This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json) Hash identifier: fRev8hPxyRnaQqkex6/Vgl9hqNhFZrF7EhvrEq0e00Q= Subject key identifier: 1E:67:3E:EF:49:43:07:32:1E:64:7E:04:9C:20:60:E5:31:8E:69:BE Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e Certificate serial: 019B3FB65216A84BDA6C43FDD94286903B6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft Manifest number: 12A7 Signing time: Sun 21 Dec 2025 07:01:11 +0000 Manifest this update: Sun 21 Dec 2025 07:01:11 +0000 Manifest next update: Mon 22 Dec 2025 07:01:11 +0000 Files and hashes: 1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: 6Rd6GDVbdNtIL5F0puN8UA8mCk2VqHjea5A2aQjnMLU=) 2: RzF4b3sIXe3DzFdXYIh4DACfNyQ.roa (hash: NzaYQenLUpyVGKDKds+F+mtyj0Y2xs4JaXrSTsoxdK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:52:16:a8:4b:da:6c:43:fd:d9:42:86:90:3b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e Validity Not Before: Dec 21 07:01:11 2025 GMT Not After : Dec 22 07:01:11 2025 GMT Subject: CN=1e673eef494307321e647e049c2060e5318e69be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:cd:38:a8:c9:14:57:6f:3f:b8:ae:65:93: f7:5a:67:71:f6:0a:b2:95:4a:5e:9e:fb:c8:cf:21: a7:56:3b:db:43:74:e7:c3:22:28:5d:fa:46:55:f4: 22:7f:34:a7:4b:62:cf:b3:c5:f4:3c:eb:38:72:2e: ab:61:02:8f:28:c3:1f:fe:df:33:c2:95:de:f8:11: 0e:68:fa:c4:e1:16:1c:77:bf:2c:21:f6:e3:67:13: 3d:13:67:75:39:c2:79:4e:1f:75:0a:6a:e0:76:1a: 41:aa:ca:27:ab:10:c9:4e:82:d1:3d:68:05:df:30: a7:56:a1:08:4b:c6:63:ba:60:53:93:9b:6d:5a:8e: f2:75:ff:98:58:fc:b2:f3:a8:cf:12:05:e0:8a:a0: fe:54:47:b2:8e:d8:42:e4:c5:87:c2:d6:b4:94:31: a2:33:64:7f:4c:3c:71:f0:37:06:a9:a9:6e:07:71: 53:c2:c3:f8:ca:86:92:ac:e4:77:e8:b1:06:0b:bb: c7:be:d6:54:e4:0d:8d:be:f0:1a:84:0b:c7:bc:8b: 6a:85:87:43:43:a0:df:b3:76:f0:b2:08:97:cd:7c: 3b:b7:74:fa:a6:4f:85:69:87:53:99:b1:b9:61:4e: c0:68:ab:94:48:7c:73:a2:27:1c:63:2f:66:a4:3a: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:67:3E:EF:49:43:07:32:1E:64:7E:04:9C:20:60:E5:31:8E:69:BE X509v3 Authority Key Identifier: keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a7:9e:23:53:7b:a5:ee:93:22:dc:b2:ce:cc:01:31:3b:13: 7e:01:09:7d:cc:89:28:f5:5e:44:67:a2:6f:66:8c:21:25:91: 25:18:a1:c5:10:1d:18:95:02:19:30:05:29:bf:12:ae:33:cc: 65:be:2c:5f:76:c1:57:4c:bb:aa:b0:66:19:82:57:60:04:3f: 5e:59:b9:9e:e5:f4:f8:a7:25:08:9c:91:4a:ef:27:52:78:47: 6a:ad:c7:c4:8a:57:fa:1b:3c:82:6a:5a:9a:31:c1:6d:f1:5d: 83:7d:34:f8:5e:af:68:6e:42:b9:06:e7:03:3b:ab:0a:57:0a: b9:e5:93:41:f0:f7:eb:9e:90:64:1a:e7:d3:7c:5a:4e:4c:d6: 73:e6:21:b7:23:97:36:b3:62:3b:10:3f:75:7b:4a:0d:fa:f0: 82:b4:6f:73:b2:72:fd:86:30:4a:0b:55:28:fe:f7:c6:07:45: 99:be:87:b3:a3:79:a4:83:e6:50:6f:c3:0a:ca:79:c1:91:ec: 7a:2e:b6:94:d2:eb:a7:9e:63:74:72:cc:e6:f9:fe:6d:aa:81: eb:cc:6a:98:a7:16:63:af:9f:d2:cd:d2:12:2b:ce:2c:69:2f: 1c:1d:64:b8:8b:c9:29:f9:29:39:5e:c8:a6:d1:e7:12:d7:ed: 39:28:a7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tlIWqEvabEP92UKGkDtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGU2Mzg2ODRjNjQ1ZmVkZDYwMGVkM2M1MGNkZjMxMGIx MTZkM2UwHhcNMjUxMjIxMDcwMTExWhcNMjUxMjIyMDcwMTExWjAzMTEwLwYDVQQD EygxZTY3M2VlZjQ5NDMwNzMyMWU2NDdlMDQ5YzIwNjBlNTMxOGU2OWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnXNOKjJFFdvP7iuZZP3Wmdx9gqy lUpenvvIzyGnVjvbQ3TnwyIoXfpGVfQifzSnS2LPs8X0POs4ci6rYQKPKMMf/t8z wpXe+BEOaPrE4RYcd78sIfbjZxM9E2d1OcJ5Th91CmrgdhpBqsonqxDJToLRPWgF 3zCnVqEIS8ZjumBTk5ttWo7ydf+YWPyy86jPEgXgiqD+VEeyjthC5MWHwta0lDGi M2R/TDxx8DcGqaluB3FTwsP4yoaSrOR36LEGC7vHvtZU5A2NvvAahAvHvItqhYdD Q6Dfs3bwsgiXzXw7t3T6pk+FaYdTmbG5YU7AaKuUSHxzoiccYy9mpDpnjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5nPu9JQwcyHmR+BJwgYOUxjmm+MB8GA1UdIwQY MBaAFDveY4aExkX+3WAO08UM3zELEW0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQt MDk3YjA1MTBkM2UyLzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQtMDk3YjA1MTBkM2Uy LzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKeeI1N7 pe6TItyyzswBMTsTfgEJfcyJKPVeRGeib2aMISWRJRihxRAdGJUCGTAFKb8SrjPM Zb4sX3bBV0y7qrBmGYJXYAQ/Xlm5nuX0+KclCJyRSu8nUnhHaq3HxIpX+hs8gmpa mjHBbfFdg300+F6vaG5CuQbnAzurClcKueWTQfD3656QZBrn03xaTkzWc+YhtyOX NrNiOxA/dXtKDfrwgrRvc7Jy/YYwSgtVKP73xgdFmb6Hs6N5pIPmUG/DCsp5wZHs ei62lNLrp55jdHLM5vn+baqB68xqmKcWY6+f0s3SEivOLGkvHB1kuIvJKfkpOV7I ptHnEtftOSinBg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:31:35 2025 by rpki-client