This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json) Hash identifier: VQSbedqvoLsvKiwwqgv84HDEBV//04gkkUMGbp1x1FQ= Subject key identifier: DD:6E:F7:03:06:66:D6:00:5F:1B:B3:9F:31:5B:07:BC:68:67:9C:06 Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43 Certificate serial: 019B4738DCA1CCF7CE8B329C716B2450BAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft Manifest number: 14CE Signing time: Mon 22 Dec 2025 18:01:07 +0000 Manifest this update: Mon 22 Dec 2025 18:01:07 +0000 Manifest next update: Tue 23 Dec 2025 18:01:07 +0000 Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=) 2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: zeOQJ/5JlF8ccusVMzWDfNGBEghfxxW1YZgHa7Qr6nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:dc:a1:cc:f7:ce:8b:32:9c:71:6b:24:50:ba:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43 Validity Not Before: Dec 22 18:01:07 2025 GMT Not After : Dec 23 18:01:07 2025 GMT Subject: CN=dd6ef7030666d6005f1bb39f315b07bc68679c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:ce:31:7f:d1:a5:a6:f8:9d:06:9d:f1:1c: 03:ce:37:9c:3f:b1:eb:0d:a7:90:a1:e2:3e:dc:52: 66:59:a3:f6:db:ac:ba:93:49:56:0d:0b:1a:39:cc: 32:c9:2d:7b:58:bf:34:e5:1b:ff:6c:28:13:0a:c9: b0:4e:4b:80:2b:df:71:8d:af:3a:5d:b9:3a:31:44: bd:bc:58:92:e6:4d:04:5b:6c:05:4d:39:2e:e2:e6: 11:54:ff:e3:df:6c:f6:b5:dd:3e:49:c5:11:d6:82: 3a:59:5f:d0:b7:94:25:5c:36:72:e1:aa:7f:1a:2c: 1b:74:f5:65:1c:d3:24:5b:8e:5c:30:23:30:b3:5f: 2c:38:c6:7f:f6:90:c5:55:70:30:3a:15:91:5e:0c: bb:9f:c4:38:a6:76:96:40:96:56:6f:6e:ef:58:83: 9c:a5:32:be:ef:ed:fb:c9:ec:af:68:97:1a:1f:26: 81:1f:e8:c1:35:c6:de:8d:a6:63:65:33:e7:78:3a: 8c:dd:8e:63:1d:fb:0c:4d:2b:ac:f6:9c:7d:93:e5: ca:88:4e:ae:33:4f:be:32:bb:d5:5a:a6:6e:b1:ff: c6:57:f3:fb:50:cd:12:b0:b4:e2:7a:c9:4a:00:a9: 6a:d0:53:c9:a6:43:a3:fb:f5:47:b7:fb:c8:b4:b1: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:F7:03:06:66:D6:00:5F:1B:B3:9F:31:5B:07:BC:68:67:9C:06 X509v3 Authority Key Identifier: keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:af:68:9f:a0:70:46:15:97:61:c9:1a:44:80:7d:76:b8:99: 65:09:58:8f:08:91:3c:5e:79:f6:d1:15:53:08:ac:a2:53:f8: 24:bb:8d:44:23:a4:22:5f:17:01:da:04:f5:10:41:ef:4f:e0: 44:ea:10:37:f5:8c:f0:1f:58:18:70:64:22:77:e6:b8:0a:78: e0:71:df:aa:52:77:99:ec:e1:1b:40:68:98:27:af:0e:08:9d: 59:f2:55:a8:08:dc:bc:80:53:1e:82:cc:ca:97:b0:92:6a:a4: 1e:9d:35:cf:d1:f8:14:50:9d:19:fc:ff:54:ab:2e:36:d0:d7: f7:ac:cb:c2:ca:69:5a:04:1e:ba:b3:aa:e2:b3:81:a2:65:ef: ca:b3:f1:8d:88:ec:30:09:13:16:2c:b5:96:c9:d6:bd:a2:f9: b3:b3:dc:74:b8:a9:4d:4a:e0:b5:eb:ea:e9:87:be:fe:6e:e2: 5d:e4:e6:59:51:18:2c:ba:4f:24:19:da:9d:9f:c5:db:ed:fb: 16:21:6f:64:7e:30:f8:cb:cd:62:b8:7f:f3:b0:63:85:43:99: 5a:e6:31:d9:fb:62:9f:fa:c1:a2:23:3b:ad:5b:ad:7a:b3:71: ae:ad:9c:f8:07:3a:bb:aa:9d:7f:22:58:c1:1a:69:8f:54:51: d4:18:61:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHONyhzPfOizKccWskULrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjVlNjU3NDljYWE1ZmJiNDkxZTkwNjk3N2RiMThkMzU1 OWJmNDMwHhcNMjUxMjIyMTgwMTA3WhcNMjUxMjIzMTgwMTA3WjAzMTEwLwYDVQQD EyhkZDZlZjcwMzA2NjZkNjAwNWYxYmIzOWYzMTViMDdiYzY4Njc5YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHTOMX/Rpab4nQad8RwDzjecP7Hr DaeQoeI+3FJmWaP226y6k0lWDQsaOcwyyS17WL805Rv/bCgTCsmwTkuAK99xja86 Xbk6MUS9vFiS5k0EW2wFTTku4uYRVP/j32z2td0+ScUR1oI6WV/Qt5QlXDZy4ap/ GiwbdPVlHNMkW45cMCMws18sOMZ/9pDFVXAwOhWRXgy7n8Q4pnaWQJZWb27vWIOc pTK+7+37yeyvaJcaHyaBH+jBNcbejaZjZTPneDqM3Y5jHfsMTSus9px9k+XKiE6u M0++MrvVWqZusf/GV/P7UM0SsLTieslKAKlq0FPJpkOj+/VHt/vItLEpewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1u9wMGZtYAXxuznzFbB7xoZ5wGMB8GA1UdIwQY MBaAFKBl5ldJyqX7tJHpBpd9sY01Wb9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMt MGVlODQ3ZDNmYjc5LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMtMGVlODQ3ZDNmYjc5 LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja9on6Bw RhWXYckaRIB9driZZQlYjwiRPF559tEVUwisolP4JLuNRCOkIl8XAdoE9RBB70/g ROoQN/WM8B9YGHBkInfmuAp44HHfqlJ3mezhG0BomCevDgidWfJVqAjcvIBTHoLM ypewkmqkHp01z9H4FFCdGfz/VKsuNtDX96zLwsppWgQeurOq4rOBomXvyrPxjYjs MAkTFiy1lsnWvaL5s7PcdLipTUrgtevq6Ye+/m7iXeTmWVEYLLpPJBnanZ/F2+37 FiFvZH4w+MvNYrh/87BjhUOZWuYx2ftin/rBoiM7rVuterNxrq2c+Ac6u6qdfyJY wRppj1RR1Bhhag== -----END CERTIFICATE-----Generated at Mon Dec 22 22:57:04 2025 by rpki-client