This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json) Hash identifier: Hwt+rpdMY7iRMxEj1qZRCqngEWNpBAiJt+GFgTz/Oe8= Subject key identifier: 0B:67:EC:5D:6F:16:04:2E:B2:D1:20:3B:77:E0:B3:86:67:01:8D:92 Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Certificate serial: 019B3B6BF42D249A2AD3A43CF6040FE70578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft Manifest number: 1546 Signing time: Sat 20 Dec 2025 11:01:29 +0000 Manifest this update: Sat 20 Dec 2025 11:01:29 +0000 Manifest next update: Sun 21 Dec 2025 11:01:29 +0000 Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=) 2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: VQL4laM1k46dkNz4LW8VhnXXUfy6eymfpKsZrjjT5bY=) 3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f4:2d:24:9a:2a:d3:a4:3c:f6:04:0f:e7:05:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Validity Not Before: Dec 20 11:01:29 2025 GMT Not After : Dec 21 11:01:29 2025 GMT Subject: CN=0b67ec5d6f16042eb2d1203b77e0b38667018d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:69:ac:55:50:f4:6f:28:9a:10:12:87:7e: 74:0e:3b:a8:c3:8d:3a:af:33:50:b6:70:2b:7e:ab: 7a:f4:b6:ee:ef:70:42:d0:1c:b9:ac:d6:2c:fc:d1: d8:17:75:00:da:7b:c2:e6:96:78:76:71:a2:a3:bd: 5f:48:53:8f:c1:2b:4c:a9:1e:3b:af:d4:68:1a:9b: 4a:b4:92:a1:d4:29:ba:52:ba:49:07:0b:43:59:f8: f8:b8:ac:03:8d:64:6d:4d:f2:5f:a3:6c:07:39:b4: 4a:1c:14:97:29:4e:4b:f6:b3:0a:16:77:0f:c1:91: 76:22:10:79:1a:48:f8:59:57:67:3b:af:00:29:76: 65:94:1d:35:27:20:67:e9:a7:7f:f5:30:b1:da:e9: f7:86:6a:c9:12:f3:88:94:13:18:89:66:07:91:0e: 77:de:d6:d1:7a:ab:51:28:44:ed:df:9f:7d:83:cf: e2:fc:82:42:43:4c:70:65:88:79:a0:76:fa:8b:5a: ff:c3:d5:c9:b9:6f:ff:bf:24:65:ea:f0:7d:ac:3d: 27:cc:19:7a:3d:24:f7:35:f6:c9:8a:9a:f1:b6:26: 7d:09:f4:b4:14:5c:7c:2d:72:bd:d1:b8:04:37:d2: b7:a9:94:76:ec:40:12:68:e9:55:90:e1:14:33:0d: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:EC:5D:6F:16:04:2E:B2:D1:20:3B:77:E0:B3:86:67:01:8D:92 X509v3 Authority Key Identifier: keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:49:9d:65:4d:d4:56:07:80:f5:40:75:cf:f1:7d:21:81:0f: 78:04:b7:9c:5f:c6:67:0b:d1:df:a6:fc:b6:69:fd:51:53:32: da:94:b2:ab:7f:d8:3a:62:df:65:69:e3:0c:2c:ad:27:f8:23: ed:38:3c:6c:16:eb:15:4e:05:5f:81:53:69:7f:ca:0a:83:2b: fa:ad:d0:b4:90:83:c5:55:3c:d8:27:4c:c9:b0:78:da:b3:6b: ac:98:66:a7:cc:c8:05:1f:e7:a5:6b:77:9a:51:6e:7c:3a:6d: 48:49:e7:ae:cc:a4:43:67:36:59:c3:fc:ed:03:8c:fa:57:bd: f4:ff:95:d7:5e:6a:77:b7:19:b9:9a:d2:f8:cb:3f:0b:f4:37: f3:4f:67:5d:eb:3d:c2:e4:42:b4:63:e0:1a:6f:97:93:ae:de: 71:c4:78:79:72:42:23:a6:13:12:7b:5c:cf:a9:c4:ad:c5:ef: 33:35:1f:15:34:e8:3d:b3:8d:12:bb:61:be:13:a0:b1:bf:a0: 46:38:cc:93:1f:c9:0d:bc:a0:69:6e:26:98:14:33:6a:b7:29: b4:f1:5d:11:f6:ea:39:4f:81:0a:59:cf:d7:42:c7:67:92:c4: ce:a4:94:30:81:32:c7:14:9f:4a:d1:47:63:fc:97:24:82:6d: 4b:d3:c6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/QtJJoq06Q89gQP5wV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5 ZDRhZWMwHhcNMjUxMjIwMTEwMTI5WhcNMjUxMjIxMTEwMTI5WjAzMTEwLwYDVQQD EygwYjY3ZWM1ZDZmMTYwNDJlYjJkMTIwM2I3N2UwYjM4NjY3MDE4ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2lprFVQ9G8omhASh350Djuow406 rzNQtnArfqt69Lbu73BC0By5rNYs/NHYF3UA2nvC5pZ4dnGio71fSFOPwStMqR47 r9RoGptKtJKh1Cm6UrpJBwtDWfj4uKwDjWRtTfJfo2wHObRKHBSXKU5L9rMKFncP wZF2IhB5Gkj4WVdnO68AKXZllB01JyBn6ad/9TCx2un3hmrJEvOIlBMYiWYHkQ53 3tbReqtRKETt3599g8/i/IJCQ0xwZYh5oHb6i1r/w9XJuW//vyRl6vB9rD0nzBl6 PST3NfbJiprxtiZ9CfS0FFx8LXK90bgEN9K3qZR27EASaOlVkOEUMw1U3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtn7F1vFgQustEgO3fgs4ZnAY2SMB8GA1UdIwQY MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3 LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEmdZU3U VgeA9UB1z/F9IYEPeAS3nF/GZwvR36b8tmn9UVMy2pSyq3/YOmLfZWnjDCytJ/gj 7Tg8bBbrFU4FX4FTaX/KCoMr+q3QtJCDxVU82CdMybB42rNrrJhmp8zIBR/npWt3 mlFufDptSEnnrsykQ2c2WcP87QOM+le99P+V115qd7cZuZrS+Ms/C/Q3809nXes9 wuRCtGPgGm+Xk67eccR4eXJCI6YTEntcz6nErcXvMzUfFTToPbONErthvhOgsb+g RjjMkx/JDbygaW4mmBQzarcptPFdEfbqOU+BClnP10LHZ5LEzqSUMIEyxxSfStFH Y/yXJIJtS9PGxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:02 2025 by rpki-client