This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: EbamCYTIqTn+/Dmit7gGzV+4KmHXj5q6UIM5gjJ6Jkw= Subject key identifier: 0D:87:C6:9E:99:02:D0:BE:EB:55:EF:86:B7:45:DE:F7:6A:21:07:3E Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019B21AC25FD5D747D82CB2F2B9BA20E4C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 17C2 Signing time: Mon 15 Dec 2025 11:01:28 +0000 Manifest this update: Mon 15 Dec 2025 11:01:28 +0000 Manifest next update: Tue 16 Dec 2025 11:01:28 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (hash: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=) 3: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 4: 87A59tFx6zF_AoyfTTInJAFnkcA.roa (hash: unw4vIAiAfpS55i1OMoFYw1rzCbyU808aYVca3OlIMc=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa (hash: lyNsMl43jND1X0aQMPVXU9dtabwJ/cC1LPXFbBVJ4vY=) 7: YBvNoajDSlWBD9rpf_g7I4GMsIw.roa (hash: Dj39vgxSEEOQgYRsBD+Yi70TljAy8Kf7UHt7BDtlwUU=) 8: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 9: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: 68IWoBYCwZTTw8boCM6CgKeuCe0/c6GWKyWnh/VHtIA=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ac:25:fd:5d:74:7d:82:cb:2f:2b:9b:a2:0e:4c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Dec 15 11:01:28 2025 GMT Not After : Dec 16 11:01:28 2025 GMT Subject: CN=0d87c69e9902d0beeb55ef86b745def76a21073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:9a:7e:0e:b6:e0:22:d7:ea:d0:13:67:18: 14:29:66:f4:bb:1c:32:ce:f0:04:f4:20:39:54:f3: 0c:34:e5:95:57:5c:36:10:0c:e0:ee:5b:32:81:ea: 9c:a3:58:98:5d:5f:d5:56:e3:d9:7d:db:61:7a:f4: 29:22:52:87:90:7e:2a:77:4d:85:e0:50:52:17:a8: 36:a5:bf:67:2f:87:49:2b:5b:d0:39:0e:67:3a:08: b4:c7:df:7c:2c:b8:0a:b3:10:e5:7d:b5:77:80:72: 6f:eb:e3:85:46:80:f2:34:ae:bd:c1:41:69:4b:7d: 6a:dc:a6:06:5b:61:05:fb:db:f9:50:95:79:5b:3c: 13:df:14:b9:af:74:e2:f2:61:cc:4a:d8:9a:ab:29: 94:3c:e9:92:7e:42:45:c6:8c:8d:e9:dd:6e:45:61: e8:c9:d5:20:19:02:c2:f8:5b:ea:c3:8c:73:bd:e9: 3d:a8:38:ae:1b:76:dd:99:6c:f2:e1:91:90:c9:a9: c1:8a:33:0f:c7:7f:24:94:b4:2d:fb:5d:5a:7b:4c: 2d:d6:ae:23:9d:93:06:ef:fa:12:94:90:31:46:a5: 40:08:a5:ac:e9:36:7c:fc:2d:cc:eb:c9:85:8d:cc: 69:9d:b8:71:32:6c:83:aa:e0:3a:b3:ec:5b:e1:7c: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:C6:9E:99:02:D0:BE:EB:55:EF:86:B7:45:DE:F7:6A:21:07:3E X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5f:fb:4f:7b:ad:7d:29:fb:e5:48:04:ae:90:62:70:43:fb: 92:85:46:05:09:8e:b5:3b:65:23:18:7f:fd:c8:ea:49:76:69: a9:f5:2a:ed:63:96:9c:b0:b0:7b:82:5a:4f:dc:6b:86:5a:88: 68:ab:ed:4a:6b:63:e6:92:e3:78:ac:95:f9:b2:be:9c:11:84: d9:2f:b1:92:92:29:98:a5:21:b9:70:a6:92:35:12:ea:a5:91: 4e:9f:e0:96:3e:13:96:7d:16:d7:08:02:bf:e3:5f:e9:d4:3d: fb:97:ed:09:fb:21:7a:6d:d6:61:9f:a3:6c:f0:3f:25:be:e4: 92:c5:60:87:48:4b:14:68:c9:27:f2:e1:cc:21:17:a4:3a:17: c2:f0:cd:6b:49:c2:9d:da:d2:98:5a:e6:76:41:5e:7f:3e:74: 04:a2:db:5f:76:ed:d9:b4:11:76:ad:71:5b:99:19:29:25:f3: 8d:58:4a:54:3a:cc:e0:02:45:0a:81:1f:18:79:9b:ed:b2:09: 68:48:ee:65:64:f9:3c:6f:10:e3:29:5f:c7:30:85:5b:28:52: cf:9e:3d:a5:f5:58:27:db:1b:2f:b9:2a:37:bc:59:b3:92:d1: fa:68:40:57:9d:6b:ee:51:e3:59:72:19:9b:a5:f9:2e:5c:3a: 05:2a:fc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshrCX9XXR9gssvK5uiDkxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUxMjE1MTEwMTI4WhcNMjUxMjE2MTEwMTI4WjAzMTEwLwYDVQQD EygwZDg3YzY5ZTk5MDJkMGJlZWI1NWVmODZiNzQ1ZGVmNzZhMjEwNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCGafg624CLX6tATZxgUKWb0uxwy zvAE9CA5VPMMNOWVV1w2EAzg7lsygeqco1iYXV/VVuPZfdthevQpIlKHkH4qd02F 4FBSF6g2pb9nL4dJK1vQOQ5nOgi0x998LLgKsxDlfbV3gHJv6+OFRoDyNK69wUFp S31q3KYGW2EF+9v5UJV5WzwT3xS5r3Ti8mHMStiaqymUPOmSfkJFxoyN6d1uRWHo ydUgGQLC+Fvqw4xzvek9qDiuG3bdmWzy4ZGQyanBijMPx38klLQt+11ae0wt1q4j nZMG7/oSlJAxRqVACKWs6TZ8/C3M68mFjcxpnbhxMmyDquA6s+xb4XzS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2Hxp6ZAtC+61XvhrdF3vdqIQc+MB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl/7T3ut fSn75UgErpBicEP7koVGBQmOtTtlIxh//cjqSXZpqfUq7WOWnLCwe4JaT9xrhlqI aKvtSmtj5pLjeKyV+bK+nBGE2S+xkpIpmKUhuXCmkjUS6qWRTp/glj4Tln0W1wgC v+Nf6dQ9+5ftCfshem3WYZ+jbPA/Jb7kksVgh0hLFGjJJ/LhzCEXpDoXwvDNa0nC ndrSmFrmdkFefz50BKLbX3bt2bQRdq1xW5kZKSXzjVhKVDrM4AJFCoEfGHmb7bIJ aEjuZWT5PG8Q4ylfxzCFWyhSz549pfVYJ9sbL7kqN7xZs5LR+mhAV51r7lHjWXIZ m6X5Llw6BSr86w== -----END CERTIFICATE-----Generated at Mon Dec 15 20:01:01 2025 by rpki-client