This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json) Hash identifier: eTRSivW+V3KgudD1wh+WBdeXMZZPPMHpE2ShSdf+Rdk= Subject key identifier: C6:8A:1D:42:46:CC:11:AD:E3:C0:51:15:D9:B6:0B:6F:09:76:40:C9 Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6 Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6 Certificate serial: 019B4C27E867C42B9461E0DC2B5FFA1D570D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft Manifest number: 05B1 Signing time: Tue 23 Dec 2025 17:00:42 +0000 Manifest this update: Tue 23 Dec 2025 17:00:42 +0000 Manifest next update: Wed 24 Dec 2025 17:00:42 +0000 Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=) 2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: TqfbcERaHaHN0nS7t9E4zEvWbkEhWNgvMBHzokpkbzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:e8:67:c4:2b:94:61:e0:dc:2b:5f:fa:1d:57:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6 Validity Not Before: Dec 23 17:00:42 2025 GMT Not After : Dec 24 17:00:42 2025 GMT Subject: CN=c68a1d4246cc11ade3c05115d9b60b6f097640c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:30:e1:c4:d5:2b:2b:91:73:f1:39:0c:2f: b6:5d:7b:ff:b2:f2:c8:61:45:1f:88:b3:94:5c:da: ab:ec:88:f4:bd:d4:9d:4d:c0:03:eb:09:0f:df:ea: 2d:23:1e:06:51:e7:92:8a:8b:37:ce:84:6c:1b:9f: 12:2b:52:3a:5c:bc:dd:f1:d5:0a:3f:17:da:1e:87: 49:e7:75:84:39:d7:41:f3:ec:dc:b5:dd:9c:7a:2e: 92:73:c3:70:13:54:ea:fc:49:a1:3e:5b:86:52:8a: 4f:e6:22:ca:b1:eb:db:04:13:b8:6c:ec:fa:9b:0c: 0e:7f:ac:8f:2a:16:da:1a:68:a9:33:d8:dd:22:7b: 06:fb:e9:d2:b3:5e:3b:10:7b:1b:ea:3f:09:3f:3c: 59:89:b1:f1:74:f7:60:5d:86:5c:fa:2c:15:77:47: df:12:00:be:ed:f5:42:f6:dd:36:bf:c8:5d:e0:97: 0b:e9:44:20:8b:e7:d8:62:85:2e:7c:e8:85:f4:0f: 6a:f7:15:88:bf:26:51:f0:2f:bb:db:15:ec:2f:fc: 03:49:9d:3a:11:47:b5:6e:bd:4e:a9:1a:a8:99:5c: ea:f0:82:e9:dc:1b:9f:47:24:ac:6c:7a:c7:ed:12: ac:b8:7a:ea:63:f2:17:f0:af:76:31:13:a2:39:6d: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:1D:42:46:CC:11:AD:E3:C0:51:15:D9:B6:0B:6F:09:76:40:C9 X509v3 Authority Key Identifier: keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:88:4a:fd:44:a0:b8:dc:46:a9:57:77:d5:15:20:b1:fb:04: fc:26:e2:49:41:82:c9:49:65:b4:7b:af:3f:37:1d:f4:3c:c5: ba:54:33:7d:86:d6:d5:bd:11:a3:ff:63:99:3f:9b:9b:2f:ba: 1c:d1:7f:6e:64:7a:34:22:34:87:8a:f8:5e:67:58:8f:80:75: 38:48:4a:9a:dd:c8:30:1c:0b:79:0c:98:74:a4:e5:1c:ad:05: 8a:aa:33:f7:69:bb:d1:d9:3b:23:0c:df:f8:7b:fb:70:4b:03: 53:76:32:e1:4e:85:75:62:26:9f:ba:1c:1f:89:6e:ac:df:80: bb:0b:5c:28:5e:35:93:9f:b6:07:d1:b8:e9:27:3c:80:a2:c1: 1e:04:e7:0c:7c:6f:7f:86:ae:38:85:4f:fe:d0:65:71:d2:34: 63:ac:d3:e8:9d:7c:90:27:73:c2:6c:4b:a0:48:2c:aa:80:c2: 8a:24:4a:90:4a:dc:da:f6:c3:cd:8a:a0:36:f2:74:37:68:71: 42:3c:d5:0f:4c:25:44:56:b5:da:e3:62:82:c2:e7:ec:c3:dd: 4c:87:dd:20:29:84:8a:7c:3b:67:96:f4:63:57:f3:03:10:ce: 33:18:8e:11:16:58:38:ef:7d:09:32:39:85:25:d5:f7:30:e5: c1:81:a1:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ+hnxCuUYeDcK1/6HVcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODRhNTYzMTdhYzgxNzk4NTFiNTcwZjBlM2E3YWEwNDRl ODA4YTYwHhcNMjUxMjIzMTcwMDQyWhcNMjUxMjI0MTcwMDQyWjAzMTEwLwYDVQQD EyhjNjhhMWQ0MjQ2Y2MxMWFkZTNjMDUxMTVkOWI2MGI2ZjA5NzY0MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J0w4cTVKyuRc/E5DC+2XXv/svLI YUUfiLOUXNqr7Ij0vdSdTcAD6wkP3+otIx4GUeeSios3zoRsG58SK1I6XLzd8dUK PxfaHodJ53WEOddB8+zctd2cei6Sc8NwE1Tq/EmhPluGUopP5iLKsevbBBO4bOz6 mwwOf6yPKhbaGmipM9jdInsG++nSs147EHsb6j8JPzxZibHxdPdgXYZc+iwVd0ff EgC+7fVC9t02v8hd4JcL6UQgi+fYYoUufOiF9A9q9xWIvyZR8C+72xXsL/wDSZ06 EUe1br1OqRqomVzq8ILp3BufRySsbHrH7RKsuHrqY/IX8K92MROiOW1SZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaKHUJGzBGt48BRFdm2C28JdkDJMB8GA1UdIwQY MBaAFKOEpWMXrIF5hRtXDw46eqBE6AimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMmZiZTEtZGQ5ZC00MjA0LTkwNjYt ZTIyNWEyNDkzNzhlLzEvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jMmZiZTEtZGQ5ZC00MjA0LTkwNjYtZTIyNWEyNDkzNzhl LzEvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYhK/USg uNxGqVd31RUgsfsE/CbiSUGCyUlltHuvPzcd9DzFulQzfYbW1b0Ro/9jmT+bmy+6 HNF/bmR6NCI0h4r4XmdYj4B1OEhKmt3IMBwLeQyYdKTlHK0Fiqoz92m70dk7Iwzf +Hv7cEsDU3Yy4U6FdWImn7ocH4lurN+AuwtcKF41k5+2B9G46Sc8gKLBHgTnDHxv f4auOIVP/tBlcdI0Y6zT6J18kCdzwmxLoEgsqoDCiiRKkErc2vbDzYqgNvJ0N2hx QjzVD0wlRFa12uNigsLn7MPdTIfdICmEinw7Z5b0Y1fzAxDOMxiOERZYOO99CTI5 hSXV9zDlwYGhgQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:19 2025 by rpki-client