This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json) Hash identifier: gIIBO3Tz95vKUjGm4zen5mNbtM5VzcANzzp6UaLGVmc= Subject key identifier: 65:DF:68:96:F0:08:74:9C:47:77:21:D2:C9:90:0C:59:28:0D:25:B6 Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17 Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617 Certificate serial: 019AF12E40A11D90DE4EE99C8E98C110BE94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft Manifest number: 0CAB Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=) 2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: WQHxTcONGkwnvX9ZeGnLaSgeytluuJIHKY1h94OcHVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:40:a1:1d:90:de:4e:e9:9c:8e:98:c1:10:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=65df6896f008749c477721d2c9900c59280d25b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:09:b2:0e:6b:52:52:0f:fa:fd:5e:3e:4c: dd:11:95:77:f1:76:3b:3a:26:4f:ff:e1:a6:7a:d8: 45:7d:11:43:50:e9:94:99:2b:db:0d:e3:9b:3a:a5: b0:79:c9:83:94:6a:0e:3d:43:83:af:f2:bb:a6:be: ef:d4:49:9f:6a:6c:33:d2:d6:19:15:b3:cf:18:ad: 4f:81:11:e4:be:dc:d7:af:58:1a:34:d0:1f:fa:4b: f4:c9:a1:2e:f6:ca:ce:78:d6:0b:95:02:95:91:48: 86:70:c8:1c:5c:0f:c7:18:16:37:04:2f:4a:8d:f3: 18:c3:45:77:36:06:40:fc:f1:79:3e:b6:ef:ea:74: 90:d7:49:07:bc:9e:b8:10:1a:94:4a:ec:91:0d:b4: 42:cd:fa:56:ee:7a:f2:74:7a:06:c2:be:da:52:29: 62:ce:66:d9:7e:af:11:79:5e:c3:49:80:d7:ec:af: ec:06:92:2f:bd:7c:2e:6b:42:2f:6c:87:01:6f:11: 2e:f4:cb:b6:32:42:67:87:c5:e1:9e:e6:81:7a:87: ca:96:a5:18:ee:14:45:08:86:25:35:40:00:68:bb: 45:9d:02:c9:b6:0b:95:1f:91:c8:39:1c:e6:7e:ea: 42:b1:f7:e6:65:ca:70:33:a8:c3:77:73:a4:3a:c2: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:68:96:F0:08:74:9C:47:77:21:D2:C9:90:0C:59:28:0D:25:B6 X509v3 Authority Key Identifier: keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:98:36:ce:84:0e:42:10:f4:c4:f1:52:a9:42:af:9d:41:2d: e6:8e:a7:d2:50:76:6c:1b:53:0d:ab:95:7f:e8:7e:16:5e:ac: 32:b5:f0:bf:a2:92:81:ae:8d:f4:9c:1f:0a:8f:dc:6c:a0:eb: e4:e1:56:77:f8:2b:51:b9:55:1e:ab:32:67:5c:44:68:7f:6d: 64:2b:11:8a:9d:7a:b3:dc:22:1b:dd:eb:d3:39:d5:d8:71:77: e7:4b:f4:4f:a5:89:55:bf:ce:a5:fb:13:7d:06:25:bb:25:9e: 08:c4:16:69:8d:ae:79:2d:a7:3a:ff:07:9a:6a:08:ae:04:c7: 05:fe:ad:19:71:fa:74:d8:0b:d5:a3:1d:e9:c9:68:79:fb:6b: 13:85:eb:17:12:98:99:00:e0:bb:fb:4f:7f:5b:39:00:45:24: 40:3e:34:2f:06:34:85:30:44:55:19:bd:41:14:1a:48:b0:7d: 61:e5:37:12:dc:3b:d3:e2:1b:92:3d:72:26:62:c9:a4:4d:ae: e4:89:7a:ca:98:53:0a:83:f0:90:d1:75:81:23:b9:0d:0d:53: 13:ba:b4:3b:f9:52:3c:48:47:a4:3d:b4:d3:1c:a3:5f:6a:46: 41:5a:bb:ae:86:4b:b9:4a:76:7c:a1:79:2c:ea:a7:cf:e8:bd: 2b:13:cf:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkChHZDeTumcjpjBEL6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGU0YzNiNmRhYTVhNjk4YmYzMDdjYzM5MTI4MmFiMjk4 N2Q2MTcwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD Eyg2NWRmNjg5NmYwMDg3NDljNDc3NzIxZDJjOTkwMGM1OTI4MGQyNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HoJsg5rUlIP+v1ePkzdEZV38XY7 OiZP/+GmethFfRFDUOmUmSvbDeObOqWwecmDlGoOPUODr/K7pr7v1Emfamwz0tYZ FbPPGK1PgRHkvtzXr1gaNNAf+kv0yaEu9srOeNYLlQKVkUiGcMgcXA/HGBY3BC9K jfMYw0V3NgZA/PF5Prbv6nSQ10kHvJ64EBqUSuyRDbRCzfpW7nrydHoGwr7aUili zmbZfq8ReV7DSYDX7K/sBpIvvXwua0IvbIcBbxEu9Mu2MkJnh8XhnuaBeofKlqUY 7hRFCIYlNUAAaLtFnQLJtguVH5HIORzmfupCsffmZcpwM6jDd3OkOsINGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXfaJbwCHScR3ch0smQDFkoDSW2MB8GA1UdIwQY MBaAFKPeTDttqlppi/MHzDkSgqsph9YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMt MGFmMmM1YzRjYzBmLzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMtMGFmMmM1YzRjYzBm LzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpg2zoQO QhD0xPFSqUKvnUEt5o6n0lB2bBtTDauVf+h+Fl6sMrXwv6KSga6N9JwfCo/cbKDr 5OFWd/grUblVHqsyZ1xEaH9tZCsRip16s9wiG93r0znV2HF350v0T6WJVb/OpfsT fQYluyWeCMQWaY2ueS2nOv8HmmoIrgTHBf6tGXH6dNgL1aMd6cloeftrE4XrFxKY mQDgu/tPf1s5AEUkQD40LwY0hTBEVRm9QRQaSLB9YeU3Etw70+Ibkj1yJmLJpE2u 5Il6yphTCoPwkNF1gSO5DQ1TE7q0O/lSPEhHpD200xyjX2pGQVq7roZLuUp2fKF5 LOqnz+i9KxPPJA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:18 2025 by rpki-client