This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json) Hash identifier: dt3sxhV1QP93FseR34xaeAD0kpzZUezxWMcGhV/0sLw= Subject key identifier: BD:61:7D:83:0C:EB:3C:7F:F3:49:90:FB:CA:80:7B:1A:5A:EA:C8:27 Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44 Certificate serial: 019B661EB4D1CF33057F06EB5BD03A90975D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 18:00:46 +0000 Manifest this update: Sun 28 Dec 2025 18:00:46 +0000 Manifest next update: Mon 29 Dec 2025 18:00:46 +0000 Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: 8vGp+R3AYvqMKrm3VH/cFA/KRVQ2e26Ndf+SFKDJ1bk=) 2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:b4:d1:cf:33:05:7f:06:eb:5b:d0:3a:90:97:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44 Validity Not Before: Dec 28 18:00:46 2025 GMT Not After : Dec 29 18:00:46 2025 GMT Subject: CN=bd617d830ceb3c7ff34990fbca807b1a5aeac827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:96:e7:1f:b5:49:3f:63:c6:11:d6:e5:99: 74:02:15:88:56:79:a0:eb:e3:68:56:02:b0:52:4a: d0:c9:14:06:ac:b8:19:56:6c:8f:bf:53:96:c8:5e: 37:db:ac:a2:20:bc:10:0a:49:4c:10:7d:e5:c0:2d: 36:f4:b4:b9:e0:7e:31:88:60:f9:e7:1b:93:e3:f8: b4:0a:ca:a9:83:30:f7:61:ac:e1:5b:37:c7:c8:8a: d6:f7:53:3f:ac:39:15:7d:d5:7d:27:44:1c:c7:d8: 03:bc:16:af:af:26:a0:b5:3b:ed:ef:14:5d:ec:40: e4:17:ae:97:3d:7b:ae:8f:0e:fa:11:4b:46:2c:3e: 24:0b:2f:f7:27:4b:23:3b:e5:92:1b:f2:5c:6e:95: 2a:ae:a9:c8:2a:2b:de:75:f8:52:62:8f:71:b1:5b: 60:d7:3d:ab:7e:a0:25:98:1f:1e:07:a1:7b:48:11: a0:b9:a9:13:d7:7f:8e:16:d8:ae:cb:e6:84:45:05: f8:8e:a4:8e:8e:66:9b:92:c6:64:42:f3:fa:04:2c: 03:2a:4c:31:29:ea:22:ff:6a:41:eb:12:41:1e:35: 21:43:b9:b3:16:9c:32:22:51:87:58:3b:92:08:7d: 11:52:65:4c:4b:81:59:f0:54:ea:06:4e:82:d2:b6: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:7D:83:0C:EB:3C:7F:F3:49:90:FB:CA:80:7B:1A:5A:EA:C8:27 X509v3 Authority Key Identifier: keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f1:96:c0:40:26:e4:54:fc:23:7f:a0:94:e6:fe:4d:00:68: 41:c4:45:eb:70:9b:74:bd:9c:c4:c6:04:e5:3d:f2:1c:b1:19: 27:77:98:d8:c6:47:b8:40:58:87:c6:fb:90:f3:84:cc:d6:39: 7c:2e:35:5b:63:e7:aa:c2:ca:76:14:90:f2:b0:f1:1f:2f:3c: e4:48:c7:78:5b:60:3c:47:bf:c7:de:38:fc:d6:51:a4:dd:ad: bf:4c:18:e2:60:c3:18:1e:59:50:ff:fc:f1:fc:a9:86:6b:4f: e3:08:14:b8:8d:8b:71:c0:c2:5f:dd:d2:1d:ce:15:1a:41:e3: a1:95:4e:e2:fe:60:09:1b:50:32:46:1d:fd:df:4f:1c:75:90: 3d:34:36:c9:30:48:21:50:80:fd:30:1f:24:04:64:9a:e8:a2: d0:13:36:58:89:30:e0:31:46:17:ba:11:3a:fc:b9:e4:71:6f: 0c:91:8d:ed:aa:93:80:cb:5c:6a:04:7d:dc:f5:fe:8a:e8:14: e0:7c:0a:58:8d:75:98:24:42:14:64:f3:11:62:d5:e0:d8:d2: 54:2e:62:f5:17:86:02:af:57:3d:8a:8b:82:f1:81:46:a8:d3: 0a:a8:2c:ae:8e:32:d5:f3:17:9b:a1:65:e5:33:28:f9:a6:ce: f0:6c:0a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHrTRzzMFfwbrW9A6kJddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy OWJkNDQwHhcNMjUxMjI4MTgwMDQ2WhcNMjUxMjI5MTgwMDQ2WjAzMTEwLwYDVQQD EyhiZDYxN2Q4MzBjZWIzYzdmZjM0OTkwZmJjYTgwN2IxYTVhZWFjODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDGW5x+1ST9jxhHW5Zl0AhWIVnmg 6+NoVgKwUkrQyRQGrLgZVmyPv1OWyF4326yiILwQCklMEH3lwC029LS54H4xiGD5 5xuT4/i0CsqpgzD3YazhWzfHyIrW91M/rDkVfdV9J0Qcx9gDvBavryagtTvt7xRd 7EDkF66XPXuujw76EUtGLD4kCy/3J0sjO+WSG/JcbpUqrqnIKivedfhSYo9xsVtg 1z2rfqAlmB8eB6F7SBGguakT13+OFtiuy+aERQX4jqSOjmabksZkQvP6BCwDKkwx Keoi/2pB6xJBHjUhQ7mzFpwyIlGHWDuSCH0RUmVMS4FZ8FTqBk6C0rYcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1hfYMM6zx/80mQ+8qAexpa6sgnMB8GA1UdIwQY MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5 LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvGWwEAm 5FT8I3+glOb+TQBoQcRF63CbdL2cxMYE5T3yHLEZJ3eY2MZHuEBYh8b7kPOEzNY5 fC41W2PnqsLKdhSQ8rDxHy885EjHeFtgPEe/x944/NZRpN2tv0wY4mDDGB5ZUP/8 8fyphmtP4wgUuI2LccDCX93SHc4VGkHjoZVO4v5gCRtQMkYd/d9PHHWQPTQ2yTBI IVCA/TAfJARkmuii0BM2WIkw4DFGF7oROvy55HFvDJGN7aqTgMtcagR93PX+iugU 4HwKWI11mCRCFGTzEWLV4NjSVC5i9ReGAq9XPYqLgvGBRqjTCqgsro4y1fMXm6Fl 5TMo+abO8GwKYQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:36 2025 by rpki-client