This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json) Hash identifier: D+0N1uhtC95IrBt+CrePXYLYixdGZXFPv/Zi6oRI1Eo= Subject key identifier: 9C:CF:F9:8B:C5:7F:8F:86:11:38:6E:AE:7F:21:AF:6B:13:B1:66:41 Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28 Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28 Certificate serial: 019B3FECD70BF49A7118A85FF71FD324BA31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 08:00:44 +0000 Manifest this update: Sun 21 Dec 2025 08:00:44 +0000 Manifest next update: Mon 22 Dec 2025 08:00:44 +0000 Files and hashes: 1: lhjGJIifChZhyO0SU9NNpxfAaP0.roa (hash: nX/uaYhIBdSKJHgpMLgtjy0tDRvricoltizd7F7VYTI=) 2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: uL7erYcjztOlsvRE30+WAeqbZEkvvp2/qR2rJ4KEjkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d7:0b:f4:9a:71:18:a8:5f:f7:1f:d3:24:ba:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28 Validity Not Before: Dec 21 08:00:44 2025 GMT Not After : Dec 22 08:00:44 2025 GMT Subject: CN=9ccff98bc57f8f8611386eae7f21af6b13b16641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:21:9a:53:8c:45:5a:1f:28:79:77:79:a3: bd:51:07:56:16:46:fe:44:16:c3:6e:56:d6:0e:db: c4:de:0d:18:ba:a3:f8:37:07:89:56:90:b7:43:1f: 1c:42:30:d6:95:ad:fc:b1:c2:a5:9a:9a:d5:d6:51: 9c:dc:b7:83:2d:df:ef:cb:72:57:e8:30:97:a5:30: 1b:a0:97:d3:85:37:0f:64:95:f2:53:dd:07:9c:66: 63:fc:51:a2:4a:12:5b:15:68:92:47:d3:e1:8b:9f: 9e:e7:4d:fb:64:a5:23:5b:a2:16:0e:07:30:ae:61: d6:8b:49:d4:9a:5b:21:4f:66:29:9b:ff:48:60:8a: 35:75:2f:a7:0c:e4:db:f5:44:65:b7:86:59:5f:47: ea:cf:c8:53:f5:43:a5:7c:66:d4:a8:2d:65:b9:5b: 43:07:b7:19:4c:d6:47:e3:ec:d7:c2:62:90:2a:1c: 71:e9:c1:97:ee:14:42:ce:98:85:7e:87:98:86:02: 40:9a:b7:be:a5:11:2e:ee:11:90:e1:35:ff:0b:e8: da:e4:eb:52:d3:a8:f4:d9:7a:e6:20:5f:18:11:bf: ab:76:ef:ca:b1:16:73:ce:81:06:3b:87:97:24:ab: 16:f4:0f:ef:b5:52:a8:27:da:a4:4d:29:dd:7b:b8: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CF:F9:8B:C5:7F:8F:86:11:38:6E:AE:7F:21:AF:6B:13:B1:66:41 X509v3 Authority Key Identifier: keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:92:1f:71:11:d3:5c:d9:89:b5:d0:3d:e6:41:03:60:d4:7d: f8:84:00:d2:76:8e:f0:63:a7:bd:85:1e:ee:73:74:dc:77:87: 8f:bc:58:5e:aa:a1:7f:8b:e0:e1:0e:01:d5:13:5c:9f:98:99: bd:1c:c4:84:39:ef:d7:bb:e9:a0:5b:d1:7e:a7:b7:71:69:fe: d2:6b:45:2d:3a:b9:3f:98:18:02:1c:04:0b:84:57:e6:a6:c0: 26:84:bb:c1:03:9d:f1:83:3f:b3:7a:39:4d:96:e4:fc:fc:be: 2e:ba:b0:6d:60:95:39:f1:75:80:4a:39:11:1e:60:74:15:65: 5f:8e:b0:66:a9:d0:9f:38:51:61:fe:b9:86:42:76:2a:68:bd: d6:ab:c0:e0:e9:7a:bc:e7:54:4b:c0:e4:1a:f9:e3:60:c2:c7: 19:f5:21:8c:68:a2:93:a0:e0:f1:8a:37:5c:7b:12:ce:cd:44: ce:6c:62:c7:af:40:41:90:fa:33:f9:eb:30:b2:86:b5:4b:da: c7:bd:30:f2:72:6b:d6:32:89:f4:37:9c:ba:b2:9a:59:a2:75: d3:13:60:66:94:82:12:ba:a8:b1:1d:56:50:c3:fe:b0:74:57: dd:a5:a6:eb:fa:a1:96:1e:86:bc:4a:8c:b8:12:87:e1:6f:43: 79:95:49:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NcL9JpxGKhf9x/TJLoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi MDVhMjgwHhcNMjUxMjIxMDgwMDQ0WhcNMjUxMjIyMDgwMDQ0WjAzMTEwLwYDVQQD Eyg5Y2NmZjk4YmM1N2Y4Zjg2MTEzODZlYWU3ZjIxYWY2YjEzYjE2NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PkhmlOMRVofKHl3eaO9UQdWFkb+ RBbDblbWDtvE3g0YuqP4NweJVpC3Qx8cQjDWla38scKlmprV1lGc3LeDLd/vy3JX 6DCXpTAboJfThTcPZJXyU90HnGZj/FGiShJbFWiSR9Phi5+e5037ZKUjW6IWDgcw rmHWi0nUmlshT2Ypm/9IYIo1dS+nDOTb9URlt4ZZX0fqz8hT9UOlfGbUqC1luVtD B7cZTNZH4+zXwmKQKhxx6cGX7hRCzpiFfoeYhgJAmre+pREu7hGQ4TX/C+ja5OtS 06j02XrmIF8YEb+rdu/KsRZzzoEGO4eXJKsW9A/vtVKoJ9qkTSnde7hvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzP+YvFf4+GEThurn8hr2sTsWZBMB8GA1UdIwQY MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt NzlhN2VhYTdhZTU4LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4 LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5IfcRHT XNmJtdA95kEDYNR9+IQA0naO8GOnvYUe7nN03HeHj7xYXqqhf4vg4Q4B1RNcn5iZ vRzEhDnv17vpoFvRfqe3cWn+0mtFLTq5P5gYAhwEC4RX5qbAJoS7wQOd8YM/s3o5 TZbk/Py+LrqwbWCVOfF1gEo5ER5gdBVlX46wZqnQnzhRYf65hkJ2Kmi91qvA4Ol6 vOdUS8DkGvnjYMLHGfUhjGiik6Dg8Yo3XHsSzs1Ezmxix69AQZD6M/nrMLKGtUva x70w8nJr1jKJ9DecurKaWaJ10xNgZpSCErqosR1WUMP+sHRX3aWm6/qhlh6GvEqM uBKH4W9DeZVJJg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:20:31 2025 by rpki-client