This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: CkrZoN9G/Lvr+4AsuPALApqVBWUF3HW9b3jNo6wRvPI= Subject key identifier: 4E:A0:A5:22:E6:F0:94:C1:C5:29:D2:F8:BD:5B:EC:EC:46:2B:6D:E1 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B3DFEE5AFDB4C210EA603DB7C1F222699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 1799 Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: hnOE4/WKaPZZFErJ1sjn0XvpUOFLOxmbGnYp1odCcCM=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e5:af:db:4c:21:0e:a6:03:db:7c:1f:22:26:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=4ea0a522e6f094c1c529d2f8bd5becec462b6de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:b7:e3:97:f5:5a:a9:32:81:34:f9:3f:c7: 30:93:9f:62:2d:ef:da:8e:f4:36:15:10:c8:cd:59: 61:aa:a0:c6:c8:df:ba:c0:8f:ac:12:49:3b:bb:5c: 9e:7b:28:fc:e3:04:1b:c7:4d:1d:b9:2c:a6:c0:0f: 7e:e8:87:90:e6:47:8d:db:2c:06:8e:1d:e2:67:37: 32:77:79:72:84:77:b7:b8:51:ee:1d:70:8b:c0:2b: 85:da:93:44:32:9e:29:2a:23:8f:2c:e3:36:fd:ae: 21:40:30:76:cc:73:a8:ea:95:56:95:a8:4f:b6:97: 32:3b:1c:57:3e:3d:8f:0f:73:2e:11:2d:47:2d:a1: dd:9d:15:62:18:f3:ab:78:78:61:80:69:0a:d5:6e: 1f:bb:9e:91:bb:5d:c0:3e:33:79:a4:f8:d1:f6:ee: f1:80:c8:15:a4:1f:d8:f0:a8:26:f4:61:a9:5e:ff: 3c:09:10:b1:d6:de:70:a9:12:27:0d:77:99:8e:a4: 60:ae:a3:99:e2:62:fe:c9:f8:b8:14:77:6e:f6:ed: 2f:4a:86:da:50:26:c3:96:e4:b1:a7:9f:76:b4:4e: 44:c9:bf:ac:f9:08:e2:18:1a:85:2d:13:68:59:6f: 54:2d:d5:4f:37:a3:84:70:bc:c3:dc:a0:9c:f7:f7: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:A5:22:E6:F0:94:C1:C5:29:D2:F8:BD:5B:EC:EC:46:2B:6D:E1 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:78:2c:b5:91:b2:c4:91:9a:e7:04:6a:6c:83:78:e2:35:77: 27:45:d3:ce:8b:6d:50:c2:ee:98:6c:e9:c0:2d:f9:b8:5e:7b: 4f:3e:33:24:af:dc:a2:24:64:39:02:d0:98:ad:1f:33:91:6b: a0:79:84:ff:78:09:05:28:ba:a0:4f:3a:67:f2:90:e9:9b:8f: b6:8f:a7:72:d5:bd:4e:12:f3:27:3b:d9:f9:63:05:9c:78:43: 8a:ac:3d:e7:ef:82:3f:38:33:52:b1:66:81:70:58:75:e8:58: eb:3c:08:2e:e0:6d:c7:a0:1c:0d:0c:91:53:b3:60:44:83:1f: 4c:cc:2f:3c:47:f4:1f:3f:d2:9c:13:e7:44:c8:2f:01:d1:5f: 5e:3c:3e:39:b9:3a:79:bc:6d:77:10:f1:cf:a4:9b:45:f2:9c: b7:ff:fc:b2:0e:b1:13:7d:04:a0:30:41:a1:41:66:eb:12:57: 33:50:11:8c:df:c3:87:88:04:29:4b:eb:8d:bb:88:93:11:4a: 58:dc:92:79:64:2b:fe:f8:bc:c2:11:76:36:d4:14:be:bb:31: c5:62:c0:92:78:73:a1:85:74:c4:0c:21:de:57:06:8c:28:2a: e3:6f:ae:a4:a0:c9:21:05:9b:a3:f7:a2:c6:16:ef:90:8c:6b: 5c:da:10:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uWv20whDqYD23wfIiaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD Eyg0ZWEwYTUyMmU2ZjA5NGMxYzUyOWQyZjhiZDViZWNlYzQ2MmI2ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnm345f1WqkygTT5P8cwk59iLe/a jvQ2FRDIzVlhqqDGyN+6wI+sEkk7u1yeeyj84wQbx00duSymwA9+6IeQ5keN2ywG jh3iZzcyd3lyhHe3uFHuHXCLwCuF2pNEMp4pKiOPLOM2/a4hQDB2zHOo6pVWlahP tpcyOxxXPj2PD3MuES1HLaHdnRViGPOreHhhgGkK1W4fu56Ru13APjN5pPjR9u7x gMgVpB/Y8Kgm9GGpXv88CRCx1t5wqRInDXeZjqRgrqOZ4mL+yfi4FHdu9u0vSoba UCbDluSxp592tE5Eyb+s+QjiGBqFLRNoWW9ULdVPN6OEcLzD3KCc9/dj1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6gpSLm8JTBxSnS+L1b7OxGK23hMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXgstZGy xJGa5wRqbIN44jV3J0XTzottUMLumGzpwC35uF57Tz4zJK/coiRkOQLQmK0fM5Fr oHmE/3gJBSi6oE86Z/KQ6ZuPto+nctW9ThLzJzvZ+WMFnHhDiqw95++CPzgzUrFm gXBYdehY6zwILuBtx6AcDQyRU7NgRIMfTMwvPEf0Hz/SnBPnRMgvAdFfXjw+Obk6 ebxtdxDxz6SbRfKct//8sg6xE30EoDBBoUFm6xJXM1ARjN/Dh4gEKUvrjbuIkxFK WNySeWQr/vi8whF2NtQUvrsxxWLAknhzoYV0xAwh3lcGjCgq42+upKDJIQWbo/ei xhbvkIxrXNoQAg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:00:58 2025 by rpki-client