This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json) Hash identifier: 8ZQGzXJrNJrSNXhdum9qx1+yu/GYpUtvvqbcXvzMJrg= Subject key identifier: 54:CD:4C:03:41:76:FC:8D:B9:AB:F8:FB:75:49:BC:25:44:CF:22:15 Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21 Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721 Certificate serial: 019B41A432E8CB44363D2DBFC0A8FBC0190E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:00:38 +0000 Manifest this update: Sun 21 Dec 2025 16:00:38 +0000 Manifest next update: Mon 22 Dec 2025 16:00:38 +0000 Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=) 2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: /D3tyb8GQEd7zQPh4lp8C06xKNkEhzp2jj+gkp21Hmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:32:e8:cb:44:36:3d:2d:bf:c0:a8:fb:c0:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721 Validity Not Before: Dec 21 16:00:38 2025 GMT Not After : Dec 22 16:00:38 2025 GMT Subject: CN=54cd4c034176fc8db9abf8fb7549bc2544cf2215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:e7:cd:87:f3:72:18:a4:56:bb:8e:44:d4: c1:58:92:d7:b0:67:cd:22:63:55:a2:22:7a:64:6e: 72:40:a4:ad:c9:40:17:74:e9:1c:91:fa:8f:f1:07: fb:0e:98:45:a4:00:08:17:d4:bf:ba:b4:33:f9:be: a5:13:00:89:61:e1:56:64:02:34:a8:55:dc:f2:42: c9:4e:8f:cb:06:d9:49:fb:6a:f5:81:9d:47:f8:6c: 3c:bc:e7:45:b1:01:3b:33:ef:d1:71:0c:d1:55:2f: ce:ab:81:75:b2:15:3e:49:35:35:58:96:7d:19:58: b4:c7:a1:e0:cb:87:75:2b:a5:b1:dc:9a:43:a6:98: d6:54:74:3f:4c:d6:56:42:4c:d5:e3:32:39:d9:f7: 70:99:bb:43:6e:a5:af:64:3c:ef:7f:f1:e4:91:df: 79:53:0d:f5:50:11:9b:ed:db:d2:94:d6:42:18:68: 98:5b:57:24:3b:82:8a:f4:02:7e:b8:2d:39:6d:e2: 32:2a:6a:a9:38:0a:8b:9d:3e:f6:7b:69:3e:dc:86: 52:c6:3f:28:0d:b2:9c:d6:5f:6f:b4:3b:59:c8:64: fa:d6:9a:a6:75:39:16:1a:7a:23:9c:fa:f8:cf:80: 74:99:68:cc:cc:ec:43:b8:ef:76:ba:2e:83:b9:f0: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:4C:03:41:76:FC:8D:B9:AB:F8:FB:75:49:BC:25:44:CF:22:15 X509v3 Authority Key Identifier: keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:00:19:14:50:7b:82:1a:6c:49:d8:69:a2:4b:ad:f0:8c: 44:8a:6b:45:1f:30:f8:a7:d0:09:4d:a7:1e:4e:e3:da:cf:26: 33:a4:ed:94:78:94:71:7c:a4:84:7a:cd:b4:d5:8c:31:ab:0b: 92:d8:41:ca:d6:9b:1b:30:cb:57:86:e0:a5:1d:70:22:2c:40: e8:6e:18:5e:b4:06:10:ed:03:4b:2e:29:5f:e4:d4:fd:4b:bf: d7:d4:66:ec:84:7f:f9:da:89:61:cc:e0:4b:98:3f:02:95:71: d7:fc:65:02:04:36:60:ad:ba:b2:57:9d:d0:2c:ca:d8:e6:75: f1:8b:6a:fa:83:b2:c5:33:61:2f:ab:56:d5:07:80:75:a7:7c: 00:bc:8b:7d:86:91:06:bf:62:b1:0d:cd:a9:67:71:25:7a:ad: e8:c1:d4:23:12:b1:ab:8f:cb:ea:a9:37:9d:74:67:ff:c0:70: b4:79:07:64:b5:16:8d:21:0e:77:d6:f9:6c:f3:8e:33:ee:ac: ea:eb:ed:bb:68:f0:47:c4:24:72:a9:bd:39:dd:3a:4e:2a:3c: 04:95:48:39:eb:55:0c:96:be:2c:72:45:bf:df:95:c3:23:63: b0:e0:a9:ed:dc:d4:3d:e7:4e:98:f5:30:86:44:19:b3:d2:19: c3:2f:c6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDLoy0Q2PS2/wKj7wBkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODJkZDViODZmOTU4ZDViZTczZmRiZTNmMGNjZjZkZmYw MmY3MjEwHhcNMjUxMjIxMTYwMDM4WhcNMjUxMjIyMTYwMDM4WjAzMTEwLwYDVQQD Eyg1NGNkNGMwMzQxNzZmYzhkYjlhYmY4ZmI3NTQ5YmMyNTQ0Y2YyMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9DnzYfzchikVruORNTBWJLXsGfN ImNVoiJ6ZG5yQKStyUAXdOkckfqP8Qf7DphFpAAIF9S/urQz+b6lEwCJYeFWZAI0 qFXc8kLJTo/LBtlJ+2r1gZ1H+Gw8vOdFsQE7M+/RcQzRVS/Oq4F1shU+STU1WJZ9 GVi0x6Hgy4d1K6Wx3JpDppjWVHQ/TNZWQkzV4zI52fdwmbtDbqWvZDzvf/Hkkd95 Uw31UBGb7dvSlNZCGGiYW1ckO4KK9AJ+uC05beIyKmqpOAqLnT72e2k+3IZSxj8o DbKc1l9vtDtZyGT61pqmdTkWGnojnPr4z4B0mWjMzOxDuO92ui6DufAXlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTNTANBdvyNuav4+3VJvCVEzyIVMB8GA1UdIwQY MBaAFKCC3VuG+VjVvnP9vj8Mz23/AvchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYt ZjMwM2RlNGEyZDVlLzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYtZjMwM2RlNGEyZDVl LzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWwAGRRQ e4IabEnYaaJLrfCMRIprRR8w+KfQCU2nHk7j2s8mM6TtlHiUcXykhHrNtNWMMasL kthBytabGzDLV4bgpR1wIixA6G4YXrQGEO0DSy4pX+TU/Uu/19Rm7IR/+dqJYczg S5g/ApVx1/xlAgQ2YK26sled0CzK2OZ18Ytq+oOyxTNhL6tW1QeAdad8ALyLfYaR Br9isQ3NqWdxJXqt6MHUIxKxq4/L6qk3nXRn/8BwtHkHZLUWjSEOd9b5bPOOM+6s 6uvtu2jwR8Qkcqm9Od06Tio8BJVIOetVDJa+LHJFv9+VwyNjsOCp7dzUPedOmPUw hkQZs9IZwy/GAw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:34:29 2025 by rpki-client