This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json) Hash identifier: atNacls2XjtFTSh1yf1KocX4SUWYsEl7Fm18ue8RAfk= Subject key identifier: 15:1B:D0:91:C5:0A:80:3D:B5:9B:25:70:98:1F:58:CA:10:37:5A:2A Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019AFB79700629E3A1601A3E80B9250ACFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft Manifest number: 0C60 Signing time: Mon 08 Dec 2025 01:00:30 +0000 Manifest this update: Mon 08 Dec 2025 01:00:30 +0000 Manifest next update: Tue 09 Dec 2025 01:00:30 +0000 Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=) 2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: xv/aNbC8Y+LX0/Q+y3Jq+gZlv9dVvZynaTSl+sqkTMg=) 3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=) 4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:79:70:06:29:e3:a1:60:1a:3e:80:b9:25:0a:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Dec 8 01:00:30 2025 GMT Not After : Dec 9 01:00:30 2025 GMT Subject: CN=151bd091c50a803db59b2570981f58ca10375a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:d1:c2:18:d8:4c:d1:f7:f6:29:9e:04:9e: 1e:03:6c:94:d9:fe:13:d9:81:65:1b:e7:3f:44:1c: 57:50:6e:ef:e8:fb:bb:9b:9b:3b:33:b7:53:21:9d: 1c:af:cd:9b:f9:90:b1:7b:86:89:e7:d7:d6:b2:5f: 4f:0f:0e:53:e8:ef:53:02:af:63:1c:d5:87:80:33: 5b:b0:50:ad:66:65:73:db:7f:61:25:c8:25:64:71: 43:a3:92:82:b9:df:59:87:4c:8c:6a:fa:cd:c3:7d: 74:ba:e3:ca:c9:e1:52:f7:c7:61:97:8e:31:5b:02: ee:73:48:bd:fe:c1:93:da:35:c0:b9:59:81:47:92: f8:f6:7a:34:41:f3:37:cc:7d:35:fe:ab:ba:cd:ad: 7f:29:27:81:d0:3a:3e:20:bc:33:0d:5b:4c:f8:fd: c4:81:3e:1a:d1:06:ed:62:84:91:46:36:7a:7b:90: d1:0b:d8:b6:f9:79:95:9f:42:9f:ed:4d:ba:54:91: b3:89:ac:3b:e0:4c:3b:ee:e0:62:06:41:35:e0:e0: 9a:43:cf:e4:dd:57:47:50:2a:fa:c7:55:a2:2f:e4: 5e:67:14:64:d5:e9:b3:e2:d9:da:22:25:f3:b5:0a: a1:38:c8:a7:28:6a:3f:35:1f:15:f7:9d:cd:cd:a5: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:D0:91:C5:0A:80:3D:B5:9B:25:70:98:1F:58:CA:10:37:5A:2A X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e4:c0:2c:48:8a:40:af:08:d9:a7:53:c1:b2:f9:8c:e2:0a: 21:d1:7b:56:14:44:70:40:fe:5b:a9:ae:53:4a:58:06:c3:20: 1c:77:be:9d:11:3a:3d:b5:64:a3:83:96:7b:78:0a:4a:3e:a3: 54:f3:f6:a7:8c:8b:3d:71:fb:41:78:88:c1:00:12:aa:5d:cd: c2:8a:a3:84:07:43:34:a2:4a:96:8a:a0:d6:7e:54:a9:e8:d6: 87:d3:4e:2a:d7:bc:20:a1:6b:00:e7:ad:21:6e:63:ad:a0:ae: 6a:19:26:40:a7:a3:c8:78:cb:4f:99:b8:e0:71:34:96:8f:70: 45:5e:ce:b6:d3:92:5f:a9:07:40:67:95:f0:2e:52:8a:6e:60: 5d:e8:8d:da:42:13:58:fb:7b:7e:fe:5d:96:86:bd:09:a6:9a: be:f5:ce:9c:95:59:fa:97:ae:88:f3:24:4c:07:f5:c9:75:7a: fc:0a:64:6c:f2:2f:05:77:fb:10:03:58:04:d8:2e:03:e2:ef: 21:ae:b7:fd:11:38:29:6d:ea:06:ce:37:0a:8b:1b:12:2f:8d: ad:d4:ab:ec:f2:d0:14:48:d3:21:c6:e3:88:78:7f:14:28:2b: 54:c9:bc:88:f5:c6:49:41:7f:39:d9:c6:ec:94:20:36:2e:f8: 3f:dd:ec:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7eXAGKeOhYBo+gLklCs+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjUxMjA4MDEwMDMwWhcNMjUxMjA5MDEwMDMwWjAzMTEwLwYDVQQD EygxNTFiZDA5MWM1MGE4MDNkYjU5YjI1NzA5ODFmNThjYTEwMzc1YTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1jRwhjYTNH39imeBJ4eA2yU2f4T 2YFlG+c/RBxXUG7v6Pu7m5s7M7dTIZ0cr82b+ZCxe4aJ59fWsl9PDw5T6O9TAq9j HNWHgDNbsFCtZmVz239hJcglZHFDo5KCud9Zh0yMavrNw310uuPKyeFS98dhl44x WwLuc0i9/sGT2jXAuVmBR5L49no0QfM3zH01/qu6za1/KSeB0Do+ILwzDVtM+P3E gT4a0QbtYoSRRjZ6e5DRC9i2+XmVn0Kf7U26VJGziaw74Ew77uBiBkE14OCaQ8/k 3VdHUCr6x1WiL+ReZxRk1emz4tnaIiXztQqhOMinKGo/NR8V953NzaXynQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUb0JHFCoA9tZslcJgfWMoQN1oqMB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieTALEiK QK8I2adTwbL5jOIKIdF7VhREcED+W6muU0pYBsMgHHe+nRE6PbVko4OWe3gKSj6j VPP2p4yLPXH7QXiIwQASql3NwoqjhAdDNKJKloqg1n5UqejWh9NOKte8IKFrAOet IW5jraCuahkmQKejyHjLT5m44HE0lo9wRV7OttOSX6kHQGeV8C5Sim5gXeiN2kIT WPt7fv5dloa9CaaavvXOnJVZ+peuiPMkTAf1yXV6/ApkbPIvBXf7EANYBNguA+Lv Ia63/RE4KW3qBs43CosbEi+NrdSr7PLQFEjTIcbjiHh/FCgrVMm8iPXGSUF/OdnG 7JQgNi74P93syw== -----END CERTIFICATE-----Generated at Mon Dec 8 10:26:08 2025 by rpki-client