This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json) Hash identifier: nbW2w7wUlkmq/Wgq8QjF547TffwYDX1tvR8t+rB9O+k= Subject key identifier: BA:F6:DE:C7:36:B5:A7:05:98:F6:D3:8A:B0:4E:89:06:5A:44:AB:A1 Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b Certificate serial: 019B50A95BAF58A7FE238FF41710334996D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft Manifest number: 150B Signing time: Wed 24 Dec 2025 14:00:34 +0000 Manifest this update: Wed 24 Dec 2025 14:00:34 +0000 Manifest next update: Thu 25 Dec 2025 14:00:34 +0000 Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: 3fCqFueZR91XXfUK0qAFOB56TLBXaJUnkQmrQxqB5ZY=) 2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:5b:af:58:a7:fe:23:8f:f4:17:10:33:49:96:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b Validity Not Before: Dec 24 14:00:34 2025 GMT Not After : Dec 25 14:00:34 2025 GMT Subject: CN=baf6dec736b5a70598f6d38ab04e89065a44aba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:a0:dd:80:49:9a:47:93:cc:f1:54:7c:86: d7:2b:ca:4f:a3:41:bb:e1:73:a5:1d:8f:05:bc:ba: 38:1b:16:b2:27:4d:fe:29:e8:2a:3f:95:d0:4d:a0: 5e:3a:5b:b0:27:db:3d:52:33:ae:d4:4f:22:7f:a3: e9:b3:5f:9d:86:c0:bd:4d:66:a6:84:de:9f:66:88: 5a:80:51:1f:3c:4d:45:fa:d9:4a:c5:48:d4:eb:5f: 9c:6d:d6:41:63:e6:2b:a7:73:76:7e:26:86:6e:df: ad:3e:61:cf:ad:99:f5:21:8d:19:56:59:58:1b:d6: 76:f7:b9:d1:e6:12:30:5c:46:6b:5c:e5:49:26:f9: 93:7b:18:b2:22:41:4b:1d:e4:09:e4:07:08:da:26: 98:49:a1:7c:f7:eb:12:ae:e7:bb:3f:37:4a:2d:16: 39:6b:2a:03:14:c3:ab:f3:33:40:a0:3b:f7:94:4b: 4c:db:15:79:41:a0:d0:ac:5e:c6:c6:de:3b:3e:e2: 2a:b8:09:0a:60:10:63:5f:e5:4a:81:ef:df:72:8e: 35:99:93:6a:9f:58:41:d0:22:b3:5f:80:56:9b:b0: d8:ce:c5:b7:b9:07:df:f1:9c:87:5c:3c:eb:b5:86: d1:20:7e:14:c5:8f:37:a8:03:3d:58:6e:38:34:e2: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:DE:C7:36:B5:A7:05:98:F6:D3:8A:B0:4E:89:06:5A:44:AB:A1 X509v3 Authority Key Identifier: keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f5:26:a0:ce:76:14:c8:6c:1e:68:59:a5:4f:a1:7b:d9:2f: 8b:01:a2:4c:17:68:bb:c9:45:d2:da:f7:15:15:68:e8:de:2d: 3f:47:5b:96:cb:a6:3e:f0:ca:80:ab:6c:f6:4b:a1:9c:be:7f: b4:3a:9b:d8:84:bd:94:3c:46:37:28:03:73:d2:08:7c:10:41: b4:7e:ee:49:a8:3b:9c:d0:67:af:9c:d8:c1:0e:f6:3b:3a:c8: 1d:93:7e:88:3f:f2:56:78:28:15:ab:9e:75:85:fa:7a:bb:30: 26:be:b5:07:d3:e4:d7:9d:40:7f:0d:4f:b6:0c:46:50:74:0d: b3:6d:63:96:40:99:1b:b7:77:d2:8d:71:6f:36:23:ee:80:bc: b7:9e:8e:60:c9:1d:3e:bd:43:9a:4a:bd:61:99:25:f0:bc:7f: b7:2c:19:15:72:31:bc:a2:b5:ee:6e:e3:de:67:81:ec:bd:b3: 17:8f:1a:7d:86:7b:77:dc:14:d9:37:d6:aa:90:84:8c:bf:cf: e2:ec:c5:44:37:d0:4e:4d:9c:05:d6:1a:c9:23:75:5f:51:d8: 60:f9:82:67:c0:8f:1e:88:cb:62:4a:a8:dc:db:12:26:aa:42: df:a6:cb:c9:27:9c:89:3d:95:42:74:71:93:30:58:c4:4b:47: 83:94:0c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqVuvWKf+I4/0FxAzSZbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGZlODFmMzIzMTI2OGY3Y2UzYzMxNGE0OTZhODJjYzIy NzdjM2IwHhcNMjUxMjI0MTQwMDM0WhcNMjUxMjI1MTQwMDM0WjAzMTEwLwYDVQQD EyhiYWY2ZGVjNzM2YjVhNzA1OThmNmQzOGFiMDRlODkwNjVhNDRhYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeyg3YBJmkeTzPFUfIbXK8pPo0G7 4XOlHY8FvLo4GxayJ03+KegqP5XQTaBeOluwJ9s9UjOu1E8if6Pps1+dhsC9TWam hN6fZohagFEfPE1F+tlKxUjU61+cbdZBY+Yrp3N2fiaGbt+tPmHPrZn1IY0ZVllY G9Z297nR5hIwXEZrXOVJJvmTexiyIkFLHeQJ5AcI2iaYSaF89+sSrue7PzdKLRY5 ayoDFMOr8zNAoDv3lEtM2xV5QaDQrF7Gxt47PuIquAkKYBBjX+VKge/fco41mZNq n1hB0CKzX4BWm7DYzsW3uQff8ZyHXDzrtYbRIH4UxY83qAM9WG44NOIdGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr23sc2tacFmPbTirBOiQZaRKuhMB8GA1UdIwQY MBaAFE9P6B8yMSaPfOPDFKSWqCzCJ3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEt Y2ZjMGZjYmE4M2EyLzEvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEtY2ZjMGZjYmE4M2Ey LzEvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/UmoM52 FMhsHmhZpU+he9kviwGiTBdou8lF0tr3FRVo6N4tP0dblsumPvDKgKts9kuhnL5/ tDqb2IS9lDxGNygDc9IIfBBBtH7uSag7nNBnr5zYwQ72OzrIHZN+iD/yVngoFaue dYX6erswJr61B9Pk151Afw1PtgxGUHQNs21jlkCZG7d30o1xbzYj7oC8t56OYMkd Pr1Dmkq9YZkl8Lx/tywZFXIxvKK17m7j3meB7L2zF48afYZ7d9wU2TfWqpCEjL/P 4uzFRDfQTk2cBdYaySN1X1HYYPmCZ8CPHojLYkqo3NsSJqpC36bLySeciT2VQnRx kzBYxEtHg5QMxQ== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:25 2025 by rpki-client