This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json) Hash identifier: jNRwZYEgKTFMdwjxlENz38E6OQ7Rs34DsvRg+0m8fU0= Subject key identifier: EF:DD:07:36:19:8A:A2:5E:4A:17:5B:A7:88:3C:C9:3B:B7:8D:A0:AF Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Certificate serial: 019B3FECCA413DC0ED25CD413744296B22BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft Manifest number: 040C Signing time: Sun 21 Dec 2025 08:00:41 +0000 Manifest this update: Sun 21 Dec 2025 08:00:41 +0000 Manifest next update: Mon 22 Dec 2025 08:00:41 +0000 Files and hashes: 1: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (hash: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=) 2: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=) 3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: +njUvw2mWVU49P5NkPgYrwQJLIGksUvAvYmbVNFJbBc=) 4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ca:41:3d:c0:ed:25:cd:41:37:44:29:6b:22:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Validity Not Before: Dec 21 08:00:41 2025 GMT Not After : Dec 22 08:00:41 2025 GMT Subject: CN=efdd0736198aa25e4a175ba7883cc93bb78da0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:b6:f5:91:21:74:0d:a3:d2:a0:d4:a5:93: ad:06:f9:df:2b:4c:92:ba:75:2c:5f:15:ae:56:b1: 76:17:32:36:fe:41:b8:4b:c7:e7:92:1e:ac:2d:ab: b2:5a:c3:06:0e:d8:ca:06:1d:20:0c:77:60:7d:de: 23:aa:e0:82:34:60:f5:33:40:4b:01:22:66:8d:48: 7a:d4:4a:72:0d:0c:d8:b0:22:c9:b6:54:1b:f9:80: c5:cd:df:07:32:34:78:37:7a:b4:43:09:f5:17:7c: 62:0a:ef:e0:35:fa:2a:dd:c7:4c:00:9d:9c:6c:cd: 60:10:53:d8:65:ad:43:80:24:ab:d4:d1:71:e6:7f: 94:25:d9:6b:bf:85:30:83:43:67:1b:09:e2:69:ed: 16:6f:61:08:33:9c:cb:38:9d:c7:5d:90:ae:81:4e: 37:6f:30:70:ee:6e:bf:9e:b2:db:b7:24:ab:ad:30: ee:f9:5d:1d:85:7a:52:20:9a:58:01:d6:b4:a6:97: 2a:09:73:80:63:ed:6f:69:60:64:cc:8e:48:ce:9f: dd:a2:cc:c6:76:3a:04:5c:5b:f2:36:78:4f:62:f0: 9e:00:ab:a7:31:cf:01:03:14:80:1b:d8:c9:bb:18: 8a:23:e3:6c:a7:48:f2:07:44:b2:6f:07:98:d1:58: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:07:36:19:8A:A2:5E:4A:17:5B:A7:88:3C:C9:3B:B7:8D:A0:AF X509v3 Authority Key Identifier: keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:dd:52:1c:f8:c4:b0:4a:03:45:25:17:9f:f3:71:34:f7:35: 09:a2:18:b0:ed:07:14:50:52:a0:79:2c:70:8d:25:18:8f:47: c9:f6:99:5b:8c:ad:6c:2d:26:77:1a:05:db:54:f6:6a:01:ee: 7a:6b:a5:d1:86:e9:d5:44:55:2e:4f:eb:ef:c4:46:33:a3:57: 33:d7:8d:7c:2f:a5:8d:41:2f:6e:8f:43:0f:8a:ca:ba:c9:ee: bf:35:13:9c:30:1c:6f:22:02:e3:ea:6c:a3:c5:a3:5d:35:1c: ef:18:dc:c8:55:76:b8:1e:fc:e3:02:96:35:3a:1f:b3:ad:6e: a7:6a:b8:59:5d:5c:58:8e:89:8b:29:c7:67:ff:b2:03:94:08: 32:b2:81:43:08:65:57:47:e7:89:8a:7c:94:81:fe:66:98:cc: f1:e5:47:06:b9:a5:81:c9:8e:86:57:db:01:66:68:19:50:90: ce:a3:0b:97:36:ea:59:4c:92:34:90:b4:a6:e1:cd:e7:17:5b: 07:e9:b2:2f:25:5b:20:5f:2a:39:cb:94:03:18:15:b7:c5:b2: 20:69:d3:e7:cb:04:fb:88:dd:e8:9b:c6:74:6e:6e:70:cf:53: 71:5c:7d:e3:40:dc:ff:bd:82:3c:5a:7a:75:d0:3a:1f:71:bb: 20:3d:0c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7MpBPcDtJc1BN0QpayK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3 YjljYmYwHhcNMjUxMjIxMDgwMDQxWhcNMjUxMjIyMDgwMDQxWjAzMTEwLwYDVQQD EyhlZmRkMDczNjE5OGFhMjVlNGExNzViYTc4ODNjYzkzYmI3OGRhMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWe29ZEhdA2j0qDUpZOtBvnfK0yS unUsXxWuVrF2FzI2/kG4S8fnkh6sLauyWsMGDtjKBh0gDHdgfd4jquCCNGD1M0BL ASJmjUh61EpyDQzYsCLJtlQb+YDFzd8HMjR4N3q0Qwn1F3xiCu/gNfoq3cdMAJ2c bM1gEFPYZa1DgCSr1NFx5n+UJdlrv4Uwg0NnGwniae0Wb2EIM5zLOJ3HXZCugU43 bzBw7m6/nrLbtySrrTDu+V0dhXpSIJpYAda0ppcqCXOAY+1vaWBkzI5Izp/doszG djoEXFvyNnhPYvCeAKunMc8BAxSAG9jJuxiKI+Nsp0jyB0SybweY0VjAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/dBzYZiqJeShdbp4g8yTu3jaCvMB8GA1UdIwQY MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt NTRiNGNhNTBkMjQ4LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4 LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwN1SHPjE sEoDRSUXn/NxNPc1CaIYsO0HFFBSoHkscI0lGI9HyfaZW4ytbC0mdxoF21T2agHu emul0Ybp1URVLk/r78RGM6NXM9eNfC+ljUEvbo9DD4rKusnuvzUTnDAcbyIC4+ps o8WjXTUc7xjcyFV2uB784wKWNTofs61up2q4WV1cWI6JiynHZ/+yA5QIMrKBQwhl V0fniYp8lIH+ZpjM8eVHBrmlgcmOhlfbAWZoGVCQzqMLlzbqWUySNJC0puHN5xdb B+myLyVbIF8qOcuUAxgVt8WyIGnT58sE+4jd6JvGdG5ucM9TcVx940Dc/72CPFp6 ddA6H3G7ID0MEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:57:56 2025 by rpki-client