This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json) Hash identifier: oNy2vPGiM3Uhf8S2Hu1EeApApVeF7slI+yB4GG5FTgE= Subject key identifier: 51:D8:3D:15:DB:09:99:C8:C8:F6:19:04:29:26:8F:7F:15:D7:0C:FC Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44 Certificate serial: 019AF23F9C3D258F7DEFB5C271EE0BA03F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: JWSZ22c7RhZDlkarGC4uuot3e2zaP2657gkkIUuw+IQ=) 2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9c:3d:25:8f:7d:ef:b5:c2:71:ee:0b:a0:3f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=51d83d15db0999c8c8f6190429268f7f15d70cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ea:e8:0a:2f:07:f1:5e:4a:73:f7:ec:18:65: 79:f6:59:4c:70:45:25:17:2a:e3:98:77:55:74:4b: 47:c1:c1:d8:bb:b2:4e:b6:29:2d:4b:0d:c1:70:a0: 81:38:8e:c2:29:25:8c:b6:1a:9c:36:fd:ab:54:bc: 2a:7a:b5:93:27:99:c6:8e:45:04:88:68:66:65:46: 6f:29:86:53:32:ba:70:11:1b:b3:16:ea:6b:e9:4b: 0c:98:4a:4b:60:dd:2b:0a:57:9d:79:fa:66:b8:93: 21:a3:19:cc:58:da:61:9b:08:fd:5b:10:57:55:63: 1b:0e:64:7b:97:b7:ce:6d:75:71:d6:92:19:9e:85: c6:1b:e8:f0:c5:c1:35:bc:f4:2c:46:cf:46:c1:9f: cb:1a:7c:bf:4e:48:3d:8f:5b:d5:c6:b7:dd:22:a9: 33:9a:00:8d:9e:8c:b4:0f:58:83:79:fe:87:56:d0: 17:0b:7b:f0:18:4c:f0:db:ee:5b:b5:9b:c0:ab:36: 66:4a:04:5e:6c:3d:7e:ad:53:0d:8d:18:35:cd:42: ed:5b:95:36:fd:54:0b:2a:61:99:c8:b1:fb:1c:44: 20:40:b0:0b:01:d0:56:79:f0:ea:5c:76:53:ae:01: f8:97:99:f5:0c:92:9e:11:28:43:4d:3a:45:7c:ea: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D8:3D:15:DB:09:99:C8:C8:F6:19:04:29:26:8F:7F:15:D7:0C:FC X509v3 Authority Key Identifier: keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:58:a7:c2:46:31:eb:6e:ae:f3:59:f7:c4:8d:84:98:3a:2a: 92:d2:2c:9d:41:38:ca:af:ad:43:b0:93:64:18:ee:35:e4:84: 80:11:99:d3:b2:5c:69:21:88:2e:40:1e:cd:6c:d0:ad:cc:fb: ca:4e:6c:94:3a:2c:b4:29:42:79:d3:f0:5e:1f:cb:5d:fe:85: 44:5b:a6:f2:d9:be:7f:21:db:dc:8e:9a:7e:20:1a:70:b4:d2: 46:61:93:62:99:be:29:22:8d:b9:97:d1:8a:49:bf:5a:e0:7e: 19:54:40:80:7e:c6:11:48:8a:c3:67:1d:fb:50:cc:39:80:f7: ee:98:7e:03:0b:45:66:8e:2d:10:be:37:fa:d3:58:13:f3:e4: e8:09:16:5e:ba:4a:07:78:b9:e1:c9:b9:5b:5a:a3:58:e9:a0: 5b:0d:f7:91:d7:f5:81:d8:fa:8e:fb:13:ad:8b:d7:c6:3a:db: 4a:f3:31:bf:17:09:6f:34:b1:8b:ab:58:74:1a:c8:f5:5e:9f: f8:20:c4:a8:61:e3:66:4f:2d:73:d1:2a:56:c8:d6:20:62:31: 9e:fb:7d:66:48:13:b8:02:55:2b:5d:9a:19:0b:86:57:e8:7b: 0a:15:f9:70:df:72:a3:74:e8:2f:03:3b:cd:7f:c4:dc:d2:64: 05:d2:1a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5w9JY9977XCce4LoD+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy OWJkNDQwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg1MWQ4M2QxNWRiMDk5OWM4YzhmNjE5MDQyOTI2OGY3ZjE1ZDcwY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+roCi8H8V5Kc/fsGGV59llMcEUl FyrjmHdVdEtHwcHYu7JOtiktSw3BcKCBOI7CKSWMthqcNv2rVLwqerWTJ5nGjkUE iGhmZUZvKYZTMrpwERuzFupr6UsMmEpLYN0rCledefpmuJMhoxnMWNphmwj9WxBX VWMbDmR7l7fObXVx1pIZnoXGG+jwxcE1vPQsRs9GwZ/LGny/Tkg9j1vVxrfdIqkz mgCNnoy0D1iDef6HVtAXC3vwGEzw2+5btZvAqzZmSgRebD1+rVMNjRg1zULtW5U2 /VQLKmGZyLH7HEQgQLALAdBWefDqXHZTrgH4l5n1DJKeEShDTTpFfOrJbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHYPRXbCZnIyPYZBCkmj38V1wz8MB8GA1UdIwQY MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5 LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1inwkYx 626u81n3xI2EmDoqktIsnUE4yq+tQ7CTZBjuNeSEgBGZ07JcaSGILkAezWzQrcz7 yk5slDostClCedPwXh/LXf6FRFum8tm+fyHb3I6afiAacLTSRmGTYpm+KSKNuZfR ikm/WuB+GVRAgH7GEUiKw2cd+1DMOYD37ph+AwtFZo4tEL43+tNYE/Pk6AkWXrpK B3i54cm5W1qjWOmgWw33kdf1gdj6jvsTrYvXxjrbSvMxvxcJbzSxi6tYdBrI9V6f +CDEqGHjZk8tc9EqVsjWIGIxnvt9ZkgTuAJVK12aGQuGV+h7ChX5cN9yo3ToLwM7 zX/E3NJkBdIa7g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:27 2025 by rpki-client