This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft File: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json) Hash identifier: xk6SJXLzOBkODh8Jf6hHz+p7NdNeBakrAzzPDC9K5II= Subject key identifier: B2:E3:78:84:C8:C5:FA:14:FA:09:0B:E7:83:C9:2C:9A:87:EA:07:88 Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE Certificate issuer: /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce Certificate serial: 019B50E03E3CADE2FCC92D5CA6BBAC4216F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft Manifest number: 074B Signing time: Wed 24 Dec 2025 15:00:31 +0000 Manifest this update: Wed 24 Dec 2025 15:00:31 +0000 Manifest next update: Thu 25 Dec 2025 15:00:31 +0000 Files and hashes: 1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=) 2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: z/wpAQ5alaSU/TmQxeCvDIqR+GLOj0nSJbtQwGq628Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:3e:3c:ad:e2:fc:c9:2d:5c:a6:bb:ac:42:16:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce Validity Not Before: Dec 24 15:00:31 2025 GMT Not After : Dec 25 15:00:31 2025 GMT Subject: CN=b2e37884c8c5fa14fa090be783c92c9a87ea0788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:a1:0f:72:59:8b:8b:c7:81:0a:f8:a0:d8: 13:d2:7a:c3:12:6b:2f:2f:5b:94:84:08:8d:55:8d: 51:a8:af:2d:d7:44:26:23:53:61:c3:b5:10:85:d5: 2b:1f:fa:83:bf:02:fb:f0:03:3a:1c:25:06:2a:92: 6b:02:6f:53:3a:09:7f:4b:db:d9:f2:ad:19:c7:5a: 02:a9:68:26:17:f7:1f:9c:d6:59:7b:21:b6:0e:31: 69:cd:cd:25:c9:2d:2d:39:a1:b6:5f:92:d4:6c:9d: 84:43:f7:26:22:80:97:b9:83:ce:d7:c9:1b:61:80: 77:a3:85:1f:41:d1:d2:87:4d:66:37:ac:2f:2a:da: 61:5b:46:f0:f6:5d:a2:90:0a:06:68:7a:f9:47:fe: a5:28:01:c4:10:5f:c5:63:3f:ce:12:e0:29:8d:42: cc:0e:0c:8d:46:13:f6:aa:46:c2:10:de:12:cd:1c: 4b:0c:bf:d1:5f:bf:84:fb:c9:1e:bb:45:92:95:14: 71:34:1e:fe:3a:b0:0b:cd:cb:15:16:13:c0:2f:08: fc:d7:28:9e:12:ab:9d:58:af:64:86:d3:a1:9a:fc: 1b:ea:04:e9:c8:99:9f:56:2f:04:5d:de:e4:5f:2c: c6:e1:57:0a:e2:dc:84:27:d2:93:b6:2b:6c:b9:7b: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:78:84:C8:C5:FA:14:FA:09:0B:E7:83:C9:2C:9A:87:EA:07:88 X509v3 Authority Key Identifier: keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:28:2a:4e:3e:ee:56:b9:47:eb:db:9b:be:42:21:cb:2b:37: f3:ff:a7:f3:ed:16:06:c0:0b:eb:85:5c:ba:d8:ed:03:5a:06: f9:03:31:2b:29:2f:75:1f:53:41:e9:b4:04:61:96:80:91:b8: ba:2b:e7:cd:cf:29:b8:80:98:3a:06:17:11:c3:59:4f:61:09: 9a:15:9e:a3:40:03:ff:dd:9c:2c:21:9e:cb:93:f8:d8:30:b5: ee:58:fe:f0:5f:0d:1f:22:0e:df:2a:e2:2d:d1:d3:84:36:0f: 32:e1:d4:14:a8:e6:4c:7e:09:51:6b:5b:72:ef:f1:d4:a5:7e: 91:f5:be:cb:d4:8c:97:08:dd:ad:65:6f:ce:72:f7:8e:90:eb: b5:3c:e6:7a:fb:d1:88:60:82:40:56:0b:b7:b4:cf:09:cb:b5: a9:10:7f:5a:2e:7f:0c:aa:bf:df:b8:1f:8b:b1:14:a2:9a:d8: 46:4a:45:88:d8:29:ca:09:8c:42:d8:fb:95:87:a2:ba:b5:a9: 91:f0:e3:4b:44:b3:a5:5c:de:a9:83:bc:0c:d4:ae:a9:90:07: b5:78:60:ca:28:21:dd:c7:fd:00:d5:52:18:89:f6:71:b8:24: 9d:5e:e0:65:75:a3:81:1c:79:15:84:fc:56:3f:05:73:8c:fc: b1:08:43:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4D48reL8yS1cprusQhb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTY4YWU5OWMyNGIyMDczYTBhYzMyODAzMjQzYzNiZWEx ZTY3Y2UwHhcNMjUxMjI0MTUwMDMxWhcNMjUxMjI1MTUwMDMxWjAzMTEwLwYDVQQD EyhiMmUzNzg4NGM4YzVmYTE0ZmEwOTBiZTc4M2M5MmM5YTg3ZWEwNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWmhD3JZi4vHgQr4oNgT0nrDEmsv L1uUhAiNVY1RqK8t10QmI1Nhw7UQhdUrH/qDvwL78AM6HCUGKpJrAm9TOgl/S9vZ 8q0Zx1oCqWgmF/cfnNZZeyG2DjFpzc0lyS0tOaG2X5LUbJ2EQ/cmIoCXuYPO18kb YYB3o4UfQdHSh01mN6wvKtphW0bw9l2ikAoGaHr5R/6lKAHEEF/FYz/OEuApjULM DgyNRhP2qkbCEN4SzRxLDL/RX7+E+8keu0WSlRRxNB7+OrALzcsVFhPALwj81yie EqudWK9khtOhmvwb6gTpyJmfVi8EXd7kXyzG4VcK4tyEJ9KTtitsuXt2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLjeITIxfoU+gkL54PJLJqH6geIMB8GA1UdIwQY MBaAFKLmiumcJLIHOgrDKAMkPDvqHmfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lODRjNzctNTI3Mi00MTJiLWIzZmQt YzRkZTY3ZTEzZWIwLzEvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lODRjNzctNTI3Mi00MTJiLWIzZmQtYzRkZTY3ZTEzZWIw LzEvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARygqTj7u VrlH69ubvkIhyys38/+n8+0WBsAL64VcutjtA1oG+QMxKykvdR9TQem0BGGWgJG4 uivnzc8puICYOgYXEcNZT2EJmhWeo0AD/92cLCGey5P42DC17lj+8F8NHyIO3yri LdHThDYPMuHUFKjmTH4JUWtbcu/x1KV+kfW+y9SMlwjdrWVvznL3jpDrtTzmevvR iGCCQFYLt7TPCcu1qRB/Wi5/DKq/37gfi7EUoprYRkpFiNgpygmMQtj7lYeiurWp kfDjS0SzpVzeqYO8DNSuqZAHtXhgyigh3cf9ANVSGIn2cbgknV7gZXWjgRx5FYT8 Vj8Fc4z8sQhD5g== -----END CERTIFICATE-----Generated at Wed Dec 24 18:51:26 2025 by rpki-client