This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json) Hash identifier: eOYgrpaxUwPyFbiiJi4QkXYCOPYmPa/udkNw/jxxo64= Subject key identifier: 13:3B:C6:2F:B6:A3:5E:DE:69:B6:38:81:77:98:9C:27:EE:7F:BD:5C Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Certificate serial: 019B3DFE7DB05E6B4515D935283C3CE9F447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft Manifest number: 13D7 Signing time: Sat 20 Dec 2025 23:00:46 +0000 Manifest this update: Sat 20 Dec 2025 23:00:46 +0000 Manifest next update: Sun 21 Dec 2025 23:00:46 +0000 Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: jOpvwcxkLlMJxptTrSXqDS4stkat3yavS+VYlzF6QGQ=) 2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:7d:b0:5e:6b:45:15:d9:35:28:3c:3c:e9:f4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Validity Not Before: Dec 20 23:00:46 2025 GMT Not After : Dec 21 23:00:46 2025 GMT Subject: CN=133bc62fb6a35ede69b6388177989c27ee7fbd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:04:05:29:e6:89:04:10:c7:19:d2:0d:6e: 50:eb:98:48:bd:5a:32:b9:a9:f8:e5:88:de:1d:08: 21:19:02:c7:76:7b:af:44:3c:88:1b:19:8f:fe:a4: be:2a:69:ee:14:1e:1f:40:71:d7:5c:06:69:cb:34: cf:49:24:5c:76:c3:8f:54:9f:56:b7:19:08:35:e3: c0:a1:09:dd:74:f0:3c:dd:2c:58:ac:7d:fe:2f:1c: f2:01:ea:89:39:15:94:c4:ef:18:02:88:07:68:51: c3:da:e0:db:2a:12:bb:af:87:ee:69:4c:2c:93:a6: d8:4a:87:d3:71:57:76:63:d0:99:4e:91:d7:a7:f6: 22:00:c9:2a:e2:d6:d6:bb:ea:f0:f1:25:0b:62:44: 20:da:63:0b:a7:7c:34:fa:04:e4:46:c6:52:20:e5: b2:69:0c:97:2e:c6:0e:a6:32:46:fb:b5:ee:66:62: 76:c0:61:89:bf:7f:76:49:bf:e7:93:85:22:27:eb: e2:f1:95:bd:c2:3e:31:19:ad:1b:53:35:66:6f:be: 28:bd:06:d3:a4:a9:cd:6e:44:b0:ee:eb:ee:28:d5: c6:30:2a:26:66:e4:50:6c:a6:f0:90:ac:b2:d7:8e: 5f:a1:11:3f:58:fd:ba:37:9c:05:53:67:50:8f:8e: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:C6:2F:B6:A3:5E:DE:69:B6:38:81:77:98:9C:27:EE:7F:BD:5C X509v3 Authority Key Identifier: keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a2:72:33:4d:c7:a7:58:29:5e:39:94:c0:52:18:6f:4b:18: a8:04:9a:16:5b:e4:86:0e:55:25:3d:6c:3a:0f:b2:be:c1:9b: 46:12:a9:7e:e3:6b:6f:f7:f9:40:e7:dd:18:a8:97:1f:82:d6: 09:53:1b:99:85:40:ae:c1:6c:69:92:ae:06:95:a1:1d:1b:34: dd:19:6e:c4:fa:69:f3:84:27:ce:5c:e0:6e:3c:13:4c:d2:39: 6c:72:b8:8d:8f:65:46:e0:bd:70:4d:96:c4:78:29:9e:c9:4b: 55:ce:42:62:b3:56:f6:59:16:38:bc:de:dd:1c:86:0b:e0:17: 8f:ce:9d:3b:d1:15:ce:dc:9a:9b:89:17:9b:a9:eb:26:7f:fd: 68:21:1b:86:eb:81:e2:df:4d:ce:d7:05:b9:ff:0f:bd:6d:8c: 78:0f:8a:44:41:4f:e7:0c:28:8c:cf:de:dd:b6:d6:de:96:b5: 5f:fc:a4:a5:4c:aa:d3:6f:16:43:48:03:57:44:73:03:4e:81: 8a:e1:d5:52:7c:b4:e6:e9:eb:39:c6:da:49:38:4e:9e:be:43: 6e:0f:df:af:64:39:98:af:b9:6c:0c:7d:6a:ba:95:cd:c7:63: 74:a2:4d:94:7c:b0:fc:7d:fa:65:18:d8:f5:82:d2:09:69:58: 47:1b:91:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/n2wXmtFFdk1KDw86fRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2ViNDA1OTg3YTNhYThiYmU1OTlkOGVmNDY2M2M5MjQy YTM0YjgwHhcNMjUxMjIwMjMwMDQ2WhcNMjUxMjIxMjMwMDQ2WjAzMTEwLwYDVQQD EygxMzNiYzYyZmI2YTM1ZWRlNjliNjM4ODE3Nzk4OWMyN2VlN2ZiZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvcEBSnmiQQQxxnSDW5Q65hIvVoy uan45YjeHQghGQLHdnuvRDyIGxmP/qS+KmnuFB4fQHHXXAZpyzTPSSRcdsOPVJ9W txkINePAoQnddPA83SxYrH3+LxzyAeqJORWUxO8YAogHaFHD2uDbKhK7r4fuaUws k6bYSofTcVd2Y9CZTpHXp/YiAMkq4tbWu+rw8SULYkQg2mMLp3w0+gTkRsZSIOWy aQyXLsYOpjJG+7XuZmJ2wGGJv392Sb/nk4UiJ+vi8ZW9wj4xGa0bUzVmb74ovQbT pKnNbkSw7uvuKNXGMComZuRQbKbwkKyy145foRE/WP26N5wFU2dQj47x6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM7xi+2o17eabY4gXeYnCfuf71cMB8GA1UdIwQY MBaAFKPOtAWYejqou+WZ2O9GY8kkKjS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUt NWRiODUxZDZmMDg2LzEvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUtNWRiODUxZDZmMDg2 LzEvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKJyM03H p1gpXjmUwFIYb0sYqASaFlvkhg5VJT1sOg+yvsGbRhKpfuNrb/f5QOfdGKiXH4LW CVMbmYVArsFsaZKuBpWhHRs03RluxPpp84QnzlzgbjwTTNI5bHK4jY9lRuC9cE2W xHgpnslLVc5CYrNW9lkWOLze3RyGC+AXj86dO9EVztyam4kXm6nrJn/9aCEbhuuB 4t9NztcFuf8PvW2MeA+KREFP5wwojM/e3bbW3pa1X/ykpUyq028WQ0gDV0RzA06B iuHVUny05unrOcbaSThOnr5Dbg/fr2Q5mK+5bAx9arqVzcdjdKJNlHyw/H36ZRjY 9YLSCWlYRxuRIg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:21 2025 by rpki-client