This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json) Hash identifier: ns1U8EE2PJ7vLpZE1WbVp9MTbgxtA2X9bnVl2VoEDFk= Subject key identifier: FA:80:9B:13:17:CB:24:72:1B:46:15:EE:DD:81:5A:B1:B3:DD:85:84 Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb Certificate serial: 019B50E0887A55420CC626AB3C57E3B54D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft Manifest number: 171A Signing time: Wed 24 Dec 2025 15:00:50 +0000 Manifest this update: Wed 24 Dec 2025 15:00:50 +0000 Manifest next update: Thu 25 Dec 2025 15:00:50 +0000 Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: BYxri5kv08iDxwojdn+RKeyKtmkX9aeyoOr3fK6n9wM=) 2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:88:7a:55:42:0c:c6:26:ab:3c:57:e3:b5:4d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb Validity Not Before: Dec 24 15:00:50 2025 GMT Not After : Dec 25 15:00:50 2025 GMT Subject: CN=fa809b1317cb24721b4615eedd815ab1b3dd8584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:56:ac:18:48:b9:71:34:33:49:cb:ca:d4: 1c:ee:b6:2d:cb:b9:58:ee:4d:c5:ca:c8:b4:25:86: 80:be:b6:f2:5e:ff:be:c3:53:e0:4c:ab:5a:26:a6: 56:e2:db:16:01:da:20:0e:da:84:c4:b4:ff:f5:16: 1b:3c:e4:ea:a0:68:f1:f6:86:0f:41:c6:61:26:62: 9e:2b:02:0b:e9:6d:06:89:9d:bc:9f:59:4e:9c:89: ac:26:07:64:0b:bd:25:ab:bf:d4:13:34:1f:b3:2d: f0:b5:f9:76:ea:f5:b6:6d:65:c4:50:cc:74:c9:54: 52:7f:69:81:8f:c0:11:05:9c:61:75:04:ae:de:bb: c8:2b:18:fd:fb:36:52:e4:06:69:c8:3e:32:a5:54: 8c:20:cc:01:69:21:5d:d4:21:64:77:e4:d7:47:6a: ad:ad:6a:11:22:75:71:72:4c:8e:3d:1d:f8:94:ed: e8:97:49:0f:8c:7d:36:e4:d2:c3:91:0c:5d:8f:6d: a9:a4:ea:64:68:a5:55:0d:b3:32:0b:a4:36:81:60: ef:be:c8:ab:24:ae:2d:4d:2c:54:53:1f:43:ca:d9: f8:9e:58:71:a5:09:3d:3c:5a:c6:4f:03:82:1f:9d: bb:08:f6:b6:fc:c7:27:81:6a:09:2f:b8:ca:d8:a6: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:9B:13:17:CB:24:72:1B:46:15:EE:DD:81:5A:B1:B3:DD:85:84 X509v3 Authority Key Identifier: keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:3b:fb:12:bb:60:fd:01:d7:2f:13:1a:e8:f6:fb:da:38: 7b:bb:e0:4b:f4:43:af:52:ef:3c:1a:15:76:ae:15:96:e1:42: 0c:4b:f3:1b:04:9b:23:32:4b:83:1e:cf:02:4e:7d:f7:f2:e6: 21:c4:32:14:82:ac:4c:f3:40:16:a9:68:90:0b:d2:3c:b9:7e: bd:7b:a0:72:ec:81:73:d4:b6:39:6f:b1:2c:35:23:c9:ab:fa: 25:e2:7b:46:dc:d4:8f:8d:4c:f4:39:89:e8:46:d3:39:1e:0e: 33:4d:7e:62:9b:3c:e3:63:59:e6:5a:b6:99:c7:35:f0:d3:c7: 5f:a4:07:37:88:b9:a5:b3:bd:ec:38:20:89:11:a5:3c:b4:09: f3:73:42:2e:e9:52:7a:01:22:a3:dc:33:3e:70:4b:30:62:f3: b1:d5:5c:53:4a:a7:4c:d9:ad:95:87:08:58:e8:df:88:07:ee: ac:64:62:ea:2c:6b:f8:89:d5:8d:fd:57:d1:c1:af:0d:97:07: 6c:0a:7f:9b:02:5f:e8:6a:54:63:45:56:57:b9:06:5d:8d:dd: f8:b8:5c:4c:b3:23:33:55:ea:2a:0b:9f:61:b1:7b:64:11:70: ef:5a:84:4b:21:ea:ef:f8:8c:2d:59:5b:74:28:ad:1a:88:bd: 92:d5:bd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Ih6VUIMxiarPFfjtU1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm OTRhZmIwHhcNMjUxMjI0MTUwMDUwWhcNMjUxMjI1MTUwMDUwWjAzMTEwLwYDVQQD EyhmYTgwOWIxMzE3Y2IyNDcyMWI0NjE1ZWVkZDgxNWFiMWIzZGQ4NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydWrBhIuXE0M0nLytQc7rYty7lY 7k3Fysi0JYaAvrbyXv++w1PgTKtaJqZW4tsWAdogDtqExLT/9RYbPOTqoGjx9oYP QcZhJmKeKwIL6W0GiZ28n1lOnImsJgdkC70lq7/UEzQfsy3wtfl26vW2bWXEUMx0 yVRSf2mBj8ARBZxhdQSu3rvIKxj9+zZS5AZpyD4ypVSMIMwBaSFd1CFkd+TXR2qt rWoRInVxckyOPR34lO3ol0kPjH025NLDkQxdj22ppOpkaKVVDbMyC6Q2gWDvvsir JK4tTSxUUx9Dytn4nlhxpQk9PFrGTwOCH527CPa2/McngWoJL7jK2KajVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqAmxMXyyRyG0YV7t2BWrGz3YWEMB8GA1UdIwQY MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct MTU3YWQwYWM1MjBhLzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPQ7+xK7 YP0B1y8TGuj2+9o4e7vgS/RDr1LvPBoVdq4VluFCDEvzGwSbIzJLgx7PAk599/Lm IcQyFIKsTPNAFqlokAvSPLl+vXugcuyBc9S2OW+xLDUjyav6JeJ7RtzUj41M9DmJ 6EbTOR4OM01+Yps842NZ5lq2mcc18NPHX6QHN4i5pbO97DggiRGlPLQJ83NCLulS egEio9wzPnBLMGLzsdVcU0qnTNmtlYcIWOjfiAfurGRi6ixr+InVjf1X0cGvDZcH bAp/mwJf6GpUY0VWV7kGXY3d+LhcTLMjM1XqKgufYbF7ZBFw71qESyHq7/iMLVlb dCitGoi9ktW90g== -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:24 2025 by rpki-client