This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json) Hash identifier: SMOj8btbyiOQenqzqBNkl+YRHK/wE43rPKq3WwXxYls= Subject key identifier: A8:A8:11:6A:6A:4E:DD:1C:1E:91:42:A8:B2:55:C9:09:8D:41:F0:FF Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a Certificate serial: 019B522A9670E2295078378147A43C9B9725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft Manifest number: 06D8 Signing time: Wed 24 Dec 2025 21:01:21 +0000 Manifest this update: Wed 24 Dec 2025 21:01:21 +0000 Manifest next update: Thu 25 Dec 2025 21:01:21 +0000 Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=) 2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: pP1NTjyqBqbmdFKUxxzXp4u2LSwedO0zfe8dBj3wC38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:96:70:e2:29:50:78:37:81:47:a4:3c:9b:97:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a Validity Not Before: Dec 24 21:01:21 2025 GMT Not After : Dec 25 21:01:21 2025 GMT Subject: CN=a8a8116a6a4edd1c1e9142a8b255c9098d41f0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:e6:fd:be:0e:41:2e:fc:45:48:e2:4f:e6: 0c:3a:e0:46:f2:b1:60:8a:4d:19:2b:77:d4:42:eb: bf:19:3a:6c:74:58:10:16:35:58:7d:a2:cf:60:c4: b2:c4:b3:a1:ed:e7:6d:31:06:f1:67:f9:83:4e:21: d8:17:8d:91:5f:8b:bb:cb:7d:85:88:04:0f:43:23: 38:0e:59:10:92:a5:b0:59:70:53:64:62:45:8e:13: f0:90:3c:bb:68:e9:df:50:30:43:04:22:31:e4:41: 8a:04:48:c0:8c:f5:3f:14:60:ff:32:85:4d:41:11: 4e:e3:cd:0b:7f:24:1d:21:9f:fd:2b:cc:a2:af:c7: a2:75:d4:1c:f4:f6:e9:cf:44:b8:ad:16:9a:20:aa: 14:3e:31:5f:0c:d8:d0:2c:36:bb:9b:52:e7:47:02: 24:cb:10:7b:e6:9c:99:fe:78:f3:e2:1d:82:72:5c: 20:35:cb:89:36:b4:87:28:7a:ea:71:06:1a:5f:f4: b5:53:ed:ac:d3:02:f3:19:68:15:51:02:08:9b:ea: 70:06:1c:8b:56:43:34:35:0a:29:fb:79:60:9c:b8: 54:d6:b2:b3:4c:37:0e:a2:85:a3:01:1f:a0:89:f6: b7:db:af:93:d2:e7:7d:f9:54:a9:bb:ab:1f:8a:42: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A8:11:6A:6A:4E:DD:1C:1E:91:42:A8:B2:55:C9:09:8D:41:F0:FF X509v3 Authority Key Identifier: keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cf:a0:16:df:76:19:92:9b:5c:68:8d:23:d3:df:ed:5b:53: 5c:a7:09:5a:80:d1:80:57:3f:44:2c:19:86:64:74:54:95:87: 16:95:98:f1:b4:7c:5a:2a:c9:42:af:c1:6e:5e:2a:bc:9f:c8: 50:cf:aa:d3:1a:b1:12:06:b4:46:f4:98:c7:49:4f:75:b8:32: 82:ab:b9:da:2d:23:f7:3e:68:c0:64:42:02:b0:b9:0c:1e:a3: 58:72:97:f2:fa:0c:a5:ea:7e:ba:13:b3:9f:94:de:6b:3a:a1: f3:c4:64:72:b2:dc:9d:60:b1:c6:2a:61:e2:e5:80:c0:d7:c6: 45:31:5e:ba:c0:dd:34:6a:f3:aa:0a:57:3b:92:81:5d:54:cf: 7c:74:0a:b0:82:f4:53:5f:8a:bd:22:b5:16:14:d7:d2:91:ea: 0d:a8:6a:e8:4c:5e:2b:ac:c1:44:e2:f4:a3:8b:4c:36:f3:1b: 06:eb:33:63:a2:87:d6:c7:ff:ab:24:ec:fc:47:f2:34:5b:6c: dd:63:10:e2:b8:62:c8:4b:6a:2c:33:7f:09:70:9b:f6:29:d6: 3a:ba:97:14:f2:53:26:e3:c4:81:6e:0b:58:7f:75:5a:71:ad: c5:fb:18:f1:30:ff:ee:09:2b:03:8c:f6:ac:fa:a6:ae:48:ad: f4:97:9a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKpZw4ilQeDeBR6Q8m5clMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx NTZjMGEwHhcNMjUxMjI0MjEwMTIxWhcNMjUxMjI1MjEwMTIxWjAzMTEwLwYDVQQD EyhhOGE4MTE2YTZhNGVkZDFjMWU5MTQyYThiMjU1YzkwOThkNDFmMGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP3m/b4OQS78RUjiT+YMOuBG8rFg ik0ZK3fUQuu/GTpsdFgQFjVYfaLPYMSyxLOh7edtMQbxZ/mDTiHYF42RX4u7y32F iAQPQyM4DlkQkqWwWXBTZGJFjhPwkDy7aOnfUDBDBCIx5EGKBEjAjPU/FGD/MoVN QRFO480LfyQdIZ/9K8yir8eiddQc9Pbpz0S4rRaaIKoUPjFfDNjQLDa7m1LnRwIk yxB75pyZ/njz4h2CclwgNcuJNrSHKHrqcQYaX/S1U+2s0wLzGWgVUQIIm+pwBhyL VkM0NQop+3lgnLhU1rKzTDcOooWjAR+gifa326+T0ud9+VSpu6sfikL+HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKioEWpqTt0cHpFCqLJVyQmNQfD/MB8GA1UdIwQY MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4 LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM+gFt92 GZKbXGiNI9Pf7VtTXKcJWoDRgFc/RCwZhmR0VJWHFpWY8bR8WirJQq/Bbl4qvJ/I UM+q0xqxEga0RvSYx0lPdbgygqu52i0j9z5owGRCArC5DB6jWHKX8voMpep+uhOz n5Teazqh88RkcrLcnWCxxiph4uWAwNfGRTFeusDdNGrzqgpXO5KBXVTPfHQKsIL0 U1+KvSK1FhTX0pHqDahq6ExeK6zBROL0o4tMNvMbBuszY6KH1sf/qyTs/EfyNFts 3WMQ4rhiyEtqLDN/CXCb9inWOrqXFPJTJuPEgW4LWH91WnGtxfsY8TD/7gkrA4z2 rPqmrkit9Jeang== -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:33 2025 by rpki-client