This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json) Hash identifier: N5rIlEHV0ScmX3Q/VfqPmD1ZKTeoIyPHDvdGICqrsec= Subject key identifier: C8:DD:D8:60:52:F2:A5:F9:55:23:09:0A:5D:18:33:3B:75:FD:5A:4C Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019B3A589401B9FF4FF18F01F548792F5B0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft Manifest number: 179F Signing time: Sat 20 Dec 2025 06:00:42 +0000 Manifest this update: Sat 20 Dec 2025 06:00:42 +0000 Manifest next update: Sun 21 Dec 2025 06:00:42 +0000 Files and hashes: 1: 9i_Fy4mZRlfNURa4hayKcHdiMEY.roa (hash: PDPb352f2JPLuJHrhYLanZ+7oePAn4VxO33SNBFdxI0=) 2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: vdeW9YV9QNltHr1HXo/uLgEFbDWJFPMhGIjdq2wOR3E=) 3: sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa (hash: /IXlZY/hi3esdJuWdO3U7HevNnK2FSj61hj5YPxercA=) 4: vZVAzO1comLh9rD--AKOhaNfFxQ.roa (hash: H/PssdlCji8ajNbZih50zN0dew5cG4Cssgd64RB/Rhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:94:01:b9:ff:4f:f1:8f:01:f5:48:79:2f:5b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Dec 20 06:00:42 2025 GMT Not After : Dec 21 06:00:42 2025 GMT Subject: CN=c8ddd86052f2a5f95523090a5d18333b75fd5a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:9f:a2:84:4d:7f:98:f0:10:15:4e:ea:98: 37:fc:1b:18:74:65:87:19:f9:bc:3a:5e:0b:52:88: 8c:30:90:8e:6a:9d:a5:fd:5d:e2:6e:e8:20:86:4e: b6:2f:f9:22:5a:f9:68:50:4b:ab:9b:b7:42:51:fc: e8:f5:d5:dd:42:cc:52:c5:6e:17:b2:bd:33:3e:13: 3d:02:4c:cb:bc:59:6d:c5:4c:2a:bd:8c:60:29:bf: 2f:20:2f:68:5b:3b:6d:10:c2:48:75:81:ce:ab:41: ed:28:55:4b:b7:95:38:52:18:ae:35:f4:70:17:2f: 3d:ad:90:2f:4b:b1:19:62:d7:2e:af:91:ee:90:56: 51:c6:75:0b:af:f7:92:56:48:b0:96:8f:ba:ad:5c: 0a:6c:e7:af:59:e4:53:a5:e9:f0:d0:a2:a2:07:ca: b9:c7:2c:de:9e:b6:31:f3:eb:92:35:9e:dd:ad:21: b1:9e:bc:6c:3e:13:34:d8:6f:bb:1a:2f:e3:46:d6: 5e:fa:5f:77:7d:e6:f3:29:9e:00:fb:64:e0:d4:14: 64:47:1c:63:8d:66:76:a3:33:aa:e4:ed:3d:f5:f0: 4c:19:8b:b2:76:42:fe:be:e5:ae:77:ad:5e:02:9c: a3:b6:f8:6b:49:80:1d:48:ae:2e:53:f9:63:02:8b: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DD:D8:60:52:F2:A5:F9:55:23:09:0A:5D:18:33:3B:75:FD:5A:4C X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:48:36:ee:77:70:ee:18:f5:88:17:64:4f:00:d6:35:6e:a0: 23:08:84:d9:e1:3c:a0:9c:15:c4:43:62:b7:dd:42:18:8a:2f: bb:ab:19:2f:ec:2f:81:4e:c5:14:69:72:b3:fc:2a:da:fb:fc: 7a:e2:e1:f4:0b:9d:d2:b2:53:4f:3c:a3:7a:ea:10:87:b8:b1: 90:b0:9e:29:9c:59:6a:e3:98:20:23:e6:48:2a:38:db:00:c2: e4:cf:7e:0d:fc:5b:14:bd:31:ef:33:48:ac:b1:23:dc:e0:59: b9:6b:f7:d2:04:cd:a8:12:40:65:61:0a:04:59:ef:e9:b7:9b: 87:4b:4c:7a:23:40:af:5b:7d:8e:83:9a:e7:7a:36:27:f1:3e: fa:69:1c:9c:a3:ab:37:d3:12:18:aa:c1:bd:67:79:d5:9b:e2: 2f:c9:a1:df:f1:aa:46:6b:5f:6d:d4:e1:df:6f:e6:38:c9:04: fc:e9:b3:f6:93:8a:4d:f3:44:54:2a:ad:f6:8e:ca:a5:2a:42: b3:e5:30:db:24:b1:99:5a:66:45:e3:4d:1d:51:ee:23:c5:f0: c4:d9:81:21:da:0d:9d:f9:04:a1:ce:bf:83:ff:bd:c0:16:97: 2b:34:90:db:a8:e4:19:82:f5:af:79:fa:c9:f3:0b:8f:69:bf: cb:83:fe:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJQBuf9P8Y8B9Uh5L1sPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMjIwMDYwMDQyWhcNMjUxMjIxMDYwMDQyWjAzMTEwLwYDVQQD EyhjOGRkZDg2MDUyZjJhNWY5NTUyMzA5MGE1ZDE4MzMzYjc1ZmQ1YTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIGfooRNf5jwEBVO6pg3/BsYdGWH Gfm8Ol4LUoiMMJCOap2l/V3ibugghk62L/kiWvloUEurm7dCUfzo9dXdQsxSxW4X sr0zPhM9AkzLvFltxUwqvYxgKb8vIC9oWzttEMJIdYHOq0HtKFVLt5U4UhiuNfRw Fy89rZAvS7EZYtcur5HukFZRxnULr/eSVkiwlo+6rVwKbOevWeRTpenw0KKiB8q5 xyzenrYx8+uSNZ7drSGxnrxsPhM02G+7Gi/jRtZe+l93febzKZ4A+2Tg1BRkRxxj jWZ2ozOq5O099fBMGYuydkL+vuWud61eApyjtvhrSYAdSK4uU/ljAotHdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjd2GBS8qX5VSMJCl0YMzt1/VpMMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEg27ndw 7hj1iBdkTwDWNW6gIwiE2eE8oJwVxENit91CGIovu6sZL+wvgU7FFGlys/wq2vv8 euLh9Aud0rJTTzyjeuoQh7ixkLCeKZxZauOYICPmSCo42wDC5M9+DfxbFL0x7zNI rLEj3OBZuWv30gTNqBJAZWEKBFnv6bebh0tMeiNAr1t9joOa53o2J/E++mkcnKOr N9MSGKrBvWd51ZviL8mh3/GqRmtfbdTh32/mOMkE/Omz9pOKTfNEVCqt9o7KpSpC s+Uw2ySxmVpmReNNHVHuI8XwxNmBIdoNnfkEoc6/g/+9wBaXKzSQ26jkGYL1r3n6 yfMLj2m/y4P+QA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:12 2025 by rpki-client