This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json) Hash identifier: 4W4nwk62ejSBoIwLBMUWblCejB1R9gkjO7WmA178zy0= Subject key identifier: 41:E7:80:D3:A4:7F:BA:F9:51:41:23:B4:4B:2C:EC:D2:41:17:6A:F6 Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722 Certificate serial: 019B62AFE1D95598F18C4510A1C58821D772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft Manifest number: 0AC7 Signing time: Sun 28 Dec 2025 02:00:52 +0000 Manifest this update: Sun 28 Dec 2025 02:00:52 +0000 Manifest next update: Mon 29 Dec 2025 02:00:52 +0000 Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=) 2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: VXmtZm8zSqvxKbqPnWo43SnChrZtfCt/aYRGpQVD+hE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:e1:d9:55:98:f1:8c:45:10:a1:c5:88:21:d7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722 Validity Not Before: Dec 28 02:00:52 2025 GMT Not After : Dec 29 02:00:52 2025 GMT Subject: CN=41e780d3a47fbaf9514123b44b2cecd241176af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:09:9a:b3:3c:0c:15:e6:7c:77:2e:7f:16: ab:78:ef:c6:1f:ba:05:c6:39:76:d2:13:67:f7:86: 5a:50:c9:af:93:a5:e1:c4:6a:52:03:7c:74:c8:31: 73:d1:26:53:5f:0d:9e:cc:bb:ce:fd:ad:81:d3:7d: 1a:88:5c:08:8d:76:11:fd:e3:47:85:6f:5f:22:b7: 71:e5:98:93:29:e2:41:63:4b:1c:85:ce:72:03:fb: 96:1e:29:28:e1:ba:ed:b2:99:9e:28:6c:b8:f8:4d: af:6c:53:c8:14:15:91:64:5d:35:7e:3f:a8:47:de: 8a:c5:cb:22:64:fb:94:32:3d:35:8d:7e:51:9d:b7: 4f:5e:c1:a6:a7:b3:ef:96:82:5b:0b:72:ff:7f:b3: 41:e2:3e:72:ec:c4:3f:98:3e:7a:41:48:fa:d0:6d: 01:89:d6:53:e6:bc:31:42:1d:57:85:1b:c5:3f:a8: a4:79:9f:ea:8d:7e:79:5d:b7:30:0b:34:b5:4e:d3: bb:b8:89:ae:1d:9f:7c:3c:47:88:f1:36:b6:c7:66: 8f:54:8c:8e:df:1e:23:ad:df:92:28:9f:e1:53:29: 5d:61:c9:40:b5:26:c7:cb:eb:f3:b1:f3:0e:c3:d0: f1:2d:3d:b1:b3:b3:24:49:f5:48:53:cd:6c:6c:12: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:80:D3:A4:7F:BA:F9:51:41:23:B4:4B:2C:EC:D2:41:17:6A:F6 X509v3 Authority Key Identifier: keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d2:b8:a8:24:2b:03:ae:27:83:e5:b8:49:74:02:3a:be:9c: 3a:21:78:08:d8:82:73:00:e6:e4:b9:76:f1:a8:5f:7d:f0:91: 37:7d:8a:66:49:a8:ce:ff:e1:af:55:de:f6:9f:f6:bc:f9:17: 9e:4d:44:3f:d2:ad:85:80:29:2d:71:6d:45:b9:d3:fd:9b:ff: 8a:d2:1c:43:e4:d8:ae:09:03:d6:8a:64:6c:4c:c3:d9:37:e9: 3a:58:03:1f:de:c5:86:61:8d:be:f7:7d:18:48:1d:9d:00:32: a5:91:99:10:ab:77:e5:8a:b8:81:46:38:5a:e7:b2:4b:59:9d: b9:d7:18:6d:9b:d4:6d:3c:ac:79:e8:33:22:f1:ea:84:1a:2d: 90:1b:3a:a5:d9:86:8a:ea:0b:fc:bc:cc:82:5c:59:44:d6:63: b6:00:1c:71:ab:fb:02:9e:6c:bd:3f:39:8b:55:4d:0b:f1:89: cd:92:35:9a:da:cc:d3:30:0d:1b:59:f0:3f:0c:5c:79:a0:d7: 0e:ad:35:6c:ad:27:62:af:5d:10:8d:7c:57:86:0d:2b:3e:5b: 2b:9d:26:d5:5a:fb:5c:73:85:ad:e9:cf:3d:cb:1c:60:f9:8f: 66:ab:56:d0:03:0f:18:23:db:d9:53:da:41:26:ba:79:48:1e: 4e:ab:5a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir+HZVZjxjEUQocWIIddyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzI0NDM0OGU3MWVjMWJlNWY1MDA3YzhkNWVmZTcxMjU5 MjA3MjIwHhcNMjUxMjI4MDIwMDUyWhcNMjUxMjI5MDIwMDUyWjAzMTEwLwYDVQQD Eyg0MWU3ODBkM2E0N2ZiYWY5NTE0MTIzYjQ0YjJjZWNkMjQxMTc2YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSoJmrM8DBXmfHcufxareO/GH7oF xjl20hNn94ZaUMmvk6XhxGpSA3x0yDFz0SZTXw2ezLvO/a2B030aiFwIjXYR/eNH hW9fIrdx5ZiTKeJBY0schc5yA/uWHiko4brtspmeKGy4+E2vbFPIFBWRZF01fj+o R96KxcsiZPuUMj01jX5RnbdPXsGmp7PvloJbC3L/f7NB4j5y7MQ/mD56QUj60G0B idZT5rwxQh1XhRvFP6ikeZ/qjX55XbcwCzS1TtO7uImuHZ98PEeI8Ta2x2aPVIyO 3x4jrd+SKJ/hUyldYclAtSbHy+vzsfMOw9DxLT2xs7MkSfVIU81sbBKQRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHngNOkf7r5UUEjtEss7NJBF2r2MB8GA1UdIwQY MBaAFKNyRDSOcewb5fUAfI1e/nElkgciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzct ODg1MmE1MzJhZDQ1LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzctODg1MmE1MzJhZDQ1 LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtK4qCQr A64ng+W4SXQCOr6cOiF4CNiCcwDm5Ll28ahfffCRN32KZkmozv/hr1Xe9p/2vPkX nk1EP9KthYApLXFtRbnT/Zv/itIcQ+TYrgkD1opkbEzD2TfpOlgDH97FhmGNvvd9 GEgdnQAypZGZEKt35Yq4gUY4WueyS1mdudcYbZvUbTyseegzIvHqhBotkBs6pdmG iuoL/LzMglxZRNZjtgAccav7Ap5svT85i1VNC/GJzZI1mtrM0zANG1nwPwxceaDX Dq01bK0nYq9dEI18V4YNKz5bK50m1Vr7XHOFrenPPcscYPmPZqtW0AMPGCPb2VPa QSa6eUgeTqtaEw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:13 2025 by rpki-client