This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json) Hash identifier: s5eDi0NAPdc4i4yjtR+6k/0iWeaLpvb4Ee4nQRwLc6E= Subject key identifier: E4:FD:97:A0:4E:73:E1:94:67:76:E9:03:CC:47:FD:0C:0B:6F:FC:EE Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f Certificate serial: 019B5CAD78924038DAE6058A95FDBD5DDCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft Manifest number: 1035 Signing time: Fri 26 Dec 2025 22:00:30 +0000 Manifest this update: Fri 26 Dec 2025 22:00:30 +0000 Manifest next update: Sat 27 Dec 2025 22:00:30 +0000 Files and hashes: 1: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: rnHGfVgfUZo9AJqsRBnbZmgcx6Kj2PLsxoSrUBnX+1s=) 2: tR3TEHFvvR2VitMXj_cHb7YQRIY.roa (hash: cxy/9j+hAy+nwst2XkcuokO4fIuUh2+sQrbLfBWLSSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:78:92:40:38:da:e6:05:8a:95:fd:bd:5d:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f Validity Not Before: Dec 26 22:00:30 2025 GMT Not After : Dec 27 22:00:30 2025 GMT Subject: CN=e4fd97a04e73e1946776e903cc47fd0c0b6ffcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:2b:21:6a:f5:46:9e:a6:bc:0c:bf:91:44: 80:30:b9:bf:08:c3:63:9d:83:bc:80:8e:ae:62:bd: 35:fa:6f:58:4a:b5:62:69:9d:19:dd:58:5f:fd:4c: 76:c7:d3:64:a4:e1:de:1b:37:53:d7:16:2d:35:8b: 0a:4b:21:9f:87:00:89:56:af:97:7f:17:c7:76:98: 78:67:c1:79:7f:58:4b:38:4e:6c:ae:75:24:8b:96: bd:07:06:f6:e7:81:1e:b7:a1:30:63:c0:e6:ff:be: 08:db:a4:2c:49:3b:bd:f8:6b:27:f6:b9:c4:be:79: a0:7c:48:77:e2:6e:f5:96:30:ea:8b:50:f1:24:a5: 6c:87:de:6b:bf:30:43:58:74:5f:d8:40:16:29:62: 93:ce:41:9b:09:68:51:9d:86:51:3d:2b:72:2c:fd: a2:ea:a1:23:e9:a4:59:05:49:b3:c0:9b:49:b2:5f: 67:d3:58:82:3b:61:90:c2:3d:61:37:be:18:db:93: 1a:9c:17:7c:13:4e:62:27:6a:f2:41:32:9a:30:94: 94:ab:61:da:43:d6:21:b5:76:d9:48:20:a0:79:2d: 5a:fd:56:f9:5e:4a:b6:42:00:ae:f9:5e:04:36:66: bf:1f:06:3b:be:b8:a9:5c:45:46:25:4f:de:68:57: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FD:97:A0:4E:73:E1:94:67:76:E9:03:CC:47:FD:0C:0B:6F:FC:EE X509v3 Authority Key Identifier: keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:38:78:4e:7c:a9:85:30:d1:1f:b9:c5:06:7c:d7:43:20:87: 3c:d2:d4:cc:ff:03:ea:2c:73:46:71:cf:15:15:c5:cc:68:7b: be:ad:7f:82:16:10:74:12:99:e5:09:39:be:b6:89:b2:29:e5: 02:e2:6a:d5:f5:de:ad:c0:1e:18:8b:52:ca:d4:67:e7:ae:cb: d5:4c:81:ec:9b:9e:4f:58:f5:e3:91:89:3e:dc:0a:6f:46:56: 88:99:f3:80:ab:9f:6b:66:19:10:b9:8b:ad:71:92:bd:34:d4: 48:2b:1a:b0:4e:0d:d1:54:61:97:24:39:31:b6:de:98:e2:f4: a8:05:ee:49:05:50:f5:33:2f:0a:34:b5:25:86:9b:cc:fc:dc: 94:19:b1:83:01:ad:69:ad:e9:c4:77:01:d9:13:7d:5d:7e:28: 59:36:78:6b:89:13:0c:ed:35:78:23:11:5f:a6:70:5f:1b:e3: 4a:90:36:b7:d8:26:c1:67:f6:a4:52:ef:39:85:fa:12:9a:7a: 07:da:b3:73:84:1d:7f:88:64:b2:be:e3:76:f2:7f:7a:b8:2e: 65:49:6b:ea:3a:79:b8:50:28:8d:27:3a:69:c7:2b:f3:74:d0: 4a:0b:50:6f:26:7c:f9:a6:ce:70:d4:ab:92:05:ea:27:0e:58: 54:ab:a6:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrXiSQDja5gWKlf29XdzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZWIzM2MyY2VmYjVkYTM0NjA3YjAwYjUwMDVlNDRiNzU1 MjRhMWYwHhcNMjUxMjI2MjIwMDMwWhcNMjUxMjI3MjIwMDMwWjAzMTEwLwYDVQQD EyhlNGZkOTdhMDRlNzNlMTk0Njc3NmU5MDNjYzQ3ZmQwYzBiNmZmY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN8rIWr1Rp6mvAy/kUSAMLm/CMNj nYO8gI6uYr01+m9YSrViaZ0Z3Vhf/Ux2x9NkpOHeGzdT1xYtNYsKSyGfhwCJVq+X fxfHdph4Z8F5f1hLOE5srnUki5a9Bwb254Eet6EwY8Dm/74I26QsSTu9+Gsn9rnE vnmgfEh34m71ljDqi1DxJKVsh95rvzBDWHRf2EAWKWKTzkGbCWhRnYZRPStyLP2i 6qEj6aRZBUmzwJtJsl9n01iCO2GQwj1hN74Y25ManBd8E05iJ2ryQTKaMJSUq2Ha Q9YhtXbZSCCgeS1a/Vb5Xkq2QgCu+V4ENma/HwY7vripXEVGJU/eaFe3zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT9l6BOc+GUZ3bpA8xH/QwLb/zuMB8GA1UdIwQY MBaAFJjrM8LO+12jRgewC1AF5Et1UkofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYt MjBjNGRjMWU0YTc3LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYtMjBjNGRjMWU0YTc3 LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTh4Tnyp hTDRH7nFBnzXQyCHPNLUzP8D6ixzRnHPFRXFzGh7vq1/ghYQdBKZ5Qk5vraJsinl AuJq1fXercAeGItSytRn567L1UyB7JueT1j145GJPtwKb0ZWiJnzgKufa2YZELmL rXGSvTTUSCsasE4N0VRhlyQ5MbbemOL0qAXuSQVQ9TMvCjS1JYabzPzclBmxgwGt aa3pxHcB2RN9XX4oWTZ4a4kTDO01eCMRX6ZwXxvjSpA2t9gmwWf2pFLvOYX6Epp6 B9qzc4Qdf4hksr7jdvJ/erguZUlr6jp5uFAojSc6accr83TQSgtQbyZ8+abOcNSr kgXqJw5YVKumYw== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:39 2025 by rpki-client