This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json) Hash identifier: L+xBnoTJb3Q+JHK1AquTsUNU48Sef66NTPXRg+joFfc= Subject key identifier: 43:78:C8:BE:C1:48:B0:AE:F9:FD:AC:75:9E:A9:B3:DF:E2:B2:C4:81 Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468 Certificate serial: 019B3FED5DDD8927CB68CFF0416FDC9C0701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft Manifest number: 03DD Signing time: Sun 21 Dec 2025 08:01:19 +0000 Manifest this update: Sun 21 Dec 2025 08:01:19 +0000 Manifest next update: Mon 22 Dec 2025 08:01:19 +0000 Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=) 2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: cMhRsWVzjjXmwfEMtxRYJ/wWtjqtq9BbqTEtTvi2v3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:5d:dd:89:27:cb:68:cf:f0:41:6f:dc:9c:07:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468 Validity Not Before: Dec 21 08:01:19 2025 GMT Not After : Dec 22 08:01:19 2025 GMT Subject: CN=4378c8bec148b0aef9fdac759ea9b3dfe2b2c481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:22:23:45:4c:2b:44:36:f2:fe:bd:9e:c2:73: 73:a9:9d:33:61:85:da:70:f4:be:36:c2:3f:b6:fb: e0:29:bb:56:6c:10:ba:5f:c1:f9:bd:d8:5f:99:67: 2f:fa:4f:b8:13:34:55:8a:1d:8d:36:4f:30:0c:f9: af:c9:2f:17:88:a8:a8:57:0e:22:0c:6a:65:3f:99: 9a:65:db:8c:76:0f:34:ac:d0:f7:82:80:a5:d8:7a: be:c8:1b:ab:6e:1f:d8:23:f2:ec:be:48:03:a2:7d: b8:ac:d0:92:0b:08:ef:e6:b9:68:5a:94:37:a3:31: ca:09:0d:cc:f5:d0:ff:01:1f:af:98:f8:07:1c:5b: 01:50:5b:5c:59:2b:bb:36:b0:76:42:e4:b4:d9:d4: 7b:9a:97:9c:72:28:3f:16:96:82:18:ef:22:11:53: 81:f3:29:78:9b:bb:94:36:86:1d:4e:ee:af:8b:fe: b9:01:c1:47:15:3b:cf:b9:a9:93:c2:f4:1b:a6:a0: 00:33:84:03:31:20:49:d2:55:64:97:8a:e8:f5:69: 64:6e:dc:83:34:2c:6e:f8:9b:a5:7c:53:35:86:c9: ed:7d:00:3a:de:d4:4b:c2:e9:de:a2:8f:cd:cc:c2: ad:0e:6c:08:ab:ed:23:a1:4d:f8:5a:1b:0a:cc:16: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:C8:BE:C1:48:B0:AE:F9:FD:AC:75:9E:A9:B3:DF:E2:B2:C4:81 X509v3 Authority Key Identifier: keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:83:14:2c:8b:73:42:d2:c6:af:a9:1a:2c:d4:24:c0:04:16: 98:5a:d5:15:9f:5d:50:1f:31:57:f3:c3:08:6a:5c:21:98:5b: 97:db:35:06:1d:02:82:b3:57:e1:e0:e5:04:97:0d:2a:bb:c6: 79:61:37:42:a6:73:af:37:4d:88:e6:9c:57:6d:b6:74:f0:e2: cf:23:58:c7:06:ad:e9:66:1f:9b:26:cf:52:1d:f2:5e:a4:7e: 4e:db:16:04:82:c9:ae:e1:b8:c1:85:76:2f:e4:ea:cd:cf:ec: 7b:16:29:1a:f7:18:39:e8:ec:bd:2a:36:1a:de:41:ea:02:c8: 57:e4:dc:d5:d1:9a:54:ab:74:cd:38:42:16:8b:36:2f:4d:fa: 4a:ec:3b:95:cf:01:ee:ba:b1:d8:d6:2c:eb:b7:18:c0:33:13: 5d:b2:1c:68:3a:4a:18:99:5e:63:f2:34:4c:9d:fc:17:bf:7c: df:08:40:c2:ab:4a:db:57:ed:a7:df:ec:35:ea:87:12:ce:6c: 82:8b:9f:3c:09:4b:18:6d:47:e2:a3:16:ab:09:68:0f:07:23: d8:ad:bf:e8:b2:41:78:99:4b:e4:42:8b:1b:3e:01:80:1b:e3: f9:e1:28:7d:61:11:67:7b:87:73:ff:d8:66:9d:ee:2b:71:21: 0e:c6:21:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7V3diSfLaM/wQW/cnAcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz NzE0NjgwHhcNMjUxMjIxMDgwMTE5WhcNMjUxMjIyMDgwMTE5WjAzMTEwLwYDVQQD Eyg0Mzc4YzhiZWMxNDhiMGFlZjlmZGFjNzU5ZWE5YjNkZmUyYjJjNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yIjRUwrRDby/r2ewnNzqZ0zYYXa cPS+NsI/tvvgKbtWbBC6X8H5vdhfmWcv+k+4EzRVih2NNk8wDPmvyS8XiKioVw4i DGplP5maZduMdg80rND3goCl2Hq+yBurbh/YI/LsvkgDon24rNCSCwjv5rloWpQ3 ozHKCQ3M9dD/AR+vmPgHHFsBUFtcWSu7NrB2QuS02dR7mpeccig/FpaCGO8iEVOB 8yl4m7uUNoYdTu6vi/65AcFHFTvPuamTwvQbpqAAM4QDMSBJ0lVkl4ro9WlkbtyD NCxu+JulfFM1hsntfQA63tRLwuneoo/NzMKtDmwIq+0joU34WhsKzBZ+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN4yL7BSLCu+f2sdZ6ps9/issSBMB8GA1UdIwQY MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0 LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYMULItz QtLGr6kaLNQkwAQWmFrVFZ9dUB8xV/PDCGpcIZhbl9s1Bh0CgrNX4eDlBJcNKrvG eWE3QqZzrzdNiOacV222dPDizyNYxwat6WYfmybPUh3yXqR+TtsWBILJruG4wYV2 L+Tqzc/sexYpGvcYOejsvSo2Gt5B6gLIV+Tc1dGaVKt0zThCFos2L036Suw7lc8B 7rqx2NYs67cYwDMTXbIcaDpKGJleY/I0TJ38F7983whAwqtK21ftp9/sNeqHEs5s goufPAlLGG1H4qMWqwloDwcj2K2/6LJBeJlL5EKLGz4BgBvj+eEofWERZ3uHc//Y Zp3uK3EhDsYhRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:53 2025 by rpki-client