This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json) Hash identifier: c8XRx/Bn1wwK/AQpdqt69UkSfYOqXDMzfabQgSzswpw= Subject key identifier: A5:0E:23:92:4C:38:B9:A0:0F:A9:D7:88:90:2B:BD:B8:6D:57:B0:A6 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B5072C2F4C98D2B9EF34E6897DCABF797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft Manifest number: 14DB Signing time: Wed 24 Dec 2025 13:00:56 +0000 Manifest this update: Wed 24 Dec 2025 13:00:56 +0000 Manifest next update: Thu 25 Dec 2025 13:00:56 +0000 Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=) 2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: x8xQjk04rJkDvhENHIRQn4yVW5wvxnjEF551dOi64W8=) 3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:c2:f4:c9:8d:2b:9e:f3:4e:68:97:dc:ab:f7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Dec 24 13:00:56 2025 GMT Not After : Dec 25 13:00:56 2025 GMT Subject: CN=a50e23924c38b9a00fa9d788902bbdb86d57b0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:45:20:66:df:ba:51:d8:67:dd:e5:8e:50: 95:54:00:cb:ac:0e:ab:d4:c5:d2:d7:2e:20:be:b0: c1:c1:b1:4b:c2:60:f9:ff:be:c7:b3:eb:d7:c5:41: 56:93:96:b0:93:d2:a6:5d:9d:05:f4:3f:08:1a:e6: da:33:46:51:7c:75:46:27:26:55:5e:3f:1a:17:73: 10:c6:4f:81:9d:ed:76:a6:2f:97:42:8d:17:42:71: aa:4a:00:5e:69:a4:c1:7c:85:74:cd:f9:b8:b0:d7: f6:02:d1:23:6c:17:b9:6f:9c:00:eb:a5:da:92:1f: 66:da:ac:3d:ab:8b:74:06:ca:e1:21:c8:4f:7e:91: f1:75:3f:ec:f2:ac:ab:e9:25:cd:cb:91:c3:ae:25: 47:1e:50:b7:25:1a:8e:dc:5d:bb:82:07:48:91:0c: 1b:06:11:65:9f:a3:74:93:e5:0b:33:7d:cb:b7:a6: 25:4e:d8:11:64:bd:27:02:86:5a:8f:a9:eb:b5:f6: 05:f6:88:f3:91:a1:be:70:90:fe:2e:1c:52:fa:7d: 56:e7:29:c8:0c:16:6e:33:18:d4:12:21:73:5b:bd: 9e:f6:bd:20:bc:bc:4c:7c:e3:52:9e:59:cf:54:ca: 3b:a0:2b:28:a9:5e:21:f8:8c:17:b8:1a:0b:dc:07: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:23:92:4C:38:B9:A0:0F:A9:D7:88:90:2B:BD:B8:6D:57:B0:A6 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e7:33:1b:25:5b:16:a3:11:f8:87:e5:ce:78:bd:8b:27:8e: d8:e3:31:78:70:e3:e2:79:2f:43:6e:5f:08:85:d8:6f:44:5a: 7d:52:04:20:09:27:8b:c5:03:94:f5:15:b0:d6:15:7e:de:a5: 72:75:d2:da:32:63:02:6b:d3:96:14:b4:3b:b2:5e:a9:db:e1: a3:ab:05:0f:2b:e5:a6:23:ad:be:d1:29:c0:86:bd:17:a3:36: 1d:01:a3:79:a1:2f:79:09:8c:f5:58:a4:19:a9:15:6d:2a:e7: b4:de:a5:b9:26:12:53:6b:21:89:be:46:6d:ee:13:4c:ad:6b: 13:2b:88:12:fb:c7:1c:1d:94:e7:45:7c:fb:aa:1d:6b:d7:ce: 19:fe:1a:0d:48:9e:38:90:7d:1f:3c:93:33:f7:9d:58:85:63: d3:f2:d4:2d:48:4a:fd:1a:ba:f2:8d:23:82:01:dd:63:7f:2b: 90:b5:06:17:1e:be:3c:a5:15:60:62:cb:0d:4b:ad:09:04:d4: 5e:a1:29:2f:bf:d0:6d:28:e8:01:8e:27:98:ff:d9:28:22:84: f9:fa:da:6c:82:5d:b1:8a:9d:03:10:9b:e4:68:36:7a:48:f2: 02:ab:bc:27:09:77:a3:d1:a9:53:83:ca:93:c9:bf:ee:e2:d8: 23:2d:ca:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcsL0yY0rnvNOaJfcq/eXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjUxMjI0MTMwMDU2WhcNMjUxMjI1MTMwMDU2WjAzMTEwLwYDVQQD EyhhNTBlMjM5MjRjMzhiOWEwMGZhOWQ3ODg5MDJiYmRiODZkNTdiMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6lFIGbfulHYZ93ljlCVVADLrA6r 1MXS1y4gvrDBwbFLwmD5/77Hs+vXxUFWk5awk9KmXZ0F9D8IGubaM0ZRfHVGJyZV Xj8aF3MQxk+Bne12pi+XQo0XQnGqSgBeaaTBfIV0zfm4sNf2AtEjbBe5b5wA66Xa kh9m2qw9q4t0BsrhIchPfpHxdT/s8qyr6SXNy5HDriVHHlC3JRqO3F27ggdIkQwb BhFln6N0k+ULM33Lt6YlTtgRZL0nAoZaj6nrtfYF9ojzkaG+cJD+LhxS+n1W5ynI DBZuMxjUEiFzW72e9r0gvLxMfONSnlnPVMo7oCsoqV4h+IwXuBoL3Adi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUOI5JMOLmgD6nXiJArvbhtV7CmMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOczGyVb FqMR+Iflzni9iyeO2OMxeHDj4nkvQ25fCIXYb0RafVIEIAkni8UDlPUVsNYVft6l cnXS2jJjAmvTlhS0O7Jeqdvho6sFDyvlpiOtvtEpwIa9F6M2HQGjeaEveQmM9Vik GakVbSrntN6luSYSU2shib5Gbe4TTK1rEyuIEvvHHB2U50V8+6oda9fOGf4aDUie OJB9HzyTM/edWIVj0/LULUhK/Rq68o0jggHdY38rkLUGFx6+PKUVYGLLDUutCQTU XqEpL7/QbSjoAY4nmP/ZKCKE+frabIJdsYqdAxCb5Gg2ekjyAqu8Jwl3o9GpU4PK k8m/7uLYIy3KnA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:12:22 2025 by rpki-client