This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json) Hash identifier: clUhVVbMRJeS6HHeOPcFvFfChE6qLTy/mYUR0HBDKOk= Subject key identifier: DC:58:03:BC:F3:A0:FF:8C:02:70:0C:A0:BD:77:11:D2:F9:77:E3:13 Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d Certificate serial: 019B53AA74CBA13F237D9484EDBC0BB365E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 04:00:38 +0000 Manifest this update: Thu 25 Dec 2025 04:00:38 +0000 Manifest next update: Fri 26 Dec 2025 04:00:38 +0000 Files and hashes: 1: aqX_aHr9DYDlihdIMBv6LMwHePY.roa (hash: CPN85FZ7OPhT7PlAx5nBT6Pw1xOtIkDQK0zxfnvB/+M=) 2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: t2lnOLykbH7l8+p4/zbvGXDQjBtaYHcq9IsRpB1OlUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:74:cb:a1:3f:23:7d:94:84:ed:bc:0b:b3:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d Validity Not Before: Dec 25 04:00:38 2025 GMT Not After : Dec 26 04:00:38 2025 GMT Subject: CN=dc5803bcf3a0ff8c02700ca0bd7711d2f977e313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:36:56:00:37:59:5f:f7:a0:97:5d:4a:68: 5b:b9:54:21:2a:19:2a:21:2e:1e:d4:b0:26:a0:a7: 7d:bf:02:71:93:f1:0b:69:54:fe:cb:06:d4:01:03: ba:7f:17:0a:31:9f:7b:a7:44:5f:ae:b3:bf:aa:45: 3d:1e:43:71:70:2e:b8:88:71:09:d2:d5:da:fd:ca: 71:3d:8c:13:6b:4b:1f:a5:24:57:7f:6c:59:69:c2: 03:ca:11:ca:43:e0:2e:fe:5f:69:17:30:a7:9f:d4: ba:df:8a:e4:2b:e9:3c:24:10:4e:4c:b2:f8:7f:85: 3b:b4:2e:d0:4d:ca:61:c9:b1:07:f8:c1:59:ca:9a: 98:07:a0:4a:c1:97:48:e8:57:70:eb:44:d2:81:00: 9a:f1:e4:5f:78:ba:ce:bd:64:54:4f:a5:8c:37:5a: 9a:59:55:f2:7d:c7:9f:42:b2:fd:23:ec:73:9f:90: 9b:34:47:56:e8:74:3d:26:aa:15:23:5f:da:a8:4b: 98:e0:ae:91:c9:10:35:6a:c3:25:08:7e:11:20:96: 1d:e9:dd:22:23:f3:f1:b1:86:cd:8b:9d:9b:fc:09: c4:ad:0c:a0:e3:64:c5:92:83:e6:da:ff:fc:a7:7b: 3d:b1:b7:38:c7:2f:ed:13:78:3f:ee:5a:88:d1:60: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:03:BC:F3:A0:FF:8C:02:70:0C:A0:BD:77:11:D2:F9:77:E3:13 X509v3 Authority Key Identifier: keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7d:0d:5d:6b:ac:2d:dd:ac:d3:15:dc:57:5c:d0:31:ed:92: b2:5d:9e:97:67:61:64:77:ff:26:02:0e:07:00:96:fb:98:8d: cd:8e:b7:a0:07:2b:fc:2b:ca:cb:44:40:f4:51:6b:62:07:72: e1:a2:4d:95:bf:8d:91:62:ad:65:cd:e3:a3:13:25:9b:cd:c1: ba:d8:ec:47:78:82:6f:0a:6d:d3:2f:ed:81:56:79:61:2d:8f: 73:45:8e:ac:5d:80:cd:e0:39:cc:29:43:dd:42:e5:ed:50:4a: 2d:ac:92:f7:7b:10:08:5e:1d:42:fb:f7:4c:5b:1c:51:39:e4: e1:52:3a:6e:63:a5:8e:ba:b8:b4:d5:a3:d1:84:1f:80:a0:df: 66:82:e4:cc:38:81:c2:bf:d6:ef:41:f7:7e:f1:97:58:0e:79: fe:82:dc:56:8b:25:13:c5:ac:2a:7e:de:ed:82:03:28:be:42: da:f3:d8:ae:b8:c7:52:c6:a1:c5:3d:72:c9:3e:e2:67:35:25: 48:63:04:bb:4b:62:7f:37:e8:c3:b9:31:7c:b1:46:5f:c1:e5: f5:29:71:21:84:15:e5:dd:9e:97:f6:0d:3d:fb:d2:c3:ae:b0: e4:ca:58:db:60:e4:41:fe:37:9b:b9:e4:5e:07:41:b6:b2:a9: c5:ed:ef:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqnTLoT8jfZSE7bwLs2XiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTA0OWQwMGJhODQyMWU0YzQ1YTk0ODQ5Mjk0NWM3OGZk OWUxNmQwHhcNMjUxMjI1MDQwMDM4WhcNMjUxMjI2MDQwMDM4WjAzMTEwLwYDVQQD EyhkYzU4MDNiY2YzYTBmZjhjMDI3MDBjYTBiZDc3MTFkMmY5NzdlMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueI2VgA3WV/3oJddSmhbuVQhKhkq IS4e1LAmoKd9vwJxk/ELaVT+ywbUAQO6fxcKMZ97p0RfrrO/qkU9HkNxcC64iHEJ 0tXa/cpxPYwTa0sfpSRXf2xZacIDyhHKQ+Au/l9pFzCnn9S634rkK+k8JBBOTLL4 f4U7tC7QTcphybEH+MFZypqYB6BKwZdI6Fdw60TSgQCa8eRfeLrOvWRUT6WMN1qa WVXyfcefQrL9I+xzn5CbNEdW6HQ9JqoVI1/aqEuY4K6RyRA1asMlCH4RIJYd6d0i I/PxsYbNi52b/AnErQyg42TFkoPm2v/8p3s9sbc4xy/tE3g/7lqI0WDjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxYA7zzoP+MAnAMoL13EdL5d+MTMB8GA1UdIwQY MBaAFKDgSdALqEIeTEWpSEkpRceP2eFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEt NWY0YTE1Y2I5MDU0LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEtNWY0YTE1Y2I5MDU0 LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO30NXWus Ld2s0xXcV1zQMe2Ssl2el2dhZHf/JgIOBwCW+5iNzY63oAcr/CvKy0RA9FFrYgdy 4aJNlb+NkWKtZc3joxMlm83ButjsR3iCbwpt0y/tgVZ5YS2Pc0WOrF2AzeA5zClD 3ULl7VBKLayS93sQCF4dQvv3TFscUTnk4VI6bmOljrq4tNWj0YQfgKDfZoLkzDiB wr/W70H3fvGXWA55/oLcVoslE8WsKn7e7YIDKL5C2vPYrrjHUsahxT1yyT7iZzUl SGMEu0tifzfow7kxfLFGX8Hl9SlxIYQV5d2el/YNPfvSw66w5MpY22DkQf43m7nk XgdBtrKpxe3vyQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:38 2025 by rpki-client