This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft File: oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json) Hash identifier: mhduRBa2/mmw0N1KQ8UUQnyHs9SqBPZZDIkh1LijZv8= Subject key identifier: FE:B9:34:F6:8F:C7:82:1B:64:01:0B:74:ED:DC:EF:29:F5:C1:6E:C3 Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 Certificate issuer: /CN=a122d6d21bd04c46224653a49be029e3c024b846 Certificate serial: 019B3CB4C5F079EE80A2C2FEC4BA04BE833E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft Manifest number: 038F Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=) 2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=) 3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=) 4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: r9CT2wde/ZLiMrrp6joxll0HvI0uj2qcpV6mLrrx5sI=) 5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c5:f0:79:ee:80:a2:c2:fe:c4:ba:04:be:83:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=feb934f68fc7821b64010b74eddcef29f5c16ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:de:a7:31:56:c8:7d:fc:3f:d4:26:12:90: 5f:b2:16:9b:2d:3a:8d:47:17:0b:5a:19:22:fa:5b: e5:0a:e5:23:9b:13:f0:9c:a4:71:28:24:ec:48:28: 98:00:1b:c0:99:1d:da:6a:d6:a2:69:8c:11:cf:72: 40:42:30:ac:bc:00:63:b3:b2:8a:f6:d9:e1:5c:9a: 76:e6:23:b9:34:b9:07:03:39:88:cc:e3:b6:d2:bd: 66:f8:e4:36:83:fd:9b:be:e3:17:38:96:9a:11:8e: ef:fe:36:ae:5d:0e:a4:68:1d:ff:8d:b9:e7:a9:b5: 4b:7d:d0:8c:14:44:d0:57:34:4a:69:83:c9:ce:3d: 30:e0:0b:fb:6c:ce:c2:7f:71:08:df:5f:3a:00:12: 5a:76:12:8a:7a:1a:0d:a7:36:3a:83:d7:33:b7:bc: ae:df:b5:e9:25:ec:01:df:44:81:96:71:6a:26:96: f1:ae:78:b1:40:f0:e3:7d:1e:5b:63:a8:d7:cc:4a: e3:69:65:9a:c4:a9:0a:78:9a:c7:7b:d3:e8:7d:83: 79:29:b7:1b:ee:26:8e:2d:12:6b:b9:1a:66:79:2f: 53:e1:ab:0f:17:49:e9:32:99:32:c2:34:3f:48:51: b1:06:a9:a8:36:5c:79:bf:99:34:71:c0:3f:8e:db: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:34:F6:8F:C7:82:1B:64:01:0B:74:ED:DC:EF:29:F5:C1:6E:C3 X509v3 Authority Key Identifier: keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:72:f3:3e:e5:fd:ff:ed:2d:b6:06:7a:ab:40:11:81:17:ae: 7d:28:ee:3d:bb:1d:3c:34:22:0e:83:6a:46:5f:9a:6c:48:d9: ce:d3:6b:a0:b0:a2:dc:6a:2c:d9:56:83:64:3e:e7:34:62:88: 30:c1:d0:7a:08:23:f7:51:7c:27:9e:da:35:e5:67:e3:07:51: a7:1b:79:c5:dd:27:29:85:59:c6:b7:55:9e:b9:05:48:97:54: ab:8a:54:0c:7d:a5:83:3b:86:67:3d:99:fb:8a:b9:30:0f:40: cb:7a:a4:95:31:e7:ab:0a:8b:8c:11:8e:4b:fb:d5:e0:40:e7: d0:59:f9:64:f9:08:93:6b:29:63:01:a3:75:e5:76:98:30:a0: a4:1b:1b:d9:73:ff:5a:fa:bb:a6:ae:cd:4e:99:44:be:65:11: 2c:7b:21:eb:d3:b2:63:0c:27:b5:b3:07:56:80:10:69:7c:46: 89:5e:61:e5:04:66:6c:89:c7:cf:fd:3e:b3:8c:a5:95:a3:0d: 5e:3d:91:3f:16:2e:81:5e:99:ed:b7:05:03:8f:a7:9b:f7:87: 52:89:eb:c8:ad:f8:53:03:c1:7e:74:4c:ee:b4:a4:cc:ef:62: 3f:89:09:ed:8e:14:bd:3f:e6:4b:53:06:05:20:1a:92:43:05: a1:27:2e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMXwee6AosL+xLoEvoM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjJkNmQyMWJkMDRjNDYyMjQ2NTNhNDliZTAyOWUzYzAy NGI4NDYwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD EyhmZWI5MzRmNjhmYzc4MjFiNjQwMTBiNzRlZGRjZWYyOWY1YzE2ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DjepzFWyH38P9QmEpBfshabLTqN RxcLWhki+lvlCuUjmxPwnKRxKCTsSCiYABvAmR3aataiaYwRz3JAQjCsvABjs7KK 9tnhXJp25iO5NLkHAzmIzOO20r1m+OQ2g/2bvuMXOJaaEY7v/jauXQ6kaB3/jbnn qbVLfdCMFETQVzRKaYPJzj0w4Av7bM7Cf3EI3186ABJadhKKehoNpzY6g9czt7yu 37XpJewB30SBlnFqJpbxrnixQPDjfR5bY6jXzErjaWWaxKkKeJrHe9PofYN5Kbcb 7iaOLRJruRpmeS9T4asPF0npMpkywjQ/SFGxBqmoNlx5v5k0ccA/jtuxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP65NPaPx4IbZAELdO3c7yn1wW7DMB8GA1UdIwQY MBaAFKEi1tIb0ExGIkZTpJvgKePAJLhGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDct NWYyNTFhMDNmYTJiLzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDctNWYyNTFhMDNmYTJi LzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnLzPuX9 /+0ttgZ6q0ARgReufSjuPbsdPDQiDoNqRl+abEjZztNroLCi3Gos2VaDZD7nNGKI MMHQeggj91F8J57aNeVn4wdRpxt5xd0nKYVZxrdVnrkFSJdUq4pUDH2lgzuGZz2Z +4q5MA9Ay3qklTHnqwqLjBGOS/vV4EDn0Fn5ZPkIk2spYwGjdeV2mDCgpBsb2XP/ Wvq7pq7NTplEvmURLHsh69OyYwwntbMHVoAQaXxGiV5h5QRmbInHz/0+s4yllaMN Xj2RPxYugV6Z7bcFA4+nm/eHUonryK34UwPBfnRM7rSkzO9iP4kJ7Y4UvT/mS1MG BSAakkMFoScuvg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:00 2025 by rpki-client