This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json) Hash identifier: uP73pRAxJ3zP7GVw5DCMu06vP72FkShDmZNT4w28YTQ= Subject key identifier: 4A:DD:6C:F4:F0:62:87:B3:D0:00:08:DC:6A:73:B9:C5:43:5E:B0:58 Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Certificate serial: 019AF208C332156A861BAD498F2EF849A31C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft Manifest number: 06C4 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=) 2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: dihStMn8BPmit9LgKhJ8ptUaDnCB5zvEDyrXMvThz/M=) 3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c3:32:15:6a:86:1b:ad:49:8f:2e:f8:49:a3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=4add6cf4f06287b3d00008dc6a73b9c5435eb058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:50:fa:df:a7:9f:37:ba:c6:35:ee:e8:e2: 0c:d5:47:ed:4b:4b:ed:35:7e:f3:be:4d:5c:c3:3b: 90:7c:19:31:4f:44:74:41:a9:e1:4d:5c:4c:5d:9b: ff:d3:bc:c1:1d:5e:17:a5:79:78:ad:18:5e:d4:c7: 64:35:3e:03:ab:07:28:a6:9e:83:bb:9c:dd:76:98: 83:a3:ee:02:0a:a3:fa:7f:6e:3a:c7:32:94:21:7c: b6:e7:3e:72:df:9f:cb:e8:a1:66:ae:91:3a:76:15: d5:8e:ac:ff:0e:d9:e5:7b:27:f6:b7:eb:31:11:b7: bb:93:8b:5a:d7:b4:63:4b:ce:d7:e2:78:55:01:04: ce:1e:0b:8f:97:aa:a0:2c:fe:1f:e9:ca:3f:f7:75: 9c:bb:d6:67:1a:68:aa:98:38:10:69:b3:39:62:6c: dc:34:51:fa:c4:2e:c9:a0:dd:6a:bc:b5:8e:6c:bd: 08:b2:4e:4f:2f:56:67:73:ad:e0:ad:35:8f:3d:46: aa:4a:ab:09:68:e1:29:06:e5:92:9e:fc:af:d8:4e: 74:a2:e3:cf:f8:11:03:28:8a:fc:7f:d1:73:1d:b6: 67:f0:7b:41:ce:6e:69:78:ce:4b:a1:53:d6:05:f6: a9:34:f3:e8:ce:51:23:e5:68:35:04:78:20:bb:49: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DD:6C:F4:F0:62:87:B3:D0:00:08:DC:6A:73:B9:C5:43:5E:B0:58 X509v3 Authority Key Identifier: keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:02:70:d3:43:bb:30:bd:17:27:4e:de:3b:13:62:10:68:9d: de:20:03:98:96:79:6f:01:0a:2c:e4:33:99:5a:b9:2f:9d:42: 39:17:7d:a1:00:d5:72:6e:79:5f:89:13:ad:7c:dc:e4:4c:c7: 39:29:d0:6a:54:66:96:42:cb:3b:f0:0e:43:e7:3e:d6:c1:78: b1:cb:78:a0:75:a1:a1:b1:f3:e4:dd:b3:10:b0:5c:09:97:1b: 22:da:37:a5:e2:66:92:9e:54:61:f5:3d:5f:ba:41:f4:ed:01: ea:7b:7f:b0:5b:7c:e5:a8:33:2d:a3:6d:91:91:0e:dd:d3:7c: 39:05:a0:95:04:c6:94:81:ff:58:a7:46:3d:79:7a:ae:44:0c: de:b5:12:12:d4:56:56:1e:dc:de:7c:17:c1:9a:4a:f4:7d:69: a0:65:4c:58:59:46:c9:db:ef:cb:6f:f7:88:0c:e1:3a:da:06: 46:8a:74:95:d0:18:5a:f7:b9:4f:4f:98:53:81:43:6a:4f:b1: 1b:67:f1:cf:1c:26:2f:8d:65:46:0b:ea:18:38:31:d4:90:a2: 29:a4:40:25:b7:57:56:22:cf:f6:44:c8:42:d8:d1:bb:ef:37: ab:5b:9e:05:f2:15:ae:61:b2:c6:47:85:c1:86:ff:1b:a9:b8: 6b:c7:2c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMMyFWqGG61Jjy74SaMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4 MjNhMDIwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg0YWRkNmNmNGYwNjI4N2IzZDAwMDA4ZGM2YTczYjljNTQzNWViMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJhQ+t+nnze6xjXu6OIM1UftS0vt NX7zvk1cwzuQfBkxT0R0QanhTVxMXZv/07zBHV4XpXl4rRhe1MdkNT4Dqwcopp6D u5zddpiDo+4CCqP6f246xzKUIXy25z5y35/L6KFmrpE6dhXVjqz/Dtnleyf2t+sx Ebe7k4ta17RjS87X4nhVAQTOHguPl6qgLP4f6co/93Wcu9ZnGmiqmDgQabM5Ymzc NFH6xC7JoN1qvLWObL0Isk5PL1Znc63grTWPPUaqSqsJaOEpBuWSnvyv2E50ouPP +BEDKIr8f9FzHbZn8HtBzm5peM5LoVPWBfapNPPozlEj5Wg1BHggu0kOEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErdbPTwYoez0AAI3GpzucVDXrBYMB8GA1UdIwQY MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwJw00O7 ML0XJ07eOxNiEGid3iADmJZ5bwEKLOQzmVq5L51CORd9oQDVcm55X4kTrXzc5EzH OSnQalRmlkLLO/AOQ+c+1sF4sct4oHWhobHz5N2zELBcCZcbIto3peJmkp5UYfU9 X7pB9O0B6nt/sFt85agzLaNtkZEO3dN8OQWglQTGlIH/WKdGPXl6rkQM3rUSEtRW Vh7c3nwXwZpK9H1poGVMWFlGydvvy2/3iAzhOtoGRop0ldAYWve5T0+YU4FDak+x G2fxzxwmL41lRgvqGDgx1JCiKaRAJbdXViLP9kTIQtjRu+83q1ueBfIVrmGyxkeF wYb/G6m4a8cs7A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:42 2025 by rpki-client