This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json) Hash identifier: RAU4biSJSdE7Y2f1rw8Oa9rhyjMHdD2bcEyh4i+JwGM= Subject key identifier: B9:45:20:4B:C3:12:CF:AF:55:07:FF:2D:9C:B4:E0:40:71:AB:82:F4 Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019B397D2F88F0EFB9A535EC2ACED90B6698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft Manifest number: 1449 Signing time: Sat 20 Dec 2025 02:01:04 +0000 Manifest this update: Sat 20 Dec 2025 02:01:04 +0000 Manifest next update: Sun 21 Dec 2025 02:01:04 +0000 Files and hashes: 1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=) 2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=) 3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=) 4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: OA0MkWwh3yKAY7pZo9J69pYw6Jd6YaVa4qLamjnF69w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:2f:88:f0:ef:b9:a5:35:ec:2a:ce:d9:0b:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Dec 20 02:01:04 2025 GMT Not After : Dec 21 02:01:04 2025 GMT Subject: CN=b945204bc312cfaf5507ff2d9cb4e04071ab82f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:5a:96:01:39:b5:0f:67:7a:6d:2c:b6:58: 0c:aa:32:40:a2:6a:4c:7a:0b:0d:e5:b9:d4:b8:5d: 84:21:b7:fb:76:f1:7e:6d:f7:cc:b4:52:14:a0:72: 29:13:cf:6c:c2:48:c9:d9:38:e4:a4:be:73:31:0d: 78:e0:cb:b4:c8:47:8d:54:d1:97:0d:2a:9f:86:6a: 36:2d:93:dd:11:8f:65:f9:82:1c:0d:ed:5b:dc:bd: a6:a1:99:82:59:ae:0f:a5:90:5b:74:7e:d7:cd:4d: d7:8c:13:24:a8:23:77:84:67:70:26:7d:10:79:0c: fe:37:cd:8b:fe:a6:6a:57:38:ba:c7:e1:56:02:68: df:44:68:61:fa:a3:63:9c:22:dc:27:c5:8d:3b:32: 28:83:bc:04:2e:de:b6:24:96:16:0b:5a:9f:2f:3d: 57:f3:dc:59:66:4d:17:15:37:1f:18:e6:0e:8a:84: cd:29:92:91:16:21:4f:be:66:6d:8d:4f:0c:9f:ff: 9e:88:ed:63:69:21:04:05:41:31:11:15:4a:8c:a9: e0:49:98:2e:fa:e6:09:da:fa:c7:11:a2:79:f2:0f: e5:71:40:e2:00:8b:35:02:21:84:ae:58:f7:3c:f9: 5f:16:1e:33:99:e5:8b:4f:bd:b9:50:c4:6f:22:a0: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:20:4B:C3:12:CF:AF:55:07:FF:2D:9C:B4:E0:40:71:AB:82:F4 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:bf:7a:da:60:4b:25:b6:b0:7b:3d:c7:41:53:a4:e0:c4: 02:50:14:5d:03:60:be:1c:a6:6b:7c:21:d2:59:b2:14:e3:ac: 88:99:e3:d3:60:19:02:77:86:ec:36:4b:46:44:dc:49:bd:41: cb:31:af:03:be:16:74:14:0e:f2:db:1d:aa:93:6d:f5:06:a5: b0:58:3a:d4:ca:e8:3f:bf:1b:e5:ba:2b:6f:73:40:0c:66:a7: 25:9e:74:9d:0d:33:4f:eb:82:ff:0a:c2:ae:26:d3:72:66:96: 8d:1d:92:44:51:39:ee:e8:00:19:07:7a:62:9e:d8:ed:05:10: 7f:2f:51:a8:6a:a2:62:7c:93:83:26:62:06:55:fe:9b:0a:37: 62:4f:27:8e:b7:65:d7:d6:7f:07:cc:2e:86:4e:ad:ba:c0:a8: 6e:60:b0:fb:21:50:95:77:90:12:c2:d9:c5:6c:98:88:23:8e: 65:87:d6:70:7b:38:9a:58:36:a8:47:61:03:9e:2b:a0:e0:d9: 6c:bd:83:6d:0a:cb:6d:d5:02:6a:bd:3b:c5:fc:db:3e:dc:18: 32:e7:5b:c1:89:5d:32:d8:3a:dd:86:6d:56:2e:ac:e1:59:01: a5:cc:6e:3f:24:1c:31:c5:81:f5:a3:9f:db:ef:84:1e:b3:00: 46:f9:fc:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fS+I8O+5pTXsKs7ZC2aYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjUxMjIwMDIwMTA0WhcNMjUxMjIxMDIwMTA0WjAzMTEwLwYDVQQD EyhiOTQ1MjA0YmMzMTJjZmFmNTUwN2ZmMmQ5Y2I0ZTA0MDcxYWI4MmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwptalgE5tQ9nem0stlgMqjJAompM egsN5bnUuF2EIbf7dvF+bffMtFIUoHIpE89swkjJ2TjkpL5zMQ144Mu0yEeNVNGX DSqfhmo2LZPdEY9l+YIcDe1b3L2moZmCWa4PpZBbdH7XzU3XjBMkqCN3hGdwJn0Q eQz+N82L/qZqVzi6x+FWAmjfRGhh+qNjnCLcJ8WNOzIog7wELt62JJYWC1qfLz1X 89xZZk0XFTcfGOYOioTNKZKRFiFPvmZtjU8Mn/+eiO1jaSEEBUExERVKjKngSZgu +uYJ2vrHEaJ58g/lcUDiAIs1AiGErlj3PPlfFh4zmeWLT725UMRvIqBnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlFIEvDEs+vVQf/LZy04EBxq4L0MB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLS/etpg SyW2sHs9x0FTpODEAlAUXQNgvhyma3wh0lmyFOOsiJnj02AZAneG7DZLRkTcSb1B yzGvA74WdBQO8tsdqpNt9QalsFg61MroP78b5borb3NADGanJZ50nQ0zT+uC/wrC ribTcmaWjR2SRFE57ugAGQd6Yp7Y7QUQfy9RqGqiYnyTgyZiBlX+mwo3Yk8njrdl 19Z/B8wuhk6tusCobmCw+yFQlXeQEsLZxWyYiCOOZYfWcHs4mlg2qEdhA54roODZ bL2DbQrLbdUCar07xfzbPtwYMudbwYldMtg63YZtVi6s4VkBpcxuPyQcMcWB9aOf 2++EHrMARvn8Hw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:26:12 2025 by rpki-client