This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json) Hash identifier: PJxKBxOXS94qQ5UspNTJ5+pEtaeQUwjbnGuTnS/gQmo= Subject key identifier: D6:D9:15:73:97:E0:43:02:ED:33:CD:98:94:75:7D:F5:7F:1E:E0:AF Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Certificate serial: 019B3079B0ED98C39190AB89D0ED3408A661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft Manifest number: 08FC Signing time: Thu 18 Dec 2025 08:00:40 +0000 Manifest this update: Thu 18 Dec 2025 08:00:40 +0000 Manifest next update: Fri 19 Dec 2025 08:00:40 +0000 Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=) 2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: RD74mzZ2FQN4CIB4Dbkkhespx7V+Vi3sOs+7GYW5U8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:b0:ed:98:c3:91:90:ab:89:d0:ed:34:08:a6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Validity Not Before: Dec 18 08:00:40 2025 GMT Not After : Dec 19 08:00:40 2025 GMT Subject: CN=d6d9157397e04302ed33cd9894757df57f1ee0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:59:71:08:13:06:7e:72:be:08:7c:cc:49: ce:2d:29:a4:87:80:72:54:d0:7b:93:cf:91:12:50: c8:20:fc:cf:03:05:66:63:48:e3:fe:29:2a:50:33: e7:3b:a5:b4:77:06:25:e2:60:1e:56:bf:d0:c2:90: 2e:84:db:ae:9a:0c:be:86:50:2c:91:d3:89:97:a8: cc:59:c3:84:31:5a:5b:90:84:86:33:93:db:86:6c: 5d:78:43:85:96:65:78:a4:f7:3c:f0:ca:b0:76:f4: c9:1f:b0:2a:0d:8d:ca:19:0f:dc:2d:25:21:c9:7c: 45:04:d0:d2:8f:4a:ea:90:c6:8d:94:39:40:26:75: e7:ca:17:a8:04:41:a3:44:90:1a:b7:9b:ef:a3:fa: 2c:5e:66:40:21:c6:c0:e2:b7:16:ac:68:27:85:2a: 72:d2:33:b4:3e:58:17:60:b7:6f:42:ab:f4:64:d8: c8:9d:cc:ea:68:b4:d5:8a:bc:ff:21:19:3e:82:bc: cd:82:7a:97:4e:23:a9:8e:4a:c9:f3:d2:e0:f4:6f: 9d:0f:9b:3f:f8:72:b1:87:fc:a3:97:e7:d9:7c:39: 42:55:ae:71:10:af:a2:50:35:d4:d6:ba:4c:fe:0c: 24:3c:55:4f:9d:df:30:d3:8f:cb:4b:cf:39:46:5c: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:15:73:97:E0:43:02:ED:33:CD:98:94:75:7D:F5:7F:1E:E0:AF X509v3 Authority Key Identifier: keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:96:01:57:8d:25:a3:d7:df:cb:0e:88:92:fa:cf:16:65:56: 8d:ce:f8:ef:79:ec:73:23:2d:d0:8b:df:a8:fa:36:24:14:f8: bb:37:ce:4a:23:15:2e:a0:ce:4c:85:e9:2e:ef:f8:5e:64:e3: 44:c1:8a:2f:29:cb:0c:7b:b8:ca:fe:29:cb:30:af:04:7b:3e: 60:8f:a7:c5:c7:36:72:8c:48:89:b9:78:57:65:4b:bb:8f:e1: 64:17:a9:60:ee:d9:81:f5:0f:4a:13:60:a7:52:69:ee:f2:19: 94:76:1e:a4:9a:6c:2d:9f:5b:a2:41:17:9b:22:77:97:07:b7: 62:06:09:e7:c9:5a:9f:58:2a:d8:ce:36:ac:94:71:4a:34:8e: 62:1a:c7:70:75:5e:7b:d2:25:5f:94:e5:80:24:87:34:72:ab: 61:e9:b2:00:e2:f2:ad:da:47:de:5f:8e:a4:8a:3a:4e:88:ab: 2b:02:10:52:f9:39:e3:49:12:30:b9:10:63:0e:a8:16:46:7e: 08:0e:07:53:63:f0:a2:8a:9b:f6:f9:3c:a7:16:df:d5:5f:c8: ff:b1:aa:93:25:cd:d8:5f:fe:84:4b:85:5b:ba:69:56:e2:fe: c7:5f:e4:b9:79:3a:dd:e4:41:c9:f7:74:1c:4f:49:9e:da:1d: 96:c6:df:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswebDtmMORkKuJ0O00CKZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTQ3MDM5ZDlmMDgwYTQyN2Y3NTI1YzVkMDY2ZjZjZjYy MTM0ZjMwHhcNMjUxMjE4MDgwMDQwWhcNMjUxMjE5MDgwMDQwWjAzMTEwLwYDVQQD EyhkNmQ5MTU3Mzk3ZTA0MzAyZWQzM2NkOTg5NDc1N2RmNTdmMWVlMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsolZcQgTBn5yvgh8zEnOLSmkh4By VNB7k8+RElDIIPzPAwVmY0jj/ikqUDPnO6W0dwYl4mAeVr/QwpAuhNuumgy+hlAs kdOJl6jMWcOEMVpbkISGM5PbhmxdeEOFlmV4pPc88MqwdvTJH7AqDY3KGQ/cLSUh yXxFBNDSj0rqkMaNlDlAJnXnyheoBEGjRJAat5vvo/osXmZAIcbA4rcWrGgnhSpy 0jO0PlgXYLdvQqv0ZNjInczqaLTVirz/IRk+grzNgnqXTiOpjkrJ89Lg9G+dD5s/ +HKxh/yjl+fZfDlCVa5xEK+iUDXU1rpM/gwkPFVPnd8w04/LS885RlxacQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbZFXOX4EMC7TPNmJR1ffV/HuCvMB8GA1UdIwQY MBaAFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQt YzhiM2FjMGJlZmNiLzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQtYzhiM2FjMGJlZmNi LzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5YBV40l o9ffyw6IkvrPFmVWjc7473nscyMt0IvfqPo2JBT4uzfOSiMVLqDOTIXpLu/4XmTj RMGKLynLDHu4yv4pyzCvBHs+YI+nxcc2coxIibl4V2VLu4/hZBepYO7ZgfUPShNg p1Jp7vIZlHYepJpsLZ9bokEXmyJ3lwe3YgYJ58lan1gq2M42rJRxSjSOYhrHcHVe e9IlX5TlgCSHNHKrYemyAOLyrdpH3l+OpIo6ToirKwIQUvk540kSMLkQYw6oFkZ+ CA4HU2Pwooqb9vk8pxbf1V/I/7GqkyXN2F/+hEuFW7ppVuL+x1/kuXk63eRByfd0 HE9Jntodlsbf5A== -----END CERTIFICATE-----Generated at Thu Dec 18 11:58:13 2025 by rpki-client