This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json) Hash identifier: O+n1RJMTZj0x7rJkPeCxx+TAmPKdsP6zQD+Ws7T0oGc= Subject key identifier: 5D:46:F8:73:6B:21:D8:DC:A6:7D:E1:63:07:11:2C:C4:18:45:F5:F3 Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53 Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453 Certificate serial: 019B3C106B2B603756DDBDEC876EC4E9BB13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft Manifest number: 14D7 Signing time: Sat 20 Dec 2025 14:01:07 +0000 Manifest this update: Sat 20 Dec 2025 14:01:07 +0000 Manifest next update: Sun 21 Dec 2025 14:01:07 +0000 Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: ae03oYrd9AayIN6YGXzZN7VLnFeQ+x6pkRleD4OjYfo=) 2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6b:2b:60:37:56:dd:bd:ec:87:6e:c4:e9:bb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453 Validity Not Before: Dec 20 14:01:07 2025 GMT Not After : Dec 21 14:01:07 2025 GMT Subject: CN=5d46f8736b21d8dca67de16307112cc41845f5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:7d:82:7d:45:c1:fa:f4:1a:82:88:67:47: a0:d4:bb:30:f9:9d:a6:19:9f:83:d8:2a:eb:15:1c: 89:4e:6a:fa:1f:ed:0b:50:2e:85:75:01:76:c0:0e: 91:12:b6:81:05:ba:58:92:59:ff:06:d8:5b:18:12: 36:66:e2:df:13:17:4c:f5:06:ed:0e:42:ee:6d:2f: 68:f6:55:9c:d3:f6:f3:ef:f7:e4:49:1d:c9:a8:54: ad:88:62:e8:7a:d7:16:aa:cc:36:06:58:66:b2:73: c5:d9:10:4a:c9:49:da:06:1d:ed:fe:dc:ad:40:bc: 96:f9:2a:72:1a:77:6b:4e:b6:f1:8a:d0:a5:1a:fc: 60:ef:ee:75:0c:88:fe:e6:c5:64:c3:85:c5:1f:b5: 08:34:9f:c1:3a:50:d8:77:89:27:dc:69:99:7f:3b: 19:6e:e2:d1:c2:c7:c5:25:83:bb:4b:8f:3e:9c:11: 58:ac:37:bb:a1:4e:92:14:84:ec:54:86:59:5b:c5: f7:b3:af:aa:86:e7:c6:08:a9:77:3b:50:06:ac:b3: 1a:9c:42:88:ca:d8:59:a3:da:54:62:1d:61:50:10: 23:07:2b:e7:08:99:b8:64:62:06:c8:62:75:15:46: 11:fa:41:2f:0c:a3:64:d8:4d:77:53:6f:f1:94:f8: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:46:F8:73:6B:21:D8:DC:A6:7D:E1:63:07:11:2C:C4:18:45:F5:F3 X509v3 Authority Key Identifier: keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:76:73:a6:08:e4:40:a0:94:bb:25:6a:c1:8a:d1:68:9e:2c: 75:e9:78:94:74:d5:6f:63:33:c4:ec:d3:76:11:d9:16:76:e1: de:1c:50:b7:78:d9:8c:67:e7:11:16:d3:cd:70:e8:23:33:bc: ff:b1:65:25:7f:92:fb:2f:cc:c6:9d:ac:6c:34:90:66:ec:5a: 9b:22:f2:e6:89:f1:c6:e3:4c:e8:aa:61:86:69:0c:c5:56:9b: 80:3c:dc:c7:44:10:e4:e5:da:ae:c9:7f:58:a7:55:8e:79:ac: 49:65:00:dd:3a:9d:fb:c6:7c:ae:06:f8:df:ce:f8:e2:93:d2: bd:2a:86:dd:60:fc:d0:e2:1c:88:43:cf:4b:24:55:23:d8:05: 76:46:95:93:93:bb:20:3b:56:81:e5:7f:77:3d:b3:d1:38:4e: dc:21:00:47:76:65:db:35:31:85:8b:18:9a:0a:71:1d:64:9b: 88:0c:93:8e:a6:e2:7a:9d:be:a9:81:ec:51:24:9f:81:01:c3: f0:40:37:86:89:f5:8e:fc:8e:3d:03:61:92:90:63:f5:5f:52: 8b:9a:16:64:b9:14:f2:87:55:e2:ce:dd:b6:3d:2f:0a:6a:a4: 0c:b2:44:a2:05:19:47:41:4c:d5:14:1d:72:af:13:75:c4:3a: e4:e8:57:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGsrYDdW3b3sh27E6bsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWMyNDY3NTQ2ZjRiMDc4YTAyMjRkYTFjY2FjNWMyODdl OTM0NTMwHhcNMjUxMjIwMTQwMTA3WhcNMjUxMjIxMTQwMTA3WjAzMTEwLwYDVQQD Eyg1ZDQ2Zjg3MzZiMjFkOGRjYTY3ZGUxNjMwNzExMmNjNDE4NDVmNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKB9gn1Fwfr0GoKIZ0eg1Lsw+Z2m GZ+D2CrrFRyJTmr6H+0LUC6FdQF2wA6REraBBbpYkln/BthbGBI2ZuLfExdM9Qbt DkLubS9o9lWc0/bz7/fkSR3JqFStiGLoetcWqsw2BlhmsnPF2RBKyUnaBh3t/tyt QLyW+SpyGndrTrbxitClGvxg7+51DIj+5sVkw4XFH7UINJ/BOlDYd4kn3GmZfzsZ buLRwsfFJYO7S48+nBFYrDe7oU6SFITsVIZZW8X3s6+qhufGCKl3O1AGrLManEKI ythZo9pUYh1hUBAjByvnCJm4ZGIGyGJ1FUYR+kEvDKNk2E13U2/xlPhxQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1G+HNrIdjcpn3hYwcRLMQYRfXzMB8GA1UdIwQY MBaAFDtcJGdUb0sHigIk2hzKxcKH6TRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNThkOTQtYjU2NC00ZDQ5LWE4ZmQt NWMwOTZhODdiYjA3LzEvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iNThkOTQtYjU2NC00ZDQ5LWE4ZmQtNWMwOTZhODdiYjA3 LzEvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnZzpgjk QKCUuyVqwYrRaJ4sdel4lHTVb2MzxOzTdhHZFnbh3hxQt3jZjGfnERbTzXDoIzO8 /7FlJX+S+y/Mxp2sbDSQZuxamyLy5onxxuNM6KphhmkMxVabgDzcx0QQ5OXarsl/ WKdVjnmsSWUA3Tqd+8Z8rgb438744pPSvSqG3WD80OIciEPPSyRVI9gFdkaVk5O7 IDtWgeV/dz2z0ThO3CEAR3Zl2zUxhYsYmgpxHWSbiAyTjqbiep2+qYHsUSSfgQHD 8EA3hon1jvyOPQNhkpBj9V9Si5oWZLkU8odV4s7dtj0vCmqkDLJEogUZR0FM1RQd cq8TdcQ65OhXIg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:01 2025 by rpki-client