This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json) Hash identifier: rcFz2LuNSrGtY2qdcl9pwrliD3h1SOWDTTCoPRTTBWI= Subject key identifier: 5D:43:5C:B9:34:52:F7:09:3E:6B:2C:FA:A7:BA:77:AD:61:AE:52:7F Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09 Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09 Certificate serial: 019AF1647018CCEF5B0E6D3974343D598572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft Manifest number: 0F75 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: YBO4et2R1IKVOCHqwZmBCQv2e5qbwi0tvOsnWxAdh3w=) 2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:70:18:cc:ef:5b:0e:6d:39:74:34:3d:59:85:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09 Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=5d435cb93452f7093e6b2cfaa7ba77ad61ae527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:dd:7f:5d:a6:a3:84:1d:87:86:d2:35:d5: 5f:c2:88:5e:bd:12:be:b8:36:77:eb:2b:53:53:7a: a0:ff:9a:13:7b:38:c1:b8:4d:e3:07:2c:6b:39:f4: b4:b8:db:e3:90:7d:1f:92:75:5a:e1:bc:d4:f9:82: 31:b9:07:3c:f0:a3:b3:8e:5e:54:6f:10:11:d0:5d: c0:7f:bc:f3:95:3e:a2:ee:47:d9:6b:ed:da:75:48: 8a:87:4c:cb:87:72:38:c3:16:56:18:0d:e8:57:7e: 57:33:df:6b:f7:89:6a:f5:01:7f:e2:a2:8c:1e:1d: 08:d1:47:9a:45:77:47:23:84:6a:83:e0:e1:b1:43: 89:5c:9c:8d:0e:65:99:32:1c:67:55:7c:f9:a1:90: 23:ff:86:cb:c5:f2:b9:03:55:75:8e:95:2b:66:e7: c9:5c:c7:d7:56:22:e3:ae:a4:a6:8c:23:fd:47:10: da:60:26:b0:d8:a5:3d:e9:66:c0:9b:da:d4:be:65: 2c:91:04:0e:18:70:f6:e3:b4:42:f3:b2:40:6f:1e: db:d0:33:4d:a5:c6:d9:78:42:67:00:dc:00:af:57: 69:98:5a:9c:43:1c:4e:0b:e6:00:ee:40:ec:36:e6: 16:20:d4:09:46:ae:d5:9e:85:f7:1c:94:04:93:37: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:5C:B9:34:52:F7:09:3E:6B:2C:FA:A7:BA:77:AD:61:AE:52:7F X509v3 Authority Key Identifier: keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fd:6f:7e:65:2e:b3:87:a2:9c:32:ce:4d:47:c4:7a:76:27: fa:71:02:88:20:35:53:08:5b:86:9a:08:f2:65:77:e5:d1:a8: 09:6b:26:0d:a8:54:c3:4c:79:49:be:8d:6e:55:1d:ba:65:3b: a1:72:56:29:0e:d6:71:c0:c6:d5:b7:0b:3f:e4:69:d9:9a:25: a3:71:54:c9:56:c7:f7:30:df:63:a3:4b:a5:a0:ed:53:89:4a: 3c:8e:b9:78:69:02:1b:39:c7:19:28:bc:7e:7b:5e:fe:16:49: 41:c5:93:d5:f1:e7:8e:f2:4b:3d:14:87:e2:ff:11:95:69:da: 99:f4:5e:31:ea:25:b5:34:89:f6:a0:82:d9:1b:19:5a:52:9f: 02:07:9d:e5:c5:2b:a2:0f:e0:08:46:ce:ec:ef:82:82:66:28: b6:8f:bf:98:04:8e:97:13:5d:6a:5a:14:ba:54:a2:07:50:bd: 85:cd:cc:8e:37:a1:ac:a9:cb:1d:8e:f9:41:f9:dd:2b:a7:4e: fa:d3:d4:51:82:8d:f7:af:14:e5:2e:68:53:d7:ec:44:d1:ad: 37:3b:11:c1:a1:19:0d:09:1c:17:c7:be:69:09:0f:da:80:45: 46:6a:86:9f:20:3a:f9:24:e0:2f:56:36:a4:f7:02:a8:66:5a: 30:ca:d2:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHAYzO9bDm05dDQ9WYVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiN2RjM2QwMjI4MjhlNGY1YjM2YmRlZjdhMThiMGJiMGNm YmFlMDkwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD Eyg1ZDQzNWNiOTM0NTJmNzA5M2U2YjJjZmFhN2JhNzdhZDYxYWU1MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApozdf12mo4Qdh4bSNdVfwohevRK+ uDZ36ytTU3qg/5oTezjBuE3jByxrOfS0uNvjkH0fknVa4bzU+YIxuQc88KOzjl5U bxAR0F3Af7zzlT6i7kfZa+3adUiKh0zLh3I4wxZWGA3oV35XM99r94lq9QF/4qKM Hh0I0UeaRXdHI4Rqg+DhsUOJXJyNDmWZMhxnVXz5oZAj/4bLxfK5A1V1jpUrZufJ XMfXViLjrqSmjCP9RxDaYCaw2KU96WbAm9rUvmUskQQOGHD247RC87JAbx7b0DNN pcbZeEJnANwAr1dpmFqcQxxOC+YA7kDsNuYWINQJRq7VnoX3HJQEkzcg+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1DXLk0UvcJPmss+qe6d61hrlJ/MB8GA1UdIwQY MBaAFDt9w9Aigo5PWza973oYsLsM+64JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGIt NzE5NDhlM2M5YWQ0LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGItNzE5NDhlM2M5YWQ0 LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv1vfmUu s4einDLOTUfEenYn+nECiCA1UwhbhpoI8mV35dGoCWsmDahUw0x5Sb6NblUdumU7 oXJWKQ7WccDG1bcLP+Rp2Zolo3FUyVbH9zDfY6NLpaDtU4lKPI65eGkCGznHGSi8 fnte/hZJQcWT1fHnjvJLPRSH4v8RlWnamfReMeoltTSJ9qCC2RsZWlKfAged5cUr og/gCEbO7O+CgmYoto+/mASOlxNdaloUulSiB1C9hc3MjjehrKnLHY75QfndK6dO +tPUUYKN968U5S5oU9fsRNGtNzsRwaEZDQkcF8e+aQkP2oBFRmqGnyA6+STgL1Y2 pPcCqGZaMMrS8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:10 2025 by rpki-client