This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json) Hash identifier: zqbTVN+5bUo3XCSnuCpUx74XU04JXTU8bM725i6NSMg= Subject key identifier: 95:13:6C:CA:69:0B:DF:3A:6E:48:43:1F:6B:6E:E8:D8:7E:6B:40:3F Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Certificate serial: 019B665592B422FC147AD4235C5CACA0EF06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft Manifest number: 0907 Signing time: Sun 28 Dec 2025 19:00:42 +0000 Manifest this update: Sun 28 Dec 2025 19:00:42 +0000 Manifest next update: Mon 29 Dec 2025 19:00:42 +0000 Files and hashes: 1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=) 2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: K50xytPbcw4fqZUQtYyWCBZcOn8rP6x9RSKwIiJh++g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:92:b4:22:fc:14:7a:d4:23:5c:5c:ac:a0:ef:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Validity Not Before: Dec 28 19:00:42 2025 GMT Not After : Dec 29 19:00:42 2025 GMT Subject: CN=95136cca690bdf3a6e48431f6b6ee8d87e6b403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:8e:82:89:b3:22:52:90:ad:2a:d5:ee:64: 37:63:e1:54:36:8c:62:03:76:93:a2:3c:f3:9f:8f: 9d:dd:fa:7f:1b:be:2d:2f:37:d0:93:9e:b5:3c:91: ae:fc:c4:ea:15:cf:21:a9:54:b0:11:98:a6:d2:63: 44:73:50:52:6c:c4:63:f8:aa:44:a9:9e:10:68:63: ca:4c:c5:c9:1a:4d:37:da:36:b7:4e:ca:ec:71:0d: 9c:08:57:57:cc:a1:4f:2f:64:1d:71:52:46:b8:48: 61:c4:ab:47:88:e8:20:f8:36:88:4e:53:35:b7:27: 0e:81:96:13:b0:3b:3f:01:bd:f2:06:e9:35:ef:e0: 6d:c3:f0:52:bb:36:bc:95:7f:ad:74:ef:38:46:47: 7d:27:fe:d4:6c:95:c1:85:2d:83:c7:fb:0b:07:cf: ee:51:c2:41:ef:11:bc:d8:b5:45:49:82:25:bd:aa: 95:ad:e7:d0:70:43:85:af:51:60:06:23:0f:ae:6c: 93:08:93:9f:2c:75:d6:60:f0:99:37:7d:71:07:53: 90:ce:80:77:32:07:84:5a:73:7a:5d:0f:d7:ec:02: e2:23:4a:b3:c2:55:65:e4:3d:91:7b:bc:c9:ca:2b: 6f:13:50:d8:8f:06:b8:24:ad:be:dd:aa:28:05:d6: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:13:6C:CA:69:0B:DF:3A:6E:48:43:1F:6B:6E:E8:D8:7E:6B:40:3F X509v3 Authority Key Identifier: keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d5:66:ab:c3:01:44:c2:a7:f5:2c:19:92:f9:88:83:1e:08: ab:ea:89:31:8e:f4:64:52:aa:10:20:22:05:10:e4:be:cf:ae: 59:f2:64:0d:b0:79:42:09:4e:82:dc:ff:5b:10:78:67:18:28: 5e:a3:4e:68:50:4e:7f:6f:ed:63:1f:1b:2a:69:a4:c8:5b:19: 64:e1:a2:0d:11:ad:71:e3:24:97:0e:d5:ee:d7:16:6d:16:89: d7:f1:9a:d3:a9:1c:fc:d9:70:a5:80:ba:61:35:bf:33:3c:e5: 1a:ef:b0:5b:87:3c:8c:ff:28:e2:2a:ab:6e:e6:22:1d:f4:a4: 34:c3:ef:1f:4f:60:84:c2:5a:d4:6b:95:2f:db:fa:ef:ed:f0: c9:50:99:57:21:64:f6:3b:83:98:4e:a7:ed:2d:fd:d3:4a:06: ee:f9:ec:97:de:f7:19:eb:06:0b:da:4c:7d:02:4b:15:a3:f1: 5f:a9:af:af:07:af:92:45:e2:5f:69:eb:63:3a:50:2a:30:f4: 41:52:88:cf:ba:b5:b0:70:a9:49:62:38:fc:78:98:7c:bf:fb: 84:b5:d2:7e:05:d1:fe:d0:cc:66:3a:4a:e8:dd:e6:94:1f:11: b1:09:62:bb:53:f3:fa:df:42:ce:5c:09:8f:08:31:c1:64:de: f1:55:29:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVZK0IvwUetQjXFysoO8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2VmOTNjYjdhY2IwZmI0OWJhMjg4YTdhMGZiZjI2ZDMw MDRmYTUwHhcNMjUxMjI4MTkwMDQyWhcNMjUxMjI5MTkwMDQyWjAzMTEwLwYDVQQD Eyg5NTEzNmNjYTY5MGJkZjNhNmU0ODQzMWY2YjZlZThkODdlNmI0MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI2OgomzIlKQrSrV7mQ3Y+FUNoxi A3aTojzzn4+d3fp/G74tLzfQk561PJGu/MTqFc8hqVSwEZim0mNEc1BSbMRj+KpE qZ4QaGPKTMXJGk032ja3TsrscQ2cCFdXzKFPL2QdcVJGuEhhxKtHiOgg+DaITlM1 tycOgZYTsDs/Ab3yBuk17+Btw/BSuza8lX+tdO84Rkd9J/7UbJXBhS2Dx/sLB8/u UcJB7xG82LVFSYIlvaqVrefQcEOFr1FgBiMPrmyTCJOfLHXWYPCZN31xB1OQzoB3 MgeEWnN6XQ/X7ALiI0qzwlVl5D2Re7zJyitvE1DYjwa4JK2+3aooBdbESwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUTbMppC986bkhDH2tu6Nh+a0A/MB8GA1UdIwQY MBaAFKPO+Ty3rLD7SbooinoPvybTAE+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDkt NGI1Njk0OWVlNzUwLzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDktNGI1Njk0OWVlNzUw LzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntVmq8MB RMKn9SwZkvmIgx4Iq+qJMY70ZFKqECAiBRDkvs+uWfJkDbB5QglOgtz/WxB4Zxgo XqNOaFBOf2/tYx8bKmmkyFsZZOGiDRGtceMklw7V7tcWbRaJ1/Ga06kc/NlwpYC6 YTW/MzzlGu+wW4c8jP8o4iqrbuYiHfSkNMPvH09ghMJa1GuVL9v67+3wyVCZVyFk 9juDmE6n7S3900oG7vnsl973GesGC9pMfQJLFaPxX6mvrwevkkXiX2nrYzpQKjD0 QVKIz7q1sHCpSWI4/HiYfL/7hLXSfgXR/tDMZjpK6N3mlB8RsQliu1Pz+t9CzlwJ jwgxwWTe8VUpPw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:08 2025 by rpki-client