This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json) Hash identifier: nxogVSNqPyUmhdRmkEfrxnxC/c+nyNjamtM5oUB4I+g= Subject key identifier: 5D:08:76:0F:6E:17:13:CA:BB:DA:9C:1F:4F:9F:1A:DD:41:28:16:31 Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a Certificate serial: 019B3FECAF62A81BF50EF957B0F0BAF31B72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft Manifest number: 1023 Signing time: Sun 21 Dec 2025 08:00:34 +0000 Manifest this update: Sun 21 Dec 2025 08:00:34 +0000 Manifest next update: Mon 22 Dec 2025 08:00:34 +0000 Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=) 2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=) 3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: oCzSJsy5KOZUwkKFWGeVoPpEdxC72FrIe1sMS4FF60M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:af:62:a8:1b:f5:0e:f9:57:b0:f0:ba:f3:1b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a Validity Not Before: Dec 21 08:00:34 2025 GMT Not After : Dec 22 08:00:34 2025 GMT Subject: CN=5d08760f6e1713cabbda9c1f4f9f1add41281631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:e9:25:f3:90:24:de:1d:b8:7f:4a:17:95: e6:2e:13:1a:89:79:49:54:22:e6:19:21:3b:44:3e: fa:cb:86:16:e1:8f:ed:d5:56:c5:53:f2:df:c0:4e: fb:1a:18:66:d1:90:97:d1:e6:5d:8e:3f:f1:04:7d: 58:53:db:32:18:94:27:0c:f9:fc:fc:4b:e5:10:c3: 4a:95:7e:ec:ef:b8:31:bc:33:6f:af:6a:3d:45:5f: 8e:cd:20:ef:63:76:5e:64:9c:88:0f:4d:63:7c:01: 41:f8:4f:8c:3e:e2:c6:eb:bf:d8:0a:b1:b3:5d:ef: 62:14:4f:e8:6b:57:27:0d:a0:bf:47:35:5f:45:e9: 71:e2:65:9a:e2:fb:e8:e6:03:84:8b:96:67:46:af: 64:45:04:0a:b8:ff:5a:67:51:61:fb:67:e1:63:09: 03:e0:63:a8:c8:3d:af:4a:e4:34:22:e9:68:ae:8b: 79:5d:32:4f:62:64:ae:60:d1:55:af:2a:c2:2b:64: a4:35:e7:03:06:97:92:43:70:de:a7:f5:6d:4b:cb: 79:b8:1d:9e:3f:bb:ac:b5:5d:ca:79:a0:4f:d8:95: 35:dd:57:e4:dd:1a:a5:3e:04:52:94:5d:06:9f:8d: 72:b8:46:78:05:14:f7:ca:4b:95:0f:7c:85:1d:34: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:76:0F:6E:17:13:CA:BB:DA:9C:1F:4F:9F:1A:DD:41:28:16:31 X509v3 Authority Key Identifier: keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:65:1b:c1:fc:a0:ba:ce:71:61:fa:25:f5:40:d0:02:81: e7:7f:3e:26:d0:a1:3c:a4:88:79:18:14:27:66:3f:0e:7d:c7: 10:f5:cf:52:cb:62:8b:2d:fd:70:46:5a:ae:dd:9e:f8:4f:08: f8:18:67:fd:e9:c4:d2:44:73:e3:96:bb:ad:f2:74:75:70:80: b4:c5:e0:29:d4:8b:2d:72:8e:ff:59:d1:df:b8:be:f1:83:86: 47:93:85:4c:47:63:b3:4a:da:d4:08:74:87:7a:62:7c:b8:85: f4:4a:b3:37:df:1c:c0:d9:0e:10:ba:2e:0b:06:25:16:0b:a3: ca:1f:c0:a6:81:17:0c:ea:0b:af:e1:61:77:c0:ad:fa:10:44: 89:b6:98:2b:11:e3:ed:02:f3:d6:e2:06:ad:81:99:79:b0:73: ad:a1:6b:db:13:8b:16:7d:89:cf:68:50:c6:fb:44:7e:6e:61: 86:43:bc:78:fa:2d:fd:60:a1:1c:d0:63:9e:e0:02:71:6d:da: 28:92:d5:3d:ed:db:02:7e:f3:9b:9c:bf:3e:fd:f4:00:9b:43: c2:bb:97:a9:de:d1:fe:15:28:a8:ad:fb:62:c0:27:2b:9c:a3: a8:b8:de:5a:c1:74:86:b2:d0:a0:d1:48:db:3f:4d:92:e5:7e: f2:f8:67:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7K9iqBv1DvlXsPC68xtyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi NjM2NmEwHhcNMjUxMjIxMDgwMDM0WhcNMjUxMjIyMDgwMDM0WjAzMTEwLwYDVQQD Eyg1ZDA4NzYwZjZlMTcxM2NhYmJkYTljMWY0ZjlmMWFkZDQxMjgxNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNLpJfOQJN4duH9KF5XmLhMaiXlJ VCLmGSE7RD76y4YW4Y/t1VbFU/LfwE77Ghhm0ZCX0eZdjj/xBH1YU9syGJQnDPn8 /EvlEMNKlX7s77gxvDNvr2o9RV+OzSDvY3ZeZJyID01jfAFB+E+MPuLG67/YCrGz Xe9iFE/oa1cnDaC/RzVfRelx4mWa4vvo5gOEi5ZnRq9kRQQKuP9aZ1Fh+2fhYwkD 4GOoyD2vSuQ0Iulorot5XTJPYmSuYNFVryrCK2SkNecDBpeSQ3Dep/VtS8t5uB2e P7ustV3KeaBP2JU13Vfk3RqlPgRSlF0Gn41yuEZ4BRT3ykuVD3yFHTToPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0Idg9uFxPKu9qcH0+fGt1BKBYxMB8GA1UdIwQY MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPVlG8H8 oLrOcWH6JfVA0AKB538+JtChPKSIeRgUJ2Y/Dn3HEPXPUstiiy39cEZart2e+E8I +Bhn/enE0kRz45a7rfJ0dXCAtMXgKdSLLXKO/1nR37i+8YOGR5OFTEdjs0ra1Ah0 h3pifLiF9EqzN98cwNkOELouCwYlFgujyh/ApoEXDOoLr+Fhd8Ct+hBEibaYKxHj 7QLz1uIGrYGZebBzraFr2xOLFn2Jz2hQxvtEfm5hhkO8ePot/WChHNBjnuACcW3a KJLVPe3bAn7zm5y/Pv30AJtDwruXqd7R/hUoqK37YsAnK5yjqLjeWsF0hrLQoNFI 2z9NkuV+8vhnkg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:39 2025 by rpki-client