This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json) Hash identifier: yU1tzmtUdUUTH5EUdk5tIY0EF9pA5tj6wswzHQM08yg= Subject key identifier: 7E:25:9B:B8:1F:6D:8F:49:70:56:22:53:18:55:9D:3B:EC:67:C0:5D Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Certificate serial: 019B533D258AE78BBC869F1DD3C3FD94B1D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft Manifest number: 1799 Signing time: Thu 25 Dec 2025 02:01:14 +0000 Manifest this update: Thu 25 Dec 2025 02:01:14 +0000 Manifest next update: Fri 26 Dec 2025 02:01:14 +0000 Files and hashes: 1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=) 2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: v+bz5pXQMKbRUT/6YW3DWalviJHW9uzP85swCnfN4Cc=) 3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:25:8a:e7:8b:bc:86:9f:1d:d3:c3:fd:94:b1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Validity Not Before: Dec 25 02:01:14 2025 GMT Not After : Dec 26 02:01:14 2025 GMT Subject: CN=7e259bb81f6d8f497056225318559d3bec67c05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:d8:29:3d:21:a9:f5:7b:1a:aa:38:37:47: 09:c7:7d:b8:c9:7b:d5:60:76:90:29:eb:04:09:a1: d9:47:03:39:f8:29:ea:5a:2e:78:7a:47:01:ea:b4: 1e:a1:d7:8a:b8:1b:54:02:3c:1a:a8:20:8d:f2:67: 44:92:ae:80:09:ed:32:77:75:95:ee:64:4c:dc:5f: 1e:12:f5:f6:42:97:84:5e:99:23:4f:be:6e:00:ad: 78:64:1e:d9:e7:5f:e5:8f:69:49:bc:8a:e2:04:c0: 95:02:16:71:cf:00:9a:7b:69:e4:56:19:61:18:5b: f7:f2:fc:00:8e:06:c5:47:e6:0d:f6:2d:5c:eb:73: a0:0a:02:6a:a4:48:27:d1:6c:ec:80:83:89:1f:0f: 45:bf:97:0c:4f:2b:c7:68:c5:0d:8f:d4:6c:15:a2: 0f:c9:54:1f:34:9f:b0:74:7d:6d:8b:73:d0:c6:b9: 9f:a1:ef:ae:f4:db:08:e3:cc:6f:2e:b5:99:cd:f0: a4:70:f2:83:fa:a2:43:28:55:dc:a5:56:4e:2d:0d: 07:11:c7:f7:cb:ae:9b:7d:af:02:ab:b8:6e:81:50: 34:26:13:3f:eb:27:6c:a1:b8:40:eb:d7:89:5b:20: ea:ce:ae:3d:87:8d:77:34:99:d8:aa:a1:61:a9:15: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:25:9B:B8:1F:6D:8F:49:70:56:22:53:18:55:9D:3B:EC:67:C0:5D X509v3 Authority Key Identifier: keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6f:b7:1d:5b:d7:0a:9b:c1:c2:47:04:98:c6:f2:59:48:d7: 4a:11:2d:a6:21:00:dd:24:3f:82:d2:41:fd:2e:0a:e9:f4:f3: 70:f1:e8:90:62:93:53:3e:d5:be:6a:e4:76:3b:98:b5:db:a2: bc:5f:bb:2c:19:9a:40:50:cc:71:cc:86:25:70:17:29:88:5f: 6c:fc:84:b3:5f:aa:77:46:3d:32:24:75:75:1e:c1:df:9a:d8: 3a:25:29:da:28:89:88:b3:30:d8:7e:6b:26:90:15:ae:a9:71: d2:ba:fe:d7:8c:0a:63:17:6a:a7:b1:c1:5f:39:32:82:62:55: ce:74:c0:c1:00:b9:64:b2:81:d6:e8:c7:e8:56:ee:65:f1:1f: f4:5e:56:41:1a:04:08:11:9d:31:9b:9d:20:a3:12:66:77:b4: ac:67:0f:c9:99:01:df:ec:2e:5b:a2:84:e8:23:dc:2f:a7:57: 54:5c:ed:8d:2c:c4:10:c7:33:53:16:32:13:5e:2b:2f:62:ae: 8c:1b:e7:64:5a:47:69:23:2d:20:63:ad:db:62:83:31:8e:f3: de:40:8c:01:c9:61:bb:8d:28:31:e8:5e:16:76:0a:8f:7f:87: ce:49:27:66:fe:26:28:c8:f7:ce:c2:f3:ca:20:8e:71:60:38: 8a:39:06:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPSWK54u8hp8d08P9lLHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5 MDk2ZDQwHhcNMjUxMjI1MDIwMTE0WhcNMjUxMjI2MDIwMTE0WjAzMTEwLwYDVQQD Eyg3ZTI1OWJiODFmNmQ4ZjQ5NzA1NjIyNTMxODU1OWQzYmVjNjdjMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt7YKT0hqfV7Gqo4N0cJx324yXvV YHaQKesECaHZRwM5+CnqWi54ekcB6rQeodeKuBtUAjwaqCCN8mdEkq6ACe0yd3WV 7mRM3F8eEvX2QpeEXpkjT75uAK14ZB7Z51/lj2lJvIriBMCVAhZxzwCae2nkVhlh GFv38vwAjgbFR+YN9i1c63OgCgJqpEgn0WzsgIOJHw9Fv5cMTyvHaMUNj9RsFaIP yVQfNJ+wdH1ti3PQxrmfoe+u9NsI48xvLrWZzfCkcPKD+qJDKFXcpVZOLQ0HEcf3 y66bfa8Cq7hugVA0JhM/6ydsobhA69eJWyDqzq49h413NJnYqqFhqRVpNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4lm7gfbY9JcFYiUxhVnTvsZ8BdMB8GA1UdIwQY MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbG+3HVvX CpvBwkcEmMbyWUjXShEtpiEA3SQ/gtJB/S4K6fTzcPHokGKTUz7VvmrkdjuYtdui vF+7LBmaQFDMccyGJXAXKYhfbPyEs1+qd0Y9MiR1dR7B35rYOiUp2iiJiLMw2H5r JpAVrqlx0rr+14wKYxdqp7HBXzkygmJVznTAwQC5ZLKB1ujH6FbuZfEf9F5WQRoE CBGdMZudIKMSZne0rGcPyZkB3+wuW6KE6CPcL6dXVFztjSzEEMczUxYyE14rL2Ku jBvnZFpHaSMtIGOt22KDMY7z3kCMAclhu40oMeheFnYKj3+HzkknZv4mKMj3zsLz yiCOcWA4ijkG0Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:46 2025 by rpki-client