This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json) Hash identifier: O2huFAugdIAPlI3j7909YfID/813Hw2Or5gdfyUjN28= Subject key identifier: 3C:AB:20:32:4B:E8:20:AC:FA:2E:5F:DD:6D:0C:C5:CE:07:5F:8D:14 Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Certificate serial: 019AF3F759A752F890A377027206EA37AEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: y5i5baHX0AVQqw24CsUTtk+ZkVWDLaDEJPTrkXCy2EA=) 2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:59:a7:52:f8:90:a3:77:02:72:06:ea:37:ae:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=3cab20324be820acfa2e5fdd6d0cc5ce075f8d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:4c:18:3f:43:05:f4:70:3f:d6:cb:26:0a: 46:35:16:18:1c:58:19:14:78:98:16:d4:71:d1:6f: 80:b8:1f:65:ad:87:f9:ba:5a:7c:51:b2:a1:37:0a: a5:73:47:a3:c6:a0:b8:7d:b8:a2:b4:af:c4:2b:72: fb:42:6d:be:ac:e7:df:42:53:b4:9f:ad:e5:25:04: d5:92:ee:a0:67:c3:0c:b5:1e:54:31:d9:c7:7f:12: 03:7c:7a:fd:2c:4b:ae:59:a8:d0:be:1a:f1:52:9c: 19:1d:c5:97:0a:ad:32:6a:08:15:a9:2f:2e:15:21: 77:aa:82:45:b4:56:c1:b3:7d:7e:05:be:c3:1a:9f: 29:17:16:f0:be:c1:89:64:25:f5:4a:0a:29:a8:cf: 4a:f9:70:9e:3e:96:24:ce:8f:9c:6e:da:d2:01:ea: e9:4c:5d:aa:51:37:1a:cc:59:78:06:c1:ca:09:1f: 3b:66:93:6e:be:e4:21:6a:e5:c7:ec:33:bd:7b:aa: 86:da:e9:8f:43:33:14:dc:bc:fd:13:fb:b6:b1:36: a9:2b:44:d2:c6:5b:ef:9a:cb:da:fb:2a:85:ab:c5: 1c:63:0e:3c:34:43:17:f8:bb:03:8c:32:34:46:b9: 1f:53:7c:23:0e:47:9e:6a:cd:43:9b:05:4e:dd:23: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:20:32:4B:E8:20:AC:FA:2E:5F:DD:6D:0C:C5:CE:07:5F:8D:14 X509v3 Authority Key Identifier: keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ba:13:88:cb:ae:fc:4c:14:01:96:ff:c6:51:c6:5a:de:e3: c4:f5:68:90:d9:6c:be:28:19:5d:aa:40:b1:30:51:bf:82:f6: 46:a2:ce:ec:d8:e8:93:06:07:e0:c5:d3:22:4e:1a:66:4c:ba: 72:96:58:40:e0:89:bf:f0:ed:ac:00:61:ae:92:62:e4:a8:c3: 6b:64:fd:af:f5:11:14:c6:8d:e2:e9:11:f3:42:0b:d2:79:29: a7:06:bf:83:41:96:49:e0:82:cb:ef:fa:98:f0:df:36:08:c2: 62:9c:b0:de:a2:0f:49:7c:4e:82:ea:dd:98:4c:1a:99:eb:02: 90:3c:c5:f5:b8:97:09:68:88:76:09:14:99:cd:16:1c:8d:76: 5a:04:2d:bf:b0:71:b9:62:df:a0:7a:17:ad:1e:86:9d:16:05: b8:14:39:b2:f0:75:05:99:54:d7:6a:3f:89:bd:6c:a3:dc:02: 16:a2:a8:17:e7:e4:57:cf:77:19:20:b0:ef:40:2e:c2:21:82: 3a:51:67:12:ee:1e:29:27:d6:b8:c4:e7:d8:45:f8:aa:d0:86: 7b:7b:f3:6f:a7:4a:aa:7d:f8:92:15:5a:f9:ce:6c:e3:cd:7f: 56:c1:87:ac:a0:2b:d6:bd:92:20:e4:8f:91:c1:14:9b:ef:01: 5e:eb:87:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91mnUviQo3cCcgbqN67/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi NTFhNWEwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD EygzY2FiMjAzMjRiZTgyMGFjZmEyZTVmZGQ2ZDBjYzVjZTA3NWY4ZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf1MGD9DBfRwP9bLJgpGNRYYHFgZ FHiYFtRx0W+AuB9lrYf5ulp8UbKhNwqlc0ejxqC4fbiitK/EK3L7Qm2+rOffQlO0 n63lJQTVku6gZ8MMtR5UMdnHfxIDfHr9LEuuWajQvhrxUpwZHcWXCq0yaggVqS8u FSF3qoJFtFbBs31+Bb7DGp8pFxbwvsGJZCX1SgopqM9K+XCePpYkzo+cbtrSAerp TF2qUTcazFl4BsHKCR87ZpNuvuQhauXH7DO9e6qG2umPQzMU3Lz9E/u2sTapK0TS xlvvmsva+yqFq8UcYw48NEMX+LsDjDI0RrkfU3wjDkeeas1DmwVO3SPHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyrIDJL6CCs+i5f3W0Mxc4HX40UMB8GA1UdIwQY MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7oTiMuu /EwUAZb/xlHGWt7jxPVokNlsvigZXapAsTBRv4L2RqLO7NjokwYH4MXTIk4aZky6 cpZYQOCJv/DtrABhrpJi5KjDa2T9r/URFMaN4ukR80IL0nkppwa/g0GWSeCCy+/6 mPDfNgjCYpyw3qIPSXxOgurdmEwamesCkDzF9biXCWiIdgkUmc0WHI12WgQtv7Bx uWLfoHoXrR6GnRYFuBQ5svB1BZlU12o/ib1so9wCFqKoF+fkV893GSCw70AuwiGC OlFnEu4eKSfWuMTn2EX4qtCGe3vzb6dKqn34khVa+c5s481/VsGHrKAr1r2SIOSP kcEUm+8BXuuH0A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:28 2025 by rpki-client