This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json) Hash identifier: Wz4mmekUmoMh22cMD0G67wEw2sFKbGDvAJc7OYOvVj8= Subject key identifier: E1:46:82:FC:92:31:02:59:EF:69:D4:C7:D8:77:BD:8C:AB:99:57:E2 Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Certificate serial: 019B62AFE06D3E8370BD803583F5EC849378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft Manifest number: 16F4 Signing time: Sun 28 Dec 2025 02:00:51 +0000 Manifest this update: Sun 28 Dec 2025 02:00:51 +0000 Manifest next update: Mon 29 Dec 2025 02:00:51 +0000 Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=) 2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: Xh6PhPrDSob847Yz6YnnD7P9q0+mFKIHeccF4KGaXug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:e0:6d:3e:83:70:bd:80:35:83:f5:ec:84:93:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Validity Not Before: Dec 28 02:00:51 2025 GMT Not After : Dec 29 02:00:51 2025 GMT Subject: CN=e14682fc92310259ef69d4c7d877bd8cab9957e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:26:61:94:a4:e7:4b:7b:ac:ca:85:83:19: 99:2c:c1:9f:4a:83:fa:94:e3:5b:b1:8b:d0:5b:53: 7e:8c:6d:cd:72:0b:78:55:31:a8:44:56:0d:88:87: a3:f5:40:b8:61:81:d8:28:02:24:e7:9e:fa:8d:69: 87:46:50:2b:29:27:da:0f:46:b7:a5:49:16:83:c3: 2f:ba:10:bc:a3:fa:3f:df:aa:4b:71:d4:ed:70:95: 64:3e:22:4f:5c:0a:a0:33:62:da:c4:c7:5c:94:da: a9:88:4b:91:fe:25:6b:e6:c8:91:59:fa:83:19:c5: 18:96:bb:29:90:c2:d8:59:a4:25:56:8d:92:fe:a1: c8:5f:e4:9a:69:23:c3:0f:36:04:e4:3e:25:72:c8: b4:44:91:cd:4c:bd:43:c9:93:8f:7a:1d:b8:af:d0: 7b:63:77:d9:9a:3c:32:cf:a6:b5:9b:20:80:d8:85: 8f:84:f2:88:22:a5:e5:0e:db:4b:44:c7:a1:ad:e5: 74:1b:dc:51:be:ea:12:3e:1f:0c:e2:19:5f:7e:a8: 51:4b:13:fe:f1:07:74:43:b8:94:65:27:49:45:7d: 38:eb:b3:9a:cf:e9:c1:41:b5:f7:be:bb:d6:18:67: 37:ba:e8:68:b5:a8:f1:66:23:97:28:8a:24:bb:b7: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:46:82:FC:92:31:02:59:EF:69:D4:C7:D8:77:BD:8C:AB:99:57:E2 X509v3 Authority Key Identifier: keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:47:3e:8f:ea:cd:38:ae:14:57:52:eb:7e:d5:6c:be:99:23: e5:2d:b0:c9:df:5a:67:cb:5b:df:ee:e6:b1:d9:aa:75:45:f3: e5:b3:f2:6b:10:b8:a1:18:b2:65:e5:76:9a:44:85:2b:73:e3: b9:92:02:97:3d:ef:25:66:46:7d:90:41:48:54:74:0e:f7:b7: 22:87:cd:25:28:3c:18:fc:57:cd:00:e1:59:77:e9:49:4b:22: ff:37:61:9d:b0:a2:d2:0d:e5:df:19:b5:81:78:c9:23:7e:05: 20:10:07:1f:5d:ad:49:48:3d:32:c9:82:bf:52:5b:40:82:56: f0:4e:d6:21:ce:32:e7:be:e5:e3:ae:77:75:10:ea:30:18:02: aa:9f:68:5b:41:d6:00:8b:14:ce:86:11:da:38:77:f7:6e:c5: 6b:04:10:4e:79:73:8e:9a:8b:49:ba:b0:57:01:52:17:47:24: 73:be:20:94:00:48:a1:7c:1e:c1:32:46:b1:ce:75:d6:f4:a5: 52:89:59:8c:03:8f:e4:fd:2b:91:a6:05:95:80:5e:2c:81:07: 0c:9d:cc:d8:09:54:3e:e6:14:ed:be:52:dd:20:c6:48:a9:4e: 29:5c:72:43:51:f4:98:0e:b9:0c:0e:eb:d7:78:8b:9f:13:91: 1f:3d:84:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir+BtPoNwvYA1g/XshJN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4 YTU1NGIwHhcNMjUxMjI4MDIwMDUxWhcNMjUxMjI5MDIwMDUxWjAzMTEwLwYDVQQD EyhlMTQ2ODJmYzkyMzEwMjU5ZWY2OWQ0YzdkODc3YmQ4Y2FiOTk1N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNMmYZSk50t7rMqFgxmZLMGfSoP6 lONbsYvQW1N+jG3Ncgt4VTGoRFYNiIej9UC4YYHYKAIk5576jWmHRlArKSfaD0a3 pUkWg8MvuhC8o/o/36pLcdTtcJVkPiJPXAqgM2LaxMdclNqpiEuR/iVr5siRWfqD GcUYlrspkMLYWaQlVo2S/qHIX+SaaSPDDzYE5D4lcsi0RJHNTL1DyZOPeh24r9B7 Y3fZmjwyz6a1myCA2IWPhPKIIqXlDttLRMehreV0G9xRvuoSPh8M4hlffqhRSxP+ 8Qd0Q7iUZSdJRX0467Oaz+nBQbX3vrvWGGc3uuhotajxZiOXKIoku7etpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFGgvySMQJZ72nUx9h3vYyrmVfiMB8GA1UdIwQY MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUc+j+rN OK4UV1LrftVsvpkj5S2wyd9aZ8tb3+7msdmqdUXz5bPyaxC4oRiyZeV2mkSFK3Pj uZIClz3vJWZGfZBBSFR0Dve3IofNJSg8GPxXzQDhWXfpSUsi/zdhnbCi0g3l3xm1 gXjJI34FIBAHH12tSUg9MsmCv1JbQIJW8E7WIc4y577l4653dRDqMBgCqp9oW0HW AIsUzoYR2jh3927FawQQTnlzjpqLSbqwVwFSF0ckc74glABIoXwewTJGsc511vSl UolZjAOP5P0rkaYFlYBeLIEHDJ3M2AlUPuYU7b5S3SDGSKlOKVxyQ1H0mA65DA7r 13iLnxORHz2EkQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:53:10 2025 by rpki-client