This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json) Hash identifier: d+gLHdBxeTef6pKan3PC6z4vT9yeE3OMgM/wCSWb5K4= Subject key identifier: D6:E2:D0:D1:0F:D3:45:86:8C:90:D3:C0:AF:2D:1E:7D:6C:67:85:34 Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019B3CB51576A135AA8835497C41C43C23E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=) 2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=) 3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: aUsPYn7zkXvi+LtTdAGCai1TraNdZDYuBMHKY6kWFqY=) 4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:15:76:a1:35:aa:88:35:49:7c:41:c4:3c:23:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=d6e2d0d10fd345868c90d3c0af2d1e7d6c678534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:76:36:7c:b1:06:85:48:ff:ee:ad:97:54: 83:97:2d:a0:b2:12:72:1c:79:54:0e:91:10:f4:4c: 57:73:d4:a1:71:5d:e3:50:e0:99:06:81:bf:75:57: 6a:26:1c:de:3d:1d:54:dc:26:ae:4b:eb:83:ce:9f: 83:55:9d:6e:cc:c2:cb:1e:ac:ba:80:6a:44:e8:2d: 1f:77:84:53:b0:b7:a7:a8:17:34:05:13:80:c8:4b: 21:46:9d:44:dd:03:a9:ad:2b:96:0a:79:98:95:56: 2f:b3:93:6b:5f:34:66:4d:95:71:fc:fc:2e:6b:a5: f3:17:da:ec:7f:60:67:86:d8:5e:0c:d9:0e:bc:d7: 0e:20:42:d5:64:db:39:52:93:11:12:77:2a:58:61: 3b:dc:68:cd:48:ee:7f:a2:8c:eb:d4:9e:93:d7:14: 16:52:b2:49:76:d7:38:2e:8d:ab:da:35:f2:a5:4e: ac:f2:82:02:35:86:14:21:19:98:d6:58:fc:4c:43: 5a:92:53:06:b1:e9:cd:98:b3:9d:47:53:1c:5a:44: 99:a5:d4:20:46:66:d4:03:d4:60:28:52:0e:b3:6e: 9e:91:a7:47:2a:31:83:b1:fd:04:20:77:05:5f:7f: 0e:4e:d7:5d:3b:9d:7a:93:71:48:70:c7:1e:97:f8: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E2:D0:D1:0F:D3:45:86:8C:90:D3:C0:AF:2D:1E:7D:6C:67:85:34 X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e7:4e:e8:18:cc:ab:04:e5:aa:47:f4:08:95:a1:f3:da:44: d4:9e:ca:8c:42:b6:6d:86:40:19:b1:ad:00:f6:dc:b4:bd:d2: c3:a1:dd:0b:e7:20:53:dd:c8:e4:03:d5:95:11:bc:a7:82:60: 63:f0:0b:65:af:58:87:8a:33:02:ed:69:54:9c:0b:ca:12:26: 45:7e:ee:5a:3e:90:02:8d:5b:e4:20:93:a5:ef:f3:69:91:c5: 7a:bc:f3:b7:d8:35:48:18:19:1f:b7:5f:d8:fd:f2:6c:61:25: ad:f4:cd:41:38:23:85:5e:a8:ec:2b:7b:b2:36:d5:03:ac:ee: 8b:47:0a:2f:78:97:cf:73:97:11:19:12:8c:d0:43:33:9b:07: 47:95:79:ac:85:ae:56:a1:cb:39:81:d8:9c:3e:80:30:5f:c1: 93:13:f0:ee:18:4a:57:c4:9b:7b:00:ec:ce:dd:cc:4a:de:b4: 6a:85:cb:29:2b:97:25:42:ef:c4:31:9e:15:bc:43:c5:78:d6: 8a:40:be:c5:58:42:c5:3c:c5:75:a5:06:a5:03:88:d0:f8:a7: 83:c4:71:fd:b6:d6:2b:60:d3:83:3b:a2:1b:02:6f:f9:aa:f8: 20:ba:1a:54:77:af:58:21:17:45:9d:ad:52:5e:d9:5f:ff:92: c2:1f:5d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRV2oTWqiDVJfEHEPCPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD EyhkNmUyZDBkMTBmZDM0NTg2OGM5MGQzYzBhZjJkMWU3ZDZjNjc4NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgp2NnyxBoVI/+6tl1SDly2gshJy HHlUDpEQ9ExXc9ShcV3jUOCZBoG/dVdqJhzePR1U3CauS+uDzp+DVZ1uzMLLHqy6 gGpE6C0fd4RTsLenqBc0BROAyEshRp1E3QOprSuWCnmYlVYvs5NrXzRmTZVx/Pwu a6XzF9rsf2BnhtheDNkOvNcOIELVZNs5UpMREncqWGE73GjNSO5/oozr1J6T1xQW UrJJdtc4Lo2r2jXypU6s8oICNYYUIRmY1lj8TENaklMGsenNmLOdR1McWkSZpdQg RmbUA9RgKFIOs26ekadHKjGDsf0EIHcFX38OTtddO516k3FIcMcel/h6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbi0NEP00WGjJDTwK8tHn1sZ4U0MB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABedO6BjM qwTlqkf0CJWh89pE1J7KjEK2bYZAGbGtAPbctL3Sw6HdC+cgU93I5APVlRG8p4Jg Y/ALZa9Yh4ozAu1pVJwLyhImRX7uWj6QAo1b5CCTpe/zaZHFerzzt9g1SBgZH7df 2P3ybGElrfTNQTgjhV6o7Ct7sjbVA6zui0cKL3iXz3OXERkSjNBDM5sHR5V5rIWu VqHLOYHYnD6AMF/BkxPw7hhKV8SbewDszt3MSt60aoXLKSuXJULvxDGeFbxDxXjW ikC+xVhCxTzFdaUGpQOI0Ping8Rx/bbWK2DTgzuiGwJv+ar4ILoaVHevWCEXRZ2t Ul7ZX/+Swh9dvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:44:37 2025 by rpki-client