This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json) Hash identifier: f4V+fU+yDqNhdCl1Ku9nYDJaVwCkoU1w7epaNRApJmk= Subject key identifier: F0:54:65:26:26:C7:37:1A:70:A5:5B:B6:A5:F1:70:71:47:39:44:65 Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Certificate serial: 019B40918188BF8744E840AAFCC01C9C2622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft Manifest number: 0CB7 Signing time: Sun 21 Dec 2025 11:00:36 +0000 Manifest this update: Sun 21 Dec 2025 11:00:36 +0000 Manifest next update: Mon 22 Dec 2025 11:00:36 +0000 Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: DRHWtG6hYR935xbcriP5FEw840/XtWZyGswPRc/iRy0=) 2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:81:88:bf:87:44:e8:40:aa:fc:c0:1c:9c:26:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Validity Not Before: Dec 21 11:00:36 2025 GMT Not After : Dec 22 11:00:36 2025 GMT Subject: CN=f054652626c7371a70a55bb6a5f1707147394465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:93:17:32:e2:b2:ac:9d:6f:c9:35:95:41: 7f:a0:25:54:68:c2:b3:3a:1b:55:f1:6e:3f:05:b0: e7:5a:a1:5c:b4:65:01:4c:50:b2:8f:f2:d3:60:1f: 9a:e0:9c:70:41:64:f3:79:1b:00:de:8c:a7:3c:83: 9b:82:d3:f2:12:da:ea:36:af:86:48:35:f6:aa:58: 67:bc:c8:47:5b:0b:61:24:a8:d1:6f:db:00:4d:c0: 18:d7:29:ab:ea:21:50:eb:33:f2:40:31:6c:1f:fb: 5a:2a:0e:42:a3:95:45:b2:90:68:54:c5:dc:95:a9: 3a:af:69:00:2f:0c:07:c8:1f:36:45:54:c8:38:4d: 3d:e6:ce:ec:21:05:f2:52:17:77:09:64:c9:3f:be: 36:3d:74:1d:68:db:90:38:4d:ca:93:78:b0:c2:14: 41:f4:f2:03:c9:98:5f:a4:6f:a0:3a:a0:e1:51:64: 9f:03:f5:8c:65:24:10:e5:b8:f5:2a:77:3f:06:72: 54:fc:d5:f7:5d:0e:9e:d3:d6:ad:0d:78:60:6d:d5: 94:ac:1b:7d:6d:ce:1c:2d:5f:e9:67:18:9f:05:0d: f0:d7:ba:fc:66:72:18:af:43:3d:c8:d3:e9:29:fb: ea:56:b3:14:a1:60:b6:bf:d0:69:79:61:7c:bf:fd: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:65:26:26:C7:37:1A:70:A5:5B:B6:A5:F1:70:71:47:39:44:65 X509v3 Authority Key Identifier: keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:54:69:a3:7f:40:ed:c3:39:f7:75:e9:0c:a4:d5:aa:23:dd: 5b:39:3a:96:19:8d:3f:b5:8f:5e:00:b1:09:4d:82:00:3d:3f: f2:1a:a3:ee:66:68:f9:24:2d:e8:25:7c:42:ae:12:e5:fe:fc: 81:2a:6f:68:af:1f:a0:10:f6:ae:ec:8b:25:4a:19:e4:ef:f7: 3c:4c:74:23:58:f2:5d:63:b3:fc:e3:4d:7c:fb:a7:61:6d:b9: c4:e9:e5:90:e9:d8:8d:82:34:7f:7d:8a:a9:b0:40:9f:e8:f8: 5b:75:93:43:39:2f:fe:1d:83:0b:d1:4b:4b:b3:77:53:39:78: d9:da:f3:d9:6c:69:06:9f:9a:02:38:a8:6d:63:ca:3e:9f:32: c2:6a:0a:d6:15:de:d8:fa:e0:07:d7:fe:1d:bd:08:f6:cc:10: 02:7b:fe:d7:b2:e5:de:bf:fd:1c:8e:bb:3d:95:7f:85:de:c5: ef:f3:d0:ce:92:2c:5e:88:2b:dc:1d:3e:8c:d0:c7:07:d7:01: c1:e2:7c:af:25:89:0b:f8:32:72:26:d9:1e:3b:f2:c3:9c:e6: cf:a5:7d:b8:3e:f7:9d:29:39:4c:4e:8c:34:8a:45:f7:f5:c9: 3f:df:47:91:4e:b6:14:c0:d6:91:2d:f0:ab:8b:a1:bf:96:0d: f5:7b:b5:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYGIv4dE6ECq/MAcnCYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk NmM2Y2EwHhcNMjUxMjIxMTEwMDM2WhcNMjUxMjIyMTEwMDM2WjAzMTEwLwYDVQQD EyhmMDU0NjUyNjI2YzczNzFhNzBhNTViYjZhNWYxNzA3MTQ3Mzk0NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOqTFzLisqydb8k1lUF/oCVUaMKz OhtV8W4/BbDnWqFctGUBTFCyj/LTYB+a4JxwQWTzeRsA3oynPIObgtPyEtrqNq+G SDX2qlhnvMhHWwthJKjRb9sATcAY1ymr6iFQ6zPyQDFsH/taKg5Co5VFspBoVMXc lak6r2kALwwHyB82RVTIOE095s7sIQXyUhd3CWTJP742PXQdaNuQOE3Kk3iwwhRB 9PIDyZhfpG+gOqDhUWSfA/WMZSQQ5bj1Knc/BnJU/NX3XQ6e09atDXhgbdWUrBt9 bc4cLV/pZxifBQ3w17r8ZnIYr0M9yNPpKfvqVrMUoWC2v9BpeWF8v/1XEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBUZSYmxzcacKVbtqXxcHFHOURlMB8GA1UdIwQY MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2 LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1Rpo39A 7cM593XpDKTVqiPdWzk6lhmNP7WPXgCxCU2CAD0/8hqj7mZo+SQt6CV8Qq4S5f78 gSpvaK8foBD2ruyLJUoZ5O/3PEx0I1jyXWOz/ONNfPunYW25xOnlkOnYjYI0f32K qbBAn+j4W3WTQzkv/h2DC9FLS7N3Uzl42drz2WxpBp+aAjiobWPKPp8ywmoK1hXe 2PrgB9f+Hb0I9swQAnv+17Ll3r/9HI67PZV/hd7F7/PQzpIsXogr3B0+jNDHB9cB weJ8ryWJC/gycibZHjvyw5zmz6V9uD73nSk5TE6MNIpF9/XJP99HkU62FMDWkS3w q4uhv5YN9Xu1Ng== -----END CERTIFICATE-----Generated at Sun Dec 21 20:31:32 2025 by rpki-client