This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json) Hash identifier: yhpC3gqOcnRTY66pvcPoMla28deussFVagBNBbwxmrI= Subject key identifier: D8:1B:35:0C:E3:B8:B6:40:BB:86:1B:83:95:4D:62:B0:76:19:08:51 Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced Certificate serial: 019B3C7E7F1DADC66EADB70814F11934B6E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft Manifest number: 03FA Signing time: Sat 20 Dec 2025 16:01:21 +0000 Manifest this update: Sat 20 Dec 2025 16:01:21 +0000 Manifest next update: Sun 21 Dec 2025 16:01:21 +0000 Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=) 2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=) 3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: T6KF13TIm2RFUfO46o50DvI/3j+YObaNYyePdedhtnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:7f:1d:ad:c6:6e:ad:b7:08:14:f1:19:34:b6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced Validity Not Before: Dec 20 16:01:21 2025 GMT Not After : Dec 21 16:01:21 2025 GMT Subject: CN=d81b350ce3b8b640bb861b83954d62b076190851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:01:09:7d:74:6b:76:3d:01:46:5c:04:e1: 9f:62:6c:39:17:35:e6:f7:c2:74:cf:8c:a4:e8:1b: c8:8e:75:d2:01:ca:54:b4:ec:44:79:eb:eb:4b:37: 29:6c:72:f6:b6:91:61:1e:68:74:bc:4f:fa:c8:e5: 3c:03:34:bb:ea:27:ca:68:b6:fa:76:c0:db:98:b5: ce:b8:c5:e4:99:cc:2c:c8:d4:32:4f:df:79:1e:92: 0d:02:59:27:cb:f8:9e:47:6e:a8:df:ab:34:bd:54: b8:78:40:26:14:f5:29:56:c6:81:98:91:d2:de:41: 9b:68:c9:94:c7:c8:df:ea:98:5d:47:21:f3:3a:62: b8:b8:81:ff:72:8e:79:40:64:18:48:1a:f2:1b:e9: fd:56:a3:96:1f:41:d0:64:f0:70:e0:49:a3:b6:8a: d5:3e:87:f2:97:1b:19:ea:4e:a4:43:f2:41:59:b4: 15:10:f5:df:4a:86:ba:f6:c0:4e:18:1d:fc:f8:95: 07:af:cc:56:4b:4a:bc:a0:95:c5:5f:ac:f2:44:80: 12:50:07:52:d0:28:ae:ab:a1:e7:c7:af:87:bd:66: 6a:99:1f:05:57:e7:b5:54:55:ec:79:a8:8a:31:ed: 60:a1:e8:63:4a:78:41:e4:89:33:2e:89:3d:60:ce: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:35:0C:E3:B8:B6:40:BB:86:1B:83:95:4D:62:B0:76:19:08:51 X509v3 Authority Key Identifier: keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:86:12:a5:f1:6e:d9:a3:0e:88:8e:ec:3a:4b:13:27:3a:d1: b5:e6:61:c5:7e:4b:3f:d8:5f:03:15:05:f6:31:9a:6d:dc:80: 8c:a9:a4:93:cf:16:4b:91:e5:fa:b8:f2:ad:6f:76:4c:4f:aa: 37:2e:58:eb:e4:3d:1a:3c:2e:ad:ef:95:33:ef:b9:a5:e7:e4: aa:2a:ac:c6:c4:9d:a0:4e:ec:72:8e:b1:9f:e3:8b:0c:f0:3c: fa:6f:43:7f:fe:e4:3f:c1:65:e3:8a:ae:39:ee:b2:a7:c3:3d: 74:d9:5b:ac:3d:1f:1a:29:bd:77:bd:f5:4b:f8:f7:8d:26:d4: bb:54:97:b2:8c:b0:91:33:33:78:22:3a:2e:a4:ae:19:05:d5: dc:e0:92:e3:a9:08:51:e7:42:b8:d7:d4:49:3c:0c:e8:84:8b: 83:64:7f:c9:e0:99:97:62:7f:e3:0f:5b:34:e5:27:51:2f:c2: dc:94:ba:47:da:d1:23:45:a2:88:ce:1a:d5:e2:31:84:c9:28: 79:a6:a9:d0:ac:7d:7b:9d:74:10:77:82:38:51:07:77:bf:fd: 17:15:f5:72:bd:09:b8:f5:7a:78:26:30:08:18:66:85:97:a1: a5:c5:6d:d7:97:5a:78:b8:ff:ea:c8:39:21:ff:9c:52:68:48: d8:ac:7f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fn8drcZurbcIFPEZNLboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj NDBjZWQwHhcNMjUxMjIwMTYwMTIxWhcNMjUxMjIxMTYwMTIxWjAzMTEwLwYDVQQD EyhkODFiMzUwY2UzYjhiNjQwYmI4NjFiODM5NTRkNjJiMDc2MTkwODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja4BCX10a3Y9AUZcBOGfYmw5FzXm 98J0z4yk6BvIjnXSAcpUtOxEeevrSzcpbHL2tpFhHmh0vE/6yOU8AzS76ifKaLb6 dsDbmLXOuMXkmcwsyNQyT995HpINAlkny/ieR26o36s0vVS4eEAmFPUpVsaBmJHS 3kGbaMmUx8jf6phdRyHzOmK4uIH/co55QGQYSBryG+n9VqOWH0HQZPBw4EmjtorV PofylxsZ6k6kQ/JBWbQVEPXfSoa69sBOGB38+JUHr8xWS0q8oJXFX6zyRIASUAdS 0Ciuq6Hnx6+HvWZqmR8FV+e1VFXseaiKMe1goehjSnhB5IkzLok9YM43fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgbNQzjuLZAu4Ybg5VNYrB2GQhRMB8GA1UdIwQY MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0 LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4YSpfFu 2aMOiI7sOksTJzrRteZhxX5LP9hfAxUF9jGabdyAjKmkk88WS5Hl+rjyrW92TE+q Ny5Y6+Q9Gjwure+VM++5pefkqiqsxsSdoE7sco6xn+OLDPA8+m9Df/7kP8Fl44qu Oe6yp8M9dNlbrD0fGim9d731S/j3jSbUu1SXsoywkTMzeCI6LqSuGQXV3OCS46kI UedCuNfUSTwM6ISLg2R/yeCZl2J/4w9bNOUnUS/C3JS6R9rRI0WiiM4a1eIxhMko eaap0Kx9e510EHeCOFEHd7/9FxX1cr0JuPV6eCYwCBhmhZehpcVt15daeLj/6sg5 If+cUmhI2Kx/dQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:30:21 2025 by rpki-client