This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json) Hash identifier: 9AYdbJiN2kHKL2neP3WoYUTSjZV1OsHFKg8KklDkaDE= Subject key identifier: D6:C2:3A:FE:7A:43:A5:19:35:53:01:D9:2C:27:C5:FC:F9:1E:46:B7 Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Certificate serial: 019AF19B4B34AA297564E8A5B68E59ECBCE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=) 2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: gj3MVZJpllVnNVZroLEziyrLP0QWMe7XDb/lBcpnulw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4b:34:aa:29:75:64:e8:a5:b6:8e:59:ec:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=d6c23afe7a43a519355301d92c27c5fcf91e46b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:f7:d3:e3:c4:f0:bf:40:66:bb:a5:c1:ac: 30:44:ca:32:9e:59:cb:2e:28:7c:2b:77:b7:b1:40: e8:90:3b:99:92:44:4d:65:2b:fc:a8:06:27:b8:e6: 41:ed:48:9c:3a:7e:44:72:f7:0d:7b:96:fa:fe:9c: a7:b5:1a:39:f2:85:0e:36:f2:c3:7f:b1:e4:7c:e6: 27:b4:17:96:fb:ad:24:5c:8c:e8:92:9f:7f:f6:2e: 01:30:2e:52:b2:bf:e7:55:49:d9:75:b6:7d:f5:70: 5f:c5:e1:25:d5:d3:23:e8:77:46:5e:ef:89:f4:6c: 22:1d:ae:0e:94:5f:d8:1b:2a:93:da:9b:22:44:1a: 9b:65:cb:4d:09:30:cf:5a:f8:5a:f8:a4:d0:aa:1e: da:f0:84:a8:32:9f:81:e0:2d:72:d8:17:4b:40:dc: 0e:84:a4:d8:8b:f3:e3:45:61:26:fa:38:e3:a6:45: be:7d:b2:af:9c:f7:42:33:21:87:12:c4:67:50:43: 72:47:35:17:b0:27:25:aa:81:57:ff:01:b8:dd:9c: b6:ce:65:92:43:c0:b0:ab:2e:90:e8:5d:bc:93:fa: f0:27:f8:c3:9f:1e:5c:a6:d5:7b:3e:1e:74:cf:37: 4d:0a:cc:b3:aa:5c:d4:03:8f:1b:fd:5d:cd:fc:9e: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C2:3A:FE:7A:43:A5:19:35:53:01:D9:2C:27:C5:FC:F9:1E:46:B7 X509v3 Authority Key Identifier: keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:24:ab:da:f6:9a:f6:26:da:d7:81:51:27:f1:43:76:55:2d: 90:d4:25:45:0b:19:75:ca:ca:1e:6b:41:35:ce:11:d1:c8:ed: 19:02:d5:43:20:5d:c3:bd:f1:f9:71:1a:c4:70:c6:bb:04:8f: f8:1d:46:48:c1:31:d6:ff:f3:a7:90:25:30:c3:50:69:3a:16: 55:40:47:91:22:01:3c:82:f8:90:c1:58:c0:65:33:d6:74:1c: 0e:80:e0:81:6f:fa:86:c6:2c:f3:94:e2:5f:c8:29:cf:1c:1b: 7b:29:19:75:95:5b:d6:74:ce:c4:c9:46:2d:75:c6:3c:3c:5b: 39:3b:3d:6c:2e:9e:a5:7f:14:ce:81:df:2b:3f:7a:23:40:d0: 40:45:a2:53:4b:cd:e4:32:9a:bc:fe:68:df:00:73:4a:d3:a4: c4:51:a9:98:68:c9:b1:d3:77:ab:42:9d:e7:64:2a:ad:8a:67: 8a:8c:f9:f4:b3:5b:b1:74:b3:d8:20:f0:77:a0:25:4d:61:c2: e3:0e:1d:86:36:9a:29:16:3f:f9:a8:b3:00:17:11:76:06:4b: 4f:9e:39:51:7d:ee:04:9f:46:3e:61:ee:43:54:b8:bb:5f:5d: 47:5e:a7:d5:11:56:83:51:55:21:da:33:41:6e:8b:7c:ff:07: d7:5f:f5:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0s0qil1ZOilto5Z7LzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjg4MzA1ZmVkNWM5OTc2MGFlYzdjODk0YzZiYTIxZTRl YWQ2NzUwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhkNmMyM2FmZTdhNDNhNTE5MzU1MzAxZDkyYzI3YzVmY2Y5MWU0NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlP30+PE8L9AZrulwawwRMoynlnL Lih8K3e3sUDokDuZkkRNZSv8qAYnuOZB7UicOn5EcvcNe5b6/pyntRo58oUONvLD f7HkfOYntBeW+60kXIzokp9/9i4BMC5Ssr/nVUnZdbZ99XBfxeEl1dMj6HdGXu+J 9GwiHa4OlF/YGyqT2psiRBqbZctNCTDPWvha+KTQqh7a8ISoMp+B4C1y2BdLQNwO hKTYi/PjRWEm+jjjpkW+fbKvnPdCMyGHEsRnUENyRzUXsCclqoFX/wG43Zy2zmWS Q8Cwqy6Q6F28k/rwJ/jDnx5cptV7Ph50zzdNCsyzqlzUA48b/V3N/J5cTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbCOv56Q6UZNVMB2Swnxfz5Hka3MB8GA1UdIwQY MBaAFKNogwX+1cmXYK7HyJTGuiHk6tZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQt ZGVjOTc5NmY2MjIzLzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mOWUyNTctMDE2Mi00ZGVmLTk2YWQtZGVjOTc5NmY2MjIz LzEvbzJpREJmN1Z5WmRncnNmSWxNYTZJZVRxMW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSSr2vaa 9iba14FRJ/FDdlUtkNQlRQsZdcrKHmtBNc4R0cjtGQLVQyBdw73x+XEaxHDGuwSP +B1GSMEx1v/zp5AlMMNQaToWVUBHkSIBPIL4kMFYwGUz1nQcDoDggW/6hsYs85Ti X8gpzxwbeykZdZVb1nTOxMlGLXXGPDxbOTs9bC6epX8UzoHfKz96I0DQQEWiU0vN 5DKavP5o3wBzStOkxFGpmGjJsdN3q0Kd52QqrYpnioz59LNbsXSz2CDwd6AlTWHC 4w4dhjaaKRY/+aizABcRdgZLT545UX3uBJ9GPmHuQ1S4u19dR16n1RFWg1FVIdoz QW6LfP8H11/1Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:53 2025 by rpki-client