This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json) Hash identifier: 3hVu47pe8I6l2I4OMSB5XVymziCT7Wb+l85GLuIhCyc= Subject key identifier: 1F:32:52:D0:A0:C7:91:83:67:DE:CD:10:71:25:33:0A:9A:9F:75:70 Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019B75C8A2FF4C2DFC28D1A201B5F8DBB763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft Manifest number: 12AD Signing time: Wed 31 Dec 2025 19:00:41 +0000 Manifest this update: Wed 31 Dec 2025 19:00:41 +0000 Manifest next update: Thu 01 Jan 2026 19:00:41 +0000 Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=) 2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: PYV2RItI3hxfVMZIwc9GcTokS8Y3QBmfx9UbHcAeWcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c8:a2:ff:4c:2d:fc:28:d1:a2:01:b5:f8:db:b7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Dec 31 19:00:41 2025 GMT Not After : Jan 1 19:00:41 2026 GMT Subject: CN=1f3252d0a0c7918367decd107125330a9a9f7570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:ae:6b:fc:41:1d:ef:90:41:ab:e7:07:b6: ab:19:33:81:bb:c1:be:98:45:5b:60:fe:fb:6a:8b: 21:36:6f:7f:45:fa:29:c9:5d:c9:74:04:b8:fd:33: d7:69:e0:6d:77:60:35:dc:69:1e:b5:af:b1:c2:ae: a3:f8:f7:fa:50:cc:cc:78:37:a5:63:3b:3b:4f:a4: 27:70:bc:1d:ba:0f:fa:63:99:82:96:54:6a:99:de: cf:92:2f:9c:ff:49:9b:81:9a:db:5d:ca:98:fb:28: a1:29:dd:03:1e:93:9b:8f:e5:b4:6b:a0:eb:f4:d8: 7c:cd:4a:db:61:5a:5c:ec:30:2c:67:ea:12:d8:43: 2a:db:6b:4b:a3:ae:de:c5:12:10:00:fa:e9:a6:de: 6d:3c:01:e3:83:d5:a6:b6:c3:bf:62:bf:22:36:24: 31:0f:c8:c7:ce:52:ba:1d:f0:bd:07:12:03:ec:4c: 07:2d:a3:cf:ae:b2:57:e4:8a:78:09:8b:a0:a0:74: 96:f7:5b:cc:44:b7:38:2b:6e:ae:7f:c2:62:12:a9: d2:c1:91:47:71:99:6a:b9:e9:7d:e7:ee:a5:5f:dd: 53:9a:8b:4f:19:58:ec:44:df:48:de:7f:d7:b5:ac: 94:d9:59:a3:35:81:6d:ab:14:e3:be:f8:fc:d8:32: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:52:D0:A0:C7:91:83:67:DE:CD:10:71:25:33:0A:9A:9F:75:70 X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:e7:b2:c6:29:21:f9:2b:25:ca:cc:cf:09:3f:b5:11:28: 56:61:15:95:c0:35:51:48:4c:4e:e7:4d:9c:49:26:5d:9c:59: 7f:15:34:eb:80:bc:8a:ca:3b:78:29:a7:31:2e:64:f7:77:f7: 0c:75:48:04:12:ad:d9:49:11:0e:0d:32:9e:87:51:d6:2d:ba: 9f:3d:c5:ec:f8:1e:fe:3a:05:54:f5:a2:c7:ea:7d:ec:2b:bc: c7:6b:d3:a2:9e:c8:ad:c9:e3:ba:c7:79:5b:0a:98:af:ed:bb: 9b:87:26:2d:62:37:d8:96:1f:50:31:09:49:ee:0e:91:e1:07: a1:da:a1:de:2b:7d:ae:16:86:5a:c2:0a:99:61:aa:41:f6:85: 5e:79:23:6f:8c:23:60:18:5d:82:bc:c2:10:8c:50:ae:2c:89: 3d:55:7f:18:91:f5:49:41:08:d6:41:a7:95:2f:e9:7e:90:23: d1:72:03:42:21:65:ed:86:0d:db:47:64:5f:8c:c2:ce:be:eb: 03:1d:88:eb:57:4b:98:d3:b9:9e:ab:97:c2:97:51:16:f7:e6: 1a:7e:d4:2c:f5:aa:69:9a:80:93:22:6e:4e:e2:16:5a:16:15: 32:ab:68:a5:81:e8:eb:b2:7f:0d:7a:76:d9:de:41:d8:d4:80: bd:2a:36:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1yKL/TC38KNGiAbX427djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjUxMjMxMTkwMDQxWhcNMjYwMTAxMTkwMDQxWjAzMTEwLwYDVQQD EygxZjMyNTJkMGEwYzc5MTgzNjdkZWNkMTA3MTI1MzMwYTlhOWY3NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMCua/xBHe+QQavnB7arGTOBu8G+ mEVbYP77aoshNm9/RfopyV3JdAS4/TPXaeBtd2A13Gketa+xwq6j+Pf6UMzMeDel Yzs7T6QncLwdug/6Y5mCllRqmd7Pki+c/0mbgZrbXcqY+yihKd0DHpObj+W0a6Dr 9Nh8zUrbYVpc7DAsZ+oS2EMq22tLo67exRIQAPrppt5tPAHjg9WmtsO/Yr8iNiQx D8jHzlK6HfC9BxID7EwHLaPPrrJX5Ip4CYugoHSW91vMRLc4K26uf8JiEqnSwZFH cZlquel95+6lX91TmotPGVjsRN9I3n/XtayU2VmjNYFtqxTjvvj82DJ8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8yUtCgx5GDZ97NEHElMwqan3VwMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkvnssYp IfkrJcrMzwk/tREoVmEVlcA1UUhMTudNnEkmXZxZfxU064C8iso7eCmnMS5k93f3 DHVIBBKt2UkRDg0ynodR1i26nz3F7Pge/joFVPWix+p97Cu8x2vTop7Ircnjusd5 WwqYr+27m4cmLWI32JYfUDEJSe4OkeEHodqh3it9rhaGWsIKmWGqQfaFXnkjb4wj YBhdgrzCEIxQriyJPVV/GJH1SUEI1kGnlS/pfpAj0XIDQiFl7YYN20dkX4zCzr7r Ax2I61dLmNO5nquXwpdRFvfmGn7ULPWqaZqAkyJuTuIWWhYVMqtopYHo67J/DXp2 2d5B2NSAvSo27A== -----END CERTIFICATE-----Generated at Wed Dec 31 21:47:31 2025 by rpki-client