This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json) Hash identifier: R3W2yKmEobBY37Z8jQZCuoUEqdfb5TmrCPIm08Gy6dU= Subject key identifier: 51:EF:6E:70:9F:E2:FF:5B:EE:19:7A:9C:6D:55:1B:AC:A5:70:50:0A Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961 Certificate serial: 019B3344C2380AD664D8C4CA2F9F1D406CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft Manifest number: 36 Signing time: Thu 18 Dec 2025 21:01:42 +0000 Manifest this update: Thu 18 Dec 2025 21:01:42 +0000 Manifest next update: Fri 19 Dec 2025 21:01:42 +0000 Files and hashes: 1: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: wOr4gfjhY1Hp4lneThsy/cwbnvNcSJsIpwW86NTCkDg=) 2: xl2dBFAq27Jc7XAbjqmjx5SGLQg.roa (hash: LWS6130jm9DNYynRHuAyBdYfUPrAY2AEwbKHUYPs/I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:c2:38:0a:d6:64:d8:c4:ca:2f:9f:1d:40:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Validity Not Before: Dec 18 21:01:42 2025 GMT Not After : Dec 19 21:01:42 2025 GMT Subject: CN=51ef6e709fe2ff5bee197a9c6d551baca570500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:27:ad:a1:58:f8:32:10:98:4b:aa:84:fb: d2:d5:6f:dc:0a:07:d2:0e:68:8a:63:5c:1e:3c:3d: ed:b0:f4:49:38:14:c6:98:f6:a0:d9:29:57:00:67: 3c:3c:39:c1:e0:5d:48:6a:d9:db:43:fd:95:9b:7b: 4d:30:a5:35:a2:14:cf:69:c5:31:a1:3d:b8:6f:76: 90:90:0b:41:f4:22:d3:50:18:6c:83:88:ac:01:f5: a1:92:b3:43:28:8d:25:78:8d:63:69:bb:a2:68:36: 80:26:15:85:01:7b:06:1a:2e:c0:47:e1:a8:d0:a5: b9:47:ea:4e:e0:ca:e8:06:4b:f1:f5:c4:76:e9:1a: 69:aa:48:d9:a7:ca:0f:15:7d:2c:fa:79:d8:1b:20: d1:f1:2d:cf:a5:7b:0b:9b:ae:fb:08:85:c3:22:70: 3b:18:e5:2e:f4:61:f5:5a:48:0a:63:69:f2:68:5c: 01:47:2c:23:09:c8:c6:04:7c:32:68:4f:70:3e:4e: 15:13:54:17:25:5b:ab:32:d0:49:52:5b:43:69:ce: 83:ee:2a:ba:cb:cc:70:dd:93:a3:2d:d7:be:b7:80: cf:88:36:76:7f:c6:7e:2f:f9:d9:01:a2:35:dd:4e: e9:d2:79:1a:b8:58:d6:e9:1a:01:21:c6:4b:23:16: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:6E:70:9F:E2:FF:5B:EE:19:7A:9C:6D:55:1B:AC:A5:70:50:0A X509v3 Authority Key Identifier: keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:08:5e:d7:f2:ca:56:1f:98:77:c6:9a:38:0d:e0:a5:0d:a6: 59:c3:a4:34:e5:b5:d0:9b:c1:71:60:e8:b1:b4:12:e8:ea:bb: 92:75:86:51:2d:5a:b2:c6:37:5b:77:c3:9b:77:e3:fa:99:f7: f1:3a:9a:0c:7f:5a:0e:41:72:f6:c8:41:c5:77:9d:cc:36:a6: 7e:71:57:df:9a:39:b1:66:89:93:d9:8f:91:ac:b1:45:33:37: a6:cd:9b:8e:a0:9a:d9:5f:a7:07:93:d4:e4:e9:27:06:de:4a: b4:d9:d5:0f:86:47:ba:8f:f3:61:c3:68:4f:24:f4:1a:76:80: f6:f7:e1:d4:57:b5:6c:2b:52:c4:f6:f2:5c:1f:36:97:dc:b5: 0f:1a:1f:99:35:7a:ab:c4:d3:90:52:0b:e0:af:e6:21:a8:01: c0:dd:c9:8e:e4:2a:f6:12:ac:94:37:7b:72:8f:40:40:e8:ce: a2:47:98:be:f9:b4:9d:e6:66:55:21:cf:7a:33:5b:a5:32:d2: df:5b:2a:3b:10:0e:8d:81:29:af:eb:77:1a:3e:6a:b1:a5:d6: e3:03:a9:b9:52:c5:59:60:45:1c:78:b4:16:62:8b:c8:83:9b: bd:0d:6a:2d:f9:21:0b:cc:ae:01:d1:8c:65:18:db:be:9a:5f: 31:63:54:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRMI4CtZk2MTKL58dQGzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjYxOTQyN2MyODNmYTNiMmJiN2I0NWNjMzVhNTEyODYz OTg5NjEwHhcNMjUxMjE4MjEwMTQyWhcNMjUxMjE5MjEwMTQyWjAzMTEwLwYDVQQD Eyg1MWVmNmU3MDlmZTJmZjViZWUxOTdhOWM2ZDU1MWJhY2E1NzA1MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUInraFY+DIQmEuqhPvS1W/cCgfS DmiKY1wePD3tsPRJOBTGmPag2SlXAGc8PDnB4F1IatnbQ/2Vm3tNMKU1ohTPacUx oT24b3aQkAtB9CLTUBhsg4isAfWhkrNDKI0leI1jabuiaDaAJhWFAXsGGi7AR+Go 0KW5R+pO4MroBkvx9cR26RppqkjZp8oPFX0s+nnYGyDR8S3PpXsLm677CIXDInA7 GOUu9GH1WkgKY2nyaFwBRywjCcjGBHwyaE9wPk4VE1QXJVurMtBJUltDac6D7iq6 y8xw3ZOjLde+t4DPiDZ2f8Z+L/nZAaI13U7p0nkauFjW6RoBIcZLIxayJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHvbnCf4v9b7hl6nG1VG6ylcFAKMB8GA1UdIwQY MBaAFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTct M2I4MTc4ZGJiOTRjLzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTctM2I4MTc4ZGJiOTRj LzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjghe1/LK Vh+Yd8aaOA3gpQ2mWcOkNOW10JvBcWDosbQS6Oq7knWGUS1assY3W3fDm3fj+pn3 8TqaDH9aDkFy9shBxXedzDamfnFX35o5sWaJk9mPkayxRTM3ps2bjqCa2V+nB5PU 5OknBt5KtNnVD4ZHuo/zYcNoTyT0GnaA9vfh1Fe1bCtSxPbyXB82l9y1DxofmTV6 q8TTkFIL4K/mIagBwN3JjuQq9hKslDd7co9AQOjOokeYvvm0neZmVSHPejNbpTLS 31sqOxAOjYEpr+t3Gj5qsaXW4wOpuVLFWWBFHHi0FmKLyIObvQ1qLfkhC8yuAdGM ZRjbvppfMWNUnw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:26:36 2025 by rpki-client