This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json) Hash identifier: P4LJaOG8BkI0N345gJz5hGtxWqH9OVit9eOOTOmeZM8= Subject key identifier: A6:40:6A:10:D1:21:26:82:79:76:D2:13:A9:95:0B:D8:4C:FD:C1:EA Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8 Certificate serial: 019B3C0FEAA866A8C7F0108CD4C408922D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft Manifest number: 0519 Signing time: Sat 20 Dec 2025 14:00:34 +0000 Manifest this update: Sat 20 Dec 2025 14:00:34 +0000 Manifest next update: Sun 21 Dec 2025 14:00:34 +0000 Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=) 2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: /kw45Ir3FRQXuq9kH31aId3tl7ClxG2R31OxIbynuII=) 3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=) 4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:ea:a8:66:a8:c7:f0:10:8c:d4:c4:08:92:2d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8 Validity Not Before: Dec 20 14:00:34 2025 GMT Not After : Dec 21 14:00:34 2025 GMT Subject: CN=a6406a10d12126827976d213a9950bd84cfdc1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:35:d6:59:c8:cd:1c:ec:f3:73:8a:32:91: 4a:3e:67:df:1c:9b:cf:2c:59:d5:03:95:b1:36:67: 9c:3e:c6:a1:cf:c8:ec:dc:f7:58:e9:84:6e:95:55: d9:25:1a:e3:66:b0:13:9a:17:21:54:71:85:a7:ab: 43:eb:7b:85:94:65:b0:d6:83:5c:9b:a1:3b:47:d2: 29:26:64:4e:35:c8:3e:73:77:b6:03:bb:bf:72:b3: c5:65:10:15:80:fc:f2:1d:47:78:9f:9e:b0:53:18: cc:aa:2f:50:73:5b:45:6f:66:3f:e9:55:df:cf:75: 7d:88:cd:00:18:ce:5e:cc:0a:0b:5a:94:c6:b1:d4: 88:38:2d:16:74:7b:b7:f3:f6:a7:e2:62:8d:53:3e: 3c:9b:16:10:c8:a5:26:40:b1:72:2b:e2:e8:33:08: 49:4e:88:58:7c:13:34:b3:d3:dc:28:0a:d1:3e:b8: 7a:5c:f6:ca:5c:5b:f3:89:f6:2f:0f:56:97:10:3f: c2:a4:40:d0:65:02:79:64:25:6a:4a:6c:f8:49:d8: 0b:71:53:b7:0f:53:b2:8b:ec:67:bd:40:82:a8:51: e7:14:1f:2a:83:ff:85:02:c5:ed:78:5e:95:02:b0: 6a:2e:94:5c:ba:63:92:99:c8:3f:5e:66:fe:1b:fd: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:6A:10:D1:21:26:82:79:76:D2:13:A9:95:0B:D8:4C:FD:C1:EA X509v3 Authority Key Identifier: keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:73:e6:9a:06:64:c2:93:60:0e:bd:c3:4a:9b:e4:ce:17:4b: 30:ea:64:21:f8:e0:4e:52:e3:38:76:76:27:7e:2c:8a:aa:99: 9b:b3:d8:1e:8d:c4:2e:d8:87:6c:36:cb:18:ef:31:58:53:52: c7:75:eb:a3:5e:39:80:90:43:2b:2f:02:2a:6f:00:5a:a0:2b: ad:5f:8f:b6:cc:52:a3:2a:80:76:b3:e7:3b:97:c2:eb:cf:f1: 9d:b0:06:13:30:4c:04:35:32:24:b9:9a:e8:38:0c:b1:f2:99: b8:47:89:c1:b0:4e:6f:a8:02:ab:23:01:bc:8f:8d:47:61:3e: 0d:25:92:43:6e:80:ff:fa:a0:c5:04:9f:ce:ce:93:cd:47:ad: 0f:31:af:00:b1:24:de:f1:f0:84:0f:68:65:d3:7f:a4:54:cc: 7e:ce:47:a9:8e:8a:24:bb:92:3e:8a:28:fb:4b:d4:3e:4d:0c: 09:64:64:ac:17:a9:83:ea:07:a0:0c:22:1b:30:23:d8:e6:05: c7:f1:06:6a:69:e2:44:9c:d1:15:21:bd:ff:4e:f5:cc:44:5c: fd:79:f0:1d:4e:d7:26:cb:53:5a:a0:06:27:52:ab:34:a2:66: 83:a3:7a:f8:af:46:4c:90:01:e1:42:0f:79:43:75:02:71:24: d5:fb:b2:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+qoZqjH8BCM1MQIki04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0 NzcxZDgwHhcNMjUxMjIwMTQwMDM0WhcNMjUxMjIxMTQwMDM0WjAzMTEwLwYDVQQD EyhhNjQwNmExMGQxMjEyNjgyNzk3NmQyMTNhOTk1MGJkODRjZmRjMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKc11lnIzRzs83OKMpFKPmffHJvP LFnVA5WxNmecPsahz8js3PdY6YRulVXZJRrjZrATmhchVHGFp6tD63uFlGWw1oNc m6E7R9IpJmRONcg+c3e2A7u/crPFZRAVgPzyHUd4n56wUxjMqi9Qc1tFb2Y/6VXf z3V9iM0AGM5ezAoLWpTGsdSIOC0WdHu38/an4mKNUz48mxYQyKUmQLFyK+LoMwhJ TohYfBM0s9PcKArRPrh6XPbKXFvzifYvD1aXED/CpEDQZQJ5ZCVqSmz4SdgLcVO3 D1Oyi+xnvUCCqFHnFB8qg/+FAsXteF6VArBqLpRcumOSmcg/Xmb+G/3x8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZAahDRISaCeXbSE6mVC9hM/cHqMB8GA1UdIwQY MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt ZTYxNTQ5MzExN2QyLzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1HPmmgZk wpNgDr3DSpvkzhdLMOpkIfjgTlLjOHZ2J34siqqZm7PYHo3ELtiHbDbLGO8xWFNS x3Xro145gJBDKy8CKm8AWqArrV+PtsxSoyqAdrPnO5fC68/xnbAGEzBMBDUyJLma 6DgMsfKZuEeJwbBOb6gCqyMBvI+NR2E+DSWSQ26A//qgxQSfzs6TzUetDzGvALEk 3vHwhA9oZdN/pFTMfs5HqY6KJLuSPooo+0vUPk0MCWRkrBepg+oHoAwiGzAj2OYF x/EGamniRJzRFSG9/071zERc/XnwHU7XJstTWqAGJ1KrNKJmg6N6+K9GTJAB4UIP eUN1AnEk1fuyFg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:03:33 2025 by rpki-client