This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json) Hash identifier: YaiQ4C9WJkQ0rp7jAheAqFCY+IBdvlJxXGQ+VWlfG1A= Subject key identifier: 44:AF:3A:A6:B8:5F:1A:CF:1E:AF:81:1B:1D:01:16:72:1C:81:24:EB Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Certificate serial: 019B3C7FC1A0E52BF972AA6F2B66BE0C3C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft Manifest number: 13B0 Signing time: Sat 20 Dec 2025 16:02:44 +0000 Manifest this update: Sat 20 Dec 2025 16:02:44 +0000 Manifest next update: Sun 21 Dec 2025 16:02:44 +0000 Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=) 2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: C19BPsDevNaDohIe/dTT4oSP2lgHbdM8E/GtkygqwI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c1:a0:e5:2b:f9:72:aa:6f:2b:66:be:0c:3c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Validity Not Before: Dec 20 16:02:44 2025 GMT Not After : Dec 21 16:02:44 2025 GMT Subject: CN=44af3aa6b85f1acf1eaf811b1d0116721c8124eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:06:cb:af:25:e0:19:52:2a:5e:68:d0:be: 0f:16:9a:77:3e:8d:78:2d:96:97:e6:ca:61:c8:50: 4f:0e:1f:e8:32:0f:c9:cf:19:a7:b6:29:73:2e:fb: 40:68:43:e6:88:78:d3:6a:e7:42:c0:45:ee:87:40: bd:d7:d5:30:1a:da:4f:ca:d8:d1:3b:84:97:58:86: 54:9a:6e:17:f3:12:65:51:bd:03:1e:bc:0d:b7:46: 90:1f:22:8d:62:90:79:e9:66:a1:a4:4a:90:74:6f: 1e:31:cc:29:89:45:37:d4:cf:92:eb:44:0c:3d:3b: 49:49:f3:9b:10:92:15:d7:af:9c:4e:0a:6b:98:e6: 91:99:c5:3b:95:8e:29:51:ea:5c:4b:79:e6:ca:6e: f1:fb:38:d8:14:31:d5:7a:83:33:59:47:28:b3:ca: 55:59:13:83:49:1e:4c:df:15:ae:4e:ef:ce:a3:66: 0d:87:7b:0a:01:67:fd:60:68:b5:a6:a8:da:11:57: 9c:a3:8f:c6:d5:71:60:8c:d7:cc:d8:06:d7:89:1a: ca:7c:db:c5:c6:f8:d6:f8:60:dd:aa:d0:ed:90:20: b6:8e:54:95:90:df:f5:68:94:97:e8:47:76:72:31: 66:9a:7d:9d:d5:d2:d8:c7:4c:ec:85:1e:50:a2:ee: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AF:3A:A6:B8:5F:1A:CF:1E:AF:81:1B:1D:01:16:72:1C:81:24:EB X509v3 Authority Key Identifier: keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5c:19:76:bd:dd:24:fa:6e:6d:00:dc:00:06:f3:36:fe:88: 4c:d6:ee:1a:00:40:0f:4d:1e:8a:a8:bc:18:39:6e:d1:77:cb: 00:d6:91:89:96:1b:f3:87:1d:65:95:9e:1f:8f:fc:db:80:13: 6f:62:fb:17:18:df:43:c7:f2:bc:39:d2:e9:1f:58:db:ac:b7: 44:b3:50:84:95:7c:02:48:9a:ad:b9:eb:a4:fe:c0:c3:95:e1: f1:33:5a:9d:d0:98:7b:64:63:15:56:90:e1:ff:f6:d2:f2:5b: a7:1f:6e:dc:52:c8:7e:e4:f6:80:52:42:f1:0b:1f:ae:20:62: ed:9f:c8:04:28:05:b3:28:67:e0:24:b8:e0:a8:49:5a:51:e7: ab:5a:e5:77:58:06:e2:5d:11:5c:0f:ca:f4:f0:fe:41:7f:96: d3:41:3f:ab:41:34:38:1d:c2:98:21:81:0f:2b:a3:fe:b3:b3: 50:2d:8d:8e:c9:b8:f0:db:56:cd:8e:3b:23:7f:25:f9:06:24: 5f:c7:c5:1e:f1:1f:a7:13:94:52:13:6f:d7:cd:a2:d4:e3:0e: c0:6d:72:6f:f3:96:c0:a1:4d:3a:e5:47:2c:f7:2c:96:fc:7d: dd:61:1c:8c:cc:5e:3a:22:3e:fb:c7:06:af:0b:2a:73:ef:0f: 04:5b:a7:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8Gg5Sv5cqpvK2a+DDxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk NjdiZTMwHhcNMjUxMjIwMTYwMjQ0WhcNMjUxMjIxMTYwMjQ0WjAzMTEwLwYDVQQD Eyg0NGFmM2FhNmI4NWYxYWNmMWVhZjgxMWIxZDAxMTY3MjFjODEyNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbsGy68l4BlSKl5o0L4PFpp3Po14 LZaX5sphyFBPDh/oMg/JzxmntilzLvtAaEPmiHjTaudCwEXuh0C919UwGtpPytjR O4SXWIZUmm4X8xJlUb0DHrwNt0aQHyKNYpB56WahpEqQdG8eMcwpiUU31M+S60QM PTtJSfObEJIV16+cTgprmOaRmcU7lY4pUepcS3nmym7x+zjYFDHVeoMzWUcos8pV WRODSR5M3xWuTu/Oo2YNh3sKAWf9YGi1pqjaEVeco4/G1XFgjNfM2AbXiRrKfNvF xvjW+GDdqtDtkCC2jlSVkN/1aJSX6Ed2cjFmmn2d1dLYx0zshR5Qou69QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESvOqa4XxrPHq+BGx0BFnIcgSTrMB8GA1UdIwQY MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1wZdr3d JPpubQDcAAbzNv6ITNbuGgBAD00eiqi8GDlu0XfLANaRiZYb84cdZZWeH4/824AT b2L7FxjfQ8fyvDnS6R9Y26y3RLNQhJV8AkiarbnrpP7Aw5Xh8TNandCYe2RjFVaQ 4f/20vJbpx9u3FLIfuT2gFJC8QsfriBi7Z/IBCgFsyhn4CS44KhJWlHnq1rld1gG 4l0RXA/K9PD+QX+W00E/q0E0OB3CmCGBDyuj/rOzUC2Njsm48NtWzY47I38l+QYk X8fFHvEfpxOUUhNv182i1OMOwG1yb/OWwKFNOuVHLPcslvx93WEcjMxeOiI++8cG rwsqc+8PBFuncw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:27 2025 by rpki-client