This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json) Hash identifier: PYEG58Qfpg2ePf0H+HEABR3f2Lc+szA65s4JGSepQg4= Subject key identifier: 5C:8B:02:24:CC:9E:C7:6B:9C:8D:25:6F:DD:2A:7E:97:F5:89:79:AA Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019B4A39ADE4211BD2C1C0CE5197BF448957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft Manifest number: 07C5 Signing time: Tue 23 Dec 2025 08:00:52 +0000 Manifest this update: Tue 23 Dec 2025 08:00:52 +0000 Manifest next update: Wed 24 Dec 2025 08:00:52 +0000 Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=) 2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: bpJktKt1wuGjpRHkoZ952WdETFFAKl6m1QiK73jocDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:ad:e4:21:1b:d2:c1:c0:ce:51:97:bf:44:89:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Dec 23 08:00:52 2025 GMT Not After : Dec 24 08:00:52 2025 GMT Subject: CN=5c8b0224cc9ec76b9c8d256fdd2a7e97f58979aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:87:64:31:ad:d5:09:05:c0:74:b0:4e:0f: 13:9f:aa:2d:d3:ad:52:e3:3d:97:1a:c1:50:fe:d6: da:b3:f5:72:a4:a9:ea:6a:2f:75:00:37:47:f8:a9: 89:2b:fd:8d:67:6e:36:fa:e0:4b:19:1f:e9:d0:bf: d7:bd:8d:54:07:cc:bb:ec:f8:39:03:82:31:a8:95: 52:24:2d:ec:26:bd:21:df:96:22:0d:c1:89:44:f3: 1d:9b:dd:25:56:fe:d5:6f:4c:3c:81:4d:40:d5:30: 6b:de:9e:82:38:cd:17:54:8a:ac:11:30:46:94:f1: d2:e4:4c:c0:85:c5:aa:23:1e:e3:7c:26:6f:d6:69: e5:fe:67:ff:e7:32:8e:58:a3:93:f3:0d:dd:7d:43: 34:b7:7f:41:60:b8:d4:a7:96:d9:9e:5a:37:bb:a0: 22:e5:fe:a3:66:44:57:5e:19:b5:c9:2c:ec:8d:eb: dd:95:82:5d:af:c0:18:51:72:44:ba:2f:db:2e:d9: 71:c2:fb:85:08:98:66:29:d8:ef:41:a5:01:e0:82: eb:25:fd:46:75:5b:46:d3:20:d3:dd:fa:94:ee:a2: c5:2c:48:37:28:92:df:92:0a:9c:bd:f3:aa:f9:22: d9:27:27:93:ed:b6:89:fe:39:52:1d:cd:10:cd:e9: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:02:24:CC:9E:C7:6B:9C:8D:25:6F:DD:2A:7E:97:F5:89:79:AA X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e4:1c:54:d2:27:31:f4:d7:95:c5:e3:df:b1:d2:b4:0d:f6: 3a:69:34:f8:ad:6e:b3:a9:3b:2d:5f:cb:80:a5:db:e3:7a:f2: 0f:fa:95:dc:ee:37:49:7b:2e:07:78:10:05:46:53:aa:e3:eb: 60:d4:5e:58:f6:09:3d:7f:ee:1c:4c:11:94:e1:1a:10:6a:89: 94:54:93:b4:2a:70:0f:7c:2b:d4:ce:48:2c:ca:f0:77:43:e2: 04:02:1a:33:01:c2:03:9c:4e:aa:95:97:0c:d7:b9:e8:25:bd: cf:60:c6:cc:cf:f5:0c:7e:13:1c:d5:14:d4:f7:11:2e:65:63: d9:17:5e:87:79:67:ee:9c:c5:19:d4:3c:9e:84:1c:4c:13:97: 2f:9f:19:bd:06:7d:a0:0a:ca:3b:ec:ad:2a:fd:08:e4:94:0e: 35:fe:b8:bd:7d:83:7f:76:9a:d2:ee:83:fd:fb:7d:25:73:46: 59:1f:5e:6b:12:76:9b:aa:44:86:4c:4f:f1:a8:02:27:90:13: 16:3a:91:8b:c0:47:ae:9a:e6:fc:eb:09:2d:95:39:1d:3a:ac: ff:1b:91:82:87:e9:d6:e6:7e:99:41:67:7c:e0:16:06:a3:6f: d3:fc:3c:b4:f5:45:fa:36:5a:59:ab:30:e9:d6:d7:40:9d:9c: d4:2a:52:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOa3kIRvSwcDOUZe/RIlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjUxMjIzMDgwMDUyWhcNMjUxMjI0MDgwMDUyWjAzMTEwLwYDVQQD Eyg1YzhiMDIyNGNjOWVjNzZiOWM4ZDI1NmZkZDJhN2U5N2Y1ODk3OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10qHZDGt1QkFwHSwTg8Tn6ot061S 4z2XGsFQ/tbas/VypKnqai91ADdH+KmJK/2NZ242+uBLGR/p0L/XvY1UB8y77Pg5 A4IxqJVSJC3sJr0h35YiDcGJRPMdm90lVv7Vb0w8gU1A1TBr3p6COM0XVIqsETBG lPHS5EzAhcWqIx7jfCZv1mnl/mf/5zKOWKOT8w3dfUM0t39BYLjUp5bZnlo3u6Ai 5f6jZkRXXhm1ySzsjevdlYJdr8AYUXJEui/bLtlxwvuFCJhmKdjvQaUB4ILrJf1G dVtG0yDT3fqU7qLFLEg3KJLfkgqcvfOq+SLZJyeT7baJ/jlSHc0Qzen17QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyLAiTMnsdrnI0lb90qfpf1iXmqMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5 LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuQcVNIn MfTXlcXj37HStA32Omk0+K1us6k7LV/LgKXb43ryD/qV3O43SXsuB3gQBUZTquPr YNReWPYJPX/uHEwRlOEaEGqJlFSTtCpwD3wr1M5ILMrwd0PiBAIaMwHCA5xOqpWX DNe56CW9z2DGzM/1DH4THNUU1PcRLmVj2Rdeh3ln7pzFGdQ8noQcTBOXL58ZvQZ9 oArKO+ytKv0I5JQONf64vX2Df3aa0u6D/ft9JXNGWR9eaxJ2m6pEhkxP8agCJ5AT FjqRi8BHrprm/OsJLZU5HTqs/xuRgofp1uZ+mUFnfOAWBqNv0/w8tPVF+jZaWasw 6dbXQJ2c1CpSHw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:50:54 2025 by rpki-client