This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json) Hash identifier: OY5mR6NHg+M25uHPnPTQYmGUU2J9EEZ4GON+QNkzaZQ= Subject key identifier: F7:E4:F5:88:3A:A9:8D:24:EC:D6:F2:39:65:A9:B4:C4:8C:A5:07:72 Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Certificate serial: 019B3A21A354343DB8BDFCC003CDE63996EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft Manifest number: 0B86 Signing time: Sat 20 Dec 2025 05:00:41 +0000 Manifest this update: Sat 20 Dec 2025 05:00:41 +0000 Manifest next update: Sun 21 Dec 2025 05:00:41 +0000 Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: 8RBk4dtXsWycayNCFuYyLmoNYvLxKOQLQHON6UM9GhQ=) 2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:a3:54:34:3d:b8:bd:fc:c0:03:cd:e6:39:96:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Validity Not Before: Dec 20 05:00:41 2025 GMT Not After : Dec 21 05:00:41 2025 GMT Subject: CN=f7e4f5883aa98d24ecd6f23965a9b4c48ca50772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:6b:01:70:7f:e3:ac:6e:ee:83:ca:2c:df: e0:09:67:56:ba:2a:6d:f6:fd:9c:56:61:e5:72:fc: d7:8f:ab:bd:8e:09:88:2a:e1:c6:89:08:b0:2c:87: c5:a4:36:eb:b4:11:ff:ae:2a:ea:25:ce:1a:96:0b: 7b:c5:6e:90:a5:cf:d4:d3:e0:01:a6:bb:a1:9c:c7: 41:b9:d4:c5:3c:e8:b9:fd:be:8a:88:d4:25:c3:dc: 45:35:e4:b5:fa:f9:81:ce:14:d6:07:87:74:2b:59: b6:32:d8:f2:d2:46:59:2e:90:93:58:5e:c2:19:9a: 75:ce:f5:7c:06:79:7a:c2:00:3e:e8:dc:b9:04:0c: 03:37:bb:b7:01:5b:ca:1e:6d:38:a1:d6:a5:a6:2e: 67:a3:a3:17:eb:8b:47:a3:b8:d4:4b:0f:91:30:0a: 31:4d:43:8a:45:a6:d1:a6:f8:9b:a5:4f:83:9a:4c: a1:ff:75:85:a1:c6:6b:65:67:5e:0a:b8:50:c7:3a: 36:70:7e:03:2b:1b:a0:e9:58:f8:28:14:56:9d:61: 08:d7:62:08:04:96:c5:b8:c6:df:e0:f7:8f:e7:64: d5:32:65:9b:4b:be:73:22:88:c1:a3:8b:b7:6e:57: f7:b7:74:a4:36:ed:56:ba:6f:7c:36:8c:17:d0:d1: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E4:F5:88:3A:A9:8D:24:EC:D6:F2:39:65:A9:B4:C4:8C:A5:07:72 X509v3 Authority Key Identifier: keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ed:60:e0:0b:7d:80:45:32:25:bf:20:28:8d:29:3d:51:8d: ec:35:eb:f4:fc:87:85:9a:2c:b2:92:2f:3c:89:88:82:39:84: 8c:fe:e5:39:b5:0d:3a:b1:bd:6d:0e:3b:b7:3c:52:7b:2f:0c: 7e:f5:1e:c0:96:97:5c:c7:b9:f2:a3:76:3c:e9:78:6b:58:32: 1b:76:b0:3d:c3:f9:ec:38:61:7b:a2:fa:a6:20:08:92:ca:7d: 9a:6d:17:b3:4a:f1:ae:a5:eb:21:7f:fb:99:d8:d0:51:c0:2f: f2:b2:74:a5:7d:ab:75:60:0d:14:c7:6a:17:77:2f:00:62:84: 2a:6b:e7:94:4f:f9:f9:80:12:78:38:85:60:0d:67:e3:87:5e: 60:f6:1f:d3:6e:91:40:eb:02:04:d6:20:83:6d:e4:b9:ad:7b: 7a:d5:1a:bb:2e:09:e2:33:ef:59:f7:c9:8b:38:0f:76:5a:8c: 49:e6:e0:29:89:0d:0c:6a:f6:3e:27:55:42:9e:10:e2:84:cf: e5:bb:c3:b1:2d:0b:18:03:5f:c1:5d:80:d1:82:55:89:ca:ec: 26:81:45:bc:3a:95:ce:f2:85:00:82:4e:a1:34:9c:b0:f5:42: bc:5f:fb:80:3d:e1:ad:b7:2f:62:cc:1b:21:07:57:3d:70:04: 33:8f:9c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IaNUND24vfzAA83mOZbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj NzRhZjEwHhcNMjUxMjIwMDUwMDQxWhcNMjUxMjIxMDUwMDQxWjAzMTEwLwYDVQQD EyhmN2U0ZjU4ODNhYTk4ZDI0ZWNkNmYyMzk2NWE5YjRjNDhjYTUwNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLhrAXB/46xu7oPKLN/gCWdWuipt 9v2cVmHlcvzXj6u9jgmIKuHGiQiwLIfFpDbrtBH/rirqJc4algt7xW6Qpc/U0+AB pruhnMdBudTFPOi5/b6KiNQlw9xFNeS1+vmBzhTWB4d0K1m2Mtjy0kZZLpCTWF7C GZp1zvV8Bnl6wgA+6Ny5BAwDN7u3AVvKHm04odalpi5no6MX64tHo7jUSw+RMAox TUOKRabRpvibpU+Dmkyh/3WFocZrZWdeCrhQxzo2cH4DKxug6Vj4KBRWnWEI12II BJbFuMbf4PeP52TVMmWbS75zIojBo4u3blf3t3SkNu1Wum98NowX0NEX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfk9Yg6qY0k7NbyOWWptMSMpQdyMB8GA1UdIwQY MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPu1g4At9 gEUyJb8gKI0pPVGN7DXr9PyHhZosspIvPImIgjmEjP7lObUNOrG9bQ47tzxSey8M fvUewJaXXMe58qN2POl4a1gyG3awPcP57Dhhe6L6piAIksp9mm0Xs0rxrqXrIX/7 mdjQUcAv8rJ0pX2rdWANFMdqF3cvAGKEKmvnlE/5+YASeDiFYA1n44deYPYf026R QOsCBNYgg23kua17etUauy4J4jPvWffJizgPdlqMSebgKYkNDGr2PidVQp4Q4oTP 5bvDsS0LGANfwV2A0YJVicrsJoFFvDqVzvKFAIJOoTScsPVCvF/7gD3hrbcvYswb IQdXPXAEM4+cxA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:24 2025 by rpki-client