This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json) Hash identifier: eQdbEKNJVKHtLBBZSsLvQ2ukp/qEbtSaT3ImeIMLUm4= Subject key identifier: 09:61:2B:B0:57:7E:71:D8:EF:C4:46:E7:8A:99:3D:50:3C:70:7B:BD Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6 Certificate serial: 019B3D906D03A62D97DA75783A9F72E49557 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft Manifest number: 0679 Signing time: Sat 20 Dec 2025 21:00:33 +0000 Manifest this update: Sat 20 Dec 2025 21:00:33 +0000 Manifest next update: Sun 21 Dec 2025 21:00:33 +0000 Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=) 2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: K2loVgO747kihUDYvMXKj1CmpfhZZhjiFzLzeliRZYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6d:03:a6:2d:97:da:75:78:3a:9f:72:e4:95:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6 Validity Not Before: Dec 20 21:00:33 2025 GMT Not After : Dec 21 21:00:33 2025 GMT Subject: CN=09612bb0577e71d8efc446e78a993d503c707bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:c4:15:be:d6:c1:42:3b:83:60:b7:35:60: 6f:e4:c7:6a:1e:a1:39:e8:dd:c0:77:1a:75:5f:44: 67:38:cd:f7:87:9b:bc:b4:95:5e:c2:ba:2b:7c:01: 37:33:b4:40:4a:b8:f3:54:56:c4:af:2c:4a:20:3f: 95:63:1d:05:ba:35:31:a2:b0:76:eb:cd:4b:63:b7: c3:e1:13:8e:a5:2e:48:cb:51:bd:46:c1:cd:b2:d5: c6:f4:65:0a:5f:dd:41:f2:ab:b6:d6:ff:a4:7d:fc: 4c:ab:95:a9:66:58:3a:c0:aa:05:78:99:06:87:01: 73:6b:3a:0d:82:c6:d7:5c:60:c2:53:d4:5f:5a:8e: 84:a4:38:8b:67:6e:89:97:09:5f:e2:84:fd:27:7d: fc:cd:bb:7f:1c:2c:c1:14:0a:b8:0e:a9:e0:9b:97: 30:5b:46:f2:ed:02:84:aa:e1:4e:db:40:f8:20:38: 8e:41:01:0b:e3:b7:5c:e0:df:10:d3:fc:4f:51:33: ef:7a:86:3f:26:06:8c:f7:18:17:e8:54:33:db:23: 9f:a6:5e:0c:c0:b3:06:d6:b7:52:cd:47:ee:68:42: fd:7c:a2:f1:95:87:0b:8a:36:86:a0:85:1f:bf:f6: ca:17:30:c5:10:7d:4a:0c:a1:7b:69:fb:7e:39:35: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:61:2B:B0:57:7E:71:D8:EF:C4:46:E7:8A:99:3D:50:3C:70:7B:BD X509v3 Authority Key Identifier: keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:79:c6:cd:70:c9:dd:55:75:6f:38:ff:3f:e8:1a:f1:0e:94: 13:10:9f:58:96:5b:d1:16:48:65:3c:bc:0f:ef:ca:30:85:2e: 99:cc:f5:38:e4:63:b9:77:48:0b:29:23:bf:3c:f5:e3:f9:ab: 7d:e6:62:49:b3:ba:10:3b:79:d1:9b:77:61:a1:c7:a5:2e:59: f8:9d:fe:a3:45:c4:2a:e8:59:ea:26:9c:3f:24:ea:33:18:1a: 36:c1:48:93:2e:04:39:67:84:ce:39:f3:d6:fe:3a:4c:54:3c: 15:de:55:85:b2:f0:6d:df:98:0c:48:88:92:ed:aa:88:59:33: 9e:67:72:a8:d2:4f:fc:4d:c1:97:a5:d4:46:fc:0d:b5:7b:09: eb:a3:c5:13:ad:89:51:82:0f:fa:b4:56:11:44:c6:68:89:70: 65:e5:81:76:43:9d:a7:14:ff:af:b1:67:59:df:78:9c:fc:09: a8:c1:f5:01:8a:16:bb:bb:7e:63:97:72:96:de:bc:0f:f1:49: b3:a7:21:83:51:9a:c1:3c:e8:58:da:18:02:f0:f8:30:51:e4: 13:9f:da:39:c8:67:68:b8:09:50:22:ba:79:37:fa:bb:d4:d8: cc:43:30:c5:34:c0:44:15:82:54:2d:50:1b:28:f3:d7:a3:96: 50:c3:23:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kG0Dpi2X2nV4Op9y5JVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTMwOTM2OGE4YWQxM2JiMDgyNjQ0OTdmYzJlNDMxNTFl NmQ1YTYwHhcNMjUxMjIwMjEwMDMzWhcNMjUxMjIxMjEwMDMzWjAzMTEwLwYDVQQD EygwOTYxMmJiMDU3N2U3MWQ4ZWZjNDQ2ZTc4YTk5M2Q1MDNjNzA3YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1zEFb7WwUI7g2C3NWBv5MdqHqE5 6N3Adxp1X0RnOM33h5u8tJVewrorfAE3M7RASrjzVFbEryxKID+VYx0FujUxorB2 681LY7fD4ROOpS5Iy1G9RsHNstXG9GUKX91B8qu21v+kffxMq5WpZlg6wKoFeJkG hwFzazoNgsbXXGDCU9RfWo6EpDiLZ26Jlwlf4oT9J338zbt/HCzBFAq4Dqngm5cw W0by7QKEquFO20D4IDiOQQEL47dc4N8Q0/xPUTPveoY/JgaM9xgX6FQz2yOfpl4M wLMG1rdSzUfuaEL9fKLxlYcLijaGoIUfv/bKFzDFEH1KDKF7aft+OTWACwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlhK7BXfnHY78RG54qZPVA8cHu9MB8GA1UdIwQY MBaAFKNTCTaKitE7sIJkSX/C5DFR5tWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDIt MTcxNDIyM2I5NDllLzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDItMTcxNDIyM2I5NDll LzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3nGzXDJ 3VV1bzj/P+ga8Q6UExCfWJZb0RZIZTy8D+/KMIUumcz1OORjuXdICykjvzz14/mr feZiSbO6EDt50Zt3YaHHpS5Z+J3+o0XEKuhZ6iacPyTqMxgaNsFIky4EOWeEzjnz 1v46TFQ8Fd5VhbLwbd+YDEiIku2qiFkznmdyqNJP/E3Bl6XURvwNtXsJ66PFE62J UYIP+rRWEUTGaIlwZeWBdkOdpxT/r7FnWd94nPwJqMH1AYoWu7t+Y5dylt68D/FJ s6chg1GawTzoWNoYAvD4MFHkE5/aOchnaLgJUCK6eTf6u9TYzEMwxTTARBWCVC1Q Gyjz16OWUMMjTA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:51 2025 by rpki-client