This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json) Hash identifier: cGNVXQEdprpATbI80lD7CNAoQ8peJR6M4QiDKUOTIlg= Subject key identifier: 75:CC:8C:E3:EB:D8:FD:C0:0E:09:42:B2:74:CC:E6:38:F9:58:13:15 Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Certificate serial: 019B454A87B62F0C0390404FF062C374810C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft Manifest number: 1794 Signing time: Mon 22 Dec 2025 09:01:10 +0000 Manifest this update: Mon 22 Dec 2025 09:01:10 +0000 Manifest next update: Tue 23 Dec 2025 09:01:10 +0000 Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=) 2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: RMKnWAEX4gdz3gn0rcId1mZo/vU0VABHdhGAnqKKfyI=) 3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:87:b6:2f:0c:03:90:40:4f:f0:62:c3:74:81:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Validity Not Before: Dec 22 09:01:10 2025 GMT Not After : Dec 23 09:01:10 2025 GMT Subject: CN=75cc8ce3ebd8fdc00e0942b274cce638f9581315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:d8:83:a2:a5:09:26:f1:15:1a:cf:70:d0: d3:f1:42:33:3d:14:1a:99:cc:07:69:7b:83:e1:84: 7b:ee:7e:23:ee:c2:43:6a:ce:cd:4a:dd:87:20:06: 83:3f:ac:4b:1a:41:db:c5:f7:f7:fc:c7:fc:2f:52: 94:07:2a:83:b4:b4:fb:e8:b1:92:9e:35:2c:cd:e9: 44:34:6d:0e:34:da:d4:83:f0:db:64:be:8b:0c:81: 24:09:53:56:c5:ae:7d:13:f2:e2:cf:21:92:b1:bd: 67:63:4b:f5:c5:c9:5c:ed:80:f8:c7:3e:c2:2a:06: 26:14:41:c6:e3:00:44:a0:2c:4e:20:fc:91:73:cd: 1a:3a:83:f2:08:40:46:16:55:bf:7b:bf:9b:8d:bb: 5d:24:08:1b:9a:85:31:ec:d8:e3:f6:c6:bd:96:8f: 6a:42:b9:45:45:91:1f:07:fd:04:7e:93:13:b8:46: 18:0a:e6:50:a6:c1:09:60:17:ae:da:25:bb:74:95: 9b:df:c3:10:62:e2:60:88:03:9d:0f:03:de:46:4a: 59:a9:bf:0e:21:65:09:e3:d5:74:5b:32:55:3a:e6: ce:e7:4b:73:eb:c9:20:64:62:a6:76:09:cc:4f:de: 32:26:fd:49:f6:ac:a9:e1:d2:0d:0d:d2:41:04:9e: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CC:8C:E3:EB:D8:FD:C0:0E:09:42:B2:74:CC:E6:38:F9:58:13:15 X509v3 Authority Key Identifier: keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9f:9a:e2:2c:c7:6f:d6:65:54:ed:47:9c:6b:91:d6:41:9e: 84:04:57:fe:b6:22:88:70:89:c5:13:61:12:00:f4:f9:0f:98: 40:dd:82:f8:01:3e:6a:f4:10:92:36:77:ca:7a:6b:fd:b0:e8: bc:ae:04:9f:32:d4:e5:cd:c7:13:e5:42:50:8d:90:33:02:0b: 1f:fe:c0:0e:8c:de:02:36:dd:4b:08:56:50:ae:88:cb:26:c8: 62:34:96:40:a1:ff:90:1c:3b:2a:3b:94:1a:ca:9f:77:81:52: d0:69:d8:4b:3e:1a:82:46:33:a2:c6:2a:54:19:36:7d:58:9a: 98:04:f2:b5:5d:3b:42:27:a5:f3:81:af:7a:45:8c:fe:ca:ba: 57:e9:a2:bf:e6:2e:8f:cd:a7:ed:9c:aa:3c:c6:bf:b9:d9:27: 27:4f:45:7c:79:17:bb:21:4c:3c:d6:20:47:64:46:80:36:1a: 40:22:e2:76:a1:d7:b3:a9:e7:d2:c0:9a:d8:e9:be:e1:4f:10: 5c:d6:8f:5b:e7:81:da:b8:5f:27:29:83:df:05:69:f0:06:78: e6:d6:03:ff:56:d0:ab:35:a7:cd:c8:5f:93:c9:87:a9:7d:49: 94:e7:0d:bb:91:6b:76:69:04:b2:ab:56:f9:f5:15:50:47:ae: 86:36:92:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSoe2LwwDkEBP8GLDdIEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5 NGFmNzQwHhcNMjUxMjIyMDkwMTEwWhcNMjUxMjIzMDkwMTEwWjAzMTEwLwYDVQQD Eyg3NWNjOGNlM2ViZDhmZGMwMGUwOTQyYjI3NGNjZTYzOGY5NTgxMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/Yg6KlCSbxFRrPcNDT8UIzPRQa mcwHaXuD4YR77n4j7sJDas7NSt2HIAaDP6xLGkHbxff3/Mf8L1KUByqDtLT76LGS njUszelENG0ONNrUg/DbZL6LDIEkCVNWxa59E/LizyGSsb1nY0v1xclc7YD4xz7C KgYmFEHG4wBEoCxOIPyRc80aOoPyCEBGFlW/e7+bjbtdJAgbmoUx7Njj9sa9lo9q QrlFRZEfB/0EfpMTuEYYCuZQpsEJYBeu2iW7dJWb38MQYuJgiAOdDwPeRkpZqb8O IWUJ49V0WzJVOubO50tz68kgZGKmdgnMT94yJv1J9qyp4dINDdJBBJ4/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXMjOPr2P3ADglCsnTM5jj5WBMVMB8GA1UdIwQY MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3 LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ+a4izH b9ZlVO1HnGuR1kGehARX/rYiiHCJxRNhEgD0+Q+YQN2C+AE+avQQkjZ3ynpr/bDo vK4EnzLU5c3HE+VCUI2QMwILH/7ADozeAjbdSwhWUK6IyybIYjSWQKH/kBw7KjuU Gsqfd4FS0GnYSz4agkYzosYqVBk2fViamATytV07Qiel84GvekWM/sq6V+miv+Yu j82n7ZyqPMa/udknJ09FfHkXuyFMPNYgR2RGgDYaQCLidqHXs6nn0sCa2Om+4U8Q XNaPW+eB2rhfJymD3wVp8AZ45tYD/1bQqzWnzchfk8mHqX1JlOcNu5FrdmkEsqtW +fUVUEeuhjaS+w== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:53 2025 by rpki-client