This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json) Hash identifier: secKUPm5/H2quMGCbr/8dBxUCCaUvDqTaicqVF39kkA= Subject key identifier: E1:A4:52:67:2B:5F:76:FF:FC:5F:46:EC:0D:20:8D:8F:0A:BB:17:8F Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd Certificate serial: 019B3F11A24DF531DE783D8EB531D01D66F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft Manifest number: 0B36 Signing time: Sun 21 Dec 2025 04:01:18 +0000 Manifest this update: Sun 21 Dec 2025 04:01:18 +0000 Manifest next update: Mon 22 Dec 2025 04:01:18 +0000 Files and hashes: 1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: yHHV+O69MVHyaJJaAGsfT7gJ0agCKHNsgeU8ofWcdKw=) 2: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (hash: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a2:4d:f5:31:de:78:3d:8e:b5:31:d0:1d:66:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd Validity Not Before: Dec 21 04:01:18 2025 GMT Not After : Dec 22 04:01:18 2025 GMT Subject: CN=e1a452672b5f76fffc5f46ec0d208d8f0abb178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:e2:88:a0:2b:18:d1:64:6c:29:15:af:51: 6a:33:ca:30:c2:9f:45:6b:46:08:79:19:fc:d3:03: c7:75:41:40:88:93:b6:67:d5:f8:64:b9:4e:48:f6: 33:d7:1e:d1:2d:55:a9:8a:4c:de:d5:59:a3:d2:44: 01:7f:87:70:73:1d:fd:aa:27:8a:e0:2e:b3:9b:2c: ef:6a:85:77:a4:45:53:9c:e9:fd:85:73:94:2e:91: 91:e3:a0:5a:15:72:c7:c4:f1:dc:8b:ec:83:fd:76: 29:96:25:16:03:28:ba:2a:cd:be:7f:d8:85:51:42: 0a:47:62:36:14:88:ed:2a:cf:ba:c2:04:77:1a:54: d7:4d:c5:85:41:6c:68:ad:cd:8c:f7:1c:b0:34:9a: 4d:81:3c:c4:93:83:b2:33:a9:15:e0:e8:96:6c:63: 95:73:91:8e:7c:62:79:03:f6:56:7e:23:fb:b5:31: 71:86:03:df:59:02:51:67:3e:1b:db:80:ec:83:0b: da:e6:57:94:28:d2:81:63:35:f4:34:83:34:e6:ba: dc:dd:e4:df:47:d6:60:84:2e:eb:c8:e0:ec:eb:23: 8e:39:87:b7:57:86:ce:ad:20:c3:3d:33:2a:a7:36: b0:fa:39:38:5e:f7:e4:a5:98:d1:56:04:48:bd:86: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A4:52:67:2B:5F:76:FF:FC:5F:46:EC:0D:20:8D:8F:0A:BB:17:8F X509v3 Authority Key Identifier: keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7b:0c:4b:eb:d8:df:17:1a:83:e2:c2:2b:1e:68:79:5d:8e: e6:64:bc:51:df:0f:1d:5b:aa:c7:0c:9e:56:53:d1:26:43:03: 87:f0:52:02:eb:2e:70:dd:bd:3f:37:fc:a3:82:25:22:4a:8c: 5b:ae:42:b7:5e:4f:de:db:46:2a:17:09:d2:2a:06:a1:2a:c3: f7:94:67:17:79:b3:72:c7:6e:91:95:e2:0e:6d:d8:85:2c:49: d9:93:a0:77:63:f5:7b:59:dd:c3:6a:e0:6d:65:79:e6:03:c3: a0:5c:b9:db:33:a0:c5:83:ac:14:f3:ee:c7:3b:23:9a:96:c6: 3c:3d:c3:da:2f:b5:37:72:8c:4e:c6:37:06:7d:40:4d:36:57: cd:d0:a6:d4:b3:5c:4c:8c:30:89:94:aa:d2:ac:b9:8a:60:42: ac:77:b6:7b:cc:d8:38:50:97:4b:6f:64:28:fb:ea:27:77:c0: 08:fb:12:33:d3:08:a7:c9:cc:ed:a8:2b:c8:c2:2b:fe:37:e0: 3b:fd:9e:5f:e7:46:76:40:80:8a:62:ae:0a:71:25:b6:ec:ca: 25:f9:21:5e:8b:45:53:0e:5d:13:40:99:9d:92:27:ef:c6:07: f0:a8:5a:2e:01:9d:e5:b3:7d:c3:4f:6d:d8:b3:65:27:09:c6: b0:47:10:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaJN9THeeD2OtTHQHWb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjA0ZWMwY2ZlZTk2NmM0MTliM2E2ZDVmMDgyYjU2M2Mx ODY4YmQwHhcNMjUxMjIxMDQwMTE4WhcNMjUxMjIyMDQwMTE4WjAzMTEwLwYDVQQD EyhlMWE0NTI2NzJiNWY3NmZmZmM1ZjQ2ZWMwZDIwOGQ4ZjBhYmIxNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdPiiKArGNFkbCkVr1FqM8owwp9F a0YIeRn80wPHdUFAiJO2Z9X4ZLlOSPYz1x7RLVWpikze1Vmj0kQBf4dwcx39qieK 4C6zmyzvaoV3pEVTnOn9hXOULpGR46BaFXLHxPHci+yD/XYpliUWAyi6Ks2+f9iF UUIKR2I2FIjtKs+6wgR3GlTXTcWFQWxorc2M9xywNJpNgTzEk4OyM6kV4OiWbGOV c5GOfGJ5A/ZWfiP7tTFxhgPfWQJRZz4b24Dsgwva5leUKNKBYzX0NIM05rrc3eTf R9ZghC7ryODs6yOOOYe3V4bOrSDDPTMqpzaw+jk4XvfkpZjRVgRIvYZfWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGkUmcrX3b//F9G7A0gjY8KuxePMB8GA1UdIwQY MBaAFDtgTsDP7pZsQZs6bV8IK1Y8GGi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJCT3dNX3VsbXhCbXpwdFh3Z3JWandZYUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zZjVlYTQtMTg2OC00YTBiLTkyMTgt ODdlOWYyMWI0MThiLzEvTzJCT3dNX3VsbXhCbXpwdFh3Z3JWandZYUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zZjVlYTQtMTg2OC00YTBiLTkyMTgtODdlOWYyMWI0MThi LzEvTzJCT3dNX3VsbXhCbXpwdFh3Z3JWandZYUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3sMS+vY 3xcag+LCKx5oeV2O5mS8Ud8PHVuqxwyeVlPRJkMDh/BSAusucN29Pzf8o4IlIkqM W65Ct15P3ttGKhcJ0ioGoSrD95RnF3mzcsdukZXiDm3YhSxJ2ZOgd2P1e1ndw2rg bWV55gPDoFy52zOgxYOsFPPuxzsjmpbGPD3D2i+1N3KMTsY3Bn1ATTZXzdCm1LNc TIwwiZSq0qy5imBCrHe2e8zYOFCXS29kKPvqJ3fACPsSM9MIp8nM7agryMIr/jfg O/2eX+dGdkCAimKuCnEltuzKJfkhXotFUw5dE0CZnZIn78YH8KhaLgGd5bN9w09t 2LNlJwnGsEcQGg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:22 2025 by rpki-client