This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json) Hash identifier: F/sImTOre72eFogDCpndJaIDf0a0mbfHCHQK4on5Vl4= Subject key identifier: 05:E3:10:01:8F:DE:CC:4B:FF:D5:01:FD:F7:A2:64:8F:BB:38:1C:CE Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Certificate serial: 019AF3894D2D17189AE46196F1893C616F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=) 2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: Id+Y7gEhBh9apstJhiDBuMKu8rkrX5f0gDXO3z6X8WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4d:2d:17:18:9a:e4:61:96:f1:89:3c:61:6f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=05e310018fdecc4bffd501fdf7a2648fbb381cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:2a:41:cb:d0:8a:9c:3c:da:c0:bf:55:76: 32:52:7f:07:9d:41:6f:61:4b:54:e9:36:f6:c3:5f: ee:6e:72:ea:61:03:8e:37:b3:d3:1f:9b:ba:1c:00: 16:8c:82:8b:06:83:97:d6:17:94:07:c6:f8:67:fa: b0:2a:b9:35:a6:d8:71:c1:76:e3:17:7f:14:8d:89: d8:3f:cb:c1:c6:8f:f4:80:4f:8b:bc:aa:9c:3a:4f: 42:cb:88:ef:96:bb:c1:bc:99:30:e1:ce:4d:42:09: 4c:3e:3c:9f:7e:eb:91:fa:e2:6e:83:c6:f4:e7:57: 5d:cf:21:7b:26:c6:82:dc:22:22:71:be:08:0d:bc: f5:b1:51:b6:f0:ae:32:3c:b9:5d:99:4e:32:6e:7c: 61:24:fd:68:ac:3f:fc:7f:9f:f3:6f:8f:c6:19:fd: cf:a1:c9:eb:34:0b:df:12:24:02:10:f2:41:77:6c: 49:4d:e7:a7:90:ce:56:68:71:18:67:fe:7a:d2:f0: d3:80:bc:27:4c:02:79:e4:b3:83:86:d8:7b:e8:89: 7b:84:33:35:11:77:ec:cb:56:40:a1:01:30:e3:ff: 81:2f:d8:6a:bb:4d:6c:bd:04:75:67:6e:b5:35:53: 9a:ea:87:41:d7:9a:40:4e:3a:f4:a2:bd:38:e8:d3: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E3:10:01:8F:DE:CC:4B:FF:D5:01:FD:F7:A2:64:8F:BB:38:1C:CE X509v3 Authority Key Identifier: keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:02:5f:74:09:a2:11:3b:96:ac:ee:99:7d:39:a5:95:79:e6: 30:50:92:58:6e:7d:1a:aa:e8:7a:9a:e6:46:b3:d4:a8:bc:84: fe:00:f6:ff:4b:94:02:d8:8f:de:86:27:92:50:0f:87:21:d4: 13:9e:54:7d:8a:ff:f1:2a:5f:9f:ff:f0:fc:b0:65:09:0d:80: 0d:ba:d8:7e:e6:a5:28:a2:d8:1b:38:8d:cd:7c:b7:1c:de:64: be:af:30:0b:70:5c:3e:d5:fe:00:8b:37:f0:47:2b:9f:93:10: 64:07:94:35:aa:79:6b:c5:fa:d0:51:21:a0:54:2f:a4:27:4c: 32:3a:32:8e:aa:3b:f0:0e:07:e6:3d:e7:27:a7:92:b8:c5:95: 9f:a3:c9:13:c3:84:d6:8b:22:3d:78:95:b5:4d:4d:41:6e:08: 5e:e9:5b:65:d0:74:8d:08:54:09:ba:78:fe:5d:a0:ab:cd:f2: b1:d4:72:49:4b:e1:00:f6:30:cc:20:a0:cc:b0:e5:71:9a:e6: fd:c6:a1:d6:69:0e:d9:26:f8:dc:f8:7c:e2:8f:2b:5a:87:f5: 9d:ea:96:92:e6:63:21:b6:90:b2:f8:a0:6b:6f:e3:9f:ae:9a: 06:2b:7f:9f:36:50:f9:6b:18:da:1c:03:0b:be:68:ca:e3:3f: 4d:1c:a8:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziU0tFxia5GGW8Yk8YW9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTdkZTE3NTEyY2ZhOGJlYmMzZGY4MGIyN2I0NzYyNGVm NDE2OTEwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EygwNWUzMTAwMThmZGVjYzRiZmZkNTAxZmRmN2EyNjQ4ZmJiMzgxY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr4qQcvQipw82sC/VXYyUn8HnUFv YUtU6Tb2w1/ubnLqYQOON7PTH5u6HAAWjIKLBoOX1heUB8b4Z/qwKrk1pthxwXbj F38UjYnYP8vBxo/0gE+LvKqcOk9Cy4jvlrvBvJkw4c5NQglMPjyffuuR+uJug8b0 51ddzyF7JsaC3CIicb4IDbz1sVG28K4yPLldmU4ybnxhJP1orD/8f5/zb4/GGf3P ocnrNAvfEiQCEPJBd2xJTeenkM5WaHEYZ/560vDTgLwnTAJ55LODhth76Il7hDM1 EXfsy1ZAoQEw4/+BL9hqu01svQR1Z261NVOa6odB15pATjr0or046NNrFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXjEAGP3sxL/9UB/feiZI+7OBzOMB8GA1UdIwQY MBaAFDuX3hdRLPqL68PfgLJ7R2JO9BaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAt OTE1NTEzMmExNzlhLzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAtOTE1NTEzMmExNzlh LzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAJfdAmi ETuWrO6ZfTmllXnmMFCSWG59GqroeprmRrPUqLyE/gD2/0uUAtiP3oYnklAPhyHU E55UfYr/8Spfn//w/LBlCQ2ADbrYfualKKLYGziNzXy3HN5kvq8wC3BcPtX+AIs3 8Ecrn5MQZAeUNap5a8X60FEhoFQvpCdMMjoyjqo78A4H5j3nJ6eSuMWVn6PJE8OE 1osiPXiVtU1NQW4IXulbZdB0jQhUCbp4/l2gq83ysdRySUvhAPYwzCCgzLDlcZrm /cah1mkO2Sb43Ph84o8rWof1neqWkuZjIbaQsviga2/jn66aBit/nzZQ+WsY2hwD C75oyuM/TRyoew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:33 2025 by rpki-client