This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json) Hash identifier: 8yyp3jDhUWq4nlt2d0Pj7AdGgeOAbRJryQn4hTljxRg= Subject key identifier: A8:2E:20:B5:8F:DD:0D:1A:AC:BE:0D:6B:AF:9C:5A:F5:68:DA:EC:83 Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019AF3F75B2FC852CBA9BACCB1DA5E54CC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft Manifest number: 1425 Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=) 2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=) 3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=) 4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: LZIqHPU8/BK9b/JQYq2PJHHfifYJwEjRQs33R49zl9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5b:2f:c8:52:cb:a9:ba:cc:b1:da:5e:54:cc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=a82e20b58fdd0d1aacbe0d6baf9c5af568daec83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:5e:2a:9f:30:3d:c8:0e:97:a3:40:2d:f7: 2f:07:30:5c:77:34:60:78:e6:63:05:e2:31:34:f4: cc:3b:44:6b:9a:e2:34:47:fe:4d:cc:8d:99:bb:67: 39:14:2c:64:f0:e6:f2:5a:4d:75:d6:47:df:3c:15: 3e:06:a3:73:c3:4b:f5:50:66:cd:45:44:5e:cc:e6: a4:26:67:8b:f0:a0:42:b3:f5:ca:98:72:07:c2:84: c9:b6:56:02:57:66:7d:7f:be:21:63:7b:c8:de:e0: 03:a6:f8:65:b6:e8:e4:8f:f1:5b:b9:06:cf:b6:a7: 08:7e:e3:6e:4f:32:b4:c1:6a:cb:2a:a7:b8:99:de: af:9e:46:48:04:55:36:ee:78:2f:83:bd:df:1f:aa: 53:53:36:72:45:c4:46:80:2f:c5:2f:95:66:df:8e: 2f:d1:23:6f:cb:86:d7:99:82:3a:6b:be:ab:2d:4d: 88:14:4a:3e:47:d5:32:5b:ba:32:18:81:95:df:c6: dd:44:d6:6c:bc:70:e0:23:de:86:4e:f3:c2:02:21: 69:7f:41:fb:61:b3:eb:5a:ef:2f:f8:14:f6:32:a9: a1:be:25:41:59:86:c4:0d:19:73:5f:02:e4:9e:54: 4d:ca:32:3a:61:51:b9:41:cb:6f:17:16:90:3a:94: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:20:B5:8F:DD:0D:1A:AC:BE:0D:6B:AF:9C:5A:F5:68:DA:EC:83 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:66:ac:2a:a9:e8:a8:c5:eb:e9:26:a4:be:58:37:d7:3c:22: d8:87:39:ec:3d:0d:96:68:1a:db:4e:85:5a:01:34:ba:84:a1: 33:b3:0e:34:31:7b:2f:02:b7:a5:91:5a:a6:8c:27:1e:a6:6e: 1c:57:ec:d4:d0:41:e6:44:e9:39:a0:29:75:74:d4:99:00:6f: 82:94:0c:13:71:b7:28:ad:4a:1a:d0:55:fd:2c:db:a2:a7:42: 19:4e:83:0e:09:93:43:29:89:53:4c:bc:8f:8c:d5:f5:da:f9: 36:d0:2d:6e:29:0d:c0:16:86:76:10:3c:f5:a4:b7:c0:36:df: 99:f5:26:38:4b:d7:2c:b8:62:d6:ed:78:12:d2:4d:7d:cf:0a: 84:3a:fb:f9:76:a1:d5:b9:6d:5c:06:8f:82:97:71:47:0b:7a: 4e:fa:88:17:13:46:5c:15:fd:82:3e:61:72:c5:51:a0:e2:af: f2:24:70:fa:0e:a2:07:50:56:29:69:77:9d:ad:b4:87:45:d4: b2:17:00:53:d1:98:5a:2b:cd:83:10:40:7e:0c:fd:cb:e4:2b: e2:84:bb:a8:a7:c0:72:61:7d:da:02:65:22:35:41:f0:b3:86: bf:dd:63:f8:08:fd:b6:42:0a:15:cf:94:1f:6f:34:e0:e0:3e: 3a:9e:7a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91svyFLLqbrMsdpeVMwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD EyhhODJlMjBiNThmZGQwZDFhYWNiZTBkNmJhZjljNWFmNTY4ZGFlYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm5eKp8wPcgOl6NALfcvBzBcdzRg eOZjBeIxNPTMO0RrmuI0R/5NzI2Zu2c5FCxk8ObyWk111kffPBU+BqNzw0v1UGbN RURezOakJmeL8KBCs/XKmHIHwoTJtlYCV2Z9f74hY3vI3uADpvhltujkj/FbuQbP tqcIfuNuTzK0wWrLKqe4md6vnkZIBFU27ngvg73fH6pTUzZyRcRGgC/FL5Vm344v 0SNvy4bXmYI6a76rLU2IFEo+R9UyW7oyGIGV38bdRNZsvHDgI96GTvPCAiFpf0H7 YbPrWu8v+BT2MqmhviVBWYbEDRlzXwLknlRNyjI6YVG5QctvFxaQOpT9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKguILWP3Q0arL4Na6+cWvVo2uyDMB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmasKqno qMXr6Sakvlg31zwi2Ic57D0Nlmga206FWgE0uoShM7MONDF7LwK3pZFapownHqZu HFfs1NBB5kTpOaApdXTUmQBvgpQME3G3KK1KGtBV/SzboqdCGU6DDgmTQymJU0y8 j4zV9dr5NtAtbikNwBaGdhA89aS3wDbfmfUmOEvXLLhi1u14EtJNfc8KhDr7+Xah 1bltXAaPgpdxRwt6TvqIFxNGXBX9gj5hcsVRoOKv8iRw+g6iB1BWKWl3na20h0XU shcAU9GYWivNgxBAfgz9y+Qr4oS7qKfAcmF92gJlIjVB8LOGv91j+Aj9tkIKFc+U H2804OA+Op56DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:13 2025 by rpki-client