This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json) Hash identifier: eGtbVOklFQ0b5LiZxauvSURUjDr+dF69jy1lw/DV/II= Subject key identifier: 62:B5:31:66:A3:AE:63:6E:DD:A8:04:41:6D:C6:F4:58:54:B2:B1:E3 Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019B3FB667959A3F5E5BD2A76F71D052BA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft Manifest number: 1291 Signing time: Sun 21 Dec 2025 07:01:17 +0000 Manifest this update: Sun 21 Dec 2025 07:01:17 +0000 Manifest next update: Mon 22 Dec 2025 07:01:17 +0000 Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=) 2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: +9XdYGkhTpT+V+TluVoa/Bcjfc6JgEdEWWiQHIW8VlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:67:95:9a:3f:5e:5b:d2:a7:6f:71:d0:52:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Dec 21 07:01:17 2025 GMT Not After : Dec 22 07:01:17 2025 GMT Subject: CN=62b53166a3ae636edda804416dc6f45854b2b1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:ee:73:47:0e:ca:f4:d5:bd:fb:26:9b:73: 6d:b0:54:2e:4a:e5:9c:b0:8d:a4:c0:d0:f8:0b:fb: 68:8d:d8:d3:37:f4:5c:f0:a8:b2:94:e7:0b:37:73: 79:78:d8:4e:26:d0:71:d9:8f:cd:38:99:be:c5:5b: 36:28:37:7b:8b:1f:55:66:48:57:7c:46:35:8d:7f: 4f:ae:e5:c4:b6:3e:c7:7c:a4:be:12:73:d9:a0:e2: ee:2c:a8:20:84:31:0c:18:e5:5b:82:c2:db:ca:c1: 7d:93:50:55:1a:13:5f:f8:03:e9:9c:31:f1:b2:6b: 9c:d1:82:73:2d:62:d3:a9:6d:d4:cc:3e:fe:6e:c6: 9b:2a:8e:c2:c4:fc:97:be:09:a8:55:af:4b:62:47: fe:ee:d9:1e:d4:df:c9:75:64:b9:9e:dc:b5:2c:78: 14:1d:84:e0:26:11:ae:6a:3f:95:4a:8e:48:b7:eb: 71:12:19:a5:62:39:55:66:0c:d1:bd:bb:37:d0:03: 78:f2:f8:e8:cd:10:7c:c7:e6:6e:10:8a:6d:fe:01: bb:4c:13:5f:89:ee:9a:83:37:e2:ac:d2:78:4b:bd: 8b:de:f9:a2:9f:8f:dc:e1:3f:34:91:f9:da:2a:f6: b3:20:ee:ab:f7:f9:27:90:f8:af:72:c0:09:09:e3: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B5:31:66:A3:AE:63:6E:DD:A8:04:41:6D:C6:F4:58:54:B2:B1:E3 X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:a1:47:09:9e:05:8e:b6:c8:66:68:06:90:c4:81:88:67: f5:0d:e6:94:54:84:7a:e9:5d:82:16:82:36:31:77:1a:ac:ff: 67:8f:86:0f:02:4e:22:7b:d5:1c:e5:ab:88:a1:ad:2b:fe:16: 8a:5d:2c:f4:a9:79:dc:23:e8:08:8b:ac:45:d2:6b:0d:ad:78: 3d:98:be:9a:39:24:35:4b:b7:da:e9:a8:d3:48:78:b4:89:f4: d7:03:d1:9d:e9:e8:dd:75:f1:3c:c0:76:2e:06:ab:a7:40:c9: 09:a6:34:3b:b5:fb:6f:f4:2e:ee:a5:59:4e:79:b7:dd:ba:ed: 6b:42:41:f6:fc:80:ee:7f:aa:d1:47:81:f2:d2:7e:ff:ca:e2: 7a:e6:d8:44:96:27:7d:c1:2e:02:84:d6:9e:2c:93:cf:12:b7: f4:99:59:81:23:f0:68:e0:fc:d8:7e:b5:6a:7c:14:01:80:c9: 6f:53:ec:c7:c1:bc:80:4f:fe:c0:4c:7b:0f:44:6f:f2:70:0b: ae:20:79:6e:91:01:97:21:1c:fe:fd:ee:bd:1e:08:6d:4a:dd: 57:d5:0e:3f:3b:cc:da:63:6d:21:34:97:86:ec:6c:86:44:20: 31:5b:28:f3:5a:a9:96:40:42:98:07:28:eb:07:93:7d:cb:10: 21:07:b3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tmeVmj9eW9Knb3HQUrpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjUxMjIxMDcwMTE3WhcNMjUxMjIyMDcwMTE3WjAzMTEwLwYDVQQD Eyg2MmI1MzE2NmEzYWU2MzZlZGRhODA0NDE2ZGM2ZjQ1ODU0YjJiMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Puc0cOyvTVvfsmm3NtsFQuSuWc sI2kwND4C/tojdjTN/Rc8KiylOcLN3N5eNhOJtBx2Y/NOJm+xVs2KDd7ix9VZkhX fEY1jX9PruXEtj7HfKS+EnPZoOLuLKgghDEMGOVbgsLbysF9k1BVGhNf+APpnDHx smuc0YJzLWLTqW3UzD7+bsabKo7CxPyXvgmoVa9LYkf+7tke1N/JdWS5nty1LHgU HYTgJhGuaj+VSo5It+txEhmlYjlVZgzRvbs30AN48vjozRB8x+ZuEIpt/gG7TBNf ie6agzfirNJ4S72L3vmin4/c4T80kfnaKvazIO6r9/knkPivcsAJCeMKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK1MWajrmNu3agEQW3G9FhUsrHjMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTqhRwme BY62yGZoBpDEgYhn9Q3mlFSEeuldghaCNjF3Gqz/Z4+GDwJOInvVHOWriKGtK/4W il0s9Kl53CPoCIusRdJrDa14PZi+mjkkNUu32umo00h4tIn01wPRneno3XXxPMB2 Lgarp0DJCaY0O7X7b/Qu7qVZTnm33brta0JB9vyA7n+q0UeB8tJ+/8rieubYRJYn fcEuAoTWniyTzxK39JlZgSPwaOD82H61anwUAYDJb1Psx8G8gE/+wEx7D0Rv8nAL riB5bpEBlyEc/v3uvR4IbUrdV9UOPzvM2mNtITSXhuxshkQgMVso81qplkBCmAco 6weTfcsQIQezHg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:28:25 2025 by rpki-client