This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json) Hash identifier: ckE9H4zNUiKTxxavb3FIi6LLNL0eUbtskNRAK5CwO60= Subject key identifier: 2D:95:4A:5B:D2:7B:25:97:20:2D:7F:D3:F9:1F:D9:85:31:E7:9E:E1 Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417 Certificate serial: 019B3D597A6C6C75B487070AC40C08834154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft Manifest number: 0D1B Signing time: Sat 20 Dec 2025 20:00:32 +0000 Manifest this update: Sat 20 Dec 2025 20:00:32 +0000 Manifest next update: Sun 21 Dec 2025 20:00:32 +0000 Files and hashes: 1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=) 2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: JLX1A5TxsiG2v8pvX+G01mtBJ3i11vDfAlt32INYSyA=) 3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=) 4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=) 5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=) 6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:7a:6c:6c:75:b4:87:07:0a:c4:0c:08:83:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417 Validity Not Before: Dec 20 20:00:32 2025 GMT Not After : Dec 21 20:00:32 2025 GMT Subject: CN=2d954a5bd27b2597202d7fd3f91fd98531e79ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:da:11:6e:d8:f5:c3:71:fa:92:80:10:af: 57:98:7d:de:5c:77:04:cd:ba:fb:b6:b7:66:22:ce: 6f:90:4a:b5:5f:20:0c:cf:b2:b3:ab:95:08:cb:c6: e6:74:8c:dd:80:e9:d1:d2:27:c8:25:40:7b:f8:cb: 31:dd:54:7f:e2:cf:f6:be:a1:05:e9:de:3e:44:b5: da:98:35:68:74:65:40:24:9e:32:22:35:e9:ba:b2: 83:db:ee:ee:97:6b:73:14:4a:98:7b:8a:51:91:de: 9d:1b:a6:4d:6f:af:fa:c7:0c:70:70:20:88:13:0a: 03:f4:63:ba:e9:2b:c2:6a:48:f0:68:bd:c8:46:47: 94:0b:10:87:91:70:76:54:0e:3e:0b:93:f7:e8:f4: 3c:05:d4:04:ba:30:a5:6e:18:44:8d:16:48:2f:ff: 0f:86:67:7e:a2:c6:d9:e8:56:6b:47:f4:59:87:c5: 37:7e:4d:5c:ea:fb:d0:3f:81:08:4b:92:a6:de:d4: 3f:a5:39:a3:9c:2a:98:40:36:8a:22:9b:34:26:3f: 7a:1f:69:25:ec:ca:f8:d2:da:b1:1b:09:e6:ca:2f: bb:33:78:38:d5:22:f7:fe:29:b9:11:ce:7b:a3:8f: 5a:e2:88:66:5d:fe:76:ce:aa:97:b9:0a:a3:85:8a: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:95:4A:5B:D2:7B:25:97:20:2D:7F:D3:F9:1F:D9:85:31:E7:9E:E1 X509v3 Authority Key Identifier: keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d8:e6:7b:5d:c7:f4:90:03:dd:2a:a2:38:30:c8:1b:e1:db: 5f:1b:27:1b:bf:94:f6:a6:c0:30:10:2e:4e:e3:29:fa:e1:85: 5e:96:07:0e:62:1e:96:4e:7b:a0:de:7e:d5:09:21:0e:f7:c4: 5e:75:d4:e4:a0:40:04:af:f0:cb:a7:3c:2b:fd:32:0b:3e:dc: 9a:06:19:bb:26:60:1d:eb:a4:d5:46:b4:32:0d:b2:1d:71:5b: a8:b1:d9:4d:9f:6c:9b:17:16:04:d7:b3:e7:43:de:25:df:28: 91:76:70:a2:dc:6c:b1:85:88:1c:ae:19:91:5b:fd:c4:0c:7c: 0d:5d:b9:95:62:4d:ff:a4:6f:73:f0:09:7c:cf:c1:7f:ce:aa: 00:57:98:d6:b8:b9:1b:bb:29:e8:ae:c0:31:ec:7a:f0:ac:85: 1c:c3:6a:08:c0:f0:25:9b:9c:dd:66:ba:a5:d0:e2:b1:49:9e: 22:b4:f9:4f:30:c3:31:24:7f:53:e6:d3:f9:ec:3f:94:0f:a7: 13:a4:12:69:19:8f:d2:eb:bf:49:8e:aa:c1:f5:18:4b:a3:03: 7e:1c:95:92:8e:f4:89:47:c2:4e:d8:cf:b6:06:bd:13:a4:62: 29:dd:75:df:4f:e9:5d:0a:9f:1f:80:0b:89:b8:82:bd:1c:15: bf:6f:80:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXpsbHW0hwcKxAwIg0FUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx YmM0MTcwHhcNMjUxMjIwMjAwMDMyWhcNMjUxMjIxMjAwMDMyWjAzMTEwLwYDVQQD EygyZDk1NGE1YmQyN2IyNTk3MjAyZDdmZDNmOTFmZDk4NTMxZTc5ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXaEW7Y9cNx+pKAEK9XmH3eXHcE zbr7trdmIs5vkEq1XyAMz7Kzq5UIy8bmdIzdgOnR0ifIJUB7+Msx3VR/4s/2vqEF 6d4+RLXamDVodGVAJJ4yIjXpurKD2+7ul2tzFEqYe4pRkd6dG6ZNb6/6xwxwcCCI EwoD9GO66SvCakjwaL3IRkeUCxCHkXB2VA4+C5P36PQ8BdQEujClbhhEjRZIL/8P hmd+osbZ6FZrR/RZh8U3fk1c6vvQP4EIS5Km3tQ/pTmjnCqYQDaKIps0Jj96H2kl 7Mr40tqxGwnmyi+7M3g41SL3/im5Ec57o49a4ohmXf52zqqXuQqjhYqRYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2VSlvSeyWXIC1/0/kf2YUx557hMB8GA1UdIwQY MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtjme13H 9JAD3SqiODDIG+HbXxsnG7+U9qbAMBAuTuMp+uGFXpYHDmIelk57oN5+1QkhDvfE XnXU5KBABK/wy6c8K/0yCz7cmgYZuyZgHeuk1Ua0Mg2yHXFbqLHZTZ9smxcWBNez 50PeJd8okXZwotxssYWIHK4ZkVv9xAx8DV25lWJN/6Rvc/AJfM/Bf86qAFeY1ri5 G7sp6K7AMex68KyFHMNqCMDwJZuc3Wa6pdDisUmeIrT5TzDDMSR/U+bT+ew/lA+n E6QSaRmP0uu/SY6qwfUYS6MDfhyVko70iUfCTtjPtga9E6RiKd1130/pXQqfH4AL ibiCvRwVv2+A+g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:37 2025 by rpki-client