This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json) Hash identifier: VQlgM2e6Q53rtJ1KWMvNRiVOiA2YLjTblazoLOpliKM= Subject key identifier: 8A:A3:E5:31:B6:3B:97:E7:DF:4B:50:C2:89:2E:D2:C5:5C:CB:A8:B9 Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Certificate serial: 019B68E983A3C0FA3B46ED7D4E49AEC00667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft Manifest number: 0567 Signing time: Mon 29 Dec 2025 07:01:32 +0000 Manifest this update: Mon 29 Dec 2025 07:01:32 +0000 Manifest next update: Tue 30 Dec 2025 07:01:32 +0000 Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: p7o/o7LZWzvGgzQdINjbauAm1HnpNWDPT8gxar44yrc=) 2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:83:a3:c0:fa:3b:46:ed:7d:4e:49:ae:c0:06:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Validity Not Before: Dec 29 07:01:32 2025 GMT Not After : Dec 30 07:01:32 2025 GMT Subject: CN=8aa3e531b63b97e7df4b50c2892ed2c55ccba8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:1c:09:cf:d5:ab:03:23:b8:b6:e6:27:e8: 46:d2:a2:9f:f4:43:cc:07:d6:1d:55:74:e7:57:23: da:21:b6:69:da:4e:3f:1c:18:8a:38:3f:80:b9:69: 0c:de:9e:b9:be:cc:34:60:4a:6c:25:a4:7b:dd:f7: 76:ec:3d:90:62:ee:9a:f0:a0:89:cb:02:f2:3d:5f: 55:ee:c2:14:a6:a9:0e:ca:6f:53:d6:4a:ec:78:b7: b8:44:42:a3:43:46:20:76:3c:bc:ec:90:94:95:90: a8:5d:b7:aa:dd:8a:e3:f8:03:d2:7a:89:06:6d:84: 2f:74:b9:d5:2c:f7:e6:4c:4f:72:8c:96:7a:bd:bb: f8:32:81:86:f3:02:0a:e0:95:a2:e0:f7:a9:c4:6d: dd:39:44:f3:91:35:5c:6d:d2:e3:d8:ae:75:f4:c9: 52:b2:c4:98:9d:37:18:56:a7:82:fe:6e:0c:25:fa: cc:c0:b5:43:fd:37:43:19:5f:a8:84:4c:8f:51:18: 07:8a:c2:1f:e7:89:fe:54:2d:87:93:ca:f6:0e:9f: 2f:8d:b5:20:5c:1b:10:e8:51:10:f7:62:d9:be:69: 47:92:41:e8:49:7a:e2:24:57:cb:c7:0e:b2:e7:93: 3a:72:b5:52:df:00:c9:01:e3:4d:dc:28:b5:62:e9: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:E5:31:B6:3B:97:E7:DF:4B:50:C2:89:2E:D2:C5:5C:CB:A8:B9 X509v3 Authority Key Identifier: keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8f:2e:51:40:5c:7f:7d:66:3b:d8:84:34:f7:ee:b3:f3:d8: 46:b6:85:84:8b:55:7f:38:da:62:53:1c:61:9e:a2:fc:29:26: c4:8a:f4:5b:91:ca:3c:d3:fc:cb:70:eb:c4:b3:9a:4d:6c:f7: 26:50:f1:f0:0d:ec:21:0b:c5:1f:d3:2b:3c:28:96:a2:fd:7a: 64:3a:92:de:f4:71:de:93:ee:ca:da:2d:74:3e:10:d4:56:c3: 0c:a2:ff:14:e7:33:2d:81:86:1f:87:db:0b:cf:35:19:5c:5e: f7:15:9b:cd:ca:13:65:a2:6e:8a:5f:45:82:46:d9:a5:fc:e6: 7f:27:b9:8c:b0:6e:5c:21:ca:9c:4a:70:3e:ba:95:a8:14:86: 03:fb:7d:85:20:13:ae:d8:96:d1:2a:79:77:39:30:d5:71:5d: 58:1b:68:4c:d8:ce:64:d4:ad:af:8b:01:d7:2b:14:fa:84:0e: 60:df:b1:42:aa:34:22:d6:09:82:db:48:72:7f:06:b9:13:40: b4:6c:8c:af:8f:0b:d3:a1:bd:ed:a6:40:66:69:14:e3:7c:88: 06:3e:c6:9d:28:ea:3c:28:bd:3d:45:97:a7:da:d5:11:55:5b: 48:76:3e:fc:b2:e5:78:02:87:88:d4:6f:e7:cc:ff:38:fb:8b: eb:2e:4a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6YOjwPo7Ru19TkmuwAZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGJmOGE1MjZkYTAwNTZkNTNjNzI5ZmJjZmVkYjhhZjFm NDg0OWIwHhcNMjUxMjI5MDcwMTMyWhcNMjUxMjMwMDcwMTMyWjAzMTEwLwYDVQQD Eyg4YWEzZTUzMWI2M2I5N2U3ZGY0YjUwYzI4OTJlZDJjNTVjY2JhOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8McCc/VqwMjuLbmJ+hG0qKf9EPM B9YdVXTnVyPaIbZp2k4/HBiKOD+AuWkM3p65vsw0YEpsJaR73fd27D2QYu6a8KCJ ywLyPV9V7sIUpqkOym9T1krseLe4REKjQ0Ygdjy87JCUlZCoXbeq3Yrj+APSeokG bYQvdLnVLPfmTE9yjJZ6vbv4MoGG8wIK4JWi4PepxG3dOUTzkTVcbdLj2K519MlS ssSYnTcYVqeC/m4MJfrMwLVD/TdDGV+ohEyPURgHisIf54n+VC2Hk8r2Dp8vjbUg XBsQ6FEQ92LZvmlHkkHoSXriJFfLxw6y55M6crVS3wDJAeNN3Ci1Yult7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqj5TG2O5fn30tQwoku0sVcy6i5MB8GA1UdIwQY MBaAFKOL+KUm2gBW1Txyn7z+24rx9ISbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgt NjA0YjQ3MjYxNDc2LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgtNjA0YjQ3MjYxNDc2 LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI8uUUBc f31mO9iENPfus/PYRraFhItVfzjaYlMcYZ6i/CkmxIr0W5HKPNP8y3DrxLOaTWz3 JlDx8A3sIQvFH9MrPCiWov16ZDqS3vRx3pPuytotdD4Q1FbDDKL/FOczLYGGH4fb C881GVxe9xWbzcoTZaJuil9FgkbZpfzmfye5jLBuXCHKnEpwPrqVqBSGA/t9hSAT rtiW0Sp5dzkw1XFdWBtoTNjOZNStr4sB1ysU+oQOYN+xQqo0ItYJgttIcn8GuRNA tGyMr48L06G97aZAZmkU43yIBj7GnSjqPCi9PUWXp9rVEVVbSHY+/LLleAKHiNRv 58z/OPuL6y5K4Q== -----END CERTIFICATE-----Generated at Mon Dec 29 14:58:07 2025 by rpki-client