This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json) Hash identifier: +xbglJvbt+XZB2HiqH2TdB6U/cxHkp15c11JO8VGChs= Subject key identifier: F8:00:10:10:A8:43:4B:93:53:0B:CD:59:D6:24:40:D6:B5:95:D0:80 Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5 Certificate serial: 019B3AFDDA1C1E5083F00565C714A12475C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:01:13 +0000 Manifest this update: Sat 20 Dec 2025 09:01:13 +0000 Manifest next update: Sun 21 Dec 2025 09:01:13 +0000 Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=) 2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=) 3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: LuhYjBhQHt9wzMltmId4mnTUaXouO86MF1o8o79lSVY=) 4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:da:1c:1e:50:83:f0:05:65:c7:14:a1:24:75:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5 Validity Not Before: Dec 20 09:01:13 2025 GMT Not After : Dec 21 09:01:13 2025 GMT Subject: CN=f8001010a8434b93530bcd59d62440d6b595d080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:49:95:50:cd:15:20:9a:05:a5:23:ff:bb: d4:04:00:ab:8c:2b:9b:be:bd:1f:66:fa:0e:d6:bb: 9c:fe:48:83:c2:1f:fa:31:88:b8:0c:8d:8a:73:dd: 37:e6:ba:16:60:e1:e6:3d:e1:a8:77:7e:03:b0:57: 48:70:03:11:58:ea:01:2a:e3:2e:a4:0e:f0:aa:36: 01:4b:a4:25:cb:1c:e7:0a:a3:7a:26:5a:6f:4a:da: d7:5c:76:61:a7:cd:c8:68:cb:88:41:75:63:36:ce: 64:14:bc:3d:48:24:23:be:70:99:11:57:14:57:a8: ec:72:96:67:99:47:1f:6b:79:e7:33:ee:1d:da:5a: 9a:71:e7:8c:bc:b3:d0:4a:37:ce:be:11:c7:5d:7b: 9a:04:ff:db:19:b5:c2:2c:cc:97:97:fc:9b:37:a0: 1c:36:dc:a4:af:4d:17:db:8b:5b:2a:da:03:5d:33: 82:5b:48:1b:05:62:ea:8a:59:7d:c3:f9:66:72:5d: 6b:0f:6f:af:07:0c:18:77:01:c7:4c:38:04:22:31: 4b:06:63:e1:91:a6:27:70:6a:a0:fe:ad:67:25:06: e9:29:47:46:41:f8:8b:5d:db:43:ac:ed:8e:40:51: c6:a5:6f:30:24:83:e1:fa:58:5f:a1:df:d2:1d:c5: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:00:10:10:A8:43:4B:93:53:0B:CD:59:D6:24:40:D6:B5:95:D0:80 X509v3 Authority Key Identifier: keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:87:4b:53:87:1e:0e:1c:28:3e:73:01:68:43:57:96:e8:d2: e1:d1:b8:b6:71:1a:14:3e:b3:93:d6:a9:2b:ac:b6:f0:e7:f3: 73:81:b9:35:85:8b:e8:77:db:18:6c:0a:b4:37:90:a8:d8:0c: 3f:4c:eb:8a:fa:72:08:5d:00:b3:40:c9:b9:00:ea:e5:fd:24: 85:be:57:5c:a7:6a:3c:bc:c8:84:7b:8c:8c:fb:2f:ee:bf:68: b5:30:48:ad:0f:c0:80:0a:af:5e:75:fd:49:ec:16:6c:8d:8d: 45:73:50:98:d8:5f:51:1a:fe:93:54:95:96:91:09:54:9d:ad: 99:b5:e5:1e:08:f7:fe:3d:08:d2:01:2b:c6:a6:de:31:0a:49: a9:98:ce:4e:ac:af:01:66:f7:1a:41:6f:69:16:17:21:37:f9: 4c:11:a6:73:e9:d3:4a:79:a1:bf:d1:2a:62:fb:de:44:26:82: f6:7f:01:4a:2f:16:9f:48:d6:da:69:ed:f2:49:cb:f1:1a:1a: 54:33:01:07:56:67:e8:54:7b:ed:cf:1f:f3:00:3f:a4:5e:98: 82:cc:38:a0:d6:b9:8e:07:92:90:5c:d6:c3:95:ab:2f:54:f2: f5:9f:cf:6c:19:07:91:24:20:b3:14:87:6b:8c:6d:0b:f7:a2: 74:5f:8d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/docHlCD8AVlxxShJHXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1 YTNlZDUwHhcNMjUxMjIwMDkwMTEzWhcNMjUxMjIxMDkwMTEzWjAzMTEwLwYDVQQD EyhmODAwMTAxMGE4NDM0YjkzNTMwYmNkNTlkNjI0NDBkNmI1OTVkMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxJlVDNFSCaBaUj/7vUBACrjCub vr0fZvoO1ruc/kiDwh/6MYi4DI2Kc9035roWYOHmPeGod34DsFdIcAMRWOoBKuMu pA7wqjYBS6QlyxznCqN6JlpvStrXXHZhp83IaMuIQXVjNs5kFLw9SCQjvnCZEVcU V6jscpZnmUcfa3nnM+4d2lqaceeMvLPQSjfOvhHHXXuaBP/bGbXCLMyXl/ybN6Ac Ntykr00X24tbKtoDXTOCW0gbBWLqill9w/lmcl1rD2+vBwwYdwHHTDgEIjFLBmPh kaYncGqg/q1nJQbpKUdGQfiLXdtDrO2OQFHGpW8wJIPh+lhfod/SHcWbAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgAEBCoQ0uTUwvNWdYkQNa1ldCAMB8GA1UdIwQY MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoodLU4ce DhwoPnMBaENXlujS4dG4tnEaFD6zk9apK6y28Ofzc4G5NYWL6HfbGGwKtDeQqNgM P0zrivpyCF0As0DJuQDq5f0khb5XXKdqPLzIhHuMjPsv7r9otTBIrQ/AgAqvXnX9 SewWbI2NRXNQmNhfURr+k1SVlpEJVJ2tmbXlHgj3/j0I0gErxqbeMQpJqZjOTqyv AWb3GkFvaRYXITf5TBGmc+nTSnmhv9EqYvveRCaC9n8BSi8Wn0jW2mnt8knL8Roa VDMBB1Zn6FR77c8f8wA/pF6Ygsw4oNa5jgeSkFzWw5WrL1Ty9Z/PbBkHkSQgsxSH a4xtC/eidF+N/w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:09 2025 by rpki-client