This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft File: o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json) Hash identifier: k7doB5hI/AlbQNHb5qaut4bEBn+0rYV48gHrycj4PFI= Subject key identifier: B3:55:F1:C8:B6:E4:0F:A5:FD:4D:85:48:A2:7A:86:01:8F:43:1B:D0 Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03 Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03 Certificate serial: 019B3EA33E0158AB0505055A54E8992ADBD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft Manifest number: 08E7 Signing time: Sun 21 Dec 2025 02:00:44 +0000 Manifest this update: Sun 21 Dec 2025 02:00:44 +0000 Manifest next update: Mon 22 Dec 2025 02:00:44 +0000 Files and hashes: 1: borZkxzd7Q70fU1OWvln2Q1-HRc.roa (hash: WT5cBwBGRYqcO3GRfgSJfVkJ2Niz57/GzD/KCZQzgos=) 2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: WSJZTswUxGR/gJnA6Z7exStkewZsJfMKgDWNPKyzQH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3e:01:58:ab:05:05:05:5a:54:e8:99:2a:db:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03 Validity Not Before: Dec 21 02:00:44 2025 GMT Not After : Dec 22 02:00:44 2025 GMT Subject: CN=b355f1c8b6e40fa5fd4d8548a27a86018f431bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:d3:1f:21:3f:d5:a2:8d:ac:65:2c:e8:a1: 8c:dc:59:d8:36:d3:cf:d4:1c:75:7f:07:c0:20:96: cd:ee:56:d1:2d:17:7f:93:6c:61:53:b5:71:fa:db: ca:0d:5d:a4:ef:a9:31:97:b4:29:c8:a5:ab:87:8c: 51:c8:da:ac:cc:34:22:96:4a:05:af:3b:f4:77:42: dd:d5:2f:d2:5e:51:2f:f3:88:ea:c5:ad:6a:80:83: 64:87:a4:3e:85:3d:2c:5c:83:b7:f7:df:b6:75:49: 26:70:32:0f:f2:60:d0:e0:ea:09:4f:0e:2c:df:d5: 68:f3:98:11:20:80:9e:56:34:68:c5:9c:c7:99:35: 9c:be:48:99:dc:77:1a:6e:17:d1:db:e0:f4:55:ff: 60:9e:fd:4c:dd:33:58:b3:b0:a7:b3:c4:36:d9:eb: 34:37:8f:e3:f2:a2:d3:d0:4c:69:ce:3a:40:ab:52: fe:b3:d6:02:c6:15:52:be:97:19:f2:a6:9d:2d:01: f8:a2:9a:2a:07:66:e0:8a:10:01:82:4a:46:d9:6d: 8e:08:d3:6d:cc:34:75:dc:51:b1:86:40:99:a3:73: 74:2a:90:57:41:67:71:a0:dc:3f:b8:37:c8:28:5e: b9:12:f4:e4:a5:2f:ea:3e:5e:f3:d7:6e:84:bc:b9: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:55:F1:C8:B6:E4:0F:A5:FD:4D:85:48:A2:7A:86:01:8F:43:1B:D0 X509v3 Authority Key Identifier: keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:b5:9b:6f:83:10:a7:8e:00:4e:8b:05:e4:e8:72:61:86: 4f:18:0c:14:fa:3b:be:02:a4:47:f0:f3:5b:dc:f5:1e:a5:b3: 46:5b:5f:f1:c1:71:d7:cd:22:52:a8:b3:bc:07:f3:e9:7b:eb: 51:43:a4:25:1c:56:80:2c:48:df:dc:a2:50:f6:46:c2:16:51: a7:d9:08:af:cc:f5:df:e7:e7:08:e3:cc:23:fe:8b:5b:8e:ef: 51:f2:b2:a8:16:42:b5:a6:e6:5a:49:50:97:0a:f6:f0:87:96: 34:06:53:d2:91:d1:9c:92:0b:c1:f7:2b:e2:ae:61:22:ce:52: 60:02:8c:d4:02:d5:cd:c7:41:4d:b5:9f:9f:e6:2a:8e:31:62: d8:e0:ea:6f:12:80:39:ec:a4:bf:82:b6:15:17:c6:95:a7:98: f7:e7:6f:fa:5f:0f:f7:17:b4:5b:08:ae:23:b9:62:70:60:ac: 90:77:b1:ab:11:af:c2:4f:4b:f3:ff:68:57:51:ea:41:ad:57: d4:61:da:fe:3c:23:bf:c4:2a:49:58:a2:fa:6d:5b:43:38:b8: cc:bd:fd:16:a8:40:ae:ab:de:c3:c8:4e:c8:df:bb:c7:2b:53: 2a:2d:38:eb:71:ae:46:a9:73:4f:a1:b4:d7:cf:73:fe:81:15: 50:0e:bf:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oz4BWKsFBQVaVOiZKtvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNDY0ODIwZGNjNDY3NjlmZDE1NGM4Y2JhZTY2YjhiYjM4 ZmVhMDMwHhcNMjUxMjIxMDIwMDQ0WhcNMjUxMjIyMDIwMDQ0WjAzMTEwLwYDVQQD EyhiMzU1ZjFjOGI2ZTQwZmE1ZmQ0ZDg1NDhhMjdhODYwMThmNDMxYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9fTHyE/1aKNrGUs6KGM3FnYNtPP 1Bx1fwfAIJbN7lbRLRd/k2xhU7Vx+tvKDV2k76kxl7QpyKWrh4xRyNqszDQilkoF rzv0d0Ld1S/SXlEv84jqxa1qgINkh6Q+hT0sXIO399+2dUkmcDIP8mDQ4OoJTw4s 39Vo85gRIICeVjRoxZzHmTWcvkiZ3HcabhfR2+D0Vf9gnv1M3TNYs7Cns8Q22es0 N4/j8qLT0ExpzjpAq1L+s9YCxhVSvpcZ8qadLQH4opoqB2bgihABgkpG2W2OCNNt zDR13FGxhkCZo3N0KpBXQWdxoNw/uDfIKF65EvTkpS/qPl7z126EvLkGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNV8ci25A+l/U2FSKJ6hgGPQxvQMB8GA1UdIwQY MBaAFKNGSCDcxGdp/RVMjLrma4uzj+oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAt ZTBhMmEyYzc5NDJlLzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAtZTBhMmEyYzc5NDJl LzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI561m2+D EKeOAE6LBeTocmGGTxgMFPo7vgKkR/DzW9z1HqWzRltf8cFx180iUqizvAfz6Xvr UUOkJRxWgCxI39yiUPZGwhZRp9kIr8z13+fnCOPMI/6LW47vUfKyqBZCtabmWklQ lwr28IeWNAZT0pHRnJILwfcr4q5hIs5SYAKM1ALVzcdBTbWfn+YqjjFi2ODqbxKA Oeykv4K2FRfGlaeY9+dv+l8P9xe0WwiuI7licGCskHexqxGvwk9L8/9oV1HqQa1X 1GHa/jwjv8QqSVii+m1bQzi4zL39FqhArqvew8hOyN+7xytTKi0463GuRqlzT6G0 189z/oEVUA6/wA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:13 2025 by rpki-client