This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json) Hash identifier: yl7cH2jXmQ8elriqSy3wH7LCvAKTpEYH/DpdIT2ONdI= Subject key identifier: 99:0B:74:23:A8:6C:A9:9C:59:D4:55:27:8B:F6:D6:3B:AF:55:77:70 Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Certificate serial: 019B3BA27D382868586A657703E3F90E535B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft Manifest number: 0260 Signing time: Sat 20 Dec 2025 12:01:03 +0000 Manifest this update: Sat 20 Dec 2025 12:01:03 +0000 Manifest next update: Sun 21 Dec 2025 12:01:03 +0000 Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=) 2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: qbqblruME4Z3FTZISwkCNLyy0pzvN1audAvBA9zjoLo=) 3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:7d:38:28:68:58:6a:65:77:03:e3:f9:0e:53:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Validity Not Before: Dec 20 12:01:03 2025 GMT Not After : Dec 21 12:01:03 2025 GMT Subject: CN=990b7423a86ca99c59d455278bf6d63baf557770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:1f:21:f1:cf:38:4d:60:12:83:68:47:f9: 38:56:e0:d4:da:fe:a9:9e:3c:e1:ac:ef:3b:28:c0: 57:47:0e:65:02:05:42:4f:0e:00:95:01:f8:7e:e1: 08:cc:aa:1d:1b:d9:75:10:e7:a3:dd:20:be:4e:33: cc:db:2a:f7:b3:04:39:2e:70:f7:2c:78:2a:35:98: 23:75:ed:70:55:f7:6d:ee:36:6b:9f:d0:aa:bc:af: e2:b2:d6:e1:6e:3c:e2:c7:30:c5:c1:75:87:43:d3: a8:e1:69:e6:82:f0:c2:f6:e8:90:d4:9a:1a:08:77: 7a:83:9c:67:79:fd:22:15:75:1e:ab:6c:52:70:43: 6a:f0:9a:f7:b1:88:87:a1:48:7b:a3:d6:fe:de:04: 7b:11:7e:e6:d9:aa:a7:69:e1:0e:38:32:c8:d4:5b: 0a:ff:88:d3:ce:84:a4:c1:27:1c:d5:a1:ea:6f:35: 01:0e:5c:ee:4f:91:6c:4d:c9:31:dd:6d:a6:49:b6: 09:da:95:6e:ec:a3:ee:a5:0b:fc:c9:08:2d:13:32: 4c:d9:98:a0:31:3a:f5:a6:1d:51:dd:7c:b4:30:bc: 0b:e0:65:93:06:f6:7a:07:ba:33:61:a7:6b:02:41: f5:df:e0:47:7b:27:60:cb:5c:22:e6:37:45:f5:66: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:74:23:A8:6C:A9:9C:59:D4:55:27:8B:F6:D6:3B:AF:55:77:70 X509v3 Authority Key Identifier: keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2d:85:48:9b:6f:ae:b3:96:0b:67:4a:3c:42:82:36:78:5f: 39:3e:eb:49:1a:a9:89:18:89:f7:23:a3:ec:2c:9a:01:88:11: 3f:4f:f9:e1:68:08:28:00:4a:3f:46:01:86:9b:ef:8c:29:90: dd:00:97:0d:e7:94:95:b5:f0:cd:51:bf:3f:e2:ef:33:94:44: c3:86:f8:5e:9b:57:ff:42:03:ee:59:5b:16:9f:1c:a0:1b:92: b9:ac:23:62:99:55:a2:f4:6d:35:a8:e0:0c:2c:57:50:cb:7e: f1:f7:67:b5:1c:61:f0:6d:cd:24:47:89:90:39:7f:e9:28:cf: 38:5b:e7:83:4a:55:a2:ed:b9:21:cd:43:f1:0a:74:d0:4d:5a: 56:93:0c:97:27:8e:85:c6:9b:51:2f:21:6a:b0:1c:72:f9:cc: 5e:c8:1a:27:44:63:3b:37:e8:26:3c:f5:bd:77:f9:b6:29:18: 38:fb:d6:44:17:e7:61:67:7f:47:a5:0e:aa:51:5b:80:70:73: b5:f9:03:ee:63:6e:a5:a6:cd:df:1d:9d:1f:aa:7e:d2:5f:41: f8:67:f6:63:15:fc:d1:22:02:d8:e1:05:01:9e:7b:de:2e:b3: af:34:e2:da:ad:b3:53:c1:e7:f6:40:90:70:87:a9:20:7a:63: a0:c8:72:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7on04KGhYamV3A+P5DlNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1 NjkzYzYwHhcNMjUxMjIwMTIwMTAzWhcNMjUxMjIxMTIwMTAzWjAzMTEwLwYDVQQD Eyg5OTBiNzQyM2E4NmNhOTljNTlkNDU1Mjc4YmY2ZDYzYmFmNTU3NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdYfIfHPOE1gEoNoR/k4VuDU2v6p njzhrO87KMBXRw5lAgVCTw4AlQH4fuEIzKodG9l1EOej3SC+TjPM2yr3swQ5LnD3 LHgqNZgjde1wVfdt7jZrn9CqvK/istbhbjzixzDFwXWHQ9Oo4WnmgvDC9uiQ1Joa CHd6g5xnef0iFXUeq2xScENq8Jr3sYiHoUh7o9b+3gR7EX7m2aqnaeEOODLI1FsK /4jTzoSkwScc1aHqbzUBDlzuT5FsTckx3W2mSbYJ2pVu7KPupQv8yQgtEzJM2Zig MTr1ph1R3Xy0MLwL4GWTBvZ6B7ozYadrAkH13+BHeydgy1wi5jdF9Wbo0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkLdCOobKmcWdRVJ4v21juvVXdwMB8GA1UdIwQY MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi2FSJtv rrOWC2dKPEKCNnhfOT7rSRqpiRiJ9yOj7CyaAYgRP0/54WgIKABKP0YBhpvvjCmQ 3QCXDeeUlbXwzVG/P+LvM5REw4b4XptX/0ID7llbFp8coBuSuawjYplVovRtNajg DCxXUMt+8fdntRxh8G3NJEeJkDl/6SjPOFvng0pVou25Ic1D8Qp00E1aVpMMlyeO hcabUS8harAccvnMXsgaJ0RjOzfoJjz1vXf5tikYOPvWRBfnYWd/R6UOqlFbgHBz tfkD7mNupabN3x2dH6p+0l9B+Gf2YxX80SIC2OEFAZ573i6zrzTi2q2zU8Hn9kCQ cIepIHpjoMhyuw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:07:00 2025 by rpki-client