This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json) Hash identifier: Y0qhApXW8gCuvkG1EKHZqaE0ZlkevJojdIffFA2eKCk= Subject key identifier: 1E:FF:26:16:E5:AF:3E:03:20:2B:59:FB:3B:79:F8:3E:70:E0:F7:D3 Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Certificate serial: 019B3C7DE2DB26E04404D22C3822B70FF2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft Manifest number: 1546 Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=) 2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=) 3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: SDCjE4SEwGIe7tAceDVV7tT8/Ls2y7NMj6ca97V0L8g=) 4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e2:db:26:e0:44:04:d2:2c:38:22:b7:0f:f2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=1eff2616e5af3e03202b59fb3b79f83e70e0f7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:2a:e2:7a:68:c2:3b:5a:10:94:8c:ae:f7: 8d:68:fe:b2:8e:16:fc:8c:ba:40:96:d7:13:da:0a: ef:ca:1f:97:c0:e2:5a:5d:03:14:c2:d9:5c:1c:71: 4f:80:e9:94:ca:f2:1f:e8:1e:cf:51:b9:b6:c8:af: d3:dd:19:6f:f4:57:a4:0f:9c:35:c1:ea:9b:4f:a3: 39:13:6b:b3:93:fc:73:d6:e4:a0:e9:cb:06:bf:b4: 16:60:d8:8a:16:9e:2f:52:4b:66:25:75:6c:6a:92: 2d:43:6f:46:22:2f:37:b0:40:a1:9e:9f:16:c0:32: e2:6c:09:53:fa:28:e8:42:82:af:61:8b:d3:89:9f: b2:8e:23:55:e4:0e:5a:bc:2b:59:9f:3d:14:75:5d: 6a:ed:14:32:9e:e0:56:95:b9:d5:84:98:1d:43:e1: 32:94:4f:a0:c8:28:d0:25:1d:8f:36:0f:82:bc:e5: 53:95:63:c2:28:4f:64:9f:f8:6e:14:ed:c3:80:a7: b0:61:66:e8:19:33:86:88:39:fc:95:80:af:2e:e9: c2:0c:ba:69:40:82:1b:af:2d:d9:eb:91:5b:c4:d4: 50:79:90:f3:8c:fe:50:48:f0:d8:e2:05:b6:9c:56: c2:97:38:a3:e2:42:a8:f7:b2:99:23:02:41:4d:48: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:26:16:E5:AF:3E:03:20:2B:59:FB:3B:79:F8:3E:70:E0:F7:D3 X509v3 Authority Key Identifier: keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:58:e3:db:30:ee:f5:c1:c0:94:5f:fb:27:4d:96:28:3b: 70:f6:8b:3f:f0:2a:c7:54:21:f1:52:60:f9:b7:f1:7f:e4:75: 95:8d:11:cc:42:18:4b:0d:e5:b0:05:ff:e0:db:00:cc:1f:57: 63:5d:7d:b3:09:43:ea:31:c4:13:3f:25:2a:1a:d2:00:c0:73: a2:ac:38:ee:80:cf:f7:a4:e6:1e:ed:ed:99:88:2a:b0:60:a3: c7:0e:94:95:1f:71:be:25:09:96:4e:52:29:fc:91:42:56:f2: 21:c6:f4:da:e9:6d:31:78:da:6b:78:e3:ca:25:c6:1d:34:37: 4d:37:2f:27:49:1a:77:bd:46:a2:1d:e8:83:0e:74:eb:26:f5: 5d:c2:56:8c:4f:a7:2b:60:e3:92:81:ff:2f:c6:3f:cd:1a:a6: 05:9a:0a:7a:87:33:cd:2e:dc:e2:c0:5c:28:24:4e:aa:60:13: 2d:b4:c5:01:02:8c:f3:d2:2a:35:f3:97:7b:45:45:87:3b:2d: 78:3b:1c:1c:b0:bd:54:f4:a8:d8:55:71:a6:6c:97:8d:d5:0d: 4d:5f:bd:37:8a:dc:b9:ee:b7:c7:04:32:ee:bf:56:ba:a5:a5: 2a:e2:db:ca:9a:56:3d:51:29:af:bd:aa:5b:b5:43:bc:87:a8: ac:0b:23:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feLbJuBEBNIsOCK3D/K5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm MmNjMDcwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD EygxZWZmMjYxNmU1YWYzZTAzMjAyYjU5ZmIzYjc5ZjgzZTcwZTBmN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzgq4npowjtaEJSMrveNaP6yjhb8 jLpAltcT2grvyh+XwOJaXQMUwtlcHHFPgOmUyvIf6B7PUbm2yK/T3Rlv9FekD5w1 weqbT6M5E2uzk/xz1uSg6csGv7QWYNiKFp4vUktmJXVsapItQ29GIi83sEChnp8W wDLibAlT+ijoQoKvYYvTiZ+yjiNV5A5avCtZnz0UdV1q7RQynuBWlbnVhJgdQ+Ey lE+gyCjQJR2PNg+CvOVTlWPCKE9kn/huFO3DgKewYWboGTOGiDn8lYCvLunCDLpp QIIbry3Z65FbxNRQeZDzjP5QSPDY4gW2nFbClzij4kKo97KZIwJBTUjCMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7/Jhblrz4DICtZ+zt5+D5w4PfTMB8GA1UdIwQY MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5 LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs9Y49sw 7vXBwJRf+ydNlig7cPaLP/Aqx1Qh8VJg+bfxf+R1lY0RzEIYSw3lsAX/4NsAzB9X Y119swlD6jHEEz8lKhrSAMBzoqw47oDP96TmHu3tmYgqsGCjxw6UlR9xviUJlk5S KfyRQlbyIcb02ultMXjaa3jjyiXGHTQ3TTcvJ0kad71Goh3ogw506yb1XcJWjE+n K2DjkoH/L8Y/zRqmBZoKeoczzS7c4sBcKCROqmATLbTFAQKM89IqNfOXe0VFhzst eDscHLC9VPSo2FVxpmyXjdUNTV+9N4rcue63xwQy7r9WuqWlKuLbyppWPVEpr72q W7VDvIeorAsjhg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:25 2025 by rpki-client