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: Vc5WU/epmvCqtnG8NsuhWD4/LWvJXRvJAsCFZ5YLIxw=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e3:3a:36:94:c1:20:0e:7d:ac:ba:37:7d:75:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 18 22:00:50 2025 GMT Not After : Dec 19 22:00:50 2025 GMT Subject: CN=885240d12fd5e2b557819c7da46b4f1bed3071ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:74:e0:b9:d5:7a:34:25:66:9c:ae:02:2a: 6a:e8:4b:f3:0b:ed:05:04:1a:ef:d0:34:1a:ad:60: 2c:c4:6c:da:d8:4d:de:a3:39:9b:78:d5:df:f6:64: 40:12:65:a3:fd:f9:48:56:ac:35:5d:31:36:97:ad: 69:b8:93:b5:33:d4:c8:86:16:92:2a:6e:7e:43:3e: 73:8d:3e:b7:ae:17:ff:09:66:55:66:2a:21:a1:a3: 22:2c:11:72:d2:8d:0d:c4:df:e4:1f:7c:ea:66:0b: e2:e7:64:c3:2d:bb:5a:a5:5f:32:1e:4f:ec:36:64: d6:63:90:b3:15:5d:c9:d7:93:9e:51:33:a9:13:8a: 58:88:69:4f:74:99:b9:40:b0:ac:a7:af:e9:54:ae: e1:b0:e3:6d:be:3e:0c:ab:80:f0:a5:0c:c0:72:d5: 35:01:b6:cd:2b:a8:17:72:1c:bd:34:3b:67:47:3e: 17:0f:63:76:1f:10:b6:84:44:2c:1a:5b:77:28:95: 45:92:63:d8:c5:30:7a:70:e9:07:e7:d5:d3:ad:bd: d4:01:ea:6f:19:e8:bc:84:8f:ce:d8:ba:80:80:1c: 9d:70:e1:7e:80:8d:7b:a5:18:bf:49:c0:3d:a6:e4: 7c:ba:b7:d0:af:fd:cd:e3:a5:9b:19:29:15:ae:ef: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:52:40:D1:2F:D5:E2:B5:57:81:9C:7D:A4:6B:4F:1B:ED:30:71:AE X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:1d:c8:15:12:8d:5a:1f:ef:7d:cf:69:ce:c4:79:46:30:48: 76:73:52:52:b8:ac:22:50:24:2e:a0:58:7d:91:a7:50:31:ba: b1:77:c8:81:49:bd:f3:74:be:71:63:11:fa:04:df:11:ea:89: 56:01:82:0b:1f:93:2a:de:84:42:30:cd:e2:99:eb:5f:65:4a: c3:88:e7:ff:24:b8:19:ce:a5:e2:67:b2:11:98:a8:92:83:90: 14:09:f0:9d:ab:12:4c:97:c8:83:f7:d8:2a:b3:d7:dd:3c:fa: f6:1b:8e:b7:bf:3f:2e:9b:1b:df:51:54:df:73:5d:bc:06:e0: 3b:28:e2:d3:38:6f:9d:af:3b:0a:cb:e8:72:eb:90:e6:7c:e6: 74:66:54:00:ec:f8:71:e7:04:4b:af:4c:ec:3a:11:06:9a:8a: c2:41:e4:07:4c:46:ac:77:c2:73:5b:d8:ec:a5:d5:d1:20:ff: 48:b6:9f:a1:02:bc:ac:5e:59:12:ce:f7:0b:c8:a3:22:7f:8c: d9:eb:e6:cf:e0:1c:cb:3d:b5:a1:4f:06:84:b8:61:c9:a1:25: 56:f2:18:52:b2:44:49:61:20:94:e8:78:ab:74:68:2b:c6:7a: 58:02:d3:3c:1b:d5:38:d2:f0:0e:86:35:29:37:19:cb:5d:60: c3:14:45:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeuM6NpTBIA59rLo3fXUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjE4MjIwMDUwWhcNMjUxMjE5MjIwMDUwWjAzMTEwLwYDVQQD Eyg4ODUyNDBkMTJmZDVlMmI1NTc4MTljN2RhNDZiNGYxYmVkMzA3MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqV04LnVejQlZpyuAipq6EvzC+0F BBrv0DQarWAsxGza2E3eozmbeNXf9mRAEmWj/flIVqw1XTE2l61puJO1M9TIhhaS Km5+Qz5zjT63rhf/CWZVZiohoaMiLBFy0o0NxN/kH3zqZgvi52TDLbtapV8yHk/s NmTWY5CzFV3J15OeUTOpE4pYiGlPdJm5QLCsp6/pVK7hsONtvj4Mq4DwpQzActU1 AbbNK6gXchy9NDtnRz4XD2N2HxC2hEQsGlt3KJVFkmPYxTB6cOkH59XTrb3UAepv Gei8hI/O2LqAgBydcOF+gI17pRi/ScA9puR8urfQr/3N46WbGSkVru9CwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhSQNEv1eK1V4GcfaRrTxvtMHGuMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuh3IFRKN Wh/vfc9pzsR5RjBIdnNSUrisIlAkLqBYfZGnUDG6sXfIgUm983S+cWMR+gTfEeqJ VgGCCx+TKt6EQjDN4pnrX2VKw4jn/yS4Gc6l4meyEZiokoOQFAnwnasSTJfIg/fY KrPX3Tz69huOt78/Lpsb31FU33NdvAbgOyji0zhvna87CsvocuuQ5nzmdGZUAOz4 cecES69M7DoRBpqKwkHkB0xGrHfCc1vY7KXV0SD/SLafoQK8rF5ZEs73C8ijIn+M 2evmz+Acyz21oU8GhLhhyaElVvIYUrJESWEglOh4q3RoK8Z6WALTPBvVONLwDoY1 KTcZy11gwxRF5A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:51 2025 by rpki-client