This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: JP/CBAxkDZ9+rlhLVLoYCJFpg5pCGOLzyzsWQvtmwYE= Subject key identifier: FD:03:71:7B:82:CC:84:B1:F5:1F:E4:FA:19:C8:F3:BC:62:5C:29:DD Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B4D043AE2E4A0005C3C6197789D631762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 19AF Signing time: Tue 23 Dec 2025 21:01:21 +0000 Manifest this update: Tue 23 Dec 2025 21:01:21 +0000 Manifest next update: Wed 24 Dec 2025 21:01:21 +0000 Files and hashes: 1: 1-mYbw_K7Fr5PIV-Hb2DU_D-_00Y.roa (hash: CijRr1/U9Y55SiyyAmAWKCwOLoctai7fBclCHYzh7Fk=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 6: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 7: E628OGnKWXsWV6h8__lmYOw0VuQ.roa (hash: 0Qyyg2JckxtcQsRmrYcG0CbwVr4IoeBXt3vaGkjRMF4=) 8: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 9: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 10: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 11: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: hACBKOhOPCm5/ISz+v1O75m6yvzRaC0tPJeT3BQjJrA=) 12: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 13: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 14: R2DhxkhJKynVq23HdTKG0z5fWJU.roa (hash: nG6WCjylMd8h79NDHMZUFgdfvCePLcuKEsqpEgLBkv4=) 15: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 16: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 17: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 18: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 19: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=) 20: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 21: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 22: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 23: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 24: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 25: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 26: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=) 27: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=) 28: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=) 29: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:3a:e2:e4:a0:00:5c:3c:61:97:78:9d:63:17:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 23 21:01:21 2025 GMT Not After : Dec 24 21:01:21 2025 GMT Subject: CN=fd03717b82cc84b1f51fe4fa19c8f3bc625c29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:93:82:52:b3:89:20:fe:6c:1e:7e:4f:b3: d8:50:46:3b:9e:1f:02:cf:ad:e2:24:45:a9:51:8b: 9f:0e:ac:91:ef:64:a2:c8:12:6a:b3:24:2e:23:71: cb:2d:e2:20:2d:e2:79:45:33:59:33:a8:1b:94:09: 23:57:ac:a8:80:fb:e8:35:fa:02:1c:d5:4b:b4:07: b0:92:1e:00:ed:42:00:a5:d5:85:f8:11:72:98:77: 89:e5:b9:de:ac:2e:6b:8d:34:da:43:cb:19:d4:85: 4a:52:0d:37:27:26:c3:21:03:4b:ad:95:9e:6d:48: f3:a9:04:48:3a:da:c5:59:82:78:a0:cd:bb:5f:05: 48:6a:2a:db:c5:92:7e:ef:0e:af:a3:07:5e:7e:6f: 4a:2e:23:d1:b7:55:bb:f7:6f:3f:3f:56:a6:be:0a: ce:69:95:31:f4:30:e3:95:ad:e0:b0:d9:32:16:54: 32:f8:44:e9:e6:b1:83:1e:0a:e1:5d:52:e0:d7:54: b4:d4:59:ad:23:76:9f:19:3d:a1:da:3d:77:8a:5d: e2:42:79:12:1d:69:4e:59:9e:9c:f6:a0:fe:03:11: 89:08:8b:ca:c4:6f:2a:54:30:36:a3:b8:83:72:ae: 1a:1f:0e:8a:ba:54:88:6b:8e:c6:cf:ab:ea:95:bc: 0e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:03:71:7B:82:CC:84:B1:F5:1F:E4:FA:19:C8:F3:BC:62:5C:29:DD X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5f:de:90:40:b7:4f:21:69:20:ab:89:c2:43:1f:e9:d1:e0: 19:5c:8c:55:99:e7:26:f1:92:ac:66:56:59:f5:61:90:15:26: 92:eb:be:bd:71:ba:7e:f9:3e:17:66:16:9d:05:ec:54:3f:49: 27:7f:a1:d8:1d:c0:16:57:c5:24:bb:61:c3:cb:19:7a:b2:c7: fd:e2:df:e7:f1:c0:db:26:1f:10:b0:c8:1c:e5:be:27:a7:29: 6a:d6:53:8c:e7:16:b7:2c:d9:03:82:e0:45:fa:cf:db:26:0b: 8c:7c:45:de:a5:5c:c9:06:01:ed:63:05:10:2f:9f:23:f4:d9: 3c:48:b1:39:dd:63:21:d7:2e:55:d4:5e:06:65:78:9a:c0:5f: 19:c9:fe:a5:98:24:1f:cc:cf:10:74:29:8f:95:d9:c7:fc:75: ee:60:69:6b:9d:48:d5:58:db:f0:b1:92:a2:68:d4:e3:23:a2: b5:66:14:40:7d:e7:35:0a:d7:0f:61:f4:25:29:84:f2:60:57: a7:18:2c:fc:1a:09:9e:f3:1c:e6:b8:d0:79:2e:a9:f1:be:7e: 93:ae:f4:c4:4f:af:e2:b3:76:c1:c4:c7:9d:8d:d2:3b:85:19: 83:6d:38:66:0e:52:9e:3d:f6:be:9d:f2:5b:92:07:d6:91:6b: 07:d0:49:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBDri5KAAXDxhl3idYxdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjIzMjEwMTIxWhcNMjUxMjI0MjEwMTIxWjAzMTEwLwYDVQQD EyhmZDAzNzE3YjgyY2M4NGIxZjUxZmU0ZmExOWM4ZjNiYzYyNWMyOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyTglKziSD+bB5+T7PYUEY7nh8C z63iJEWpUYufDqyR72SiyBJqsyQuI3HLLeIgLeJ5RTNZM6gblAkjV6yogPvoNfoC HNVLtAewkh4A7UIApdWF+BFymHeJ5bnerC5rjTTaQ8sZ1IVKUg03JybDIQNLrZWe bUjzqQRIOtrFWYJ4oM27XwVIairbxZJ+7w6vowdefm9KLiPRt1W7928/P1amvgrO aZUx9DDjla3gsNkyFlQy+ETp5rGDHgrhXVLg11S01FmtI3afGT2h2j13il3iQnkS HWlOWZ6c9qD+AxGJCIvKxG8qVDA2o7iDcq4aHw6KulSIa47Gz6vqlbwO+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0DcXuCzISx9R/k+hnI87xiXCndMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV/ekEC3 TyFpIKuJwkMf6dHgGVyMVZnnJvGSrGZWWfVhkBUmkuu+vXG6fvk+F2YWnQXsVD9J J3+h2B3AFlfFJLthw8sZerLH/eLf5/HA2yYfELDIHOW+J6cpatZTjOcWtyzZA4Lg RfrP2yYLjHxF3qVcyQYB7WMFEC+fI/TZPEixOd1jIdcuVdReBmV4msBfGcn+pZgk H8zPEHQpj5XZx/x17mBpa51I1Vjb8LGSomjU4yOitWYUQH3nNQrXD2H0JSmE8mBX pxgs/BoJnvMc5rjQeS6p8b5+k670xE+v4rN2wcTHnY3SO4UZg204Zg5Snj32vp3y W5IH1pFrB9BJCw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:50 2025 by rpki-client