This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json) Hash identifier: RfrlByn6kAMydD2wMipd/iBQAoBMdiXXkDdapMmV0FU= Subject key identifier: 2E:47:4A:66:92:C5:59:56:C1:60:F0:A1:D2:31:58:2F:BA:99:60:9A Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Certificate serial: 019B3CB54FFA9BEC039EF3D7C1EBA6DA2EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft Manifest number: 062A Signing time: Sat 20 Dec 2025 17:01:13 +0000 Manifest this update: Sat 20 Dec 2025 17:01:13 +0000 Manifest next update: Sun 21 Dec 2025 17:01:13 +0000 Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=) 2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=) 3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=) 4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: 3ysidGa6WbK2Dkz0VK4refHmh7A9YipPuDqA1Qj5Ozk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:4f:fa:9b:ec:03:9e:f3:d7:c1:eb:a6:da:2e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Validity Not Before: Dec 20 17:01:13 2025 GMT Not After : Dec 21 17:01:13 2025 GMT Subject: CN=2e474a6692c55956c160f0a1d231582fba99609a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:ba:c1:7d:6d:62:71:c5:ab:fd:a2:93:b2: 72:65:a8:d6:6e:8d:28:59:20:cc:75:00:49:60:77: a1:04:15:4b:45:0f:94:ad:42:2d:ff:60:c1:6a:a9: 1c:b3:55:db:7a:d8:3d:b6:d2:ff:d7:47:60:54:be: fa:4d:1b:18:3c:21:5e:d6:f5:6b:4e:9b:cd:d0:63: 02:0f:dd:a6:37:a4:e3:1e:a5:98:23:8c:ec:4a:a7: 09:d5:d7:7b:39:39:ab:9b:b4:6e:63:c2:e0:ca:41: 95:af:6f:b0:05:aa:48:a2:4a:ad:11:bd:e6:0b:9c: 70:dc:62:ba:c5:15:9e:83:83:80:bc:0e:36:36:ca: 7c:e7:e1:29:e6:52:9e:3e:88:10:15:94:c0:d9:c5: 03:ae:26:ef:eb:bf:0b:f3:b1:69:cd:3e:de:b9:74: 94:f4:b9:e0:12:52:21:ee:3a:42:ed:ec:f4:f9:1c: 86:81:e0:d2:26:ef:1a:71:69:c4:12:ea:50:a6:cd: b9:35:35:ef:67:22:b5:24:22:09:fe:6c:13:d8:20: a7:cd:af:c6:3a:bf:fd:4e:9c:30:ca:4e:a2:c4:66: 23:c4:9f:c1:f7:6a:15:45:56:ab:58:02:e1:df:fc: e0:ff:c6:4b:0b:65:02:9a:02:fb:dd:72:8c:e0:ba: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:47:4A:66:92:C5:59:56:C1:60:F0:A1:D2:31:58:2F:BA:99:60:9A X509v3 Authority Key Identifier: keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:4c:91:d7:1a:5b:fe:ea:b1:4f:10:c5:af:d6:71:01:47: 98:f8:fa:89:f6:78:d3:cc:25:e4:14:c3:ed:6b:80:88:d7:e6: 10:9c:ad:e0:6d:87:82:df:62:cd:1f:03:ee:23:54:fb:3e:b8: 65:0a:21:6e:a3:c5:45:75:b4:f8:e6:b3:fa:f5:da:00:d7:c5: 57:5b:db:2f:f1:b8:d5:7e:f2:c7:a2:f8:81:7c:b5:b4:ab:18: d6:88:0f:ac:c0:c4:00:dd:51:e2:03:87:a8:cd:b6:a4:6e:d8: a6:65:4e:c7:eb:67:1d:e9:34:e5:a1:c3:7c:a3:ba:0f:4f:55: b5:85:ae:b0:4e:df:a2:91:4e:97:3a:80:0e:f0:04:f5:20:36: be:97:87:9d:3d:c8:9c:54:65:21:31:52:42:76:02:0a:8c:da: 3e:ee:a9:62:20:44:c9:96:da:54:b3:29:9a:e7:95:8b:d7:7b: 7f:7d:5e:7a:bd:37:e4:ea:5d:d0:77:83:8d:cd:84:ac:04:bb: 99:30:1f:26:3b:17:4b:99:40:c5:42:54:6d:b9:28:a7:98:4c: 0f:df:96:21:cf:ac:a6:86:65:1b:5d:ac:6c:71:83:b6:7a:97: f6:33:de:fb:9a:d0:de:36:12:43:03:ea:79:f8:52:00:98:b6: 9c:f9:55:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tU/6m+wDnvPXweum2i7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi NmE1YWUwHhcNMjUxMjIwMTcwMTEzWhcNMjUxMjIxMTcwMTEzWjAzMTEwLwYDVQQD EygyZTQ3NGE2NjkyYzU1OTU2YzE2MGYwYTFkMjMxNTgyZmJhOTk2MDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUy6wX1tYnHFq/2ik7JyZajWbo0o WSDMdQBJYHehBBVLRQ+UrUIt/2DBaqkcs1Xbetg9ttL/10dgVL76TRsYPCFe1vVr TpvN0GMCD92mN6TjHqWYI4zsSqcJ1dd7OTmrm7RuY8LgykGVr2+wBapIokqtEb3m C5xw3GK6xRWeg4OAvA42Nsp85+Ep5lKePogQFZTA2cUDribv678L87FpzT7euXSU 9LngElIh7jpC7ez0+RyGgeDSJu8acWnEEupQps25NTXvZyK1JCIJ/mwT2CCnza/G Or/9Tpwwyk6ixGYjxJ/B92oVRVarWALh3/zg/8ZLC2UCmgL73XKM4LrnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5HSmaSxVlWwWDwodIxWC+6mWCaMB8GA1UdIwQY MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1 LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzRMkdca W/7qsU8Qxa/WcQFHmPj6ifZ408wl5BTD7WuAiNfmEJyt4G2Hgt9izR8D7iNU+z64 ZQohbqPFRXW0+Oaz+vXaANfFV1vbL/G41X7yx6L4gXy1tKsY1ogPrMDEAN1R4gOH qM22pG7YpmVOx+tnHek05aHDfKO6D09VtYWusE7fopFOlzqADvAE9SA2vpeHnT3I nFRlITFSQnYCCozaPu6pYiBEyZbaVLMpmueVi9d7f31eer035Opd0HeDjc2ErAS7 mTAfJjsXS5lAxUJUbbkop5hMD9+WIc+spoZlG12sbHGDtnqX9jPe+5rQ3jYSQwPq efhSAJi2nPlVeA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:09 2025 by rpki-client