This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json) Hash identifier: goaWEVo/hewvgabNYTcTUQvNZANIW7nJL2bXN6cvfy4= Subject key identifier: EC:C6:46:DC:12:8E:EF:D4:BF:1C:4E:47:EE:74:B2:F1:D2:32:56:F5 Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Certificate serial: 019B54864307E3E2A4869F86C2D5E7E79101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft Manifest number: 06F7 Signing time: Thu 25 Dec 2025 08:00:43 +0000 Manifest this update: Thu 25 Dec 2025 08:00:43 +0000 Manifest next update: Fri 26 Dec 2025 08:00:43 +0000 Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=) 2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: a8q9zyiGJaT3d8M7KsoXsYwrqoSXaK0SSGTtni2JVyg=) 3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:43:07:e3:e2:a4:86:9f:86:c2:d5:e7:e7:91:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Validity Not Before: Dec 25 08:00:43 2025 GMT Not After : Dec 26 08:00:43 2025 GMT Subject: CN=ecc646dc128eefd4bf1c4e47ee74b2f1d23256f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:f8:9f:64:c9:80:6b:de:12:73:dc:83:80: fa:9a:1f:65:77:a4:49:d9:34:cd:b0:b3:8b:a5:27: f3:d4:ed:f9:68:81:34:7a:07:51:04:2a:3f:f8:06: 41:7b:0d:16:1a:e8:d9:da:44:63:c8:c4:ad:59:f8: a3:fb:05:74:71:7a:42:3d:50:17:d8:2d:4e:32:05: 77:80:1b:62:1b:97:b8:4f:d2:f4:a4:c0:0e:1c:bd: 2b:bf:ab:1b:d0:d5:07:c7:ec:33:37:94:2a:08:57: be:1d:a2:3a:d6:3c:4a:cc:07:38:e7:3f:9b:df:98: d8:d6:a8:43:6b:c8:91:62:77:4c:7a:b0:4e:57:3f: 97:92:a5:54:8f:61:b1:1c:d4:80:e8:9e:5a:9f:58: a1:7d:34:36:15:f7:65:4a:d4:6b:b2:69:6d:7b:b5: 57:f1:b7:17:9d:41:eb:03:e7:e8:1b:5e:d9:ff:f5: 23:9b:d5:2f:40:6d:27:d4:3c:69:fa:e1:ba:03:b0: 97:f2:b5:3a:7e:2d:ae:fd:45:49:6a:df:36:a2:d8: 76:a9:07:9b:d2:dd:ba:36:b8:e0:4a:01:ed:5a:dc: 73:b4:b6:29:bd:dc:f0:e4:b3:97:d5:65:a1:95:f3: 9b:cc:f8:fe:8e:83:e6:ee:99:e7:8c:8b:f5:2b:a4: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C6:46:DC:12:8E:EF:D4:BF:1C:4E:47:EE:74:B2:F1:D2:32:56:F5 X509v3 Authority Key Identifier: keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:19:c6:42:bf:fc:82:53:62:d6:18:e1:99:2d:dd:4c:f7:b5: f7:57:c2:58:4b:63:62:01:e3:c7:78:0c:e8:44:33:89:9e:7c: d4:11:80:27:66:17:a1:19:33:53:1d:d3:17:54:ed:9d:e7:62: 5d:50:9b:89:80:0b:fe:ce:9a:7d:ee:52:4a:fe:8c:eb:5e:da: 28:93:96:9d:db:54:a4:3a:dc:53:b4:1f:15:e4:b1:fd:af:f1: 9d:1e:76:66:44:9b:58:65:b7:6e:d8:76:49:cb:d1:68:fd:b2: c5:72:5a:29:66:6f:c7:6a:49:ef:55:dc:ca:57:f1:a0:58:9b: b2:be:30:1e:58:9d:7a:5f:5c:c4:d2:c2:e3:bb:f5:ea:bd:46: 38:92:dd:57:c8:4b:22:8b:0d:be:96:08:ad:b3:d3:79:15:a9: 4b:93:f1:62:62:06:32:bd:93:11:22:78:d5:80:04:cf:36:60: 77:ee:5d:b1:37:ff:f3:d3:ff:43:ea:b2:3a:d4:cf:00:24:cf: b4:20:06:09:45:d2:fd:25:ac:7a:47:3b:55:c6:89:d0:5e:c2: e7:a6:c7:4c:c7:48:16:60:15:8c:5e:8f:06:74:61:fd:ea:ac: 35:5c:a5:f6:d2:cf:6f:32:00:bc:f2:a5:2b:05:ae:70:19:65: b4:a2:9d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhkMH4+Kkhp+GwtXn55EBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4 MjNhMDIwHhcNMjUxMjI1MDgwMDQzWhcNMjUxMjI2MDgwMDQzWjAzMTEwLwYDVQQD EyhlY2M2NDZkYzEyOGVlZmQ0YmYxYzRlNDdlZTc0YjJmMWQyMzI1NmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkf4n2TJgGveEnPcg4D6mh9ld6RJ 2TTNsLOLpSfz1O35aIE0egdRBCo/+AZBew0WGujZ2kRjyMStWfij+wV0cXpCPVAX 2C1OMgV3gBtiG5e4T9L0pMAOHL0rv6sb0NUHx+wzN5QqCFe+HaI61jxKzAc45z+b 35jY1qhDa8iRYndMerBOVz+XkqVUj2GxHNSA6J5an1ihfTQ2FfdlStRrsmlte7VX 8bcXnUHrA+foG17Z//Ujm9UvQG0n1Dxp+uG6A7CX8rU6fi2u/UVJat82oth2qQeb 0t26NrjgSgHtWtxztLYpvdzw5LOX1WWhlfObzPj+joPm7pnnjIv1K6RiawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzGRtwSju/UvxxOR+50svHSMlb1MB8GA1UdIwQY MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihnGQr/8 glNi1hjhmS3dTPe191fCWEtjYgHjx3gM6EQziZ581BGAJ2YXoRkzUx3TF1Ttnedi XVCbiYAL/s6afe5SSv6M617aKJOWndtUpDrcU7QfFeSx/a/xnR52ZkSbWGW3bth2 ScvRaP2yxXJaKWZvx2pJ71XcylfxoFibsr4wHlidel9cxNLC47v16r1GOJLdV8hL IosNvpYIrbPTeRWpS5PxYmIGMr2TESJ41YAEzzZgd+5dsTf/89P/Q+qyOtTPACTP tCAGCUXS/SWsekc7VcaJ0F7C56bHTMdIFmAVjF6PBnRh/eqsNVyl9tLPbzIAvPKl KwWucBlltKKdCQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:22:04 2025 by rpki-client