This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json) Hash identifier: 5l6pI3ec4nU+n+ITxWBJf+997ABjgaDfIavWOlB16OM= Subject key identifier: 22:2C:CE:16:6E:25:5F:8D:06:CF:13:EE:3D:B9:CD:BF:49:7D:07:63 Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Certificate serial: 019AF19AB173A80B6C1D102C4D07C73711E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft Manifest number: 11C8 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=) 2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=) 3: AF6uSBXXjV8m6D8T1L1tDnPI1pQ.roa (hash: 5ngifaMxS9mhHVtoSr7d4Aq0k4gtgdDqeUt6H7Q6K9U=) 4: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (hash: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=) 5: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: lptdB6wre/V6aYVm8/VkNl5OJvzJ67YITeca4aNW028=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b1:73:a8:0b:6c:1d:10:2c:4d:07:c7:37:11:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=222cce166e255f8d06cf13ee3db9cdbf497d0763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:46:93:84:5e:3e:5a:50:5e:09:5a:9a:b2: b6:a4:ae:73:61:c0:5e:82:ab:89:38:a0:d0:86:a0: 32:b8:ad:a0:14:18:1b:f4:fa:a2:38:30:97:51:a7: 56:0b:80:a1:fa:14:77:43:30:62:65:cf:f8:34:89: 25:ef:e2:85:ed:27:42:15:69:03:9b:e7:a2:de:7f: 03:16:3d:f7:a2:5f:4c:e8:45:41:af:1c:39:96:60: 79:5e:6a:46:b9:0b:55:f7:26:3b:8b:c7:3a:86:a6: 8e:0a:de:14:96:d4:9c:db:7c:c5:2b:d9:e7:e2:cd: 02:48:2a:9b:a4:af:98:59:c7:21:c9:53:2b:87:52: 46:7f:e2:dc:d0:dd:e9:4b:10:31:91:36:a2:3f:33: a6:f0:62:7b:b7:26:29:73:b7:15:b2:c8:c6:0f:29: 52:70:a0:aa:49:8c:7b:3c:07:04:98:81:46:49:b6: b4:1b:6d:7c:49:ed:2d:94:16:f9:fe:24:40:a0:59: ab:4b:83:8f:64:64:ff:2b:ed:a1:bf:5f:26:18:46: a6:39:5c:20:d7:06:58:b3:86:5d:8e:4f:03:76:54: d5:f8:83:05:68:d0:53:8b:12:49:09:a3:7c:95:4b: e7:04:cc:0a:17:13:94:e4:cc:26:4c:bd:c4:71:f8: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:CE:16:6E:25:5F:8D:06:CF:13:EE:3D:B9:CD:BF:49:7D:07:63 X509v3 Authority Key Identifier: keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:81:e5:c9:53:ba:12:4b:a8:0f:a5:eb:f9:16:4b:4e:cc:13: 24:d6:f1:e6:8d:be:2e:7a:0f:f1:90:23:4e:d2:de:aa:7e:6a: 46:47:6f:26:9f:1c:d9:b3:60:da:ac:69:88:8e:9e:6c:22:64: 84:d2:4f:2e:28:8d:47:8d:30:65:96:4c:a9:5c:1b:41:0f:c0: cc:81:8d:f3:3f:94:85:cc:73:c9:dc:a8:04:dd:cb:60:67:50: d8:36:6b:0e:9f:21:a1:50:e1:34:a4:19:57:87:fe:bd:fd:8d: 06:34:e1:86:b8:48:a1:15:b7:82:e7:1c:5e:41:24:92:94:0c: 42:10:07:3e:38:dd:46:39:7f:3f:9d:03:f4:24:ae:60:87:61: b3:4f:be:76:fb:98:37:da:66:d4:d4:02:c3:e2:1b:e4:4f:f4: c2:e1:8a:21:66:12:45:ec:cb:92:7f:84:39:50:e0:98:c8:33: 74:9c:a5:20:d9:87:f7:14:f6:16:0d:e0:04:d5:60:49:db:fd: 15:fa:65:ff:50:b2:ad:f3:e9:f0:96:63:e9:0a:79:bc:e0:d0: 56:23:b0:2b:86:d5:68:7f:ee:41:50:1a:4b:63:1c:20:ac:02: 47:0c:0b:7d:fa:b8:7f:17:bb:8e:34:b4:ce:4c:f6:94:0d:31: 99:06:82:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrFzqAtsHRAsTQfHNxHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm Y2NmNDgwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygyMjJjY2UxNjZlMjU1ZjhkMDZjZjEzZWUzZGI5Y2RiZjQ5N2QwNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQFGk4RePlpQXglamrK2pK5zYcBe gquJOKDQhqAyuK2gFBgb9PqiODCXUadWC4Ch+hR3QzBiZc/4NIkl7+KF7SdCFWkD m+ei3n8DFj33ol9M6EVBrxw5lmB5XmpGuQtV9yY7i8c6hqaOCt4UltSc23zFK9nn 4s0CSCqbpK+YWcchyVMrh1JGf+Lc0N3pSxAxkTaiPzOm8GJ7tyYpc7cVssjGDylS cKCqSYx7PAcEmIFGSba0G218Se0tlBb5/iRAoFmrS4OPZGT/K+2hv18mGEamOVwg 1wZYs4Zdjk8DdlTV+IMFaNBTixJJCaN8lUvnBMwKFxOU5MwmTL3EcfjazwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIszhZuJV+NBs8T7j25zb9JfQdjMB8GA1UdIwQY MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt N2MzNTAwNmUwN2ExLzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroHlyVO6 EkuoD6Xr+RZLTswTJNbx5o2+LnoP8ZAjTtLeqn5qRkdvJp8c2bNg2qxpiI6ebCJk hNJPLiiNR40wZZZMqVwbQQ/AzIGN8z+UhcxzydyoBN3LYGdQ2DZrDp8hoVDhNKQZ V4f+vf2NBjThhrhIoRW3guccXkEkkpQMQhAHPjjdRjl/P50D9CSuYIdhs0++dvuY N9pm1NQCw+Ib5E/0wuGKIWYSRezLkn+EOVDgmMgzdJylINmH9xT2Fg3gBNVgSdv9 Ffpl/1CyrfPp8JZj6Qp5vODQViOwK4bVaH/uQVAaS2McIKwCRwwLffq4fxe7jjS0 zkz2lA0xmQaCyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:29 2025 by rpki-client