This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json) Hash identifier: 8glBOJYY3t9Jom4vUZZjGdtqXa0oYvOKSkTG1FjJUSk= Subject key identifier: 45:17:32:AC:B7:02:25:77:DC:39:10:EC:AC:EB:C0:55:4C:41:68:2D Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019B3945F6FACAE867604BAEBEF61F9F684F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft Manifest number: 0C80 Signing time: Sat 20 Dec 2025 01:00:45 +0000 Manifest this update: Sat 20 Dec 2025 01:00:45 +0000 Manifest next update: Sun 21 Dec 2025 01:00:45 +0000 Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=) 2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: qsoH9MrOPnHOcwv2YIOpdXsul9cFPXLoWYglRBp7mRw=) 3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=) 4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f6:fa:ca:e8:67:60:4b:ae:be:f6:1f:9f:68:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Dec 20 01:00:45 2025 GMT Not After : Dec 21 01:00:45 2025 GMT Subject: CN=451732acb7022577dc3910ecacebc0554c41682d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:59:67:af:ee:9f:74:84:0c:3c:2f:1b:1d: 04:14:36:02:49:db:6d:e8:00:c4:62:96:8c:1d:f3: 83:61:1b:4a:8a:52:1e:79:83:97:26:a0:2a:a3:3b: 55:84:73:7b:85:f3:57:51:0b:2f:57:24:36:b8:6a: 39:4f:db:9b:c1:9e:a4:1c:52:a3:de:5b:b6:37:5a: 19:34:b5:29:11:31:93:58:ce:32:46:33:f6:e4:12: aa:8f:6d:df:37:f2:73:03:3d:61:3f:71:df:ab:74: 75:7b:d3:65:a9:99:5d:6f:0e:46:42:cb:81:bf:0e: e5:ff:1f:62:5b:f4:e6:87:ac:be:1f:51:cc:7e:e4: 62:dd:3b:e1:f9:78:66:2a:aa:e2:92:d7:d6:11:29: ea:ca:2e:89:b4:99:79:51:ed:20:29:6b:c8:dc:b6: 2a:69:72:0a:f8:bf:36:e0:e5:57:d7:cf:24:c0:1d: f4:35:cd:60:72:d4:3b:c3:86:f2:9a:97:90:bf:f6: da:31:52:11:cc:44:d3:35:ee:8f:da:8d:6e:04:56: 5f:5f:07:bf:e0:bd:1f:88:b9:81:6a:03:21:4f:99: be:44:09:93:dc:c9:36:34:d0:bb:f5:6c:70:eb:ac: 94:d7:71:c9:fb:f8:20:40:76:b3:9c:9e:80:8e:a9: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:32:AC:B7:02:25:77:DC:39:10:EC:AC:EB:C0:55:4C:41:68:2D X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5f:2a:a2:7e:1d:e6:d3:1b:01:95:ad:a8:32:b8:4e:06:da: 4f:22:46:db:cd:39:86:e7:35:f2:19:91:ba:92:8b:fd:59:5b: 67:5e:da:e3:b9:ba:1c:48:30:c1:c9:63:a4:5e:aa:af:d1:b0: ae:66:cf:2c:df:c2:3a:0b:33:c8:88:03:e1:14:20:02:6a:78: 34:13:40:55:7d:d8:8d:a2:a9:49:b1:03:2c:c5:76:61:05:fe: a4:50:e0:b4:99:af:b9:50:7d:11:41:39:b4:43:82:50:1a:41: 69:53:81:81:6b:31:7b:e8:9f:78:09:77:d5:0f:10:94:e6:3a: d8:84:88:f8:f5:f9:ef:60:51:77:56:16:34:15:11:31:c8:6d: b9:77:55:cf:6e:62:67:8e:e7:05:9c:ec:76:48:8c:90:19:85: 3f:58:bf:02:62:23:5c:fb:a2:0b:1c:6a:1b:ee:b6:fb:e4:e1: f9:d5:2f:e6:f2:d8:c8:db:04:27:4c:30:c4:ad:cc:20:2e:e6: 45:ea:59:9b:04:b6:4e:fc:e4:1b:b2:7e:08:3e:48:28:69:ac: c8:a0:6d:28:53:3c:2d:a9:01:8d:cf:9f:37:70:99:66:69:ac: 8e:9e:25:fa:d7:f4:1c:fa:1b:21:85:da:20:80:97:3a:fe:69: 13:d8:b4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rfb6yuhnYEuuvvYfn2hPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjUxMjIwMDEwMDQ1WhcNMjUxMjIxMDEwMDQ1WjAzMTEwLwYDVQQD Eyg0NTE3MzJhY2I3MDIyNTc3ZGMzOTEwZWNhY2ViYzA1NTRjNDE2ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hJZZ6/un3SEDDwvGx0EFDYCSdtt 6ADEYpaMHfODYRtKilIeeYOXJqAqoztVhHN7hfNXUQsvVyQ2uGo5T9ubwZ6kHFKj 3lu2N1oZNLUpETGTWM4yRjP25BKqj23fN/JzAz1hP3Hfq3R1e9NlqZldbw5GQsuB vw7l/x9iW/Tmh6y+H1HMfuRi3Tvh+XhmKqriktfWESnqyi6JtJl5Ue0gKWvI3LYq aXIK+L824OVX188kwB30Nc1gctQ7w4bympeQv/baMVIRzETTNe6P2o1uBFZfXwe/ 4L0fiLmBagMhT5m+RAmT3Mk2NNC79Wxw66yU13HJ+/ggQHaznJ6Ajqk0VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUXMqy3AiV33DkQ7KzrwFVMQWgtMB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV8qon4d 5tMbAZWtqDK4TgbaTyJG2805huc18hmRupKL/VlbZ17a47m6HEgwwcljpF6qr9Gw rmbPLN/COgszyIgD4RQgAmp4NBNAVX3YjaKpSbEDLMV2YQX+pFDgtJmvuVB9EUE5 tEOCUBpBaVOBgWsxe+ifeAl31Q8QlOY62ISI+PX572BRd1YWNBURMchtuXdVz25i Z47nBZzsdkiMkBmFP1i/AmIjXPuiCxxqG+62++Th+dUv5vLYyNsEJ0wwxK3MIC7m RepZmwS2TvzkG7J+CD5IKGmsyKBtKFM8LakBjc+fN3CZZmmsjp4l+tf0HPobIYXa IICXOv5pE9i0jQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:42 2025 by rpki-client