This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json) Hash identifier: 9BjdhuvdgCI8CRnhwAP5pnt+E9bpTvg8HG7BSpoYI3w= Subject key identifier: CB:3F:BE:99:55:65:02:37:0E:C2:7F:F7:83:B8:F3:EC:D5:BD:79:68 Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1 Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1 Certificate serial: 019B405C1A359228B7489FC8E009E001CDBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft Manifest number: 137F Signing time: Sun 21 Dec 2025 10:02:16 +0000 Manifest this update: Sun 21 Dec 2025 10:02:16 +0000 Manifest next update: Mon 22 Dec 2025 10:02:16 +0000 Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=) 2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: s1Zme93932UZSiIlXO43bm8hOriXAurgbB3qSU4Y3ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:1a:35:92:28:b7:48:9f:c8:e0:09:e0:01:cd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1 Validity Not Before: Dec 21 10:02:16 2025 GMT Not After : Dec 22 10:02:16 2025 GMT Subject: CN=cb3fbe99556502370ec27ff783b8f3ecd5bd7968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:4d:1b:ce:df:5d:ac:48:6b:15:f6:cb:12: 30:62:a5:a6:3d:9d:6d:02:f8:9c:40:ec:fe:b0:cb: 6c:25:8f:d0:1e:5e:92:a8:ed:8b:4b:d2:f8:a9:1f: bc:68:3a:88:73:74:50:e4:a4:70:ae:ea:bd:cd:b7: e1:94:ad:6f:a9:da:01:d4:87:cc:76:fa:1f:f5:7a: 63:77:a6:ca:4c:da:06:a0:1a:fe:cc:f9:4b:f6:48: 7e:02:36:26:1c:2b:f3:c5:fd:10:a6:ea:1f:78:c6: 7d:53:6f:d0:96:93:9d:59:d5:05:46:87:3e:69:8d: 5e:1f:82:2c:2c:74:b3:7e:85:57:82:cf:59:e8:18: 6f:e7:ee:da:49:d5:2f:0f:fa:da:70:f7:10:76:a9: 4d:e6:ef:23:32:90:11:d4:fb:17:c6:25:1c:2f:45: f9:38:48:ac:aa:39:ff:7e:bd:6a:2b:b5:8a:2d:7d: fd:ff:80:ac:b2:26:6b:70:e0:b0:59:e7:69:95:9c: c9:f8:97:b5:33:ab:8b:c9:c3:92:34:b3:d3:35:cb: 06:60:6d:3d:6b:79:39:ac:03:12:5d:56:38:ba:19: cd:04:25:cc:f3:ab:0f:0f:04:89:ee:b5:7c:a2:57: 69:d3:e7:81:81:33:99:e9:18:3c:20:37:df:09:18: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:BE:99:55:65:02:37:0E:C2:7F:F7:83:B8:F3:EC:D5:BD:79:68 X509v3 Authority Key Identifier: keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:09:7f:40:62:05:74:7c:6f:c4:4b:ea:0d:0f:53:6b:64:d0: 7b:26:44:e4:db:0a:32:47:f0:c8:92:64:65:40:af:21:9d:49: 15:b1:ec:97:b7:44:8d:8b:e1:5d:25:e8:73:86:46:cd:f9:eb: 1c:e2:c9:9d:a4:6d:37:9a:d1:9a:28:01:30:ce:97:cb:ac:45: 50:fd:f0:c6:db:be:c4:1e:73:87:a5:70:9d:39:d6:a8:59:2d: 84:6c:ec:82:75:f4:cc:c3:73:51:a3:51:4f:c6:0a:ac:04:65: f9:05:59:bd:0c:14:1a:e2:f2:64:95:60:82:32:77:d5:1b:b1: ad:bf:49:60:2d:10:33:7d:c3:25:68:ac:bc:01:b5:b3:e8:f5: e7:92:72:87:3a:74:34:3c:88:2b:70:79:21:9a:3b:4d:c5:6d: e8:29:06:f4:a7:16:fd:d1:b1:1a:36:aa:3d:4f:70:a5:17:7c: b4:76:8f:35:89:13:53:46:f1:38:78:37:ad:f1:a1:23:d5:17: 45:87:31:54:cb:6c:ec:22:39:0c:c7:43:39:34:21:63:ba:0c: ff:32:79:78:41:75:b3:ef:fb:3e:4c:df:a3:38:7e:50:af:d2: 36:5a:7e:4e:10:96:32:1b:da:3f:b4:cf:24:5b:04:63:fb:ce: 78:c8:00:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBo1kii3SJ/I4AngAc27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjJmNGRhZWQ3YmVmMmE2YWI0YmJiOWFhZmFjNTY1NGRk YzUzYzEwHhcNMjUxMjIxMTAwMjE2WhcNMjUxMjIyMTAwMjE2WjAzMTEwLwYDVQQD EyhjYjNmYmU5OTU1NjUwMjM3MGVjMjdmZjc4M2I4ZjNlY2Q1YmQ3OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7BNG87fXaxIaxX2yxIwYqWmPZ1t AvicQOz+sMtsJY/QHl6SqO2LS9L4qR+8aDqIc3RQ5KRwruq9zbfhlK1vqdoB1IfM dvof9Xpjd6bKTNoGoBr+zPlL9kh+AjYmHCvzxf0QpuofeMZ9U2/QlpOdWdUFRoc+ aY1eH4IsLHSzfoVXgs9Z6Bhv5+7aSdUvD/racPcQdqlN5u8jMpAR1PsXxiUcL0X5 OEisqjn/fr1qK7WKLX39/4CssiZrcOCwWedplZzJ+Je1M6uLycOSNLPTNcsGYG09 a3k5rAMSXVY4uhnNBCXM86sPDwSJ7rV8oldp0+eBgTOZ6Rg8IDffCRh2kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs/vplVZQI3DsJ/94O48+zVvXloMB8GA1UdIwQY MBaAFKOy9Nrte+8qarS7uar6xWVN3FPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjkt ZDgzMTBkYjk3OTUxLzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjktZDgzMTBkYjk3OTUx LzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1gl/QGIF dHxvxEvqDQ9Ta2TQeyZE5NsKMkfwyJJkZUCvIZ1JFbHsl7dEjYvhXSXoc4ZGzfnr HOLJnaRtN5rRmigBMM6Xy6xFUP3wxtu+xB5zh6VwnTnWqFkthGzsgnX0zMNzUaNR T8YKrARl+QVZvQwUGuLyZJVggjJ31Ruxrb9JYC0QM33DJWisvAG1s+j155Jyhzp0 NDyIK3B5IZo7TcVt6CkG9KcW/dGxGjaqPU9wpRd8tHaPNYkTU0bxOHg3rfGhI9UX RYcxVMts7CI5DMdDOTQhY7oM/zJ5eEF1s+/7Pkzfozh+UK/SNlp+ThCWMhvaP7TP JFsEY/vOeMgA2w== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:31 2025 by rpki-client