This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json) Hash identifier: T7mNtgSxp4jP6KeJereBcWL4Tr4Vi++RF/TMbsy7IL0= Subject key identifier: FF:19:35:32:11:96:22:74:E8:38:6F:32:A4:89:55:F2:AE:2C:1B:3D Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Certificate serial: 019B3B6B440CC2682B0AA2717F4263FD6DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft Manifest number: 06EA Signing time: Sat 20 Dec 2025 11:00:43 +0000 Manifest this update: Sat 20 Dec 2025 11:00:43 +0000 Manifest next update: Sun 21 Dec 2025 11:00:43 +0000 Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=) 2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: AsFMme7lVVGPmxebCdy5Mm6lbFnrrJHtsq6oF6cYE7Y=) 3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:44:0c:c2:68:2b:0a:a2:71:7f:42:63:fd:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Validity Not Before: Dec 20 11:00:43 2025 GMT Not After : Dec 21 11:00:43 2025 GMT Subject: CN=ff19353211962274e8386f32a48955f2ae2c1b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:2f:37:ef:76:58:aa:bf:9d:f5:18:e9:1c: 36:26:5e:c9:5b:6c:c2:7e:d5:d7:22:62:e7:41:ec: e0:86:bc:b3:cd:3d:88:12:6b:cc:37:b9:d4:78:0f: 79:7c:7e:bc:30:b9:ca:4d:c0:46:9b:3f:a4:6d:ff: 14:8a:a6:61:0c:39:f6:8f:75:03:77:18:77:d1:f4: 67:c9:e7:ce:f2:03:5c:25:cd:d9:37:d5:73:d4:fa: 61:69:1a:88:5d:23:26:c2:8b:27:7e:be:af:75:97: 66:f9:91:84:7b:0a:7c:76:e9:96:4d:07:cf:1a:16: a1:67:52:ec:11:82:58:b4:60:4c:9c:a3:b9:8a:22: 7d:a5:aa:f0:fd:5d:d3:4f:75:d6:e0:08:cd:6d:84: 71:df:4a:3e:ec:06:9b:a3:6e:a1:c7:1d:a6:9a:f1: 51:5e:6a:85:c3:23:4f:7b:7f:76:e0:72:c6:87:20: 6a:ef:d0:11:29:84:d1:b5:0d:34:a5:8b:ff:d7:c0: 43:0d:96:e0:d9:a6:69:32:55:b0:e9:9b:75:bf:31: 77:9a:8f:d9:f7:bf:11:6d:47:16:e2:50:29:77:cd: 44:1f:c5:e4:89:9e:71:af:ec:1f:19:a6:12:49:f5: 49:87:56:95:2a:c3:62:ab:8b:6c:63:ef:e7:c6:99: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:35:32:11:96:22:74:E8:38:6F:32:A4:89:55:F2:AE:2C:1B:3D X509v3 Authority Key Identifier: keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:74:6e:c8:4c:fb:d9:0f:b2:ed:a5:e7:16:94:53:f5:d7:8f: 89:52:81:b4:28:02:bf:f8:3b:13:cd:21:7b:73:65:53:62:e3: 25:14:b0:79:91:37:ae:3b:42:cf:21:b3:c5:26:5c:8d:13:6d: 13:94:ff:fd:a3:ce:c4:ae:7a:05:4e:8a:d1:d0:1b:e7:87:f5: df:e1:2c:10:ae:39:da:89:94:8e:67:ab:d9:f3:a3:be:2e:67: b3:1f:00:f8:6d:7f:1b:0f:9b:27:64:6a:d7:0e:6b:98:d4:19: a2:d9:e9:9e:ec:c7:cd:51:d1:ea:cf:2c:0e:ce:b7:44:14:c5: 66:d6:e3:0d:0a:f4:7e:98:64:d1:77:e1:1b:11:ee:90:4c:ee: cf:98:4f:60:86:ac:7f:59:84:2e:78:3c:af:12:1f:89:e8:d1: ac:90:2a:f8:5e:05:2f:01:d3:07:5b:db:c6:2c:56:84:1a:17: 63:21:c4:d2:2e:d7:9e:bf:e0:38:80:1a:52:e4:21:36:2b:66: d4:d7:fd:df:1f:de:72:d6:d0:7b:4d:ce:45:cf:61:5a:94:f6: 20:86:c2:1c:23:47:ef:84:5d:39:25:66:d6:87:f1:34:36:58: a4:3a:30:3b:88:23:5b:e0:8c:23:1e:88:58:c8:7a:ce:f6:13: a5:ab:37:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0QMwmgrCqJxf0Jj/W3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4 MjNhMDIwHhcNMjUxMjIwMTEwMDQzWhcNMjUxMjIxMTEwMDQzWjAzMTEwLwYDVQQD EyhmZjE5MzUzMjExOTYyMjc0ZTgzODZmMzJhNDg5NTVmMmFlMmMxYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW0vN+92WKq/nfUY6Rw2Jl7JW2zC ftXXImLnQezghryzzT2IEmvMN7nUeA95fH68MLnKTcBGmz+kbf8UiqZhDDn2j3UD dxh30fRnyefO8gNcJc3ZN9Vz1PphaRqIXSMmwosnfr6vdZdm+ZGEewp8dumWTQfP GhahZ1LsEYJYtGBMnKO5iiJ9parw/V3TT3XW4AjNbYRx30o+7Aabo26hxx2mmvFR XmqFwyNPe3924HLGhyBq79ARKYTRtQ00pYv/18BDDZbg2aZpMlWw6Zt1vzF3mo/Z 978RbUcW4lApd81EH8XkiZ5xr+wfGaYSSfVJh1aVKsNiq4tsY+/nxple4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8ZNTIRliJ06DhvMqSJVfKuLBs9MB8GA1UdIwQY MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHRuyEz7 2Q+y7aXnFpRT9dePiVKBtCgCv/g7E80he3NlU2LjJRSweZE3rjtCzyGzxSZcjRNt E5T//aPOxK56BU6K0dAb54f13+EsEK452omUjmer2fOjvi5nsx8A+G1/Gw+bJ2Rq 1w5rmNQZotnpnuzHzVHR6s8sDs63RBTFZtbjDQr0fphk0XfhGxHukEzuz5hPYIas f1mELng8rxIfiejRrJAq+F4FLwHTB1vbxixWhBoXYyHE0i7Xnr/gOIAaUuQhNitm 1Nf93x/ectbQe03ORc9hWpT2IIbCHCNH74RdOSVm1ofxNDZYpDowO4gjW+CMIx6I WMh6zvYTpas31A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:27 2025 by rpki-client