This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json) Hash identifier: +NEwDDFH7zAmPpvHO2ZtPxCjgzXfdKiPZ/v68q4+A6U= Subject key identifier: 4D:A9:FB:FA:70:54:85:29:94:17:97:33:27:6B:5B:2A:4F:E0:8D:D3 Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb Certificate serial: 019B3D90C9AB3E19E708921831A01BD520CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft Manifest number: 1710 Signing time: Sat 20 Dec 2025 21:00:57 +0000 Manifest this update: Sat 20 Dec 2025 21:00:57 +0000 Manifest next update: Sun 21 Dec 2025 21:00:57 +0000 Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: niNZMeSwyiVMATRO61XAU2JpojIKjCEqzTBW5n8crGk=) 2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c9:ab:3e:19:e7:08:92:18:31:a0:1b:d5:20:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb Validity Not Before: Dec 20 21:00:57 2025 GMT Not After : Dec 21 21:00:57 2025 GMT Subject: CN=4da9fbfa7054852994179733276b5b2a4fe08dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:87:4e:6b:93:b7:1e:ca:08:15:63:cc:1d: 19:ab:22:eb:41:7f:40:8f:3b:bc:de:25:6c:23:1c: 63:9c:9b:0a:3b:5a:64:8c:31:a6:15:45:67:c7:89: b1:2e:70:8e:81:4d:e5:ac:29:3d:d6:6d:03:00:cd: 71:f3:5d:65:1d:a5:b5:17:84:22:7a:6d:fc:b5:80: ab:db:c0:fe:68:79:70:63:6b:af:c9:8e:19:67:e4: 7f:a5:af:c7:f1:39:00:07:13:7a:04:47:cf:f0:91: 3c:fb:d4:7e:c6:a7:78:db:8c:93:17:d1:07:ab:ab: 5e:02:88:23:fd:63:27:d0:aa:6c:57:5a:9a:42:76: 93:a8:27:a1:69:7d:8f:d5:4a:ff:a9:9b:6e:e3:f0: 79:3b:e1:80:e9:69:c2:75:d4:a2:fb:f9:45:cf:e3: b2:85:2c:58:9f:cc:0f:69:4d:ff:8c:17:05:18:c1: 0e:90:30:ff:3b:dd:25:ce:21:a0:74:f8:93:ff:ad: 4c:95:15:4d:7c:c3:36:6a:c3:a4:5c:33:df:32:65: c9:bf:06:d4:07:f5:2e:99:5e:e5:c9:fa:44:62:34: 2a:cc:1a:a3:0c:f6:3a:db:9d:68:5a:aa:25:6e:4f: 4f:73:8a:77:c6:ba:b5:51:29:d4:3a:9d:89:28:11: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:FB:FA:70:54:85:29:94:17:97:33:27:6B:5B:2A:4F:E0:8D:D3 X509v3 Authority Key Identifier: keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:af:a8:ae:a2:d7:af:a0:86:13:f8:8a:8e:82:49:26:c3:26: e1:f8:33:ae:a6:ac:aa:b6:0f:e5:8e:e9:a7:64:43:b8:d6:a9: 58:13:33:b1:19:5a:8c:f4:0f:ad:48:30:86:0f:bb:37:c0:af: b3:33:9f:63:90:f7:fe:5a:92:36:e7:15:ab:14:71:e5:a0:70: d8:d3:b8:22:a8:ea:2a:24:64:8e:d9:de:c2:1c:0f:8c:c3:b6: 28:ed:27:65:c0:8d:4c:e4:78:70:ea:c4:26:be:7d:ab:b2:5a: cd:f0:a6:7d:5d:2a:ed:8e:9c:cf:4d:4d:07:26:cb:7a:b4:aa: 32:47:5a:9c:a4:19:ce:4f:98:8b:c6:e3:c9:e5:cd:1d:f6:bd: 6c:11:d6:f9:a5:f7:58:11:ab:6e:f2:1e:b4:72:13:bd:07:36: 3c:ea:05:43:df:3c:b0:9c:bd:28:d2:6e:f1:48:40:a9:9f:ca: 67:59:06:c6:85:24:fc:29:a8:e1:fb:76:8b:60:a3:36:97:a8: 94:17:4b:44:bc:c0:bd:a4:00:b6:a8:59:c1:85:48:f3:b5:71: b3:5b:d4:25:0a:79:df:9c:fc:c0:48:fb:b1:bb:b2:62:bd:96: c9:ba:82:dd:50:6d:0d:96:69:28:f8:0e:6d:7b:e6:6c:3a:dd: 7a:37:92:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMmrPhnnCJIYMaAb1SDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm OTRhZmIwHhcNMjUxMjIwMjEwMDU3WhcNMjUxMjIxMjEwMDU3WjAzMTEwLwYDVQQD Eyg0ZGE5ZmJmYTcwNTQ4NTI5OTQxNzk3MzMyNzZiNWIyYTRmZTA4ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIeHTmuTtx7KCBVjzB0ZqyLrQX9A jzu83iVsIxxjnJsKO1pkjDGmFUVnx4mxLnCOgU3lrCk91m0DAM1x811lHaW1F4Qi em38tYCr28D+aHlwY2uvyY4ZZ+R/pa/H8TkABxN6BEfP8JE8+9R+xqd424yTF9EH q6teAogj/WMn0KpsV1qaQnaTqCehaX2P1Ur/qZtu4/B5O+GA6WnCddSi+/lFz+Oy hSxYn8wPaU3/jBcFGMEOkDD/O90lziGgdPiT/61MlRVNfMM2asOkXDPfMmXJvwbU B/UumV7lyfpEYjQqzBqjDPY6251oWqolbk9Pc4p3xrq1USnUOp2JKBFsrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2p+/pwVIUplBeXMydrWypP4I3TMB8GA1UdIwQY MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct MTU3YWQwYWM1MjBhLzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK+orqLX r6CGE/iKjoJJJsMm4fgzrqasqrYP5Y7pp2RDuNapWBMzsRlajPQPrUgwhg+7N8Cv szOfY5D3/lqSNucVqxRx5aBw2NO4IqjqKiRkjtnewhwPjMO2KO0nZcCNTOR4cOrE Jr59q7JazfCmfV0q7Y6cz01NBybLerSqMkdanKQZzk+Yi8bjyeXNHfa9bBHW+aX3 WBGrbvIetHITvQc2POoFQ988sJy9KNJu8UhAqZ/KZ1kGxoUk/Cmo4ft2i2CjNpeo lBdLRLzAvaQAtqhZwYVI87Vxs1vUJQp535z8wEj7sbuyYr2WybqC3VBtDZZpKPgO bXvmbDrdejeSBA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:46 2025 by rpki-client