This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json) Hash identifier: oZqT/tNh/it2dIgQoKjPjUhLovJDUl+e0T2inbPffC4= Subject key identifier: A9:E9:97:07:2A:B5:0A:32:81:04:7B:5A:30:41:B1:7D:A9:39:6F:20 Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Certificate serial: 019B7110B6C2142AA90F93E90F140D57665E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft Manifest number: 0E52 Signing time: Tue 30 Dec 2025 21:01:19 +0000 Manifest this update: Tue 30 Dec 2025 21:01:19 +0000 Manifest next update: Wed 31 Dec 2025 21:01:19 +0000 Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=) 2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: gPqFVm8bJI50jsVBfOqXWuIXhnxcgnk6aCsanXODOic=) 3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:b6:c2:14:2a:a9:0f:93:e9:0f:14:0d:57:66:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Validity Not Before: Dec 30 21:01:19 2025 GMT Not After : Dec 31 21:01:19 2025 GMT Subject: CN=a9e997072ab50a3281047b5a3041b17da9396f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:70:38:24:55:29:f0:9d:10:b5:8f:6f:13: 6f:cd:a0:e0:5f:ae:4b:57:b7:60:9a:2d:bf:df:e4: 3a:f9:a9:0b:5d:e0:1d:d4:6a:fe:4a:6f:c2:dc:c1: 82:46:cb:f7:f7:1c:12:b0:11:11:3b:e2:4e:d5:c6: 90:b2:0e:2d:81:d1:c0:a8:04:e0:cc:90:1c:79:5a: 39:47:77:df:9c:a9:17:69:ae:12:50:d4:2e:dc:40: a1:c8:12:96:2e:e5:8e:95:a2:4c:2e:1e:49:06:24: b6:86:bc:75:e9:16:5e:45:c1:16:7b:05:c6:7a:85: 5f:ae:1f:c4:1b:22:1a:ff:f8:59:11:52:06:73:6c: c6:70:91:c0:f7:0d:dc:10:82:2b:ed:49:3a:88:73: f4:3c:f9:37:99:bb:68:0d:67:8a:b8:6a:81:e8:5a: d3:e9:a2:1c:20:7c:97:1b:92:ad:f7:cd:d5:40:5c: c8:70:a7:40:a8:a2:58:27:a1:0c:0b:99:c5:77:5b: ee:7f:95:88:f7:8f:41:80:3a:05:cf:fd:8e:2c:66: 98:d0:e3:14:a4:d4:03:c7:9d:75:77:ae:ed:b1:2f: 62:9b:38:73:04:a2:14:17:98:e2:d1:04:85:fa:39: 88:38:26:cc:7a:2f:62:7e:65:59:56:ad:df:2a:00: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:97:07:2A:B5:0A:32:81:04:7B:5A:30:41:B1:7D:A9:39:6F:20 X509v3 Authority Key Identifier: keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:d1:48:67:e3:49:90:b9:29:20:f0:0b:4f:ee:65:ad:4c:7f: e2:07:20:26:34:9a:23:ef:af:c6:e4:11:05:85:35:a1:50:d3: a9:43:3d:86:75:ed:07:ba:9b:0e:cb:b9:64:62:57:dd:c8:2b: 05:9c:46:fd:57:5b:e8:88:a5:50:4c:f0:d0:6e:bf:6f:03:d0: a4:87:e2:63:d2:2f:b2:a2:fd:0e:e6:30:40:b9:78:b1:17:11: f4:d9:cb:bd:01:4a:2f:d9:8a:d1:65:7e:48:05:27:58:e8:4e: 14:10:f1:45:0c:60:1d:1e:fb:8f:0d:87:40:2f:d7:f7:c9:07: c4:f7:01:ae:d7:c5:5f:51:03:87:6d:81:f1:0a:99:eb:c2:9b: 36:17:8a:9f:1d:c0:76:af:9b:8a:a8:ff:d9:48:1a:3b:1f:e8: 47:f2:bf:fe:2d:65:20:3e:61:ab:7a:35:66:79:1e:47:e1:b7: 46:72:da:7d:91:15:92:dc:22:24:e2:83:dd:7a:e1:c0:ec:a7: c7:f8:5a:bd:c7:df:98:80:c3:f2:e1:15:5c:5e:b1:a1:4a:e9: 19:7d:59:11:c4:05:9e:ba:54:42:4b:2a:92:64:72:37:c7:05: 30:2b:2c:d8:ce:25:1a:2a:d7:31:e9:17:36:24:18:50:30:74: 5c:83:61:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxELbCFCqpD5PpDxQNV2ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2 MGI1YzAwHhcNMjUxMjMwMjEwMTE5WhcNMjUxMjMxMjEwMTE5WjAzMTEwLwYDVQQD EyhhOWU5OTcwNzJhYjUwYTMyODEwNDdiNWEzMDQxYjE3ZGE5Mzk2ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofVwOCRVKfCdELWPbxNvzaDgX65L V7dgmi2/3+Q6+akLXeAd1Gr+Sm/C3MGCRsv39xwSsBERO+JO1caQsg4tgdHAqATg zJAceVo5R3ffnKkXaa4SUNQu3EChyBKWLuWOlaJMLh5JBiS2hrx16RZeRcEWewXG eoVfrh/EGyIa//hZEVIGc2zGcJHA9w3cEIIr7Uk6iHP0PPk3mbtoDWeKuGqB6FrT 6aIcIHyXG5Kt983VQFzIcKdAqKJYJ6EMC5nFd1vuf5WI949BgDoFz/2OLGaY0OMU pNQDx511d67tsS9imzhzBKIUF5ji0QSF+jmIOCbMei9ifmVZVq3fKgDTwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnplwcqtQoygQR7WjBBsX2pOW8gMB8GA1UdIwQY MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt MmNiOWUyMTcyZjk3LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3 LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2NFIZ+NJ kLkpIPALT+5lrUx/4gcgJjSaI++vxuQRBYU1oVDTqUM9hnXtB7qbDsu5ZGJX3cgr BZxG/Vdb6IilUEzw0G6/bwPQpIfiY9IvsqL9DuYwQLl4sRcR9NnLvQFKL9mK0WV+ SAUnWOhOFBDxRQxgHR77jw2HQC/X98kHxPcBrtfFX1EDh22B8QqZ68KbNheKnx3A dq+biqj/2UgaOx/oR/K//i1lID5hq3o1ZnkeR+G3RnLafZEVktwiJOKD3XrhwOyn x/havcffmIDD8uEVXF6xoUrpGX1ZEcQFnrpUQksqkmRyN8cFMCss2M4lGirXMekX NiQYUDB0XINhDw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:47:39 2025 by rpki-client