This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: ZI7mglg4HBoIkkM7wBbtI8B70D2Wt8yW2zBi6T9Kmh0= Subject key identifier: A1:B1:97:EC:C9:9B:68:2D:D0:11:3A:6B:5D:E7:A7:D5:FC:F9:92:3C Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B3D2349CD8156CE02AD56D1318E3CE849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 14AD Signing time: Sat 20 Dec 2025 19:01:21 +0000 Manifest this update: Sat 20 Dec 2025 19:01:21 +0000 Manifest next update: Sun 21 Dec 2025 19:01:21 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: 5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa (hash: NHd1FZ0Cj9dSpCZXcpxcSuivwawk/XLiDV5hFVcK8gs=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 5: OI1U9tyTexI3zFMxN2_p-wXJb6Q.roa (hash: jEa8AhX1E/rcgU1N48+cRpXUd91VJFk6ahzuPB4XKow=) 6: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 7: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 8: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 9: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 10: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 11: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 12: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: bvgCThhhFPZBzgrNoJ8AK4HSuc56Bx5mGw5hvuesq34=) 13: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 14: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 15: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:49:cd:81:56:ce:02:ad:56:d1:31:8e:3c:e8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Dec 20 19:01:21 2025 GMT Not After : Dec 21 19:01:21 2025 GMT Subject: CN=a1b197ecc99b682dd0113a6b5de7a7d5fcf9923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:80:92:bb:8d:b3:fb:03:d8:98:a9:de:d8: 1e:d8:48:11:f1:e9:a2:da:25:27:2e:85:25:97:e4: 01:31:2d:c6:94:81:21:a5:f6:c9:92:a1:bd:1f:d5: 97:05:0b:b1:b5:db:f3:2c:3f:f0:13:9a:02:3a:12: 89:cd:e4:a3:ff:9c:2f:c8:43:03:5e:71:e5:aa:79: a5:da:c5:1a:68:6f:aa:5d:06:b3:83:3e:f8:f3:d4: 7f:a8:64:cd:0e:ca:95:90:47:53:4b:27:56:54:64: 8e:a1:a8:8c:4a:9e:c9:d5:dd:de:f3:d4:be:5c:60: a8:dc:cc:59:4f:c6:ff:dc:07:8c:56:2c:55:c0:e1: 1f:9d:1c:89:c7:75:c6:99:ab:50:23:52:37:d0:71: d2:5f:6d:96:21:6d:48:39:18:c5:08:21:90:02:39: 48:16:96:68:7f:35:f7:d2:8a:a2:d1:43:da:2f:fc: b4:fd:b6:5d:b1:1e:29:3c:62:44:f8:03:f0:03:90: c3:0d:62:e9:04:14:e6:e5:6f:a1:96:79:7f:91:a0: 18:1c:e2:09:91:5d:44:a9:96:e8:37:1a:bd:4d:5c: 46:c7:5f:cd:5c:e4:55:f6:eb:9a:b9:43:bf:ff:76: 72:cd:ac:c8:61:83:89:a9:5c:6c:35:e7:db:af:db: 08:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B1:97:EC:C9:9B:68:2D:D0:11:3A:6B:5D:E7:A7:D5:FC:F9:92:3C X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e6:78:62:a8:e6:db:26:51:5f:e3:59:14:de:58:d5:e8:2e: 10:14:99:a8:f2:c3:9e:11:43:0f:e1:dc:21:5e:15:93:a6:a9: 5f:8e:a6:6d:3f:ef:1e:f1:a3:2e:b7:46:66:ef:03:84:4c:5f: 34:f0:de:e0:d0:61:24:2b:41:69:86:e8:0e:5d:63:52:d3:54: 25:e2:c1:b5:e6:f0:a9:6f:0f:19:6a:d5:c9:7d:1c:28:0a:5b: 8c:07:b7:c1:ce:df:84:43:79:94:04:d0:d2:4c:75:99:54:d7: ef:ff:62:1b:54:73:fa:88:9c:b9:ff:a7:9e:ca:08:ec:a3:a6: ed:f4:a0:26:ae:2e:46:de:c6:b4:2f:9f:bf:a2:6e:5e:68:50: 3b:ce:65:40:7f:84:6e:8c:21:1a:b6:6f:5a:4a:5a:6a:4d:de: bd:b5:81:b3:8c:0c:5c:d6:f4:bb:0b:39:8e:df:8e:e0:c6:2d: 79:31:4c:94:e2:39:f6:24:97:a4:bc:94:44:da:5e:da:d9:e1: b9:c3:07:21:50:b8:6a:3f:68:5a:9c:ff:ca:e7:c6:84:a9:ca: 00:e7:cb:ac:fb:d8:b8:e7:b4:ae:db:6e:e1:64:20:ec:a1:9a: a7:34:3c:61:97:4c:75:3d:9d:00:af:58:84:42:cf:74:3c:c9: b8:27:04:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0nNgVbOAq1W0TGOPOhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUxMjIwMTkwMTIxWhcNMjUxMjIxMTkwMTIxWjAzMTEwLwYDVQQD EyhhMWIxOTdlY2M5OWI2ODJkZDAxMTNhNmI1ZGU3YTdkNWZjZjk5MjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueaAkruNs/sD2Jip3tge2EgR8emi 2iUnLoUll+QBMS3GlIEhpfbJkqG9H9WXBQuxtdvzLD/wE5oCOhKJzeSj/5wvyEMD XnHlqnml2sUaaG+qXQazgz7489R/qGTNDsqVkEdTSydWVGSOoaiMSp7J1d3e89S+ XGCo3MxZT8b/3AeMVixVwOEfnRyJx3XGmatQI1I30HHSX22WIW1IORjFCCGQAjlI FpZofzX30oqi0UPaL/y0/bZdsR4pPGJE+APwA5DDDWLpBBTm5W+hlnl/kaAYHOIJ kV1EqZboNxq9TVxGx1/NXORV9uuauUO//3ZyzazIYYOJqVxsNefbr9sIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGxl+zJm2gt0BE6a13np9X8+ZI8MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOZ4Yqjm 2yZRX+NZFN5Y1eguEBSZqPLDnhFDD+HcIV4Vk6apX46mbT/vHvGjLrdGZu8DhExf NPDe4NBhJCtBaYboDl1jUtNUJeLBtebwqW8PGWrVyX0cKApbjAe3wc7fhEN5lATQ 0kx1mVTX7/9iG1Rz+oicuf+nnsoI7KOm7fSgJq4uRt7GtC+fv6JuXmhQO85lQH+E bowhGrZvWkpaak3evbWBs4wMXNb0uws5jt+O4MYteTFMlOI59iSXpLyURNpe2tnh ucMHIVC4aj9oWpz/yufGhKnKAOfLrPvYuOe0rttu4WQg7KGapzQ8YZdMdT2dAK9Y hELPdDzJuCcEiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:09 2025 by rpki-client