This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json) Hash identifier: 0xaYxRt/tDjLxO7g+1TWYileV4vd3oug58/j5wrVzkY= Subject key identifier: 3B:EA:D8:41:12:AA:84:56:E3:38:C9:61:DF:95:14:B1:5C:9A:34:C9 Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Certificate serial: 019B6EEB0A30952BCA1D9352604AA24C6431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 11:00:55 +0000 Manifest this update: Tue 30 Dec 2025 11:00:55 +0000 Manifest next update: Wed 31 Dec 2025 11:00:55 +0000 Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=) 2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: 9FYyEgj7Kcc9c6VeCwztmlX5SvSmXdJgFXTe17uoTNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:eb:0a:30:95:2b:ca:1d:93:52:60:4a:a2:4c:64:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Validity Not Before: Dec 30 11:00:55 2025 GMT Not After : Dec 31 11:00:55 2025 GMT Subject: CN=3bead84112aa8456e338c961df9514b15c9a34c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:ba:46:02:ca:bf:9c:a1:29:f8:bd:06:cd: f5:d4:8c:00:c3:36:e0:e9:39:80:bb:9a:d7:dc:4b: 63:f0:27:70:68:14:6f:69:b4:3b:de:50:1d:10:df: d3:13:a7:5d:bc:ab:99:4f:e3:5b:d3:cf:c2:3b:a9: 32:9a:e3:72:69:bd:5b:dc:b0:1f:c4:38:6b:84:86: 1c:7e:a4:43:cb:e8:7c:90:91:e5:5c:d4:17:fb:6f: c5:1d:c8:19:cf:69:f1:7b:52:ef:91:97:90:02:c6: 24:99:2e:96:17:10:ff:16:49:fd:49:b7:76:19:92: c0:d3:0b:b2:ec:a6:96:de:5f:41:5b:36:87:02:6a: f2:38:b0:f8:33:76:80:b0:dd:6b:bb:94:52:c3:47: 66:03:c2:0c:4d:ca:2b:bc:d1:b1:f3:fb:b8:4d:cb: b4:05:92:0b:51:0b:e0:a1:76:c4:64:c6:31:a6:05: 6c:57:23:e0:10:1c:8f:90:44:b8:40:59:80:97:98: b4:8d:6d:fc:ef:4d:f2:77:f7:52:0e:18:f7:10:2a: 81:71:e8:86:0e:95:57:52:e2:97:ff:ba:74:5c:c8: a8:06:e5:cf:cb:04:a1:1f:30:3a:8e:18:fc:83:e7: aa:db:8a:f3:b7:f3:85:5c:8d:f1:f8:21:53:14:bf: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:D8:41:12:AA:84:56:E3:38:C9:61:DF:95:14:B1:5C:9A:34:C9 X509v3 Authority Key Identifier: keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:38:91:37:b1:5e:6f:5d:21:08:74:0e:e3:dc:fc:e4:d5: d2:34:8c:46:28:ae:d7:02:0f:e5:84:ad:26:48:b3:88:9d:ee: 26:e2:23:7e:53:9a:84:b6:68:0a:06:4c:8d:5b:59:08:f9:5c: 31:d3:cd:d5:6e:fa:54:28:bd:7f:68:27:af:6b:6d:3c:7c:e0: 56:b4:c3:ee:c8:38:71:a9:0e:65:b2:82:16:6e:50:21:44:4c: 5d:3e:32:46:b0:aa:46:4c:89:7a:32:f9:1a:90:5b:ee:27:ed: 6e:29:35:c1:70:ea:c1:91:81:a4:15:70:53:52:c0:06:67:b6: 71:75:67:7c:21:1c:04:2b:98:0b:23:56:f0:69:dd:b8:aa:71: ee:fc:b6:81:07:7d:3b:ae:d0:3f:ad:b2:25:14:33:e6:cb:74: e1:16:47:57:b6:c4:f3:eb:79:1b:e2:a3:7a:6b:67:7e:d4:d3: 0b:0c:2a:60:a3:45:50:17:05:0b:c1:5f:47:c1:06:7f:42:ec: cb:4d:56:4e:f8:94:97:02:ba:12:00:49:44:98:e7:6e:c8:a0: 77:8e:01:3a:4a:e1:6c:bf:da:b4:16:aa:d1:90:20:68:cb:a2: 25:3e:de:36:6d:97:18:a3:e5:a3:97:2a:f8:c7:2f:b2:c5:82: fb:47:d8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6wowlSvKHZNSYEqiTGQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi ZDIwYjgwHhcNMjUxMjMwMTEwMDU1WhcNMjUxMjMxMTEwMDU1WjAzMTEwLwYDVQQD EygzYmVhZDg0MTEyYWE4NDU2ZTMzOGM5NjFkZjk1MTRiMTVjOWEzNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lq6RgLKv5yhKfi9Bs311IwAwzbg 6TmAu5rX3Etj8CdwaBRvabQ73lAdEN/TE6ddvKuZT+Nb08/CO6kymuNyab1b3LAf xDhrhIYcfqRDy+h8kJHlXNQX+2/FHcgZz2nxe1LvkZeQAsYkmS6WFxD/Fkn9Sbd2 GZLA0wuy7KaW3l9BWzaHAmryOLD4M3aAsN1ru5RSw0dmA8IMTcorvNGx8/u4Tcu0 BZILUQvgoXbEZMYxpgVsVyPgEByPkES4QFmAl5i0jW38703yd/dSDhj3ECqBceiG DpVXUuKX/7p0XMioBuXPywShHzA6jhj8g+eq24rzt/OFXI3x+CFTFL8pVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvq2EESqoRW4zjJYd+VFLFcmjTJMB8GA1UdIwQY MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVU4kTex Xm9dIQh0DuPc/OTV0jSMRiiu1wIP5YStJkiziJ3uJuIjflOahLZoCgZMjVtZCPlc MdPN1W76VCi9f2gnr2ttPHzgVrTD7sg4cakOZbKCFm5QIURMXT4yRrCqRkyJejL5 GpBb7iftbik1wXDqwZGBpBVwU1LABme2cXVnfCEcBCuYCyNW8GnduKpx7vy2gQd9 O67QP62yJRQz5st04RZHV7bE8+t5G+KjemtnftTTCwwqYKNFUBcFC8FfR8EGf0Ls y01WTviUlwK6EgBJRJjnbsigd44BOkrhbL/atBaq0ZAgaMuiJT7eNm2XGKPlo5cq +McvssWC+0fYOQ== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:36 2025 by rpki-client