This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json) Hash identifier: Piz+oQyvXn70lVjI9s1J6FIRWBt1GTsQcdnRgUQiOQM= Subject key identifier: 27:BB:77:A5:A4:3C:B8:9F:18:55:6E:72:B4:B9:48:46:12:41:82:1E Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00 Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500 Certificate serial: 019B41DB68521C1F6F2ED701CEEAFAC2DB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft Manifest number: 1185 Signing time: Sun 21 Dec 2025 17:00:56 +0000 Manifest this update: Sun 21 Dec 2025 17:00:56 +0000 Manifest next update: Mon 22 Dec 2025 17:00:56 +0000 Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=) 2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: RsE9W86X9edoOBdofqWK4PYNzhY85WXFGHWcg+LBf6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:68:52:1c:1f:6f:2e:d7:01:ce:ea:fa:c2:db:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500 Validity Not Before: Dec 21 17:00:56 2025 GMT Not After : Dec 22 17:00:56 2025 GMT Subject: CN=27bb77a5a43cb89f18556e72b4b948461241821e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:81:27:48:21:9b:95:5f:b4:38:fa:78:e9: d5:05:30:88:41:87:76:e6:04:f3:97:ee:a0:d9:12: 76:56:86:78:a0:69:ef:d6:53:66:67:59:58:3d:a4: 77:f2:d1:23:f1:c8:f3:04:23:84:d3:d5:21:26:9b: 04:38:62:f3:dc:55:b5:fe:61:36:e7:5d:28:40:49: ca:be:c3:47:df:9e:a8:2b:ba:25:4b:ce:b1:74:e3: ba:2f:09:4d:7d:c1:5a:dd:6d:84:d6:d7:79:21:ba: 23:14:83:61:06:fd:cf:13:9e:d8:c1:f5:56:63:f4: 25:e4:07:5b:e9:1a:5d:d5:b5:f4:b9:ef:e1:c8:f9: 4a:e9:49:ec:f6:97:cb:c1:39:e0:1f:4b:d0:9e:f0: 6e:98:6f:82:f1:d1:63:ed:99:2e:94:df:fc:ed:11: 7a:90:c0:1a:e8:ae:e1:bf:8c:2b:e7:85:60:77:78: 10:b6:48:02:0f:57:42:fe:bd:e7:45:ed:ad:c8:85: 8e:b9:df:b1:b7:2b:f0:dc:1b:24:e1:ae:29:4e:69: 0a:b2:b9:df:d6:c4:03:78:44:c5:55:38:be:86:67: 20:ef:66:46:ee:86:cc:31:1a:42:e6:b3:a4:4c:6e: 5e:9d:02:93:aa:13:c4:5b:d5:23:73:0b:3f:a0:95: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:77:A5:A4:3C:B8:9F:18:55:6E:72:B4:B9:48:46:12:41:82:1E X509v3 Authority Key Identifier: keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1c:93:20:6b:6c:7c:97:0b:e3:8e:80:bd:21:fb:5c:1f:d3: ec:2a:d6:cb:76:ee:4b:84:17:32:99:0c:39:3f:70:70:ed:30: b2:11:3c:45:4c:64:26:d0:04:e2:08:a2:46:78:a2:59:31:20: 85:87:d9:38:0c:26:ab:72:99:91:d1:19:7c:58:2b:39:64:ec: 1b:54:24:46:01:19:0e:4d:76:9d:50:7c:42:92:50:b8:f0:43: 56:ae:d3:dd:8d:77:6d:87:eb:08:a2:36:a9:c4:c5:f5:11:fa: e8:ea:c2:56:8a:49:67:85:b2:aa:90:91:42:2d:67:e3:25:e2: 49:46:5e:1f:59:5e:bb:66:c4:f5:5f:27:06:c1:7f:6e:75:44: e3:10:21:45:61:36:26:bc:04:50:87:43:99:f4:21:d8:c5:c0: c7:e7:3e:21:2e:42:9a:65:39:b1:29:58:03:c2:06:01:48:3e: 7c:cb:45:db:85:bf:48:17:0f:b3:3b:39:6f:d4:97:79:ef:95: 64:6d:90:9b:05:2b:c3:3d:a6:a8:2a:f3:dd:8f:43:d7:12:e0: c1:d1:d4:ae:e5:09:bf:25:d1:14:02:ec:8e:82:d1:8e:0b:f7: 63:e3:fe:67:0b:c4:c1:9a:64:5a:b7:69:d5:e7:8c:fb:fa:44: 15:e9:96:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB22hSHB9vLtcBzur6wttNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmMzY2UyMzcxYjlmMjFjNTdlMGMzYTU3ODdkOTVhNzM1 Y2I1MDAwHhcNMjUxMjIxMTcwMDU2WhcNMjUxMjIyMTcwMDU2WjAzMTEwLwYDVQQD EygyN2JiNzdhNWE0M2NiODlmMTg1NTZlNzJiNGI5NDg0NjEyNDE4MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2aBJ0ghm5VftDj6eOnVBTCIQYd2 5gTzl+6g2RJ2VoZ4oGnv1lNmZ1lYPaR38tEj8cjzBCOE09UhJpsEOGLz3FW1/mE2 510oQEnKvsNH356oK7olS86xdOO6LwlNfcFa3W2E1td5IbojFINhBv3PE57YwfVW Y/Ql5Adb6Rpd1bX0ue/hyPlK6Uns9pfLwTngH0vQnvBumG+C8dFj7ZkulN/87RF6 kMAa6K7hv4wr54Vgd3gQtkgCD1dC/r3nRe2tyIWOud+xtyvw3Bsk4a4pTmkKsrnf 1sQDeETFVTi+hmcg72ZG7obMMRpC5rOkTG5enQKTqhPEW9Ujcws/oJUDGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCe7d6WkPLifGFVucrS5SEYSQYIeMB8GA1UdIwQY MBaAFKIsPOI3G58hxX4MOleH2VpzXLUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUt MDUzOTNmMmIzYTQ3LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUtMDUzOTNmMmIzYTQ3 LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthyTIGts fJcL446AvSH7XB/T7CrWy3buS4QXMpkMOT9wcO0wshE8RUxkJtAE4giiRniiWTEg hYfZOAwmq3KZkdEZfFgrOWTsG1QkRgEZDk12nVB8QpJQuPBDVq7T3Y13bYfrCKI2 qcTF9RH66OrCVopJZ4WyqpCRQi1n4yXiSUZeH1leu2bE9V8nBsF/bnVE4xAhRWE2 JrwEUIdDmfQh2MXAx+c+IS5CmmU5sSlYA8IGAUg+fMtF24W/SBcPszs5b9SXee+V ZG2QmwUrwz2mqCrz3Y9D1xLgwdHUruUJvyXRFALsjoLRjgv3Y+P+ZwvEwZpkWrdp 1eeM+/pEFemWSA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:22 2025 by rpki-client