This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: ixeOAzKQZ+ilFNyEqyd/D7Qn4GZJGL9gO9x1lQvLwZM= Subject key identifier: 87:0E:B4:C3:51:AA:98:64:71:32:7B:B5:FC:55:CF:5C:CC:C3:39:16 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B3D233DFF1EFBBE0DB1833FA9D7655B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14D1 Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: 6UE/KynULNgZjORKNbABD1xvBhEUdc9xoRp1YLb8Y2g=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3d:ff:1e:fb:be:0d:b1:83:3f:a9:d7:65:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=870eb4c351aa986471327bb5fc55cf5cccc33916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:9d:63:f2:3e:39:e3:ab:ab:0a:a1:52:48: f9:57:c3:f3:07:cb:f0:bf:77:73:4b:ef:0a:03:55: 52:4f:ab:20:a7:15:04:b1:4d:bf:a1:0c:d3:83:2e: b0:ba:c6:8f:68:54:ce:fb:25:15:2c:9c:9f:36:36: 26:4f:50:83:8f:17:c1:82:c1:68:ab:a4:15:de:e7: 0f:e6:7c:b2:f0:64:ba:c1:7a:51:7f:f2:16:39:45: de:e7:69:55:b5:35:ca:cf:d3:cc:9a:8f:dd:ea:a7: a8:cc:16:0d:67:0a:90:ba:0b:27:6d:c5:a4:eb:80: 27:8c:fe:57:e9:66:55:44:82:ba:b0:17:cf:6b:ce: 62:bd:9f:d6:25:ec:4e:97:cb:cc:42:09:98:9d:f0: ca:a1:22:79:eb:22:79:6f:9c:92:d4:72:87:39:ad: da:4b:97:48:f8:a9:a5:e6:a9:ad:89:28:67:db:17: 70:91:05:4b:fa:14:b2:79:ff:0e:76:93:b1:2c:a4: 83:61:ea:27:95:f9:0f:6d:5b:5d:76:92:3f:f1:02: 45:bb:8d:82:34:7d:e6:8a:68:db:5a:54:a3:5d:c2: a4:fb:54:32:19:09:3b:ea:48:40:17:32:b6:8a:7b: 0e:ea:ac:61:9c:1b:ac:0b:7f:e6:8b:ad:d6:d1:77: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:B4:C3:51:AA:98:64:71:32:7B:B5:FC:55:CF:5C:CC:C3:39:16 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:22:08:5c:ea:2d:b7:81:b5:85:2a:ce:67:0e:48:6f:c0:f9: ae:66:92:2e:12:f7:0a:7a:42:47:73:46:88:2a:ea:f6:c9:a6: d9:1e:38:0b:ad:e7:c1:74:ca:a4:4f:8b:0b:47:46:2d:97:2b: c7:a4:44:4d:bd:a2:be:71:0f:eb:1d:7f:67:3c:67:03:3c:47: 4a:5a:03:12:06:62:f9:60:a7:5a:b0:f9:8d:52:01:db:59:d6: 59:ed:57:5d:82:cd:5d:14:c3:b6:b6:87:cf:e7:5f:c1:1c:f2: 8b:f2:dd:80:a1:be:92:87:66:56:a0:8c:31:77:86:34:d4:47: 59:c0:5b:6c:1a:a3:d1:4d:79:8a:2b:87:80:40:c6:a6:0f:eb: a0:7e:9e:be:3b:a6:72:ff:72:81:d1:63:b0:dc:1f:98:dc:52: e2:27:cc:3a:a3:96:e2:93:d4:d5:d4:c6:df:2b:71:e4:05:c8: 57:1b:0d:cb:e1:23:79:40:7c:89:11:83:f1:c5:2f:b2:c1:8b: a7:38:c4:69:d3:7a:df:16:9b:86:6b:9a:b3:f5:96:31:8f:55: 73:50:60:9d:d7:c9:f1:66:71:07:b5:dc:cb:09:59:ea:7f:06: 79:85:6f:29:a3:26:7b:c5:6d:36:78:94:63:76:5b:5f:91:80: 2e:4a:0d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz3/Hvu+DbGDP6nXZVt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD Eyg4NzBlYjRjMzUxYWE5ODY0NzEzMjdiYjVmYzU1Y2Y1Y2NjYzMzOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfadY/I+OeOrqwqhUkj5V8PzB8vw v3dzS+8KA1VST6sgpxUEsU2/oQzTgy6wusaPaFTO+yUVLJyfNjYmT1CDjxfBgsFo q6QV3ucP5nyy8GS6wXpRf/IWOUXe52lVtTXKz9PMmo/d6qeozBYNZwqQugsnbcWk 64AnjP5X6WZVRIK6sBfPa85ivZ/WJexOl8vMQgmYnfDKoSJ56yJ5b5yS1HKHOa3a S5dI+Kml5qmtiShn2xdwkQVL+hSyef8OdpOxLKSDYeonlfkPbVtddpI/8QJFu42C NH3mimjbWlSjXcKk+1QyGQk76khAFzK2insO6qxhnBusC3/mi63W0XdYOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcOtMNRqphkcTJ7tfxVz1zMwzkWMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiIIXOot t4G1hSrOZw5Ib8D5rmaSLhL3CnpCR3NGiCrq9smm2R44C63nwXTKpE+LC0dGLZcr x6RETb2ivnEP6x1/ZzxnAzxHSloDEgZi+WCnWrD5jVIB21nWWe1XXYLNXRTDtraH z+dfwRzyi/LdgKG+kodmVqCMMXeGNNRHWcBbbBqj0U15iiuHgEDGpg/roH6evjum cv9ygdFjsNwfmNxS4ifMOqOW4pPU1dTG3ytx5AXIVxsNy+EjeUB8iRGD8cUvssGL pzjEadN63xabhmuas/WWMY9Vc1BgndfJ8WZxB7XcywlZ6n8GeYVvKaMme8VtNniU Y3ZbX5GALkoNSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:38:47 2025 by rpki-client