This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json) Hash identifier: 8JXgsJwrEr5ZUA+dXAQRaX2py+B/V2uIdGLa1Timwp4= Subject key identifier: 3C:FC:57:99:B7:E2:00:0F:B5:30:3C:F3:42:3C:AD:E8:91:D5:D9:D5 Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Certificate serial: 019B37C5F5E0428ADF339F335CDA3F8FCC8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft Manifest number: 0DA5 Signing time: Fri 19 Dec 2025 18:01:18 +0000 Manifest this update: Fri 19 Dec 2025 18:01:18 +0000 Manifest next update: Sat 20 Dec 2025 18:01:18 +0000 Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=) 2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=) 3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=) 4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: uSGLniTi0IKQmi+PXHuY6QbUNF+ICa+zh7glZ4OY35Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:f5:e0:42:8a:df:33:9f:33:5c:da:3f:8f:cc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224 Validity Not Before: Dec 19 18:01:18 2025 GMT Not After : Dec 20 18:01:18 2025 GMT Subject: CN=3cfc5799b7e2000fb5303cf3423cade891d5d9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:bd:dd:e7:55:2c:45:7d:b4:f2:7f:f6:31: c5:a8:74:93:0e:00:e1:20:bd:1a:ce:f3:40:c0:9b: fc:f2:e4:5e:6d:89:5a:1f:29:73:46:1b:37:64:8a: 63:0b:31:d3:1b:ef:91:64:a1:b0:2b:1e:a7:c9:f2: d8:66:ca:e6:cf:46:8a:20:7b:e5:05:57:23:19:e3: ff:28:4f:ab:48:32:b9:69:05:04:b6:3e:aa:40:79: b9:03:46:50:98:b2:f1:40:19:7a:b8:7a:4e:f8:6e: 36:d2:b1:5d:9f:1f:9f:b1:2f:15:58:a6:f1:b0:e6: 95:12:79:72:fd:b1:d4:53:08:27:88:06:e4:8c:a2: da:8a:4e:14:8d:7b:1f:7e:32:e6:e1:bf:81:c4:8f: 26:6d:2a:df:9f:1b:ce:f5:18:d7:86:9e:ef:53:33: f0:d4:35:4f:54:3d:6a:b1:87:21:d7:b7:36:c5:64: e7:24:12:6e:a2:7e:b4:19:53:46:b0:07:51:04:d4: e3:af:ee:f7:99:33:77:b4:47:e6:7b:db:33:b1:16: ad:9a:bc:12:46:1e:77:66:10:21:f3:a9:36:2a:cf: a2:e3:4f:fa:22:da:de:21:2a:8a:c2:5e:4b:60:9a: c8:a4:4b:9c:ff:47:c3:39:20:a4:bb:18:0e:d2:dc: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:57:99:B7:E2:00:0F:B5:30:3C:F3:42:3C:AD:E8:91:D5:D9:D5 X509v3 Authority Key Identifier: keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e4:92:81:53:99:be:19:8f:0a:81:ce:2a:df:34:9c:dc:ba: 30:e8:c4:ee:28:e4:ca:c7:c7:44:02:e0:a4:d3:62:52:ef:a8: c7:42:45:47:b7:06:da:85:86:8b:28:85:e9:bd:12:a7:d6:c6: 43:86:8f:66:a5:2b:30:d0:9c:4c:3d:88:12:b4:6a:c3:35:91: 9e:28:9c:c0:55:33:45:40:fe:16:fd:45:d5:0b:8d:4f:5a:02: ac:ce:c4:7e:7b:63:79:a2:63:f1:8c:84:d7:80:f9:d5:7d:e3: e9:e2:28:9a:73:e9:00:02:ba:2d:20:1c:c3:71:8d:f7:b9:5c: 8e:f5:04:1b:94:9a:11:d1:e3:b0:a5:fb:59:1d:6a:4c:2b:f4: 69:2d:cb:c7:86:16:16:00:a2:1b:be:05:f3:bd:4a:c9:e7:c4: 0e:0c:ef:a6:bd:b5:f9:93:8a:15:da:ce:a8:2c:0a:50:0b:8d: 1a:a0:74:be:6c:14:7a:41:a0:1e:fc:5f:ec:53:3f:8b:68:6e: 6d:2e:85:60:73:5d:61:a9:7d:71:38:c6:84:a0:ef:1c:a0:18: 5d:0e:f5:62:eb:4b:fa:c7:15:c7:74:8c:53:3f:6d:4c:8f:de: 18:53:5c:60:bf:dc:c2:dd:63:6b:7d:ac:44:3a:aa:d4:b1:40: e4:0c:f3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfXgQorfM58zXNo/j8yKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk NzUyMjQwHhcNMjUxMjE5MTgwMTE4WhcNMjUxMjIwMTgwMTE4WjAzMTEwLwYDVQQD EygzY2ZjNTc5OWI3ZTIwMDBmYjUzMDNjZjM0MjNjYWRlODkxZDVkOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1293edVLEV9tPJ/9jHFqHSTDgDh IL0azvNAwJv88uRebYlaHylzRhs3ZIpjCzHTG++RZKGwKx6nyfLYZsrmz0aKIHvl BVcjGeP/KE+rSDK5aQUEtj6qQHm5A0ZQmLLxQBl6uHpO+G420rFdnx+fsS8VWKbx sOaVEnly/bHUUwgniAbkjKLaik4UjXsffjLm4b+BxI8mbSrfnxvO9RjXhp7vUzPw 1DVPVD1qsYch17c2xWTnJBJuon60GVNGsAdRBNTjr+73mTN3tEfme9szsRatmrwS Rh53ZhAh86k2Ks+i40/6ItreISqKwl5LYJrIpEuc/0fDOSCkuxgO0tzuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz8V5m34gAPtTA880I8reiR1dnVMB8GA1UdIwQY MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1 LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquSSgVOZ vhmPCoHOKt80nNy6MOjE7ijkysfHRALgpNNiUu+ox0JFR7cG2oWGiyiF6b0Sp9bG Q4aPZqUrMNCcTD2IErRqwzWRniicwFUzRUD+Fv1F1QuNT1oCrM7EfntjeaJj8YyE 14D51X3j6eIomnPpAAK6LSAcw3GN97lcjvUEG5SaEdHjsKX7WR1qTCv0aS3Lx4YW FgCiG74F871KyefEDgzvpr21+ZOKFdrOqCwKUAuNGqB0vmwUekGgHvxf7FM/i2hu bS6FYHNdYal9cTjGhKDvHKAYXQ71YutL+scVx3SMUz9tTI/eGFNcYL/cwt1ja32s RDqq1LFA5AzzpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:38 2025 by rpki-client