This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json) Hash identifier: dz/KQEoPMKdzVu6V4kk9CtAwebUs5W/KgxLjPNNmxp0= Subject key identifier: 4D:F9:DD:56:4D:95:D7:71:65:75:D9:FE:B3:42:A0:28:1A:0F:CE:B8 Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e Certificate serial: 019B39EB5C534D916C30D40F4077E86F1BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft Manifest number: 12A4 Signing time: Sat 20 Dec 2025 04:01:24 +0000 Manifest this update: Sat 20 Dec 2025 04:01:24 +0000 Manifest next update: Sun 21 Dec 2025 04:01:24 +0000 Files and hashes: 1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: QsLxOsF9n9TFwcv+RkZ0bQPeX0NYE4Vru+gOCtx0Vd4=) 2: RzF4b3sIXe3DzFdXYIh4DACfNyQ.roa (hash: NzaYQenLUpyVGKDKds+F+mtyj0Y2xs4JaXrSTsoxdK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:5c:53:4d:91:6c:30:d4:0f:40:77:e8:6f:1b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e Validity Not Before: Dec 20 04:01:24 2025 GMT Not After : Dec 21 04:01:24 2025 GMT Subject: CN=4df9dd564d95d7716575d9feb342a0281a0fceb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:e8:53:ca:d1:f3:fc:73:99:32:a2:ee:0e: 09:fa:22:cd:76:ee:eb:7e:c3:38:79:33:af:44:1e: 39:91:ba:1c:18:15:9e:27:e6:1d:e0:97:1e:55:62: 38:a3:3e:ab:48:d9:53:55:7d:75:7c:a4:14:8f:84: 68:17:09:ca:b2:83:f3:62:48:6b:7c:d2:57:92:8b: a1:19:98:96:15:fa:f8:2d:ae:49:2b:6e:f8:8b:16: ca:8e:9a:59:4a:c3:b4:02:ee:83:81:85:93:19:0a: e5:9b:dc:7d:c6:b7:50:40:74:46:9a:bd:7c:d9:07: 76:5d:d2:e1:16:34:e6:cf:b0:98:0e:89:0d:c1:b4: a7:a4:69:b3:5c:f1:fc:e4:dd:7f:51:fa:89:f1:2c: 9f:4a:34:e9:13:a9:ef:b8:32:5b:5c:b7:ae:e6:3a: b7:e3:bc:d0:9c:7b:90:4b:15:96:01:06:a6:c2:d1: 23:3a:3d:94:46:19:1a:94:93:6c:bd:6c:da:51:70: ab:4c:ce:2a:84:07:b5:87:8f:30:da:42:dd:92:bc: c8:3c:0e:df:a7:58:89:8b:83:58:6f:6c:fa:2c:15: a4:53:c9:fe:57:1d:a0:60:6a:4a:4c:47:29:82:6b: 7b:6d:2f:35:88:86:72:c5:81:78:12:80:c3:ef:f0: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:DD:56:4D:95:D7:71:65:75:D9:FE:B3:42:A0:28:1A:0F:CE:B8 X509v3 Authority Key Identifier: keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:52:58:71:83:1c:76:72:9a:cc:60:73:3e:91:5d:f7:c9:4f: eb:28:c1:ca:58:06:e3:ce:5e:c7:64:70:4f:16:66:9f:99:2c: be:e3:fe:9b:68:0c:97:e6:24:fb:1b:26:e4:1f:16:76:98:81: a4:21:7b:17:33:3e:3f:cd:d3:a7:d6:77:48:e0:d3:4b:ab:7d: 3c:3c:7f:b9:ea:8c:d7:1e:ed:ac:8f:36:ec:a7:15:6e:f0:b1: d4:5e:92:34:04:be:de:6d:42:e5:7d:a4:02:cc:1c:c2:ec:10: 65:f3:52:06:e6:66:a9:2e:a0:21:80:3a:d5:81:1b:9f:dd:9e: 82:bb:41:c7:0c:6e:8d:4c:65:72:ad:f8:21:cf:90:93:8b:6b: 50:81:79:82:e8:38:c9:2e:36:c8:06:93:bd:67:e7:62:f1:82: 25:8d:5d:80:ae:cd:70:12:fc:00:ed:65:a4:e2:8c:cc:d6:16: 47:21:9a:c3:5a:69:7e:bb:7c:e9:9f:2a:19:0a:ad:da:c7:13: 90:6c:32:8b:60:ef:18:d7:85:e5:83:b7:44:ef:a1:c5:24:46: 0f:bd:69:cf:29:83:ce:e9:c0:56:13:27:7d:04:5c:06:69:e6: 97:a0:59:a8:f7:0f:59:4e:54:f5:0d:56:43:67:55:9c:e9:ce: f0:c9:72:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561xTTZFsMNQPQHfobxuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGU2Mzg2ODRjNjQ1ZmVkZDYwMGVkM2M1MGNkZjMxMGIx MTZkM2UwHhcNMjUxMjIwMDQwMTI0WhcNMjUxMjIxMDQwMTI0WjAzMTEwLwYDVQQD Eyg0ZGY5ZGQ1NjRkOTVkNzcxNjU3NWQ5ZmViMzQyYTAyODFhMGZjZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmfoU8rR8/xzmTKi7g4J+iLNdu7r fsM4eTOvRB45kbocGBWeJ+Yd4JceVWI4oz6rSNlTVX11fKQUj4RoFwnKsoPzYkhr fNJXkouhGZiWFfr4La5JK274ixbKjppZSsO0Au6DgYWTGQrlm9x9xrdQQHRGmr18 2Qd2XdLhFjTmz7CYDokNwbSnpGmzXPH85N1/UfqJ8SyfSjTpE6nvuDJbXLeu5jq3 47zQnHuQSxWWAQamwtEjOj2URhkalJNsvWzaUXCrTM4qhAe1h48w2kLdkrzIPA7f p1iJi4NYb2z6LBWkU8n+Vx2gYGpKTEcpgmt7bS81iIZyxYF4EoDD7/BrBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE353VZNlddxZXXZ/rNCoCgaD864MB8GA1UdIwQY MBaAFDveY4aExkX+3WAO08UM3zELEW0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQt MDk3YjA1MTBkM2UyLzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQtMDk3YjA1MTBkM2Uy LzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVJYcYMc dnKazGBzPpFd98lP6yjBylgG485ex2RwTxZmn5ksvuP+m2gMl+Yk+xsm5B8WdpiB pCF7FzM+P83Tp9Z3SODTS6t9PDx/ueqM1x7trI827KcVbvCx1F6SNAS+3m1C5X2k AswcwuwQZfNSBuZmqS6gIYA61YEbn92egrtBxwxujUxlcq34Ic+Qk4trUIF5gug4 yS42yAaTvWfnYvGCJY1dgK7NcBL8AO1lpOKMzNYWRyGaw1ppfrt86Z8qGQqt2scT kGwyi2DvGNeF5YO3RO+hxSRGD71pzymDzunAVhMnfQRcBmnml6BZqPcPWU5U9Q1W Q2dVnOnO8MlyPw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:46 2025 by rpki-client