This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: Klei4hGVsw7w2BkUZSaVjCLyWqgY+QOCOLAEDPmgrHM= Subject key identifier: 1F:45:16:DC:C5:92:63:E2:07:CB:F7:31:EE:4F:63:1C:34:68:5A:B4 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B3FED3903B8C71C3BAA110F897602C4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 179A Signing time: Sun 21 Dec 2025 08:01:09 +0000 Manifest this update: Sun 21 Dec 2025 08:01:09 +0000 Manifest next update: Mon 22 Dec 2025 08:01:09 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: HechuvjssSyHD+SDx0B5Dq0XXpokjDqckiLjJGC7hgk=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:39:03:b8:c7:1c:3b:aa:11:0f:89:76:02:c4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Dec 21 08:01:09 2025 GMT Not After : Dec 22 08:01:09 2025 GMT Subject: CN=1f4516dcc59263e207cbf731ee4f631c34685ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:50:7d:72:92:41:47:36:61:1c:0f:dd:9b:4d: be:d9:e2:0e:32:ca:e2:b4:76:ee:23:1c:68:c9:82: c5:c9:d6:25:40:06:6c:f0:2f:e2:26:9d:a7:4f:c2: 89:67:f8:71:fe:39:ff:4a:55:42:d5:9a:25:5b:f5: dc:b3:0c:d3:f9:21:34:3f:8d:bb:23:03:f5:ca:79: b7:f0:ad:53:2a:7d:fa:81:a7:25:1d:46:01:1e:43: 73:45:cc:78:92:e1:f2:8d:f9:a7:e3:dc:16:a9:7e: db:05:6d:42:1d:23:27:44:a7:e2:e7:6e:3c:e6:77: a2:80:ee:3d:c1:d0:07:73:d8:bf:46:5d:44:13:80: 5a:cd:ef:b9:5f:e3:dc:32:dd:e8:d4:78:0a:d7:a8: 6b:32:89:d4:bd:0b:28:bd:76:36:9c:fc:47:6f:2d: 18:86:0e:80:4c:32:1a:2c:b8:b9:8b:63:7e:18:06: 31:1a:ab:9a:34:7a:b5:a1:f7:0f:db:d1:8c:52:c1: e6:df:21:5b:05:9d:4c:e7:bb:5b:d6:79:8a:a1:96: f0:80:36:26:ad:1a:8c:ec:25:fc:21:6c:2b:36:87: 24:dd:53:83:f6:f8:6d:93:9c:f0:bd:71:64:d9:2b: 82:27:12:05:97:bc:de:c7:39:db:1a:e7:11:52:90: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:45:16:DC:C5:92:63:E2:07:CB:F7:31:EE:4F:63:1C:34:68:5A:B4 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d2:7d:96:77:9d:1c:6f:d2:ca:a4:5b:1c:df:13:7c:ba:26: cb:ac:83:a3:90:35:b5:fe:ff:95:d6:07:b8:cd:9e:2b:f2:6c: 94:3d:b0:ee:8e:8d:dc:6f:39:13:1e:e1:0a:db:ad:69:28:9b: 6f:5b:fc:12:f9:f2:eb:1f:5c:04:b4:bd:96:72:7d:7a:7b:b1: d7:1a:5f:2a:ff:0b:62:ea:a6:de:89:2b:d2:25:4c:22:34:b1: 3f:ec:9a:26:7e:7b:11:3b:3d:29:0c:10:79:73:d0:14:36:28: 41:13:ca:7f:7b:92:f4:5f:f3:5a:d3:0e:1b:f2:64:c2:4b:c9: 5a:c4:ae:ae:23:3b:db:a5:0d:bd:54:08:08:3d:bd:7c:b4:3d: 78:7a:ed:f3:c5:e1:13:26:d9:a5:40:05:19:3f:6c:4e:45:75: 17:f6:ce:26:e6:a7:22:d7:cc:15:24:65:d0:a6:7a:f3:15:b0: 05:ee:9c:49:3b:42:03:c9:c0:aa:46:ea:48:79:8b:bc:85:f0: 1f:18:1e:10:29:c8:2c:86:ba:9d:f2:02:f5:0d:be:98:f6:a0: 89:08:55:ca:32:2a:46:f0:c3:3e:59:2d:2b:50:63:5f:a6:0d: c0:c8:77:3b:70:f2:02:58:33:c5:16:27:ce:a6:ba:af:f0:91: ef:c5:54:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7TkDuMccO6oRD4l2AsSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUxMjIxMDgwMTA5WhcNMjUxMjIyMDgwMTA5WjAzMTEwLwYDVQQD EygxZjQ1MTZkY2M1OTI2M2UyMDdjYmY3MzFlZTRmNjMxYzM0Njg1YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FB9cpJBRzZhHA/dm02+2eIOMsri tHbuIxxoyYLFydYlQAZs8C/iJp2nT8KJZ/hx/jn/SlVC1ZolW/XcswzT+SE0P427 IwP1ynm38K1TKn36gaclHUYBHkNzRcx4kuHyjfmn49wWqX7bBW1CHSMnRKfi5248 5neigO49wdAHc9i/Rl1EE4Baze+5X+PcMt3o1HgK16hrMonUvQsovXY2nPxHby0Y hg6ATDIaLLi5i2N+GAYxGquaNHq1ofcP29GMUsHm3yFbBZ1M57tb1nmKoZbwgDYm rRqM7CX8IWwrNock3VOD9vhtk5zwvXFk2SuCJxIFl7zexznbGucRUpB5kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9FFtzFkmPiB8v3Me5PYxw0aFq0MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNJ9lned HG/SyqRbHN8TfLomy6yDo5A1tf7/ldYHuM2eK/JslD2w7o6N3G85Ex7hCtutaSib b1v8Evny6x9cBLS9lnJ9enux1xpfKv8LYuqm3okr0iVMIjSxP+yaJn57ETs9KQwQ eXPQFDYoQRPKf3uS9F/zWtMOG/JkwkvJWsSuriM726UNvVQICD29fLQ9eHrt88Xh EybZpUAFGT9sTkV1F/bOJuanItfMFSRl0KZ68xWwBe6cSTtCA8nAqkbqSHmLvIXw HxgeECnILIa6nfIC9Q2+mPagiQhVyjIqRvDDPlktK1BjX6YNwMh3O3DyAlgzxRYn zqa6r/CR78VUJg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:27 2025 by rpki-client