This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json) Hash identifier: uhfXQIkgJ6VefZ3QYKB0Sv5tqdkGcs/LUqP91vzV4aE= Subject key identifier: 79:1F:D1:52:BB:55:8E:9A:F0:91:45:E1:4B:45:71:A5:7F:CA:67:35 Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Certificate serial: 019B3D911878829F0D442A0355A124F99941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft Manifest number: 0F4E Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: WPTr66HiYY0sXtpcS1qd656CNI1djUSThoUUJEAveyg=) 2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:18:78:82:9f:0d:44:2a:03:55:a1:24:f9:99:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=791fd152bb558e9af09145e14b4571a57fca6735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:62:7b:a1:25:e4:de:6c:d3:a1:51:29:0c:e0: ad:5b:73:f9:94:a5:18:82:01:9d:d3:1f:64:96:f9: 57:28:93:e6:bc:e3:c0:7b:43:93:a6:51:fc:9a:23: 55:f0:eb:42:42:14:62:00:85:af:b3:54:54:7a:cb: 9d:a0:16:f1:a9:fe:6a:bf:6e:4f:e9:4e:c2:4b:5c: 09:8a:c3:16:af:08:c8:da:17:c9:54:90:69:26:37: d4:45:58:81:81:ac:91:55:48:71:8f:7e:0b:1a:98: 84:be:7a:04:77:b0:6b:b6:f1:2c:14:ac:5e:41:e3: 81:e7:5d:2c:36:6a:5a:da:64:fd:75:e6:e9:a3:e1: af:e4:be:61:01:6b:84:e8:62:3e:d4:e0:bf:86:46: bd:5b:eb:61:cf:05:c6:f5:4f:75:a9:af:1c:95:35: 40:5e:41:a7:75:4d:b2:3c:4c:98:67:fb:fe:b9:4b: 8f:31:47:c1:d4:8d:ef:8e:05:1d:bb:40:42:f5:af: bd:25:dc:eb:41:4a:19:fb:7a:a3:86:11:7b:8b:5d: 41:47:9e:07:20:56:fd:3a:0b:31:b9:f9:06:8e:ca: 68:0e:56:20:82:6f:2e:d7:e3:1a:28:b4:38:51:25: 36:f4:04:29:07:1a:11:e0:4e:98:8b:c3:5e:8c:6e: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:D1:52:BB:55:8E:9A:F0:91:45:E1:4B:45:71:A5:7F:CA:67:35 X509v3 Authority Key Identifier: keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cf:b3:56:3a:a9:d6:39:d8:1d:b4:b6:88:cb:d7:14:4d:c3: aa:5a:85:fb:2b:34:bc:7b:21:46:9f:6d:7c:b1:8f:e6:78:c8: 91:0a:4a:7c:f3:59:73:01:54:26:30:fe:66:e5:c2:ca:90:a2: 1e:3b:78:5c:2a:66:e1:23:ae:5b:c5:0b:65:ff:db:bf:52:d6: c2:6a:a1:e5:41:51:e8:ec:f6:26:9f:f5:70:bb:6d:ff:9f:0f: ae:53:4b:a0:89:be:6d:b2:6e:be:4b:11:d7:14:c4:4a:16:22: eb:ab:f2:cc:05:6b:4d:39:47:7f:0e:57:a7:b2:69:f0:29:20: 91:4a:40:61:e2:40:f1:5b:1e:05:bd:c1:49:fb:e6:44:89:83: 03:f7:5d:80:bb:3a:df:cc:36:d3:02:39:e4:3a:05:51:ed:2f: 2f:3e:c6:9e:b0:74:b0:b5:49:17:08:aa:e6:1c:97:db:4e:23: 32:9d:09:e2:ff:15:37:95:43:07:cd:66:33:fc:6e:13:ad:2c: 7d:00:1b:2e:94:55:af:84:6f:15:70:69:83:d7:47:3a:cf:b9: a2:16:10:38:5e:7e:6f:e6:69:b8:ac:6b:e2:a3:c2:91:5c:14: b3:77:a9:08:0a:73:c3:de:6e:32:a4:f5:98:e0:22:0d:43:20: 9d:b9:52:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRh4gp8NRCoDVaEk+ZlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0 Y2ViNWUwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD Eyg3OTFmZDE1MmJiNTU4ZTlhZjA5MTQ1ZTE0YjQ1NzFhNTdmY2E2NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimJ7oSXk3mzToVEpDOCtW3P5lKUY ggGd0x9klvlXKJPmvOPAe0OTplH8miNV8OtCQhRiAIWvs1RUesudoBbxqf5qv25P 6U7CS1wJisMWrwjI2hfJVJBpJjfURViBgayRVUhxj34LGpiEvnoEd7BrtvEsFKxe QeOB510sNmpa2mT9debpo+Gv5L5hAWuE6GI+1OC/hka9W+thzwXG9U91qa8clTVA XkGndU2yPEyYZ/v+uUuPMUfB1I3vjgUdu0BC9a+9JdzrQUoZ+3qjhhF7i11BR54H IFb9OgsxufkGjspoDlYggm8u1+MaKLQ4USU29AQpBxoR4E6Yi8NejG6KuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkf0VK7VY6a8JFF4UtFcaV/ymc1MB8GA1UdIwQY MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs+zVjqp 1jnYHbS2iMvXFE3DqlqF+ys0vHshRp9tfLGP5njIkQpKfPNZcwFUJjD+ZuXCypCi Hjt4XCpm4SOuW8ULZf/bv1LWwmqh5UFR6Oz2Jp/1cLtt/58PrlNLoIm+bbJuvksR 1xTEShYi66vyzAVrTTlHfw5Xp7Jp8CkgkUpAYeJA8VseBb3BSfvmRImDA/ddgLs6 38w20wI55DoFUe0vLz7GnrB0sLVJFwiq5hyX204jMp0J4v8VN5VDB81mM/xuE60s fQAbLpRVr4RvFXBpg9dHOs+5ohYQOF5+b+ZpuKxr4qPCkVwUs3epCApzw95uMqT1 mOAiDUMgnblSKg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:27 2025 by rpki-client