This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: NCfqYGa1kN92/5k3WEOrWDbi+Km+CzBJQ7KzyxpOTTE= Subject key identifier: 94:0B:DE:4C:2D:67:A0:77:7D:F5:15:70:A1:33:0A:7C:38:72:7A:86 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B3F119698C85223A20986129E47F0454C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14D2 Signing time: Sun 21 Dec 2025 04:01:15 +0000 Manifest this update: Sun 21 Dec 2025 04:01:15 +0000 Manifest next update: Mon 22 Dec 2025 04:01:15 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: ggyhSZ8V6z9+wkshDWtBg4X3UYlxunT3RftggKx5G1k=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:96:98:c8:52:23:a2:09:86:12:9e:47:f0:45:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 21 04:01:15 2025 GMT Not After : Dec 22 04:01:15 2025 GMT Subject: CN=940bde4c2d67a0777df51570a1330a7c38727a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:05:02:e7:fc:69:6e:db:57:c0:2e:f4:60: 03:c3:41:72:d7:6c:f6:62:08:a1:1d:7e:ac:bb:6d: fe:64:84:52:55:f0:05:2b:0b:dc:e7:97:8e:9d:b6: e0:5e:42:1f:a8:6e:58:16:b8:76:19:26:ac:c2:62: 21:74:14:7f:9c:23:22:ee:22:7d:00:66:ef:9d:7c: f7:47:67:5f:a0:b0:23:d1:f9:b4:9e:f0:d9:31:0c: 00:3e:16:bf:83:d8:58:31:58:11:df:2b:fb:f4:61: df:21:d2:bf:cc:4a:56:34:f4:49:be:49:e3:b9:83: 47:50:b6:b9:8b:15:5c:25:33:d1:63:20:f6:98:e1: 57:d5:7d:3e:75:f6:ea:54:1f:c1:c0:ed:c1:28:88: c3:3b:15:b9:c2:2f:e1:0b:06:dd:3b:ba:93:4f:f9: 8a:91:a6:e8:b3:dc:9f:d4:0e:92:73:5c:e7:cd:c5: cc:6d:a7:66:86:bc:a7:3c:61:b5:b3:ae:58:b2:69: e5:5f:14:fb:61:b0:90:bf:c4:b6:9a:74:21:e4:52: 59:50:f3:8d:d5:a8:13:ba:0f:fb:e3:14:70:2f:5a: a3:f8:3f:0e:a8:aa:df:5b:5f:03:03:98:87:b4:4f: ea:bd:e8:85:9a:08:d1:03:1b:67:ed:91:b0:07:77: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0B:DE:4C:2D:67:A0:77:7D:F5:15:70:A1:33:0A:7C:38:72:7A:86 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:90:10:7d:13:98:be:75:44:8d:66:ff:57:3e:2f:77:0a:8c: 45:cf:45:e1:0c:de:c0:53:7c:44:ba:3f:b0:a0:2a:c3:f2:f4: 9e:a8:df:a2:9a:bd:16:5a:de:da:eb:4b:10:40:ab:d7:00:b1: 0a:ae:b4:26:67:12:bf:a1:f0:3d:9f:9d:ef:71:b1:64:32:9a: 76:80:99:b0:9e:b3:47:6a:a4:d9:56:a0:8a:24:85:8c:ef:2b: 57:cc:82:df:5e:6b:9b:c5:ae:29:59:18:02:a7:77:d1:27:59: 0a:b6:e5:ea:9d:e6:c1:32:ca:de:26:cf:bd:dc:89:e7:28:4a: b4:61:3a:2a:04:e1:31:b8:c8:9d:2c:c5:17:2c:07:e0:9c:90: 35:ae:6d:45:ea:91:20:42:a1:f7:69:8d:8a:71:aa:7a:ff:90: 56:27:ad:34:36:b7:7a:fa:e1:db:91:62:1d:88:2e:13:50:46: a0:ab:1e:48:b2:76:af:0d:88:24:fc:14:fc:df:c4:9b:11:94: 2b:61:2c:e7:e1:07:3d:f0:d6:60:25:cb:9c:aa:97:29:e5:29: c3:b1:b8:a4:01:89:9f:a5:72:32:3a:62:8d:11:6b:e2:cd:8d: c3:10:a0:4a:c8:db:42:88:2a:2d:2c:7c:e9:b1:da:20:80:33: 65:35:4e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZaYyFIjogmGEp5H8EVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjIxMDQwMTE1WhcNMjUxMjIyMDQwMTE1WjAzMTEwLwYDVQQD Eyg5NDBiZGU0YzJkNjdhMDc3N2RmNTE1NzBhMTMzMGE3YzM4NzI3YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEoFAuf8aW7bV8Au9GADw0Fy12z2 YgihHX6su23+ZIRSVfAFKwvc55eOnbbgXkIfqG5YFrh2GSaswmIhdBR/nCMi7iJ9 AGbvnXz3R2dfoLAj0fm0nvDZMQwAPha/g9hYMVgR3yv79GHfIdK/zEpWNPRJvknj uYNHULa5ixVcJTPRYyD2mOFX1X0+dfbqVB/BwO3BKIjDOxW5wi/hCwbdO7qTT/mK kabos9yf1A6Sc1znzcXMbadmhrynPGG1s65YsmnlXxT7YbCQv8S2mnQh5FJZUPON 1agTug/74xRwL1qj+D8OqKrfW18DA5iHtE/qveiFmgjRAxtn7ZGwB3cNawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQL3kwtZ6B3ffUVcKEzCnw4cnqGMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZAQfROY vnVEjWb/Vz4vdwqMRc9F4QzewFN8RLo/sKAqw/L0nqjfopq9Flre2utLEECr1wCx Cq60JmcSv6HwPZ+d73GxZDKadoCZsJ6zR2qk2VagiiSFjO8rV8yC315rm8WuKVkY Aqd30SdZCrbl6p3mwTLK3ibPvdyJ5yhKtGE6KgThMbjInSzFFywH4JyQNa5tReqR IEKh92mNinGqev+QVietNDa3evrh25FiHYguE1BGoKseSLJ2rw2IJPwU/N/EmxGU K2Es5+EHPfDWYCXLnKqXKeUpw7G4pAGJn6VyMjpijRFr4s2NwxCgSsjbQogqLSx8 6bHaIIAzZTVOdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:45 2025 by rpki-client