This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: NyYi2neWH2Cmgw81j3yD1CKoA88vJn+dWVjrcrrxO3E= Subject key identifier: EF:A6:1D:BB:10:B3:1D:F3:81:9F:F2:EA:36:EA:85:18:EB:1B:53:3D Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019AF0BF2363EADBD108D5760550EF7F29EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 1771 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: DZFCil3sCFZGsc5vFS/tSBXhTJc+sfsaak2DIfhqLNI=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:23:63:ea:db:d1:08:d5:76:05:50:ef:7f:29:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=efa61dbb10b31df3819ff2ea36ea8518eb1b533d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:7e:76:63:a0:ae:d0:02:ed:bd:e3:68:48: 5b:e0:1d:39:20:64:77:57:aa:48:dc:60:2a:c5:8c: fc:e1:36:b9:e2:ae:b1:95:df:db:85:57:33:6f:81: 34:3c:eb:fc:7d:47:1a:ef:04:37:b5:9d:75:59:ca: f4:7e:ba:85:d9:62:af:a9:2e:b0:c0:37:1b:93:26: d8:b1:30:47:3d:e7:20:70:ac:11:15:d7:17:86:97: 88:08:5a:f5:b9:18:08:b4:0c:d1:fc:17:69:9c:58: 7e:4e:f9:e7:93:7a:ce:d1:7b:27:bf:2d:42:0e:49: 36:40:a5:5f:7c:14:e7:b3:7a:f9:e0:23:82:84:99: 46:92:67:79:d9:2c:03:82:43:c2:b9:41:72:8f:1d: 21:14:38:23:22:c5:0f:91:01:ab:99:98:c5:78:ac: fd:65:76:18:16:8b:e3:3f:4b:10:fd:e3:c1:b0:64: 15:58:59:4b:d7:06:4c:c6:5c:57:04:c0:74:93:5b: d5:7a:1f:13:19:cc:cc:0e:38:de:eb:48:0e:82:58: 12:de:3f:52:1d:d9:88:25:13:19:5b:17:6e:04:7f: fd:75:c5:ad:d9:f7:f1:3b:de:af:6c:d3:3e:01:cf: 35:62:64:e2:a7:5a:8f:ee:97:af:ef:0c:ed:0d:dd: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:1D:BB:10:B3:1D:F3:81:9F:F2:EA:36:EA:85:18:EB:1B:53:3D X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:ca:1f:27:04:31:43:31:59:43:86:d3:d4:2d:77:45:8f: 83:38:10:13:f6:6c:63:07:72:a5:97:a3:91:ec:a7:57:47:46: 0b:81:49:b7:38:31:4e:a7:94:a2:54:79:3a:4e:be:07:2a:d7: 94:d9:ec:e7:a0:cd:7c:f1:b9:eb:05:b3:bb:1a:c5:8a:c4:53: 18:15:9e:21:59:5b:de:95:e5:55:89:3c:c8:a9:b9:25:74:7d: 6c:90:d9:1b:89:2c:f9:ea:fb:b8:a8:a9:a3:fd:1a:57:1c:ed: ad:32:74:7f:42:20:f7:47:0a:a0:5c:3b:4c:b3:17:87:08:8b: c2:86:bd:28:df:44:84:ae:6e:39:ee:21:f4:9e:bb:ab:8f:ab: 8b:42:24:b6:bb:bf:b8:6d:3b:44:c6:f9:98:9b:2c:6e:a8:9b: f5:26:d1:68:93:88:48:4f:c8:ec:0b:49:2a:f1:4e:61:4a:1f: 10:68:0a:2c:1f:83:ee:d9:ac:dd:69:fb:15:6d:1c:e2:32:4c: 12:d3:bb:44:b9:ce:31:0e:63:ac:c5:4b:8f:d4:a2:24:9a:0a: e6:94:23:7e:c1:12:d4:c4:47:88:51:c1:b4:a1:91:ba:25:7a: 69:53:5f:b8:24:f3:7a:3f:97:d2:89:85:98:0a:10:94:95:68: 6d:40:15:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyNj6tvRCNV2BVDvfynsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhlZmE2MWRiYjEwYjMxZGYzODE5ZmYyZWEzNmVhODUxOGViMWI1MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rR+dmOgrtAC7b3jaEhb4B05IGR3 V6pI3GAqxYz84Ta54q6xld/bhVczb4E0POv8fUca7wQ3tZ11Wcr0frqF2WKvqS6w wDcbkybYsTBHPecgcKwRFdcXhpeICFr1uRgItAzR/BdpnFh+Tvnnk3rO0Xsnvy1C Dkk2QKVffBTns3r54COChJlGkmd52SwDgkPCuUFyjx0hFDgjIsUPkQGrmZjFeKz9 ZXYYFovjP0sQ/ePBsGQVWFlL1wZMxlxXBMB0k1vVeh8TGczMDjje60gOglgS3j9S HdmIJRMZWxduBH/9dcWt2ffxO96vbNM+Ac81YmTip1qP7pev7wztDd3a+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+mHbsQsx3zgZ/y6jbqhRjrG1M9MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVfKHycE MUMxWUOG09Qtd0WPgzgQE/ZsYwdypZejkeynV0dGC4FJtzgxTqeUolR5Ok6+ByrX lNns56DNfPG56wWzuxrFisRTGBWeIVlb3pXlVYk8yKm5JXR9bJDZG4ks+er7uKip o/0aVxztrTJ0f0Ig90cKoFw7TLMXhwiLwoa9KN9EhK5uOe4h9J67q4+ri0Iktru/ uG07RMb5mJssbqib9SbRaJOISE/I7AtJKvFOYUofEGgKLB+D7tms3Wn7FW0c4jJM EtO7RLnOMQ5jrMVLj9SiJJoK5pQjfsES1MRHiFHBtKGRuiV6aVNfuCTzej+X0omF mAoQlJVobUAV2g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:41 2025 by rpki-client