This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json) Hash identifier: qNKbIsgAn996Nv4qm0BTnuZXTkaoow3ksQYI6TbtR8Q= Subject key identifier: AA:63:D4:FA:F6:D5:52:A3:96:1A:33:97:36:36:C9:C8:09:87:1C:22 Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab Certificate serial: 019AF240037C2A6C032D035B92236E70ADAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft Manifest number: 11C2 Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: DfIfeCsjxuTLGxOswS1IRTtCtFo.roa (hash: BfLaITLvBopGuXyhXf+VexAjyd8LBGCkT8+9wJK+KLI=) 2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: D3AO+JnPjUR9AS78LHgi9gF/Vwx4sbkF86PEXKKxyLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:03:7c:2a:6c:03:2d:03:5b:92:23:6e:70:ad:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=aa63d4faf6d552a3961a33973636c9c809871c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:6e:49:87:c3:b4:51:d4:1a:68:07:70:cb: 6a:fb:e9:9d:f9:0a:4a:df:d5:ef:68:45:9d:cd:72: b0:5c:66:35:7f:9b:c1:ff:f7:0f:4e:a6:14:13:fc: 89:b0:24:8b:a7:d2:49:0f:b2:32:4b:6e:01:dd:62: 34:06:02:46:ba:7b:25:79:f3:52:e7:8f:d5:af:37: 39:04:6f:7a:2c:f9:87:18:1e:3a:b8:8e:58:bf:22: e2:96:56:56:3c:99:4f:f9:5a:4e:bd:77:0f:c0:d0: 47:e7:56:bf:2c:a5:48:83:7a:ae:5a:e5:ab:da:80: 10:41:f4:d5:a0:86:50:fb:c6:7b:5a:40:70:ee:4b: 2f:2a:c2:10:58:a5:21:96:24:cc:3b:84:4c:22:26: 9b:3c:05:47:ac:f5:4a:d3:37:eb:53:e8:2f:c7:04: 0c:03:9a:05:f3:30:bf:73:a1:a6:7f:32:15:f2:c6: 22:52:a1:06:05:7f:90:36:cf:df:3a:cd:a0:1b:9b: 2f:79:c5:c7:f5:1b:ad:0d:cf:b5:94:0b:f4:c0:84: 8c:2f:31:27:75:49:7c:b5:1d:d3:d5:21:6a:c7:80: 67:f0:40:45:ce:8e:f0:99:46:e5:6c:1d:95:17:40: 87:e9:56:0c:a9:2d:ed:87:52:ef:00:52:13:47:32: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:D4:FA:F6:D5:52:A3:96:1A:33:97:36:36:C9:C8:09:87:1C:22 X509v3 Authority Key Identifier: keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:0b:0c:88:b4:82:bc:14:cb:c0:81:2e:22:03:8f:b4:84:0b: d4:d0:3e:25:8d:b2:e4:4b:c0:76:93:1a:4f:5f:32:37:9a:e2: cf:27:b8:d8:68:c2:0c:13:9a:ff:fc:b4:73:de:e3:46:5d:13: a4:1b:35:dd:7e:45:83:64:ad:4f:77:41:a4:61:5a:c9:b8:72: 18:94:44:67:26:0d:91:87:b9:98:e7:56:39:3b:8e:b6:1b:6f: b3:59:ce:98:e4:d9:30:a4:13:7c:f6:e0:bf:d6:62:bb:70:d3: 08:db:b7:9d:6b:b5:f2:e7:33:a2:f6:26:3b:e7:43:ea:9b:c1: fa:8c:39:6d:eb:3d:9f:77:1a:06:5c:39:ef:2d:cd:3d:6d:ce: ff:54:13:65:d7:c5:18:9e:ae:d4:9d:22:8f:b8:6c:15:3c:75: 57:9d:14:76:71:ca:e7:61:4c:89:cc:95:f9:ca:3d:5c:0b:65: fc:9e:03:e3:99:18:cd:03:e9:b0:8f:ea:5e:55:32:3a:e8:d1: 92:ec:d4:4d:51:cb:b3:67:35:1d:5a:ac:a8:09:7e:7b:50:3a: f0:9d:71:d4:09:f2:8d:cc:2d:ee:31:90:b7:78:3c:83:c0:7f: 58:3f:39:7e:b0:31:d6:66:2c:00:6b:a5:25:98:12:d3:91:18: 5a:27:db:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAN8KmwDLQNbkiNucK2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjlmYjE5MWJlZTUxY2RjNzQxNGE2OTYzMTk3Zjg2YmJm MzEzYWIwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD EyhhYTYzZDRmYWY2ZDU1MmEzOTYxYTMzOTczNjM2YzljODA5ODcxYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfZuSYfDtFHUGmgHcMtq++md+QpK 39XvaEWdzXKwXGY1f5vB//cPTqYUE/yJsCSLp9JJD7IyS24B3WI0BgJGunslefNS 54/Vrzc5BG96LPmHGB46uI5YvyLillZWPJlP+VpOvXcPwNBH51a/LKVIg3quWuWr 2oAQQfTVoIZQ+8Z7WkBw7ksvKsIQWKUhliTMO4RMIiabPAVHrPVK0zfrU+gvxwQM A5oF8zC/c6GmfzIV8sYiUqEGBX+QNs/fOs2gG5svecXH9RutDc+1lAv0wISMLzEn dUl8tR3T1SFqx4Bn8EBFzo7wmUblbB2VF0CH6VYMqS3th1LvAFITRzL8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpj1Pr21VKjlhozlzY2ycgJhxwiMB8GA1UdIwQY MBaAFKNp+xkb7lHNx0FKaWMZf4a78xOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yMGRhNjAtYzcxOS00YmUxLThlNGYt ZTE4MDUyZjM4MWJiLzEvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yMGRhNjAtYzcxOS00YmUxLThlNGYtZTE4MDUyZjM4MWJi LzEvbzJuN0dSdnVVYzNIUVVwcFl4bF9ocnZ6RTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAsMiLSC vBTLwIEuIgOPtIQL1NA+JY2y5EvAdpMaT18yN5rizye42GjCDBOa//y0c97jRl0T pBs13X5Fg2StT3dBpGFaybhyGJREZyYNkYe5mOdWOTuOthtvs1nOmOTZMKQTfPbg v9Ziu3DTCNu3nWu18uczovYmO+dD6pvB+ow5bes9n3caBlw57y3NPW3O/1QTZdfF GJ6u1J0ij7hsFTx1V50UdnHK52FMicyV+co9XAtl/J4D45kYzQPpsI/qXlUyOujR kuzUTVHLs2c1HVqsqAl+e1A68J1x1Anyjcwt7jGQt3g8g8B/WD85frAx1mYsAGul JZgS05EYWifbIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:35 2025 by rpki-client