This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json) Hash identifier: JDAa3wpgASz5cfbqM4nYF5NHc+IO8HcgO1kXb7m7nv8= Subject key identifier: CB:0E:8A:5A:7D:55:41:CA:DF:56:69:61:74:E9:43:95:D0:DB:36:C8 Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Certificate serial: 019B4F6003340BD9A5F0D15EB22C6021FD16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft Manifest number: 179B Signing time: Wed 24 Dec 2025 08:00:50 +0000 Manifest this update: Wed 24 Dec 2025 08:00:50 +0000 Manifest next update: Thu 25 Dec 2025 08:00:50 +0000 Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=) 2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=) 3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: J2e04SszlFFOFaI1ClbqyGqwj7JIhy2IkqkNfwpiLBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:03:34:0b:d9:a5:f0:d1:5e:b2:2c:60:21:fd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Validity Not Before: Dec 24 08:00:50 2025 GMT Not After : Dec 25 08:00:50 2025 GMT Subject: CN=cb0e8a5a7d5541cadf56696174e94395d0db36c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:ae:59:63:e8:32:bc:5b:2a:65:0a:66:b3: e4:ac:f8:68:a5:2a:db:90:86:aa:91:3c:2b:3d:50: 5d:9f:ac:ee:d8:e6:d7:99:db:7e:71:66:3c:bb:50: 53:62:2a:bc:06:d5:03:c4:80:0e:f8:41:9f:75:e5: df:b1:39:23:8b:f7:90:24:61:bd:f2:75:56:91:2c: 87:cc:27:54:b3:5a:5a:4d:89:da:f5:c1:0c:3a:ac: f8:ab:55:f2:17:90:8a:e2:02:64:b7:3d:c5:12:e5: 83:b5:7f:52:b2:72:2a:56:b1:9c:61:0d:a4:5a:46: b2:48:4a:db:36:b5:c7:33:13:4d:29:dd:5a:f4:34: 74:56:6e:0d:95:9e:56:bc:5e:ef:69:1f:f9:53:59: f6:d0:2e:90:18:11:83:85:fa:e2:94:f9:d6:a8:87: 7b:14:88:bb:59:0b:d9:cc:50:55:6e:4c:9e:e7:7d: 67:68:89:74:8e:62:94:2a:44:05:7d:c9:c4:da:26: 69:f1:a7:67:02:5d:07:11:b5:ac:b4:54:32:f7:f8: 77:4f:bc:30:e4:de:e1:71:8b:04:0b:b3:48:84:84: 4c:c9:10:61:9e:7b:d2:e6:e4:27:66:b1:b4:f7:c7: 23:f4:cb:73:dc:83:55:1a:71:f2:26:99:24:e9:8f: 15:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0E:8A:5A:7D:55:41:CA:DF:56:69:61:74:E9:43:95:D0:DB:36:C8 X509v3 Authority Key Identifier: keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b8:9f:af:21:be:16:67:ea:c7:74:75:7a:24:9b:fe:b3:8f: 5e:71:91:07:87:99:b2:9d:06:5e:0a:65:be:f7:06:21:19:52: 21:56:41:c6:ae:ff:9d:04:26:c3:04:ca:df:75:f8:ee:8c:c9: f9:86:ee:07:69:6f:f5:57:00:8e:e4:94:bc:83:73:9c:8a:f2: ca:f4:f2:3f:b1:f1:86:8e:17:db:88:2d:63:be:3c:dd:9e:7a: 66:61:74:5d:36:25:93:ce:98:48:6f:0d:cf:73:0c:fc:eb:2a: 54:21:21:9c:f8:df:b6:9c:8a:13:1e:5a:59:4e:84:b6:ed:2a: 36:64:26:36:90:50:74:ad:5d:fc:8f:64:01:22:fa:72:47:b6: 8d:6f:21:fa:21:a9:74:ab:99:93:a6:54:e7:19:fb:fb:f3:f6: 00:eb:2f:5c:70:ca:9a:96:18:43:e2:b6:46:5c:6d:85:40:97: a2:7b:3d:08:80:cc:8e:de:b5:2b:ae:4a:43:1a:6d:fd:5d:c7: 31:39:35:de:b7:62:c8:5f:17:cf:af:3a:1d:51:43:b9:57:a9: ee:ea:25:5a:4b:31:23:45:19:4f:9d:13:2d:1c:d8:2f:a8:37: af:23:b0:26:ce:7b:d5:bd:eb:1e:0d:46:61:73:94:a8:fe:82: b5:48:06:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYAM0C9ml8NFesixgIf0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm OWUwYTAwHhcNMjUxMjI0MDgwMDUwWhcNMjUxMjI1MDgwMDUwWjAzMTEwLwYDVQQD EyhjYjBlOGE1YTdkNTU0MWNhZGY1NjY5NjE3NGU5NDM5NWQwZGIzNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywquWWPoMrxbKmUKZrPkrPhopSrb kIaqkTwrPVBdn6zu2ObXmdt+cWY8u1BTYiq8BtUDxIAO+EGfdeXfsTkji/eQJGG9 8nVWkSyHzCdUs1paTYna9cEMOqz4q1XyF5CK4gJktz3FEuWDtX9SsnIqVrGcYQ2k WkaySErbNrXHMxNNKd1a9DR0Vm4NlZ5WvF7vaR/5U1n20C6QGBGDhfrilPnWqId7 FIi7WQvZzFBVbkye531naIl0jmKUKkQFfcnE2iZp8adnAl0HEbWstFQy9/h3T7ww 5N7hcYsEC7NIhIRMyRBhnnvS5uQnZrG098cj9Mtz3INVGnHyJpkk6Y8VaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsOilp9VUHK31ZpYXTpQ5XQ2zbIMB8GA1UdIwQY MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLifryG+ Fmfqx3R1eiSb/rOPXnGRB4eZsp0GXgplvvcGIRlSIVZBxq7/nQQmwwTK33X47ozJ +YbuB2lv9VcAjuSUvINznIryyvTyP7Hxho4X24gtY7483Z56ZmF0XTYlk86YSG8N z3MM/OsqVCEhnPjftpyKEx5aWU6Etu0qNmQmNpBQdK1d/I9kASL6cke2jW8h+iGp dKuZk6ZU5xn7+/P2AOsvXHDKmpYYQ+K2RlxthUCXons9CIDMjt61K65KQxpt/V3H MTk13rdiyF8Xz686HVFDuVep7uolWksxI0UZT50TLRzYL6g3ryOwJs571b3rHg1G YXOUqP6CtUgGMg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:15:49 2025 by rpki-client