This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json) Hash identifier: CO/mfdlwNSyVCnNf+lXvbA6yC2pQTC5fc1Havptoj9k= Subject key identifier: 64:B3:EE:CD:40:6B:81:E8:6B:56:25:44:EF:4E:16:B5:E4:09:7C:FE Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Certificate serial: 019B4738FD5CDBDD521872878E6FCFFA0D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft Manifest number: 0F53 Signing time: Mon 22 Dec 2025 18:01:15 +0000 Manifest this update: Mon 22 Dec 2025 18:01:15 +0000 Manifest next update: Tue 23 Dec 2025 18:01:15 +0000 Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: HGLe9fmDVcyg42CvN9CDZvo+T2LZiWRwBWbHl56dfLo=) 2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:fd:5c:db:dd:52:18:72:87:8e:6f:cf:fa:0d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e Validity Not Before: Dec 22 18:01:15 2025 GMT Not After : Dec 23 18:01:15 2025 GMT Subject: CN=64b3eecd406b81e86b562544ef4e16b5e4097cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:63:cb:d9:a9:9e:e3:d6:b7:2c:c7:84:30: 6f:53:e0:bb:e5:df:0b:67:43:c4:71:7c:5c:27:9a: 08:ed:3c:57:ff:f6:69:ee:69:7d:ad:e0:b5:f9:b0: 14:22:5a:6c:89:85:4c:3c:22:0f:1b:2f:e9:46:4a: b2:c8:fc:b5:ce:33:57:4f:ad:60:e9:fa:5c:ca:e2: 65:38:4e:6a:09:1f:48:00:4e:c0:af:76:42:98:6f: ec:1e:d6:09:b1:ad:7f:82:3c:8e:d9:00:2a:3b:1d: 15:20:33:e1:0e:e2:94:6d:92:6b:0b:1c:45:09:53: 20:cd:08:07:cc:0a:f0:0e:38:ae:ef:6d:5f:0d:7e: ad:6c:76:51:7b:00:d7:94:b1:2d:38:50:91:d2:2c: c3:15:96:3c:3e:26:b5:29:0e:fa:1b:26:96:5f:40: bd:b7:b5:ad:4e:cb:85:34:e3:90:6b:3c:25:79:e9: a3:59:e3:e4:0c:f9:03:ca:91:65:1a:40:fe:6d:c9: b5:54:a6:e8:26:c4:f3:3d:da:1d:9a:5c:bd:a3:70: 88:8b:94:cb:2e:a9:e1:30:45:4f:39:6b:c8:ae:cf: 91:09:73:c9:6b:6a:57:33:b8:1a:9b:21:8e:61:fb: 1c:fe:fd:c4:ce:3f:2f:45:b7:8c:5f:49:15:a2:99: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:EE:CD:40:6B:81:E8:6B:56:25:44:EF:4E:16:B5:E4:09:7C:FE X509v3 Authority Key Identifier: keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:17:03:79:9f:64:7a:72:c9:0b:47:4c:65:2e:43:35:5e:3a: 8f:26:a6:4a:80:51:a1:58:53:8e:d0:a2:06:6d:56:76:7f:5a: 2a:46:00:65:5d:65:bb:d9:02:d4:63:35:88:d7:e3:cf:71:bf: 48:7d:8c:a1:42:c5:38:9b:91:af:8f:f5:a8:6b:7b:9c:b1:bb: 44:cc:4e:b5:2a:f3:2c:ae:b8:1e:50:08:68:a8:06:b1:6c:62: a8:08:b9:7f:31:ec:a5:c3:90:c6:80:ad:bd:93:0a:5c:a0:0f: c0:8b:cc:13:f0:6c:a1:46:44:97:0c:c6:38:29:e2:8f:1d:5f: a5:3e:88:d1:c2:69:5f:0d:2b:40:75:28:48:b8:63:35:1b:a4: 67:3c:f1:85:77:32:d8:da:56:ed:ad:81:d5:9f:12:76:71:b6: a4:9c:2f:71:91:a8:9b:31:59:d9:5e:e1:e2:15:85:7c:5f:52: f7:22:b7:69:12:6e:94:a8:99:47:48:6a:ee:73:8a:0e:3f:6d: 6d:a2:89:10:9a:56:90:72:0c:af:2c:d6:24:ed:36:71:a0:4e: 22:d5:ec:5a:47:e1:1b:83:6f:89:77:f9:b5:cf:6b:2f:b5:47: 53:be:35:18:8e:49:d6:7a:c7:e7:d0:0f:6c:8f:9e:0c:8f:3c: c3:24:91:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOP1c291SGHKHjm/P+g0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0 Y2ViNWUwHhcNMjUxMjIyMTgwMTE1WhcNMjUxMjIzMTgwMTE1WjAzMTEwLwYDVQQD Eyg2NGIzZWVjZDQwNmI4MWU4NmI1NjI1NDRlZjRlMTZiNWU0MDk3Y2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Jjy9mpnuPWtyzHhDBvU+C75d8L Z0PEcXxcJ5oI7TxX//Zp7ml9reC1+bAUIlpsiYVMPCIPGy/pRkqyyPy1zjNXT61g 6fpcyuJlOE5qCR9IAE7Ar3ZCmG/sHtYJsa1/gjyO2QAqOx0VIDPhDuKUbZJrCxxF CVMgzQgHzArwDjiu721fDX6tbHZRewDXlLEtOFCR0izDFZY8Pia1KQ76GyaWX0C9 t7WtTsuFNOOQazwleemjWePkDPkDypFlGkD+bcm1VKboJsTzPdodmly9o3CIi5TL LqnhMEVPOWvIrs+RCXPJa2pXM7gamyGOYfsc/v3Ezj8vRbeMX0kVopl5XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSz7s1Aa4Hoa1YlRO9OFrXkCXz+MB8GA1UdIwQY MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRcDeZ9k enLJC0dMZS5DNV46jyamSoBRoVhTjtCiBm1Wdn9aKkYAZV1lu9kC1GM1iNfjz3G/ SH2MoULFOJuRr4/1qGt7nLG7RMxOtSrzLK64HlAIaKgGsWxiqAi5fzHspcOQxoCt vZMKXKAPwIvME/BsoUZElwzGOCnijx1fpT6I0cJpXw0rQHUoSLhjNRukZzzxhXcy 2NpW7a2B1Z8SdnG2pJwvcZGomzFZ2V7h4hWFfF9S9yK3aRJulKiZR0hq7nOKDj9t baKJEJpWkHIMryzWJO02caBOItXsWkfhG4NviXf5tc9rL7VHU741GI5J1nrH59AP bI+eDI88wySRfQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:20 2025 by rpki-client