This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: QWBkZxsrS/GzbyhXSP6yQL6CkL06r3qD3ewH1FVPM5c= Subject key identifier: 60:6A:30:66:D0:A4:8B:4D:73:A9:7F:D0:63:B0:88:40:6E:0F:31:58 Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019B3C7E5C675759B3A660CEF1A58E889AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 0726 Signing time: Sat 20 Dec 2025 16:01:12 +0000 Manifest this update: Sat 20 Dec 2025 16:01:12 +0000 Manifest next update: Sun 21 Dec 2025 16:01:12 +0000 Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: xRJ3YzyzdqHFWv4SZgzE0XC+B9cNCYsknQHCha0kMbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:5c:67:57:59:b3:a6:60:ce:f1:a5:8e:88:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Dec 20 16:01:12 2025 GMT Not After : Dec 21 16:01:12 2025 GMT Subject: CN=606a3066d0a48b4d73a97fd063b088406e0f3158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:1a:ac:43:81:bd:5d:cd:5b:6b:fd:a2:68: 6a:e0:3e:cd:10:82:63:d5:bb:63:6d:39:63:3a:a6: 58:61:a3:f7:b0:03:c8:4f:c4:c3:40:4d:84:ea:a4: d5:0b:d2:a0:e6:ed:87:f5:b9:c9:89:3c:85:bb:7c: 19:0d:2e:8d:77:71:3c:97:40:fb:04:ac:78:57:30: 6a:3a:c2:60:6f:4a:1d:71:2a:8a:6d:a6:a9:36:d2: 7e:17:e9:d2:2b:3e:e7:2c:ca:00:d7:5a:72:4b:8d: 2a:12:ab:ec:8b:c4:93:ed:0a:0a:d5:5a:98:6f:2a: cf:f3:9c:cd:db:13:40:ff:01:5b:23:61:76:0c:24: 80:75:bd:c3:04:26:7c:c6:9b:11:0a:21:1d:a7:a9: e2:2f:55:8e:94:6a:3e:46:9b:87:6d:b1:44:2c:c4: db:5a:b7:91:1b:09:29:ca:82:fa:ad:0e:b4:7c:33: 9c:96:5e:b9:eb:bd:68:d3:db:dd:6f:98:e8:2a:8a: a3:b7:20:22:5a:9d:01:4b:f7:c9:94:0a:a6:1e:9b: 94:7f:b6:10:b5:f3:78:58:c1:02:ee:c5:62:51:19: d0:2b:a7:e2:81:a1:9d:41:a9:b8:3f:e6:c9:dc:58: df:97:5e:92:1e:2d:1f:09:79:40:dd:4d:b3:e4:04: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6A:30:66:D0:A4:8B:4D:73:A9:7F:D0:63:B0:88:40:6E:0F:31:58 X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ec:14:5d:a9:aa:f6:c3:5c:fe:68:9c:82:bf:e6:69:33:e1: b9:bd:ea:a4:c8:74:3e:e4:7a:c4:96:f5:5a:c9:98:6c:06:21: c9:0c:cd:c6:37:94:36:78:1d:b2:c3:00:16:0b:8a:aa:54:51: 02:5f:27:07:33:93:e0:35:dd:2c:1d:7e:e7:eb:90:0a:67:f0: 53:35:a5:57:1c:32:63:a2:8e:f8:3f:d2:57:54:49:99:e3:11: 52:cd:2e:6d:f1:79:44:b3:2a:ef:77:a4:f5:89:30:f1:3a:4f: 38:33:36:66:ae:4a:8d:b1:34:ba:72:5c:87:aa:db:78:2a:5a: 31:3b:d1:63:cc:e8:13:e8:41:77:bb:2d:e5:d8:27:43:f3:3d: ea:eb:e5:27:20:6b:27:b7:52:ba:54:01:94:f6:af:84:b9:72: 4f:0c:d3:59:90:37:65:e6:a8:d4:64:70:15:5a:30:28:21:1f: 50:67:a5:c1:c1:44:77:ac:0c:80:04:ea:63:5e:06:8c:41:c3: e7:db:36:cb:80:02:ac:32:79:7a:12:89:f8:d4:1e:27:92:d5: 19:78:2a:aa:98:fc:00:97:db:8a:93:ca:21:b7:c9:c9:8a:7b: 13:2d:fd:e8:6d:86:5c:66:24:a1:fd:f7:b4:a9:ca:6c:f0:99: 8a:ec:47:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flxnV1mzpmDO8aWOiJrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjUxMjIwMTYwMTEyWhcNMjUxMjIxMTYwMTEyWjAzMTEwLwYDVQQD Eyg2MDZhMzA2NmQwYTQ4YjRkNzNhOTdmZDA2M2IwODg0MDZlMGYzMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0warEOBvV3NW2v9omhq4D7NEIJj 1btjbTljOqZYYaP3sAPIT8TDQE2E6qTVC9Kg5u2H9bnJiTyFu3wZDS6Nd3E8l0D7 BKx4VzBqOsJgb0odcSqKbaapNtJ+F+nSKz7nLMoA11pyS40qEqvsi8ST7QoK1VqY byrP85zN2xNA/wFbI2F2DCSAdb3DBCZ8xpsRCiEdp6niL1WOlGo+RpuHbbFELMTb WreRGwkpyoL6rQ60fDOcll65671o09vdb5joKoqjtyAiWp0BS/fJlAqmHpuUf7YQ tfN4WMEC7sViURnQK6figaGdQam4P+bJ3Fjfl16SHi0fCXlA3U2z5ARX3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBqMGbQpItNc6l/0GOwiEBuDzFYMB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+wUXamq 9sNc/micgr/maTPhub3qpMh0PuR6xJb1WsmYbAYhyQzNxjeUNngdssMAFguKqlRR Al8nBzOT4DXdLB1+5+uQCmfwUzWlVxwyY6KO+D/SV1RJmeMRUs0ubfF5RLMq73ek 9Ykw8TpPODM2Zq5KjbE0unJch6rbeCpaMTvRY8zoE+hBd7st5dgnQ/M96uvlJyBr J7dSulQBlPavhLlyTwzTWZA3Zeao1GRwFVowKCEfUGelwcFEd6wMgATqY14GjEHD 59s2y4ACrDJ5ehKJ+NQeJ5LVGXgqqpj8AJfbipPKIbfJyYp7Ey396G2GXGYkof33 tKnKbPCZiuxHTw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:09 2025 by rpki-client