This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json) Hash identifier: rqj9IhwfQRGKQ9VJ3lz5J4WzNYiIeQd9Efk9r/7oXIA= Subject key identifier: 8E:AF:77:EE:F5:61:94:C4:74:AF:0E:CE:66:3A:E4:9C:A3:89:8D:42 Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b Certificate serial: 019AF0BF7E47B65A62CA535606BD149D61BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft Manifest number: 05B7 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: OppgRRFeG9RNMjEFpgPLF3HSHbZi+8xmJuz8L26NqbU=) 2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7e:47:b6:5a:62:ca:53:56:06:bd:14:9d:61:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=8eaf77eef56194c474af0ece663ae49ca3898d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:e7:4c:65:a6:d1:0e:a2:77:87:e3:5d:45: e2:b7:07:36:0e:9f:ca:5b:ae:23:a4:02:d7:50:fd: b0:c2:25:06:7b:4a:cb:c4:4c:d8:e3:ff:1d:02:51: a5:27:0e:09:a6:8a:ab:1b:db:79:09:4e:01:a2:4e: ee:cd:4c:8f:6d:76:e9:80:9e:56:ca:95:be:eb:0e: fb:ea:1d:e1:ef:7d:d7:12:11:ca:23:28:33:f1:41: 24:b6:83:71:1a:08:c0:61:10:a4:4d:09:7f:ac:bc: 0d:04:35:c8:e2:83:90:90:a4:93:36:84:12:be:d4: ee:53:bb:af:f3:d6:3b:80:d5:50:34:85:d6:04:0c: f9:89:01:21:9a:c9:9f:35:e8:3f:b6:82:7b:2a:6b: d5:5a:53:f4:18:b8:b9:8e:7f:1a:f9:16:07:ee:a8: 3f:ec:31:ad:5a:41:4d:46:c1:dd:a4:4c:7d:30:8f: fa:21:be:3e:a9:1b:72:59:21:32:72:28:8c:ac:12: 27:2a:a3:eb:48:38:02:76:fd:54:16:ea:67:3b:53: 55:10:0e:3e:a3:9a:69:53:e3:05:10:ac:91:75:4b: 00:71:24:fd:cd:c7:b7:2f:9d:37:f3:13:3c:5b:4b: e7:a6:39:b4:ef:64:5d:2e:48:93:76:47:2c:80:23: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:77:EE:F5:61:94:C4:74:AF:0E:CE:66:3A:E4:9C:A3:89:8D:42 X509v3 Authority Key Identifier: keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c5:59:cd:ca:9c:7b:1c:62:16:80:18:c6:ef:f6:49:db:bb: 34:1f:e7:c3:90:10:fe:c5:d1:0b:a2:2a:ae:7e:bb:71:eb:2c: 45:2b:e7:4c:e4:f0:7e:49:e1:bf:9b:ac:58:20:98:c4:c0:49: 3e:d1:84:1a:3f:7e:39:5f:fb:82:37:0d:b7:bf:30:6e:cd:0c: cf:56:3d:de:e1:25:cf:7a:e3:3b:82:4f:fe:31:c0:0c:48:29: 93:66:c0:8e:a2:bd:c3:46:8f:e5:5c:46:f5:94:1d:85:42:d1: 8f:7b:91:30:c9:c3:96:87:91:27:7e:58:de:b0:93:c4:e0:6f: a7:b6:06:e9:af:c9:83:89:1b:95:a4:3b:90:8d:f7:98:ae:07: 45:84:b7:aa:27:4f:27:70:ae:ec:31:fa:50:70:0c:0f:7a:db: c2:2e:6c:7a:11:e3:a7:a3:77:86:74:f1:08:cf:18:a0:e4:3f: e1:fd:6a:30:3d:6e:64:ed:94:3d:ff:b5:2e:ce:00:47:80:8a: ad:fe:10:80:2c:22:0f:ca:13:df:a6:2e:9e:0a:9e:35:74:50: 2f:97:6c:c6:8c:48:83:ad:42:d5:10:fd:6e:26:8d:44:ed:a2: d5:dd:2d:27:d2:8b:dd:a3:6b:c3:2e:74:44:62:a2:38:1c:c9: 28:54:37:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv35HtlpiylNWBr0UnWG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1 NjVmMWIwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD Eyg4ZWFmNzdlZWY1NjE5NGM0NzRhZjBlY2U2NjNhZTQ5Y2EzODk4ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus/nTGWm0Q6id4fjXUXitwc2Dp/K W64jpALXUP2wwiUGe0rLxEzY4/8dAlGlJw4JpoqrG9t5CU4Bok7uzUyPbXbpgJ5W ypW+6w776h3h733XEhHKIygz8UEktoNxGgjAYRCkTQl/rLwNBDXI4oOQkKSTNoQS vtTuU7uv89Y7gNVQNIXWBAz5iQEhmsmfNeg/toJ7KmvVWlP0GLi5jn8a+RYH7qg/ 7DGtWkFNRsHdpEx9MI/6Ib4+qRtyWSEyciiMrBInKqPrSDgCdv1UFupnO1NVEA4+ o5ppU+MFEKyRdUsAcST9zce3L5038xM8W0vnpjm072RdLkiTdkcsgCP9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6vd+71YZTEdK8OzmY65JyjiY1CMB8GA1UdIwQY MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8VZzcqc exxiFoAYxu/2Sdu7NB/nw5AQ/sXRC6Iqrn67cessRSvnTOTwfknhv5usWCCYxMBJ PtGEGj9+OV/7gjcNt78wbs0Mz1Y93uElz3rjO4JP/jHADEgpk2bAjqK9w0aP5VxG 9ZQdhULRj3uRMMnDloeRJ35Y3rCTxOBvp7YG6a/Jg4kblaQ7kI33mK4HRYS3qidP J3Cu7DH6UHAMD3rbwi5sehHjp6N3hnTxCM8YoOQ/4f1qMD1uZO2UPf+1Ls4AR4CK rf4QgCwiD8oT36YungqeNXRQL5dsxoxIg61C1RD9biaNRO2i1d0tJ9KL3aNrwy50 RGKiOBzJKFQ30w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:57 2025 by rpki-client