This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json) Hash identifier: EWW4GNqmaFSJ/7L5aYKjX67FTICi2xY5vncVw/CiTdg= Subject key identifier: FB:0C:F4:90:94:1D:BF:D4:0D:B4:28:97:E3:E7:D8:C9:C8:A9:A5:FB Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019B6F5909707F027EB2598CB6040D8F76D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft Manifest number: 17B2 Signing time: Tue 30 Dec 2025 13:01:04 +0000 Manifest this update: Tue 30 Dec 2025 13:01:04 +0000 Manifest next update: Wed 31 Dec 2025 13:01:04 +0000 Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=) 2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=) 3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=) 4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=) 5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: QicywoeYAbCrxj3MlM1xfkh29iwWDdo/hytQ8G7b5q4=) 6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=) 7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=) 8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:59:09:70:7f:02:7e:b2:59:8c:b6:04:0d:8f:76:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Dec 30 13:01:04 2025 GMT Not After : Dec 31 13:01:04 2025 GMT Subject: CN=fb0cf490941dbfd40db42897e3e7d8c9c8a9a5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:59:a1:b8:f3:6f:f4:a5:23:47:4c:75:67: 0f:d8:b7:62:1c:f6:1d:dd:88:03:6d:23:01:31:53: 86:bd:05:3f:bc:78:da:5c:8c:30:2d:47:96:51:b8: ee:fb:30:e1:ba:e6:42:ef:dc:2c:19:c4:7a:df:0c: e6:4c:eb:85:ec:2c:c3:69:ff:d2:98:88:0e:5b:38: 9b:57:82:e8:c3:09:73:03:b4:94:44:62:a7:f5:06: c8:d2:53:a3:b3:3d:9c:33:94:e4:6e:89:fe:ee:7f: 65:ba:fa:55:23:65:0c:7a:2c:a1:3d:cf:8d:58:c1: 38:6f:01:4a:de:71:45:f7:42:a9:de:ad:30:b3:6b: 29:ee:9b:81:9f:bc:73:fb:dc:aa:99:21:82:a6:4b: b7:90:86:61:6f:70:cd:14:dd:0e:1a:bb:59:ef:b1: 86:86:e1:3f:d9:dd:43:79:99:ad:26:55:2b:e9:26: 23:1f:9f:fb:6b:42:44:5d:a4:dc:65:ea:9d:6f:4e: 43:5b:88:be:e0:ae:5b:5b:c5:53:d5:17:3c:f5:44: 77:80:dc:ec:cb:c1:ad:7d:57:4f:bd:b2:06:ee:4a: 6e:39:84:4f:2c:2d:5c:8e:27:d0:e6:62:4c:c1:db: ad:d0:7a:34:ce:51:57:6c:74:dd:cd:0e:49:a5:4d: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0C:F4:90:94:1D:BF:D4:0D:B4:28:97:E3:E7:D8:C9:C8:A9:A5:FB X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6c:f6:cf:ad:79:ae:b3:3e:6a:26:46:55:45:c7:83:3d:66: cf:8b:c5:d3:35:fe:71:50:0f:a7:e9:86:eb:cd:6f:45:5d:be: 05:20:e3:19:bc:34:01:32:af:0f:3d:72:24:7d:0c:d8:8d:f6: 71:f3:b0:00:ce:ad:39:d2:d2:09:8d:a4:dc:66:25:34:49:e6: 78:46:30:a8:b9:78:c8:f4:a9:33:b3:58:e8:12:20:4b:b0:4a: f1:59:81:7c:88:91:ef:37:b7:0a:76:f0:3f:f5:0e:f6:52:b2: 62:63:88:c6:81:58:13:71:86:bf:73:0e:e1:56:f3:31:b2:27: 55:d3:b9:60:99:74:09:e5:28:4b:ac:9a:f9:04:da:79:b9:8c: 5e:14:2b:e8:bc:46:84:d2:95:b0:ef:f9:59:ea:3c:30:00:2b: 25:c2:16:63:92:e7:c9:73:06:f6:c6:6e:0b:85:7b:f0:1b:5e: 76:e7:42:5f:e3:40:55:57:99:32:a5:f6:54:2a:66:8f:bd:ea: 80:7b:63:31:b2:29:63:e3:d7:7c:d1:f5:aa:e7:2a:32:c0:e8: c2:62:ce:81:e8:d9:95:2f:f1:4d:6e:da:9e:d0:f3:ad:0d:81: e0:08:45:2b:ac:f3:84:2c:06:87:94:be:66:f1:36:8e:bd:9b: 42:5b:0a:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWQlwfwJ+slmMtgQNj3bSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjUxMjMwMTMwMTA0WhcNMjUxMjMxMTMwMTA0WjAzMTEwLwYDVQQD EyhmYjBjZjQ5MDk0MWRiZmQ0MGRiNDI4OTdlM2U3ZDhjOWM4YTlhNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYZZobjzb/SlI0dMdWcP2LdiHPYd 3YgDbSMBMVOGvQU/vHjaXIwwLUeWUbju+zDhuuZC79wsGcR63wzmTOuF7CzDaf/S mIgOWzibV4LowwlzA7SURGKn9QbI0lOjsz2cM5Tkbon+7n9luvpVI2UMeiyhPc+N WME4bwFK3nFF90Kp3q0ws2sp7puBn7xz+9yqmSGCpku3kIZhb3DNFN0OGrtZ77GG huE/2d1DeZmtJlUr6SYjH5/7a0JEXaTcZeqdb05DW4i+4K5bW8VT1Rc89UR3gNzs y8GtfVdPvbIG7kpuOYRPLC1cjifQ5mJMwdut0Ho0zlFXbHTdzQ5JpU2VLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsM9JCUHb/UDbQol+Pn2MnIqaX7MB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGz2z615 rrM+aiZGVUXHgz1mz4vF0zX+cVAPp+mG681vRV2+BSDjGbw0ATKvDz1yJH0M2I32 cfOwAM6tOdLSCY2k3GYlNEnmeEYwqLl4yPSpM7NY6BIgS7BK8VmBfIiR7ze3Cnbw P/UO9lKyYmOIxoFYE3GGv3MO4VbzMbInVdO5YJl0CeUoS6ya+QTaebmMXhQr6LxG hNKVsO/5Weo8MAArJcIWY5LnyXMG9sZuC4V78BtedudCX+NAVVeZMqX2VCpmj73q gHtjMbIpY+PXfNH1qucqMsDowmLOgejZlS/xTW7antDzrQ2B4AhFK6zzhCwGh5S+ ZvE2jr2bQlsKMA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:08 2025 by rpki-client