This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json) Hash identifier: DIGYI4sttCpQ+QqH34znOmWnLdBrDDmAZgtF8qP7HoQ= Subject key identifier: 66:75:49:F4:0E:FA:FD:3D:20:A3:6A:A8:23:6C:0C:75:47:40:8D:FF Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Certificate serial: 019AF0BF09D8E0EA970DA5DC05BCA8E6FEF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft Manifest number: 0B60 Signing time: Fri 05 Dec 2025 23:00:42 +0000 Manifest this update: Fri 05 Dec 2025 23:00:42 +0000 Manifest next update: Sat 06 Dec 2025 23:00:42 +0000 Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: vIVPD8k3IE07Y9426R1jAkzZIiw/iiRwK7UbAPJmlj8=) 2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:09:d8:e0:ea:97:0d:a5:dc:05:bc:a8:e6:fe:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Validity Not Before: Dec 5 23:00:42 2025 GMT Not After : Dec 6 23:00:42 2025 GMT Subject: CN=667549f40efafd3d20a36aa8236c0c7547408dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:ba:ba:a4:f3:56:aa:dd:2e:29:88:1e:b1: 1e:cb:ab:3d:5a:97:d1:43:6f:b1:7a:56:68:b4:cb: ab:ad:a4:b2:ff:38:c4:f6:77:da:bf:0a:74:4f:70: d1:e9:66:9b:2e:a4:25:bf:57:44:95:bf:8b:28:39: e7:c4:88:59:5f:29:d0:85:67:03:85:7a:b6:89:28: 54:40:bb:f1:bb:1c:fd:ff:28:2b:63:1d:53:58:48: 3d:5c:11:72:0a:7b:99:a0:5d:be:03:37:fe:eb:b4: 33:2e:e5:e4:6d:50:bb:e8:95:4e:39:b5:f0:b8:19: 3a:78:6b:5a:43:28:b7:e6:96:99:d3:83:b8:9b:3d: c4:ef:70:a9:dc:b0:b6:82:4b:28:1b:6f:a4:60:bf: 3c:d4:3a:b4:d3:b5:2d:a8:a1:24:20:ed:07:df:6d: db:66:31:90:25:97:5e:ab:ac:14:32:f4:c6:fc:6e: 73:bc:82:d9:a9:54:dc:f8:68:58:37:ce:e4:06:81: 9e:98:93:c0:23:33:05:12:4e:19:0d:57:6d:cb:ed: d3:33:09:65:fe:89:fa:a5:f1:e3:0c:0e:c8:46:38: fb:ca:50:04:e5:76:13:ec:06:4f:dc:82:ac:1c:f8: 6e:b4:4e:36:60:fc:e6:0d:b8:50:1a:5a:82:88:d7: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:75:49:F4:0E:FA:FD:3D:20:A3:6A:A8:23:6C:0C:75:47:40:8D:FF X509v3 Authority Key Identifier: keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:9a:00:67:d4:da:4e:35:e0:69:83:6c:e5:8d:2b:df:99: fb:15:2f:f7:16:f3:bf:de:ba:80:a3:86:bd:51:cc:be:63:0a: 02:d3:96:34:90:76:9b:1c:69:2e:58:fa:d5:dd:bb:c2:ce:7a: 0d:87:2a:db:be:97:30:01:44:09:f0:af:41:28:ed:12:37:fc: a9:ca:2d:8b:c4:87:5a:ce:e7:fa:c7:5a:a9:04:f1:07:b8:fb: 73:66:4c:5e:b5:c2:b0:09:e9:bc:b0:1a:3a:57:5c:3e:26:a5: b6:3a:50:07:c6:6b:ae:25:53:55:0a:5d:9b:7b:e8:4e:79:98: 76:d2:cf:5c:20:46:41:bf:8b:13:dc:60:c6:b7:78:b1:70:da: f2:9e:f4:cd:34:59:7c:6e:ca:64:2e:1c:b4:40:d4:92:ba:a0: 11:f0:02:81:51:97:bb:ac:c3:9e:df:20:98:25:2f:ad:a1:10: a2:96:47:14:c4:74:c7:b8:e7:1a:7a:d7:a7:a0:f2:e9:c7:f5: 54:dc:59:0a:a8:e9:02:65:4d:01:5c:9d:a3:96:f8:0e:7d:f0: 52:d4:00:2d:4c:d0:a5:11:d6:da:36:f0:e9:ca:76:b7:4e:0b: 2e:5c:78:aa:fe:f0:a5:b6:4c:8c:38:1c:bb:ca:21:8a:53:09: 88:60:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwnY4OqXDaXcBbyo5v7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj NzRhZjEwHhcNMjUxMjA1MjMwMDQyWhcNMjUxMjA2MjMwMDQyWjAzMTEwLwYDVQQD Eyg2Njc1NDlmNDBlZmFmZDNkMjBhMzZhYTgyMzZjMGM3NTQ3NDA4ZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYi6uqTzVqrdLimIHrEey6s9WpfR Q2+xelZotMurraSy/zjE9nfavwp0T3DR6WabLqQlv1dElb+LKDnnxIhZXynQhWcD hXq2iShUQLvxuxz9/ygrYx1TWEg9XBFyCnuZoF2+Azf+67QzLuXkbVC76JVOObXw uBk6eGtaQyi35paZ04O4mz3E73Cp3LC2gksoG2+kYL881Dq007UtqKEkIO0H323b ZjGQJZdeq6wUMvTG/G5zvILZqVTc+GhYN87kBoGemJPAIzMFEk4ZDVdty+3TMwll /on6pfHjDA7IRjj7ylAE5XYT7AZP3IKsHPhutE42YPzmDbhQGlqCiNcJqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ1SfQO+v09IKNqqCNsDHVHQI3/MB8GA1UdIwQY MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsCaAGfU 2k414GmDbOWNK9+Z+xUv9xbzv966gKOGvVHMvmMKAtOWNJB2mxxpLlj61d27ws56 DYcq276XMAFECfCvQSjtEjf8qcoti8SHWs7n+sdaqQTxB7j7c2ZMXrXCsAnpvLAa OldcPialtjpQB8ZrriVTVQpdm3voTnmYdtLPXCBGQb+LE9xgxrd4sXDa8p70zTRZ fG7KZC4ctEDUkrqgEfACgVGXu6zDnt8gmCUvraEQopZHFMR0x7jnGnrXp6Dy6cf1 VNxZCqjpAmVNAVydo5b4Dn3wUtQALUzQpRHW2jbw6cp2t04LLlx4qv7wpbZMjDgc u8ohilMJiGA2Og== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:26 2025 by rpki-client