This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json) Hash identifier: q+qYavg/v6lzK+diNKzHcRes3kiRVyjckDTxeKUEFBI= Subject key identifier: 08:D6:E5:57:28:F3:B8:15:09:76:4F:FC:A6:34:9B:8E:75:FE:D6:F4 Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0 Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0 Certificate serial: 019B451351015CAF33BCD7F2B750AD5EB320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 08:00:52 +0000 Manifest this update: Mon 22 Dec 2025 08:00:52 +0000 Manifest next update: Tue 23 Dec 2025 08:00:52 +0000 Files and hashes: 1: DyAD9klcag15NhnplKEMXi8dKqg.roa (hash: Zvr5j/JLyl2kQb4eL63NQCTsndBLbuYPjEiWULmfej8=) 2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: 1wbX5rVrNIDQZmav1S/uMkgolpYlQYuwUnRApgJsSz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:51:01:5c:af:33:bc:d7:f2:b7:50:ad:5e:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0 Validity Not Before: Dec 22 08:00:52 2025 GMT Not After : Dec 23 08:00:52 2025 GMT Subject: CN=08d6e55728f3b81509764ffca6349b8e75fed6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:c9:09:82:5d:89:97:d1:2a:88:6a:e4:21: d6:4f:74:56:24:fc:56:3f:ab:d8:30:f2:1b:7d:76: ee:13:3a:1a:7c:6e:63:16:7c:49:01:9e:da:0a:78: 8e:a2:88:45:d2:7b:94:ce:17:0c:26:98:07:41:2d: 0b:8d:6f:ce:64:58:48:94:a5:53:5e:9b:98:76:ff: 65:48:c8:3c:4b:c1:03:ed:9c:c2:47:4b:9d:d4:4f: 9d:5c:29:49:88:77:4c:6f:37:b7:f3:68:23:ab:ed: 6f:0b:74:85:3b:64:19:27:dd:88:19:23:cc:a7:fe: bd:aa:be:54:f8:14:cd:8e:76:19:f5:bc:31:7e:cf: ec:3b:b2:91:a2:ef:7a:6b:b9:00:89:07:55:6f:22: 0b:65:d8:58:40:93:82:ad:14:fb:db:5f:5d:f8:26: bc:e6:60:06:ae:80:d4:e2:54:22:9f:63:42:1a:01: 18:4f:d4:b4:72:7b:8d:1e:05:b7:bf:73:c6:94:b5: 12:65:72:a1:98:90:a9:07:79:ec:51:e1:52:df:6b: de:9a:46:b4:6a:07:ff:55:ae:21:30:43:1b:1a:1c: 79:92:0d:92:33:e3:9d:87:db:0b:81:b5:31:e2:56: 28:94:49:58:a7:03:16:2b:c8:64:38:f9:44:96:06: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:E5:57:28:F3:B8:15:09:76:4F:FC:A6:34:9B:8E:75:FE:D6:F4 X509v3 Authority Key Identifier: keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:98:03:c8:b2:e1:f2:35:d4:02:2f:96:44:7a:79:93:87:32: 1d:74:65:48:b2:dd:de:0b:5c:bb:0c:18:38:a3:87:95:d7:06: af:c8:92:8f:62:c0:44:3f:29:0b:de:68:a8:66:56:a9:90:23: 0b:f5:f8:f7:84:5d:47:9e:aa:6c:a7:e5:78:bf:6c:1f:94:9a: b9:fc:05:e9:41:cf:ed:06:20:1a:4a:d4:c1:af:5f:cf:97:1d: 8e:73:22:dc:98:aa:a4:9f:a7:a1:28:a1:f6:44:fc:1f:bd:3b: b0:48:6b:ff:9a:4f:52:f3:50:e7:6d:f9:98:8e:44:59:02:fb: 27:8f:41:c0:d5:b5:64:61:4a:09:68:84:d0:da:7c:18:2e:83: 02:cf:cf:b6:f1:9a:85:fa:ac:5f:e5:c6:60:c4:c0:34:e2:9c: 21:e3:98:85:d2:e1:30:da:01:87:bb:39:3c:9c:40:4e:9b:18: 36:78:2a:51:24:a2:93:fb:ab:24:20:0d:6e:9f:07:f0:07:33: cf:5a:7f:3d:06:34:25:8f:5d:5c:91:96:28:f3:61:b2:a3:15: ac:ff:59:a5:a1:67:20:cd:7a:dd:90:0b:93:d9:55:36:97:cf: 80:5e:ab:89:36:59:cc:62:8d:b5:b9:d2:bb:27:8a:c1:aa:c9: de:d4:38:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE1EBXK8zvNfyt1CtXrMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2 ZjFjYzAwHhcNMjUxMjIyMDgwMDUyWhcNMjUxMjIzMDgwMDUyWjAzMTEwLwYDVQQD EygwOGQ2ZTU1NzI4ZjNiODE1MDk3NjRmZmNhNjM0OWI4ZTc1ZmVkNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvTJCYJdiZfRKohq5CHWT3RWJPxW P6vYMPIbfXbuEzoafG5jFnxJAZ7aCniOoohF0nuUzhcMJpgHQS0LjW/OZFhIlKVT XpuYdv9lSMg8S8ED7ZzCR0ud1E+dXClJiHdMbze382gjq+1vC3SFO2QZJ92IGSPM p/69qr5U+BTNjnYZ9bwxfs/sO7KRou96a7kAiQdVbyILZdhYQJOCrRT7219d+Ca8 5mAGroDU4lQin2NCGgEYT9S0cnuNHgW3v3PGlLUSZXKhmJCpB3nsUeFS32vemka0 agf/Va4hMEMbGhx5kg2SM+Odh9sLgbUx4lYolElYpwMWK8hkOPlElgY9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjW5Vco87gVCXZP/KY0m451/tb0MB8GA1UdIwQY MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt MjhiZWM3Yjk5OTI5LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5 LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJgDyLLh 8jXUAi+WRHp5k4cyHXRlSLLd3gtcuwwYOKOHldcGr8iSj2LARD8pC95oqGZWqZAj C/X494RdR56qbKfleL9sH5SaufwF6UHP7QYgGkrUwa9fz5cdjnMi3JiqpJ+noSih 9kT8H707sEhr/5pPUvNQ5235mI5EWQL7J49BwNW1ZGFKCWiE0Np8GC6DAs/PtvGa hfqsX+XGYMTANOKcIeOYhdLhMNoBh7s5PJxATpsYNngqUSSik/urJCANbp8H8Acz z1p/PQY0JY9dXJGWKPNhsqMVrP9ZpaFnIM163ZALk9lVNpfPgF6riTZZzGKNtbnS uyeKwarJ3tQ4nw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:31:47 2025 by rpki-client