This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: 6UG1UbXlU4Lb40j+XLVtrJvDX+Y3SS6s9dLQjFbeaOY= Subject key identifier: 7F:FA:14:EB:6C:13:80:4B:FF:24:5B:D5:C8:94:39:7D:C1:CF:03:7F Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019AF16474B82420529922F76DD99B22D19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 1693 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa (hash: QbfTd/kjJdOYrA4Hvyf36D6w4D1v8xL290MIRPSar4I=) 2: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 3: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: bRcXBqoaZWlK2uWqxO03oBwRVDei5DM7JCnKbJXURNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:74:b8:24:20:52:99:22:f7:6d:d9:9b:22:d1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=7ffa14eb6c13804bff245bd5c894397dc1cf037f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:76:16:98:77:1f:11:04:11:29:71:10:d4: b1:61:35:70:c0:a2:9b:a7:03:bf:26:55:20:0e:f3: a8:83:26:44:14:79:cc:0b:c2:2f:d7:bd:a5:fb:c1: a7:bb:e9:21:ef:57:92:00:8b:1a:94:20:97:45:21: c6:a2:69:29:30:65:0b:4a:21:f3:b0:08:f2:c7:4e: 49:0a:1d:2d:d5:7e:ab:0c:a7:9c:18:20:2f:31:46: 3f:de:6b:23:3c:11:8c:16:21:74:35:2b:73:f3:89: bc:21:9e:29:07:c2:d7:e8:75:5b:c3:ad:c9:77:d1: 5c:ee:db:73:7a:ae:92:df:ad:11:24:39:11:1e:98: bb:b7:18:19:15:86:8e:36:5b:30:25:53:e5:0d:21: 40:33:d1:56:29:44:4c:99:bf:63:8d:16:ff:5f:b9: 4c:e3:1b:89:c4:ef:28:69:28:09:65:38:36:ea:bb: 1e:16:34:1f:73:6b:ee:5d:05:79:58:62:10:c4:86: bc:17:6c:b6:f4:ca:b8:c5:f7:a2:4f:42:71:6c:b9: 8c:ae:d7:29:fc:24:bd:61:58:8e:9d:2c:a0:ac:55: dd:92:24:5a:8a:d2:ae:b9:d8:1e:0a:a9:de:94:b5: 32:28:6d:b0:1d:f9:f5:d2:98:96:f1:69:29:7f:9c: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FA:14:EB:6C:13:80:4B:FF:24:5B:D5:C8:94:39:7D:C1:CF:03:7F X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:93:41:03:e2:0c:d4:95:cc:fd:10:23:15:eb:80:04:e9:23: 5b:25:78:3b:7d:d9:d1:2f:14:b7:6c:7a:c3:a2:d2:df:c0:47: f2:a9:2d:fc:7c:f4:4a:74:93:66:7f:fa:3b:55:d4:53:68:2e: 5a:89:86:a5:f4:12:1e:cd:16:4a:db:74:7a:d5:b2:4f:ab:a1: ea:3d:e0:5e:b9:b3:3e:65:01:a2:41:21:a0:e4:8d:c2:78:ad: 8a:01:a4:5e:86:5d:81:2c:17:6e:5e:28:dd:c7:ba:41:88:d2: 28:f4:cb:52:c8:56:80:62:22:96:99:9a:7d:83:3b:01:f2:9a: 75:0b:5b:13:8c:5e:84:12:1e:ea:02:31:45:0b:66:45:7c:d5: 53:93:0e:77:a2:32:af:16:95:ce:55:1d:93:1a:74:3e:78:4f: 0c:40:f8:a6:8e:2c:c6:ab:09:47:62:54:f3:e0:2b:0a:95:6e: 82:46:2c:eb:36:e8:55:97:52:c5:39:c3:e0:16:f9:9d:08:50: d5:9f:17:ae:fc:92:42:40:61:89:2b:e2:8a:c9:cc:0f:b7:7a: 11:5f:d0:0b:68:e0:74:c0:00:f9:fd:58:c1:cf:2b:74:a1:ea: a1:a4:b6:37:96:ad:a4:3c:ff:bc:a4:11:66:21:dc:39:3d:34: 6f:0b:7c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHS4JCBSmSL3bdmbItGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg3ZmZhMTRlYjZjMTM4MDRiZmYyNDViZDVjODk0Mzk3ZGMxY2YwMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/R2Fph3HxEEESlxENSxYTVwwKKb pwO/JlUgDvOogyZEFHnMC8Iv172l+8Gnu+kh71eSAIsalCCXRSHGomkpMGULSiHz sAjyx05JCh0t1X6rDKecGCAvMUY/3msjPBGMFiF0NStz84m8IZ4pB8LX6HVbw63J d9Fc7ttzeq6S360RJDkRHpi7txgZFYaONlswJVPlDSFAM9FWKURMmb9jjRb/X7lM 4xuJxO8oaSgJZTg26rseFjQfc2vuXQV5WGIQxIa8F2y29Mq4xfeiT0JxbLmMrtcp /CS9YViOnSygrFXdkiRaitKuudgeCqnelLUyKG2wHfn10piW8Wkpf5yiVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/6FOtsE4BL/yRb1ciUOX3BzwN/MB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJNBA+IM 1JXM/RAjFeuABOkjWyV4O33Z0S8Ut2x6w6LS38BH8qkt/Hz0SnSTZn/6O1XUU2gu WomGpfQSHs0WStt0etWyT6uh6j3gXrmzPmUBokEhoOSNwnitigGkXoZdgSwXbl4o 3ce6QYjSKPTLUshWgGIilpmafYM7AfKadQtbE4xehBIe6gIxRQtmRXzVU5MOd6Iy rxaVzlUdkxp0PnhPDED4po4sxqsJR2JU8+ArCpVugkYs6zboVZdSxTnD4Bb5nQhQ 1Z8XrvySQkBhiSviisnMD7d6EV/QC2jgdMAA+f1Ywc8rdKHqoaS2N5atpDz/vKQR ZiHcOT00bwt8Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:54 2025 by rpki-client