This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft File: o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json) Hash identifier: pk7AmEddmO3SljAwKE195AHHm09DXhss1WJGXqdhIV8= Subject key identifier: 58:9C:AA:01:19:C9:AE:89:84:F7:05:C0:AE:A1:42:BB:0D:62:68:E4 Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Certificate serial: 019B44DD13DE32C8FDA88E4F51A10E119C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft Manifest number: 14DC Signing time: Mon 22 Dec 2025 07:01:37 +0000 Manifest this update: Mon 22 Dec 2025 07:01:37 +0000 Manifest next update: Tue 23 Dec 2025 07:01:37 +0000 Files and hashes: 1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=) 2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=) 3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=) 4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=) 5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=) 6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: OLAu1h1KcfYReoW421TgYdr8XANQtruPPYDP8mUf2kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:13:de:32:c8:fd:a8:8e:4f:51:a1:0e:11:9c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Validity Not Before: Dec 22 07:01:37 2025 GMT Not After : Dec 23 07:01:37 2025 GMT Subject: CN=589caa0119c9ae8984f705c0aea142bb0d6268e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:84:ce:3d:75:9d:f4:13:fb:b8:33:da:5e: 4e:97:e0:8d:4c:37:30:2d:2a:ec:c5:55:65:4a:47: c6:76:ef:4f:52:27:2c:2f:01:70:f9:47:1b:a4:80: b8:08:ce:15:78:8e:c7:8c:51:09:a2:ec:f9:d4:b7: 4f:a3:c7:b7:98:4d:b4:57:73:20:fe:f1:1e:e9:44: bc:49:dd:11:57:f0:4d:80:c2:4a:15:56:64:03:8b: 4e:7b:25:22:21:f4:20:9f:af:07:9c:c1:92:ab:86: 15:ea:b9:32:4d:a9:5a:28:cc:20:d5:a2:d7:a5:10: a6:5b:1e:7a:97:c4:d4:3a:2e:9c:85:03:6c:68:68: 0b:3c:8d:06:1d:5a:61:18:3c:b4:76:07:c9:ee:5c: 8a:1e:eb:a6:62:ca:31:ab:89:bc:da:ca:0f:f5:ab: 68:4f:38:eb:3e:b0:e5:0b:c1:4a:fc:6f:a6:55:c2: ed:06:ff:9f:7f:33:c1:40:95:78:7f:21:cb:97:4c: bb:2f:51:bd:d3:49:01:37:ca:e6:c6:42:8f:4a:7f: 3b:62:89:9d:f5:e9:2f:39:a7:be:24:33:a4:8a:3d: a4:17:f4:fb:16:e4:20:c6:f7:d4:ea:68:54:36:b0: 4a:df:62:22:8c:5a:1d:38:c4:54:9f:c7:54:4e:58: 44:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9C:AA:01:19:C9:AE:89:84:F7:05:C0:AE:A1:42:BB:0D:62:68:E4 X509v3 Authority Key Identifier: keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d5:62:c4:3c:af:0a:c2:93:cf:9a:ca:57:2b:56:60:74:02: 8b:3d:f0:90:a8:b9:7b:82:76:e9:8c:5b:ed:57:58:cb:07:df: 33:bc:bb:eb:61:1b:bd:4f:ac:c7:57:c6:d1:0f:31:4a:e6:61: a2:45:9c:e4:b5:cf:4a:1b:13:34:e7:40:e6:4b:f2:e6:10:cc: 92:5a:8f:77:0c:e2:fb:4f:28:aa:ce:e1:fd:4a:57:20:09:ec: 2a:19:6a:bb:6a:58:21:71:a8:11:52:44:3b:18:73:cb:a4:1a: 86:75:05:54:e0:29:8f:1d:8e:e0:aa:48:e9:e4:ec:1a:81:34: e1:8a:12:65:b7:a9:26:32:1d:bf:89:a7:92:57:a0:f6:8a:38: 4f:57:b3:24:e3:c0:0d:d6:32:6e:6f:c9:87:68:3f:e5:f0:b6: 64:99:33:9d:75:54:c7:dc:ae:67:aa:49:83:77:57:e8:41:7f: 52:f5:11:b5:c9:63:ec:9e:6b:93:45:14:9c:8b:52:ac:d6:4e: 02:7b:35:16:38:5b:c6:c7:8b:cd:f2:73:34:04:49:78:92:59: 58:d3:52:ca:bf:26:fe:3b:6d:41:92:0b:eb:e0:63:14:0d:85: 95:a3:e0:a6:6b:68:26:21:e1:1c:31:c5:16:46:b9:20:47:b7: bf:67:c8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3RPeMsj9qI5PUaEOEZwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj MjAzMmUwHhcNMjUxMjIyMDcwMTM3WhcNMjUxMjIzMDcwMTM3WjAzMTEwLwYDVQQD Eyg1ODljYWEwMTE5YzlhZTg5ODRmNzA1YzBhZWExNDJiYjBkNjI2OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY+Ezj11nfQT+7gz2l5Ol+CNTDcw LSrsxVVlSkfGdu9PUicsLwFw+UcbpIC4CM4VeI7HjFEJouz51LdPo8e3mE20V3Mg /vEe6US8Sd0RV/BNgMJKFVZkA4tOeyUiIfQgn68HnMGSq4YV6rkyTalaKMwg1aLX pRCmWx56l8TUOi6chQNsaGgLPI0GHVphGDy0dgfJ7lyKHuumYsoxq4m82soP9ato TzjrPrDlC8FK/G+mVcLtBv+ffzPBQJV4fyHLl0y7L1G900kBN8rmxkKPSn87Yomd 9ekvOae+JDOkij2kF/T7FuQgxvfU6mhUNrBK32IijFodOMRUn8dUTlhEWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFicqgEZya6JhPcFwK6hQrsNYmjkMB8GA1UdIwQY MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct OWUyMjBmMDRhOTAxLzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtVixDyv CsKTz5rKVytWYHQCiz3wkKi5e4J26Yxb7VdYywffM7y762EbvU+sx1fG0Q8xSuZh okWc5LXPShsTNOdA5kvy5hDMklqPdwzi+08oqs7h/UpXIAnsKhlqu2pYIXGoEVJE Oxhzy6QahnUFVOApjx2O4KpI6eTsGoE04YoSZbepJjIdv4mnkleg9oo4T1ezJOPA DdYybm/Jh2g/5fC2ZJkznXVUx9yuZ6pJg3dX6EF/UvURtclj7J5rk0UUnItSrNZO Ans1FjhbxseLzfJzNARJeJJZWNNSyr8m/jttQZIL6+BjFA2FlaPgpmtoJiHhHDHF Fka5IEe3v2fIlQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:35 2025 by rpki-client