This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json) Hash identifier: zRfgMOZ4BZo5xU5KjThKNey2Pi2zywTo1mdrzUJpLo0= Subject key identifier: D3:33:0F:B1:B0:8A:BB:98:E3:D4:6A:53:99:9A:06:65:4A:E7:4F:6B Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b Certificate serial: 019B5117C2C572A40534ABF1127A51E053C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft Manifest number: 16FA Signing time: Wed 24 Dec 2025 16:01:10 +0000 Manifest this update: Wed 24 Dec 2025 16:01:10 +0000 Manifest next update: Thu 25 Dec 2025 16:01:10 +0000 Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=) 2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: 0MhXioezhxIpM0R4LdZA+0tEAmECoP+HgM/TPlixUxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:c2:c5:72:a4:05:34:ab:f1:12:7a:51:e0:53:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b Validity Not Before: Dec 24 16:01:10 2025 GMT Not After : Dec 25 16:01:10 2025 GMT Subject: CN=d3330fb1b08abb98e3d46a53999a06654ae74f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:2a:8c:2c:52:ed:48:1d:26:98:76:2f:21: de:9c:d9:e4:0f:51:5c:a1:e8:24:38:42:0e:bc:36: df:ba:04:14:48:ed:8a:3c:b9:15:e7:68:87:01:ef: 6f:c6:0c:ec:9e:c3:76:9d:62:d2:0b:a2:58:c0:98: 55:bd:fd:3d:df:7c:a8:23:85:0d:ab:c0:fb:b1:24: f9:61:d2:df:db:e4:98:18:c1:99:ed:a7:7e:73:9d: 1d:b5:f5:9f:de:db:d4:fd:d1:0b:f9:c9:45:3e:1e: a7:41:a5:77:6c:3f:74:6e:70:4f:a6:c0:9c:b7:5f: d6:f9:99:1f:f1:4b:4b:f1:ca:4e:1f:89:d1:96:f1: b8:1f:5a:8e:bd:ff:ef:21:c0:19:c8:b2:be:0b:f1: a1:a7:ab:fb:2f:f2:09:08:7f:90:9c:8c:98:9a:55: ab:45:fa:79:c0:08:e0:07:4b:c4:6b:1c:30:70:33: 86:9e:e6:c4:13:31:4b:a9:c0:d0:70:ad:c0:17:f7: a4:ce:5d:69:90:11:a2:19:50:b2:cc:e5:a8:c4:78: 7e:86:0b:fa:12:e2:4e:6f:00:94:e4:42:12:eb:c8: c8:40:4c:ba:cd:a1:ca:8a:cd:fe:d5:ba:7f:75:1e: 33:92:0f:a1:64:3d:76:01:be:fe:90:69:85:f7:5d: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:0F:B1:B0:8A:BB:98:E3:D4:6A:53:99:9A:06:65:4A:E7:4F:6B X509v3 Authority Key Identifier: keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7c:40:df:37:94:42:41:bb:12:5a:c3:d9:e0:17:c5:53:73: b2:0f:16:f7:02:45:3e:9d:40:b7:b9:0c:ee:3c:89:ba:cf:41: 99:15:9b:22:7f:1b:85:57:46:ff:94:32:41:65:1c:11:46:92: 4a:3c:87:12:3f:b4:0a:b9:da:b8:78:8f:46:83:f2:1b:90:c0: 55:76:e1:d9:e6:9f:05:a1:27:85:ed:a9:68:df:50:8c:5c:3d: 96:bb:9e:db:f2:ac:e8:3e:c3:c7:b6:b9:1a:8d:99:17:ae:45: 10:50:95:17:60:05:c3:78:6f:4c:ea:1f:32:da:e0:e7:bf:8d: 76:d0:63:a8:17:6f:83:de:be:2b:58:30:75:98:e1:5b:01:d3: 0d:8e:29:65:2a:0e:9d:4e:ed:82:d6:55:c6:61:29:48:8f:68: 1c:58:13:0d:72:4c:0f:41:07:69:af:af:f3:f7:76:41:c6:53: 7f:fd:08:5e:0f:ec:db:9a:c2:a3:7e:0a:5d:94:a3:dd:fb:a9: 9c:f4:b4:ef:79:be:c8:bb:81:dd:18:cb:64:45:e0:a4:2c:ee: cf:c7:86:37:41:be:21:13:fd:45:7a:04:42:af:b0:fd:e5:39: 7e:01:ad:bc:cb:3d:ad:ed:9d:65:0b:07:a5:63:12:ab:25:95: 88:c5:9b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF8LFcqQFNKvxEnpR4FPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWM2NDM5NDZhMDU5Mzk3MzU1NDIwZDczYmM0NWYxNGRh MmE3NmIwHhcNMjUxMjI0MTYwMTEwWhcNMjUxMjI1MTYwMTEwWjAzMTEwLwYDVQQD EyhkMzMzMGZiMWIwOGFiYjk4ZTNkNDZhNTM5OTlhMDY2NTRhZTc0ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11IqjCxS7UgdJph2LyHenNnkD1Fc oegkOEIOvDbfugQUSO2KPLkV52iHAe9vxgzsnsN2nWLSC6JYwJhVvf0933yoI4UN q8D7sST5YdLf2+SYGMGZ7ad+c50dtfWf3tvU/dEL+clFPh6nQaV3bD90bnBPpsCc t1/W+Zkf8UtL8cpOH4nRlvG4H1qOvf/vIcAZyLK+C/Ghp6v7L/IJCH+QnIyYmlWr Rfp5wAjgB0vEaxwwcDOGnubEEzFLqcDQcK3AF/ekzl1pkBGiGVCyzOWoxHh+hgv6 EuJObwCU5EIS68jIQEy6zaHKis3+1bp/dR4zkg+hZD12Ab7+kGmF912/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMzD7GwiruY49RqU5maBmVK509rMB8GA1UdIwQY MBaAFKGcZDlGoFk5c1VCDXO8RfFNoqdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYt YWMzYjZhNDU2N2JhLzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYtYWMzYjZhNDU2N2Jh LzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXxA3zeU QkG7ElrD2eAXxVNzsg8W9wJFPp1At7kM7jyJus9BmRWbIn8bhVdG/5QyQWUcEUaS SjyHEj+0CrnauHiPRoPyG5DAVXbh2eafBaEnhe2paN9QjFw9lrue2/Ks6D7Dx7a5 Go2ZF65FEFCVF2AFw3hvTOofMtrg57+NdtBjqBdvg96+K1gwdZjhWwHTDY4pZSoO nU7tgtZVxmEpSI9oHFgTDXJMD0EHaa+v8/d2QcZTf/0IXg/s25rCo34KXZSj3fup nPS073m+yLuB3RjLZEXgpCzuz8eGN0G+IRP9RXoEQq+w/eU5fgGtvMs9re2dZQsH pWMSqyWViMWbow== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:25 2025 by rpki-client