This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json) Hash identifier: E/4uVlteQ1fIejdRIBebdAMHGnE5wPwaE3D7w+EkfQg= Subject key identifier: 49:CA:FB:E6:22:BC:BD:6D:0A:BB:8F:5A:FB:13:71:D3:B5:60:42:E6 Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019B27E44919FA029F9E7FE14132156464A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft Manifest number: 0C77 Signing time: Tue 16 Dec 2025 16:00:30 +0000 Manifest this update: Tue 16 Dec 2025 16:00:30 +0000 Manifest next update: Wed 17 Dec 2025 16:00:30 +0000 Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=) 2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: bmTge+I2N66Nu+5CYWgiS2Z3RD/oAG2bnaz/1vVz5Do=) 3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=) 4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:49:19:fa:02:9f:9e:7f:e1:41:32:15:64:64:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Dec 16 16:00:30 2025 GMT Not After : Dec 17 16:00:30 2025 GMT Subject: CN=49cafbe622bcbd6d0abb8f5afb1371d3b56042e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:42:bd:c7:2f:06:6e:30:3b:a9:76:16:2e: ce:0e:f4:42:63:eb:f4:09:8d:d8:1b:cd:cf:d0:9b: 50:8e:d9:0b:79:cb:2d:9c:30:f9:70:66:59:db:87: ed:6c:45:79:34:86:76:23:de:cd:08:35:fe:8f:73: 25:00:bc:eb:0c:10:1c:0b:4d:04:09:7a:81:a4:59: e0:73:02:49:77:3e:f2:a0:45:94:0e:d4:e2:ea:98: 27:d4:5c:a5:27:64:4d:23:9e:02:02:b3:ab:96:ad: 45:b7:38:ca:8d:9e:1f:8b:99:3c:aa:5a:ec:6a:6c: 2f:c3:23:04:77:a2:7d:af:6d:28:36:c3:d2:b3:cf: 1e:3e:9a:3a:d2:a5:5c:6e:77:c4:71:98:b4:45:55: fe:d4:8b:7c:64:25:d0:18:c6:a5:41:a4:18:34:70: a2:8b:8a:a8:e4:8d:c8:c2:08:16:1f:e2:69:a8:45: df:6c:53:3b:24:3e:55:94:d3:3b:7c:b8:85:35:b5: 2e:62:f3:be:56:1f:8d:bd:91:7c:a5:74:e6:23:cf: a4:dd:b2:45:9e:04:2e:75:61:0f:62:3f:67:a8:c3: 0b:52:8e:8b:c4:03:89:a7:ca:08:a7:09:33:66:88: 77:8c:83:c0:92:6e:57:9e:9c:d0:c0:ff:9b:41:bf: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:FB:E6:22:BC:BD:6D:0A:BB:8F:5A:FB:13:71:D3:B5:60:42:E6 X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f9:ad:cd:46:97:35:94:eb:41:07:34:62:4d:74:2c:2f:28: 4f:e9:dc:a1:02:88:a3:2e:3d:b7:ad:21:dc:38:57:a9:eb:dd: 86:e7:49:44:94:4a:70:d6:2b:88:3c:e1:ca:d9:a5:c9:7b:b4: 2c:50:c0:9e:97:78:39:41:b3:e9:b9:71:18:92:8e:2f:55:cd: f4:9a:db:8a:6c:46:82:20:a2:9d:ad:62:a7:86:b5:df:00:f8: e2:d6:7f:37:e5:a4:98:27:f0:e5:b0:51:91:2f:67:2a:70:0b: 64:d1:3f:9a:e5:9f:fb:3d:c6:bb:4d:56:cd:38:2f:1e:d6:37: c6:4f:0f:19:19:69:87:53:45:6a:3f:7b:7e:d6:c0:85:e2:c7: 6e:75:51:b0:4a:1a:b4:47:6b:59:0c:a1:7c:11:d2:f4:cb:28: 6d:49:8a:2b:c9:81:f1:50:95:e2:23:11:33:0c:1d:75:ef:de: 9f:20:34:ef:9f:17:a7:09:22:c5:ad:62:c1:2f:d3:1e:02:b9: 9c:f5:a9:a3:0f:49:7e:66:c0:fe:96:6e:25:16:f3:d8:ae:36: 7d:5a:8a:da:bf:b5:16:c0:d5:b4:6d:1b:1e:3f:c5:83:33:3d: b5:41:b2:25:23:53:89:58:83:f6:8f:2b:97:fa:ac:f3:fd:8d: 7e:76:49:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5EkZ+gKfnn/hQTIVZGSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjUxMjE2MTYwMDMwWhcNMjUxMjE3MTYwMDMwWjAzMTEwLwYDVQQD Eyg0OWNhZmJlNjIyYmNiZDZkMGFiYjhmNWFmYjEzNzFkM2I1NjA0MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta5CvccvBm4wO6l2Fi7ODvRCY+v0 CY3YG83P0JtQjtkLecstnDD5cGZZ24ftbEV5NIZ2I97NCDX+j3MlALzrDBAcC00E CXqBpFngcwJJdz7yoEWUDtTi6pgn1FylJ2RNI54CArOrlq1FtzjKjZ4fi5k8qlrs amwvwyMEd6J9r20oNsPSs88ePpo60qVcbnfEcZi0RVX+1It8ZCXQGMalQaQYNHCi i4qo5I3IwggWH+JpqEXfbFM7JD5VlNM7fLiFNbUuYvO+Vh+NvZF8pXTmI8+k3bJF ngQudWEPYj9nqMMLUo6LxAOJp8oIpwkzZoh3jIPAkm5XnpzQwP+bQb/zOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnK++YivL1tCruPWvsTcdO1YELmMB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePmtzUaX NZTrQQc0Yk10LC8oT+ncoQKIoy49t60h3DhXqevdhudJRJRKcNYriDzhytmlyXu0 LFDAnpd4OUGz6blxGJKOL1XN9JrbimxGgiCina1ip4a13wD44tZ/N+WkmCfw5bBR kS9nKnALZNE/muWf+z3Gu01WzTgvHtY3xk8PGRlph1NFaj97ftbAheLHbnVRsEoa tEdrWQyhfBHS9MsobUmKK8mB8VCV4iMRMwwdde/enyA0758Xpwkixa1iwS/THgK5 nPWpow9JfmbA/pZuJRbz2K42fVqK2r+1FsDVtG0bHj/FgzM9tUGyJSNTiViD9o8r l/qs8/2NfnZJHA== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:39 2025 by rpki-client