This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft File: o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json) Hash identifier: ABKMmVeJ0b1BU6sObgr+N4KU9Yoy/ygHjquZEU1fnUM= Subject key identifier: C2:93:EB:F3:4B:31:3E:24:66:52:F2:77:72:A8:54:B1:49:7B:93:BA Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Certificate serial: 019AF1D184C4403DFA7D41AFC471CB1FE6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft Manifest number: 14B1 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=) 2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=) 3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=) 4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=) 5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=) 6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: FZdRrxagAhw8NUxTxSlObe917MCFMBFgjtYS9fIGLo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:c4:40:3d:fa:7d:41:af:c4:71:cb:1f:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=c293ebf34b313e246652f27772a854b1497b93ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:39:79:78:5c:06:ec:3c:d5:6f:ed:37:b1: a0:85:c4:60:9f:8d:9d:d3:df:34:59:c5:89:92:a7: 8c:6f:0b:08:ad:09:ee:8a:f4:08:c3:f1:bc:33:74: 6e:50:96:f2:f8:d6:b1:74:21:2d:5d:25:ce:b3:47: e5:6a:bc:6f:d7:ae:7c:e2:35:aa:21:a0:00:d3:e4: 58:85:57:bd:e3:39:46:ae:13:e8:55:a0:80:73:8c: a4:f5:ea:e8:29:fd:7b:3f:62:dd:67:5d:28:c1:b6: de:3f:4c:e5:b1:35:14:60:5b:52:f3:9c:74:35:9e: d6:50:25:a4:6e:5a:2b:55:9c:34:0d:28:a7:94:5a: 08:7c:e8:a3:2b:b2:f6:d4:51:99:0f:c4:88:49:56: cc:eb:07:b9:16:22:61:75:eb:49:ce:1d:06:0b:b5: b7:cb:53:0d:4a:71:11:f4:1b:e5:5d:54:c0:97:5f: 47:16:d5:17:1d:d7:70:8a:9b:49:d2:fe:fe:9b:67: ff:2b:a1:a1:af:59:0b:03:6f:1c:96:ad:5c:99:3f: 53:eb:ec:2b:a1:72:81:21:c8:86:64:8f:1c:af:1c: 94:89:73:88:14:d9:49:5b:b1:4c:76:da:85:82:62: 19:ce:d5:f8:13:47:28:32:a2:75:6a:7c:31:37:2a: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:EB:F3:4B:31:3E:24:66:52:F2:77:72:A8:54:B1:49:7B:93:BA X509v3 Authority Key Identifier: keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:3c:53:5d:b0:e9:ab:54:5f:bc:e2:c9:50:10:42:93:18: 67:78:38:4c:00:f7:91:7a:f5:cb:a0:ab:8d:6b:a3:44:12:47: f9:54:1f:92:46:b5:f0:6c:ed:92:55:bc:41:e5:06:a0:ac:b9: 5e:ca:c7:0b:bf:d6:42:96:a7:a6:ef:6f:cb:90:0c:2d:c1:6f: f5:0a:61:2a:45:e1:83:86:47:fd:94:e0:85:cf:28:e1:76:a6: 5c:a6:46:f5:7c:10:fc:9a:df:5b:62:6c:2a:8a:fb:24:aa:80: 41:6f:6e:72:af:f3:d1:25:70:1f:20:b4:dc:94:da:a9:09:fa: b6:08:58:40:b9:0d:cd:b2:9c:22:97:57:28:7a:2b:4a:05:75: 29:9b:bd:74:e7:6d:fd:b8:da:51:a6:08:cd:3b:99:78:16:92: 0a:93:32:0f:e2:9f:5a:a8:1a:75:a6:52:54:d5:7e:c7:58:73: 3d:9a:41:f1:e4:11:6f:1b:b4:bd:55:5a:de:43:dd:b2:0b:98: bd:ba:88:05:43:5c:a3:14:30:a5:76:f1:6c:c1:16:7f:47:b9: b5:f9:49:86:62:ec:42:5a:60:0e:38:e6:e7:b5:3e:b4:d8:f1: ae:e5:d0:e3:90:37:45:37:d3:47:6f:e1:b9:c4:6a:0b:db:3a: 22:b0:50:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YTEQD36fUGvxHHLH+blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj MjAzMmUwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhjMjkzZWJmMzRiMzEzZTI0NjY1MmYyNzc3MmE4NTRiMTQ5N2I5M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia45eXhcBuw81W/tN7GghcRgn42d 0980WcWJkqeMbwsIrQnuivQIw/G8M3RuUJby+NaxdCEtXSXOs0flarxv16584jWq IaAA0+RYhVe94zlGrhPoVaCAc4yk9eroKf17P2LdZ10owbbeP0zlsTUUYFtS85x0 NZ7WUCWkblorVZw0DSinlFoIfOijK7L21FGZD8SISVbM6we5FiJhdetJzh0GC7W3 y1MNSnER9BvlXVTAl19HFtUXHddwiptJ0v7+m2f/K6Ghr1kLA28clq1cmT9T6+wr oXKBIciGZI8crxyUiXOIFNlJW7FMdtqFgmIZztX4E0coMqJ1anwxNyo/rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKT6/NLMT4kZlLyd3KoVLFJe5O6MB8GA1UdIwQY MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct OWUyMjBmMDRhOTAxLzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJY8U12w 6atUX7ziyVAQQpMYZ3g4TAD3kXr1y6CrjWujRBJH+VQfkka18GztklW8QeUGoKy5 XsrHC7/WQpanpu9vy5AMLcFv9QphKkXhg4ZH/ZTghc8o4XamXKZG9XwQ/JrfW2Js Kor7JKqAQW9ucq/z0SVwHyC03JTaqQn6tghYQLkNzbKcIpdXKHorSgV1KZu9dOdt /bjaUaYIzTuZeBaSCpMyD+KfWqgadaZSVNV+x1hzPZpB8eQRbxu0vVVa3kPdsguY vbqIBUNcoxQwpXbxbMEWf0e5tflJhmLsQlpgDjjm57U+tNjxruXQ45A3RTfTR2/h ucRqC9s6IrBQzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:11 2025 by rpki-client