This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json) Hash identifier: Lhz/N9TjpyYADEOIfrCo0fvlYxScJocAIl/+7TLrnU8= Subject key identifier: 40:7E:B5:F2:9D:14:C8:1F:16:23:23:B9:11:E2:34:C9:6C:48:9B:7B Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Certificate serial: 019B3A220CD7BC27425399D987A80015F4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft Manifest number: 0901 Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=) 2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: A2fWMtKL0fbNc0RuSAf1SOStExs78LBz2hRjkBs3GW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0c:d7:bc:27:42:53:99:d9:87:a8:00:15:f4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=407eb5f29d14c81f162323b911e234c96c489b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:50:ec:73:39:51:79:88:28:c9:d9:eb:41: 1a:75:46:a9:7a:11:81:35:41:69:08:4a:df:75:58: 8b:6d:14:50:5c:81:26:1d:f6:da:63:b3:5b:e1:cc: a8:00:05:ab:09:ad:64:71:69:e3:24:37:d1:5d:86: de:90:e0:2c:c9:4a:58:bb:73:fa:51:24:ee:04:d1: 34:c7:1e:70:68:14:9f:c5:7b:98:18:e9:54:9b:3a: cd:89:c5:f8:37:ba:c9:d5:d1:e0:fd:49:5e:58:52: 4f:93:e5:26:03:00:7b:ab:a3:5a:47:7d:a1:f4:09: 2f:7a:d1:54:1e:eb:04:8a:de:87:ff:de:0e:9f:56: ec:05:c4:2f:a9:7d:d8:3f:5f:36:76:76:3d:e9:5d: 76:ad:e8:32:35:46:40:a6:e9:e4:b5:16:4f:d6:99: 92:d5:39:08:b2:34:10:92:3f:b4:ee:cf:4e:bd:d2: a2:b5:ec:00:ba:59:29:d3:b5:9e:f7:26:1e:6e:21: 32:a4:96:cb:48:45:1e:98:41:fd:fa:bb:29:b2:e4: 9d:4c:2f:0b:65:4b:19:76:0c:95:5f:fc:ff:44:f9: 13:a1:8e:c6:c7:a1:20:b1:5f:4e:0e:57:f1:b6:1e: fa:32:09:77:e3:4d:49:f0:0b:f3:55:fa:a1:5b:27: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:B5:F2:9D:14:C8:1F:16:23:23:B9:11:E2:34:C9:6C:48:9B:7B X509v3 Authority Key Identifier: keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:27:a8:ac:d6:42:a3:44:52:e7:02:e0:04:7c:97:d2:37: e8:60:7d:43:60:a2:37:ef:f2:64:33:b4:0d:6b:08:43:0b:e7: f4:88:98:c9:fe:0f:c0:36:e2:0b:34:43:7e:9e:f7:c5:0a:5b: cf:5c:8d:2a:f1:e3:85:fa:f4:51:e4:46:ef:e0:05:91:66:9e: ee:26:d3:f4:ba:47:c3:ae:a0:c5:16:c5:a0:97:7c:c9:ca:36: e5:bf:f0:b0:3a:d0:f9:7f:cf:32:ae:81:8f:be:2c:12:04:02: aa:8d:34:67:cb:c7:25:89:58:81:e2:3a:04:d5:00:a2:7a:9e: 81:d2:28:fa:c0:4e:b9:e2:2a:cc:78:de:ca:63:ea:71:9e:47: 35:d0:0e:74:1c:bd:f0:fa:f5:20:49:ac:6b:49:a0:f6:b6:39: 2b:4a:33:f1:ba:28:76:a7:f3:6a:cc:8b:c3:ac:fd:63:81:c2: 95:f7:48:59:b5:e8:c8:af:af:73:09:65:2a:80:41:c1:04:0c: 27:a9:8e:29:4e:28:39:ec:d4:38:1b:a0:fe:a9:61:76:18:dd: 4f:4b:43:bc:74:2d:5a:f2:46:f1:ce:f2:29:dd:ba:0d:f7:bf: 5b:98:3c:65:fb:bd:1a:4f:8e:36:c5:2b:83:7f:a9:68:f5:2d: 30:57:3a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IgzXvCdCU5nZh6gAFfSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTQ3MDM5ZDlmMDgwYTQyN2Y3NTI1YzVkMDY2ZjZjZjYy MTM0ZjMwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD Eyg0MDdlYjVmMjlkMTRjODFmMTYyMzIzYjkxMWUyMzRjOTZjNDg5YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2dQ7HM5UXmIKMnZ60EadUapehGB NUFpCErfdViLbRRQXIEmHfbaY7Nb4cyoAAWrCa1kcWnjJDfRXYbekOAsyUpYu3P6 USTuBNE0xx5waBSfxXuYGOlUmzrNicX4N7rJ1dHg/UleWFJPk+UmAwB7q6NaR32h 9AkvetFUHusEit6H/94On1bsBcQvqX3YP182dnY96V12regyNUZApunktRZP1pmS 1TkIsjQQkj+07s9OvdKitewAulkp07We9yYebiEypJbLSEUemEH9+rspsuSdTC8L ZUsZdgyVX/z/RPkToY7Gx6EgsV9ODlfxth76Mgl3401J8AvzVfqhWyc8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB+tfKdFMgfFiMjuRHiNMlsSJt7MB8GA1UdIwQY MBaAFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQt YzhiM2FjMGJlZmNiLzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQtYzhiM2FjMGJlZmNi LzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAYnqKzW QqNEUucC4AR8l9I36GB9Q2CiN+/yZDO0DWsIQwvn9IiYyf4PwDbiCzRDfp73xQpb z1yNKvHjhfr0UeRG7+AFkWae7ibT9LpHw66gxRbFoJd8yco25b/wsDrQ+X/PMq6B j74sEgQCqo00Z8vHJYlYgeI6BNUAonqegdIo+sBOueIqzHjeymPqcZ5HNdAOdBy9 8Pr1IEmsa0mg9rY5K0oz8boodqfzasyLw6z9Y4HClfdIWbXoyK+vcwllKoBBwQQM J6mOKU4oOezUOBug/qlhdhjdT0tDvHQtWvJG8c7yKd26Dfe/W5g8Zfu9Gk+ONsUr g3+paPUtMFc63w== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:15 2025 by rpki-client