This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 46/+s3BnxD0B7wXW9BBj9be3fgr9kN/Prkv/SQ6JgrU= Subject key identifier: 67:03:47:8B:69:ED:9D:76:30:97:A4:64:2A:56:F0:5A:7B:80:68:33 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019B3AFE3D9E0C796C97D8ED17979263D39B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0714 Signing time: Sat 20 Dec 2025 09:01:38 +0000 Manifest this update: Sat 20 Dec 2025 09:01:38 +0000 Manifest next update: Sun 21 Dec 2025 09:01:38 +0000 Files and hashes: 1: 4Knn2Ld5egn1camg9bhppId4Qlo.roa (hash: A8w1HB94c5M9H4eQOiI6lWSCTjnLMlfowVXvZM3dO6s=) 2: 5bwrov9Q4TKzJTBo9upY3XK0THU.roa (hash: TYWC6rWZltrX891RQlcpPW39DIbNZYI93ECjvUJPd18=) 3: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (hash: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=) 4: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (hash: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=) 5: YsXyfEzn_ZKBLDMzG1UU4GMwlcI.roa (hash: +hKZsJUinqgBcHuQ7dq/U5cKUb4tJ0uT1WCFtVOANwo=) 6: gOWYAyjzxIKRFcUZmXLFPZZQLAE.roa (hash: uorrOksjaGfolUbfcHF+KBKk6xKRTaR+l4ir2v0cUaI=) 7: g_ElxkrC5OfOyHZzsFQIM1AuuFQ.roa (hash: s9+zwcgiFmScc9IvVxtLII47fLB+BQdFtBCLqfaDxwU=) 8: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: LyHPce9oYOX7wKQCFcktWHWbge2AdOwKr69Jpwg/YaI=) 9: zvXh2JmULYTuuJGfZa88vbAc7K8.roa (hash: XQvzCYYY2c/DWeWDz/HVl73sGmFpwXBX4BVFr0eF6dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3d:9e:0c:79:6c:97:d8:ed:17:97:92:63:d3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Dec 20 09:01:38 2025 GMT Not After : Dec 21 09:01:38 2025 GMT Subject: CN=6703478b69ed9d763097a4642a56f05a7b806833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:d3:de:44:da:d2:39:55:da:8e:e3:87:2b: 2a:07:eb:6b:05:08:bc:3a:1d:b4:3c:81:b1:70:76: 31:2c:c2:b3:ef:30:86:06:86:a4:1a:aa:b0:07:50: 50:56:09:31:86:c0:c9:ef:17:4c:61:b2:1d:8c:39: 2a:58:35:12:51:0b:7d:af:d7:20:3c:37:c3:28:c4: bf:0a:46:64:10:c5:bb:90:63:91:7e:18:94:ca:44: 70:6c:d0:e9:6d:22:9e:30:81:7f:1d:93:90:87:93: a8:5b:20:98:61:a5:db:9f:10:8c:5b:ce:64:1c:e0: f8:0b:89:5b:ee:70:b1:3d:82:44:4a:74:6e:0a:64: c7:66:73:60:16:15:14:90:96:d4:34:10:b4:65:81: 8d:74:14:b2:e1:c0:92:b7:fc:25:8f:86:21:82:c1: 7e:c4:38:03:3c:7f:73:43:31:c9:0f:f8:7c:c2:83: 4a:e6:02:6c:99:c7:79:c9:7e:a3:5c:90:5e:3c:df: d1:c3:c8:86:9d:8d:18:99:c4:28:b5:4f:78:71:c1: 3f:6b:fb:fc:35:f3:e1:09:7e:c1:c2:3b:d9:be:f7: 43:1e:e0:5f:28:35:50:7d:66:f1:a1:45:d1:f2:dd: 41:88:39:df:fc:46:e4:0e:2e:c5:1d:36:03:6e:3c: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:47:8B:69:ED:9D:76:30:97:A4:64:2A:56:F0:5A:7B:80:68:33 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:fa:05:ee:37:53:4c:cb:79:54:df:8c:bb:18:1b:d8:15: a5:92:05:8e:dd:62:a4:61:11:51:5f:df:cb:cf:c1:df:ff:cb: af:62:29:07:47:38:b2:56:93:30:92:52:3c:4e:89:2d:41:7a: 8b:ca:b8:4b:b8:b3:b5:fc:dc:4d:7d:d5:86:15:df:07:92:09: b6:30:74:61:78:e4:e2:74:4d:84:b7:cc:1a:8f:04:20:d2:4e: 13:16:3f:ee:ab:3f:4c:41:76:c7:8e:55:e5:4a:19:41:b5:9b: 9f:fc:a3:84:ef:98:d8:82:49:8a:9c:f3:af:0a:e3:3c:51:ac: be:7a:40:86:bc:cb:31:fc:4a:3e:2b:b5:ea:5d:39:44:f0:12: a9:21:12:f6:1d:ef:09:81:6e:22:e0:92:76:ab:ba:0f:db:df: 4b:4e:b2:4b:cb:e9:e8:52:59:b3:88:74:30:1b:5f:da:52:89: dd:a9:69:db:87:aa:51:9a:37:5d:f1:73:1d:d9:99:0f:c1:c9: 0a:5b:5f:d6:d8:9d:ac:12:d1:ac:53:92:6d:e0:e4:99:b6:da: 76:05:7b:f2:a7:fb:fd:ae:a0:fb:97:34:88:88:2f:55:c0:c0: 29:90:53:72:05:5c:b6:22:88:35:8c:57:5c:4c:e2:98:c1:13: b2:bb:cf:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/j2eDHlsl9jtF5eSY9ObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjUxMjIwMDkwMTM4WhcNMjUxMjIxMDkwMTM4WjAzMTEwLwYDVQQD Eyg2NzAzNDc4YjY5ZWQ5ZDc2MzA5N2E0NjQyYTU2ZjA1YTdiODA2ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdfT3kTa0jlV2o7jhysqB+trBQi8 Oh20PIGxcHYxLMKz7zCGBoakGqqwB1BQVgkxhsDJ7xdMYbIdjDkqWDUSUQt9r9cg PDfDKMS/CkZkEMW7kGORfhiUykRwbNDpbSKeMIF/HZOQh5OoWyCYYaXbnxCMW85k HOD4C4lb7nCxPYJESnRuCmTHZnNgFhUUkJbUNBC0ZYGNdBSy4cCSt/wlj4YhgsF+ xDgDPH9zQzHJD/h8woNK5gJsmcd5yX6jXJBePN/Rw8iGnY0YmcQotU94ccE/a/v8 NfPhCX7BwjvZvvdDHuBfKDVQfWbxoUXR8t1BiDnf/EbkDi7FHTYDbjxWzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcDR4tp7Z12MJekZCpW8Fp7gGgzMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPr6Be43 U0zLeVTfjLsYG9gVpZIFjt1ipGERUV/fy8/B3//Lr2IpB0c4slaTMJJSPE6JLUF6 i8q4S7iztfzcTX3VhhXfB5IJtjB0YXjk4nRNhLfMGo8EINJOExY/7qs/TEF2x45V 5UoZQbWbn/yjhO+Y2IJJipzzrwrjPFGsvnpAhrzLMfxKPiu16l05RPASqSES9h3v CYFuIuCSdqu6D9vfS06yS8vp6FJZs4h0MBtf2lKJ3alp24eqUZo3XfFzHdmZD8HJ Cltf1tidrBLRrFOSbeDkmbbadgV78qf7/a6g+5c0iIgvVcDAKZBTcgVctiKINYxX XEzimMETsrvPyw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:13 2025 by rpki-client