This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json) Hash identifier: /uUhxeaa1A9Se4r7c9PwoasuGi9SaQFJ4dWKxDKA8NM= Subject key identifier: 08:B3:8C:75:FB:47:6D:37:1F:13:35:A2:39:01:15:D3:5E:C1:26:E8 Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85 Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85 Certificate serial: 019B3AC69AB1A9F7496CCC7413AA4A071650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft Manifest number: 0732 Signing time: Sat 20 Dec 2025 08:00:52 +0000 Manifest this update: Sat 20 Dec 2025 08:00:52 +0000 Manifest next update: Sun 21 Dec 2025 08:00:52 +0000 Files and hashes: 1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=) 2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: OBCdXix8TPuG6K94sX5cWpAmAVdk34w6kY6aZJ5bE3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:9a:b1:a9:f7:49:6c:cc:74:13:aa:4a:07:16:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85 Validity Not Before: Dec 20 08:00:52 2025 GMT Not After : Dec 21 08:00:52 2025 GMT Subject: CN=08b38c75fb476d371f1335a2390115d35ec126e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:36:1b:28:92:62:cb:91:b8:de:45:b6:76: 9d:91:f9:00:25:5f:3a:c2:e3:13:01:79:76:2b:65: 45:28:e4:5e:87:b8:3e:00:6c:88:6e:05:24:cd:97: 81:b8:38:1b:ea:d6:09:64:6c:5f:d4:b0:1b:a4:2e: fe:db:60:f9:bd:6f:b1:23:e4:f4:ee:e0:76:d0:87: da:54:1a:8c:a0:7a:af:a8:d4:67:7f:ed:89:c5:a7: b6:d3:0d:90:92:ae:99:9a:e6:ee:09:5c:8a:a2:16: 1d:d4:16:f4:56:47:89:2b:e7:a4:c6:ac:d2:87:29: a1:5d:c8:e0:31:b2:2e:72:05:3f:fc:cf:e7:a2:59: 8c:66:b6:5a:00:6f:e7:0a:01:1c:e7:c4:e8:62:44: 96:e6:c0:f0:ba:fb:d0:8d:e2:95:76:90:ba:9f:75: 4f:74:56:51:1c:ce:5c:70:70:6a:fa:9a:e5:6d:10: af:95:1b:fb:e0:a8:52:cd:32:86:9e:72:53:d0:0d: 8b:b1:d0:05:52:79:1f:11:99:5b:45:9d:1b:49:9f: 7b:8f:93:dc:a5:fe:bb:05:95:f4:12:b4:4b:be:39: 44:12:7a:cb:ec:8e:0e:c4:24:a3:cc:4b:5f:75:36: e0:ed:3e:f4:b7:ad:c0:1e:dd:7a:fe:c8:31:b4:3c: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:8C:75:FB:47:6D:37:1F:13:35:A2:39:01:15:D3:5E:C1:26:E8 X509v3 Authority Key Identifier: keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8d:26:88:bc:19:ab:82:06:f9:83:a3:c3:91:c3:28:18:b6: 6e:78:0c:db:42:f2:23:0a:d5:e8:d3:0f:76:df:6c:40:8f:ce: 02:79:d0:11:4c:73:ae:63:15:27:43:74:d9:da:27:57:1e:87: 10:58:be:2b:aa:2f:94:f0:cc:fa:b1:3a:b3:44:ae:5e:e4:a9: 23:da:07:ad:40:82:d4:30:d2:f7:8f:21:4e:8c:da:dd:e5:6b: 29:65:cd:b0:a8:02:51:e9:df:65:01:99:c6:6e:cc:fb:98:eb: 08:68:68:0d:02:0b:f9:33:41:f4:dd:6f:bc:f8:44:68:4a:eb: f3:7e:c7:0f:23:bf:0b:a2:c5:97:3c:d3:53:e5:f2:a8:35:37: 37:9d:7e:37:07:ae:44:7a:67:5b:ab:78:dd:d5:00:dd:af:61: 98:10:fd:85:a3:f4:80:9c:ac:08:6a:79:49:5c:13:5b:f1:40: 6c:dd:72:0d:e6:1d:95:31:8f:7b:4a:83:18:c4:42:35:77:60: af:a9:c6:b5:72:26:51:fa:fb:bf:db:f5:7f:2c:18:f3:fc:f9: 30:e0:dd:0f:69:b0:83:cd:6f:99:17:c9:ec:ef:ad:49:eb:ab: eb:96:cd:43:e9:41:d1:1d:4b:7c:e1:51:75:c2:67:e1:5b:97: b1:f6:fc:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xpqxqfdJbMx0E6pKBxZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDBmOTY4ZmE1MmU2Y2IyZmU2NTcxMDk3MDBmYTA3NGMx OTBiODUwHhcNMjUxMjIwMDgwMDUyWhcNMjUxMjIxMDgwMDUyWjAzMTEwLwYDVQQD EygwOGIzOGM3NWZiNDc2ZDM3MWYxMzM1YTIzOTAxMTVkMzVlYzEyNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh02GyiSYsuRuN5FtnadkfkAJV86 wuMTAXl2K2VFKOReh7g+AGyIbgUkzZeBuDgb6tYJZGxf1LAbpC7+22D5vW+xI+T0 7uB20IfaVBqMoHqvqNRnf+2Jxae20w2Qkq6ZmubuCVyKohYd1Bb0VkeJK+ekxqzS hymhXcjgMbIucgU//M/nolmMZrZaAG/nCgEc58ToYkSW5sDwuvvQjeKVdpC6n3VP dFZRHM5ccHBq+prlbRCvlRv74KhSzTKGnnJT0A2LsdAFUnkfEZlbRZ0bSZ97j5Pc pf67BZX0ErRLvjlEEnrL7I4OxCSjzEtfdTbg7T70t63AHt16/sgxtDw4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAizjHX7R203HxM1ojkBFdNewSboMB8GA1UdIwQY MBaAFKBA+Wj6UubLL+ZXEJcA+gdMGQuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUt M2I2YjBhNTU1NWVmLzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUtM2I2YjBhNTU1NWVm LzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI0miLwZ q4IG+YOjw5HDKBi2bngM20LyIwrV6NMPdt9sQI/OAnnQEUxzrmMVJ0N02donVx6H EFi+K6ovlPDM+rE6s0SuXuSpI9oHrUCC1DDS948hToza3eVrKWXNsKgCUenfZQGZ xm7M+5jrCGhoDQIL+TNB9N1vvPhEaErr837HDyO/C6LFlzzTU+XyqDU3N51+Nweu RHpnW6t43dUA3a9hmBD9haP0gJysCGp5SVwTW/FAbN1yDeYdlTGPe0qDGMRCNXdg r6nGtXImUfr7v9v1fywY8/z5MODdD2mwg81vmRfJ7O+tSeur65bNQ+lB0R1LfOFR dcJn4VuXsfb8fA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:21 2025 by rpki-client