This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json) Hash identifier: M4tdDeT3cpHM9dgaaQbG+lRT/3Gl+QrnDrQxtdp8NXU= Subject key identifier: DA:DF:01:9A:3B:A9:BE:FA:07:71:AF:03:E3:C3:EB:64:07:5D:A5:B4 Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4 Certificate serial: 019B514EB9CEA8442A05DB0B8BF4C0B907F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft Manifest number: 0855 Signing time: Wed 24 Dec 2025 17:01:12 +0000 Manifest this update: Wed 24 Dec 2025 17:01:12 +0000 Manifest next update: Thu 25 Dec 2025 17:01:12 +0000 Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=) 2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: zngGd16uF0HIaEkyQYCzr07OQT5MSq1np3mzUgDV9JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:b9:ce:a8:44:2a:05:db:0b:8b:f4:c0:b9:07:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4 Validity Not Before: Dec 24 17:01:12 2025 GMT Not After : Dec 25 17:01:12 2025 GMT Subject: CN=dadf019a3ba9befa0771af03e3c3eb64075da5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:18:98:c7:b0:01:45:4b:fa:ad:55:03:21: 18:77:8b:b1:ec:3c:6c:b9:c2:8e:03:0d:55:a9:81: f1:7f:04:2e:4a:07:3b:c9:20:84:ac:8f:a4:e4:c5: 74:dc:06:b1:3d:10:50:09:74:7f:2b:1a:e1:6b:c1: 5b:61:b5:bf:ea:38:19:7e:be:55:37:b8:89:f6:ec: 2b:72:5c:5b:6a:49:e6:1a:57:ff:d3:d6:2f:62:8d: 78:ad:e7:c3:7e:10:97:a2:3d:bc:f6:60:d4:9e:28: ef:a0:f9:e8:85:f6:bb:44:ac:ba:0f:70:3f:7c:fe: 37:b6:0d:8e:4d:04:4a:20:10:88:f5:04:6e:0a:fb: 4f:ca:62:bf:62:e9:65:1a:3c:f0:92:2e:8f:d3:03: 40:55:b6:1b:58:5e:24:26:d9:ce:12:67:c1:c9:22: 99:55:ec:e0:2b:cc:84:e7:a8:37:0c:e8:5a:aa:18: 82:df:76:bc:b8:fb:e9:74:4a:4b:95:16:2d:c7:f0: d9:77:3b:0a:c1:1b:66:b6:29:86:1d:07:51:eb:6b: 69:56:81:43:e4:65:94:56:63:5a:83:ea:34:e5:08: c5:24:50:db:e3:71:71:2e:a3:2c:ec:0d:fc:ad:39: b7:3b:04:49:79:7a:61:98:e2:cd:2d:b4:df:9a:07: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DF:01:9A:3B:A9:BE:FA:07:71:AF:03:E3:C3:EB:64:07:5D:A5:B4 X509v3 Authority Key Identifier: keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:cd:74:56:91:5e:0b:d8:b4:96:e2:f3:53:cd:6f:27:d1: 88:e6:41:fa:81:fa:3e:2d:77:d6:0c:51:65:49:a1:1e:1b:a2: e5:6e:37:96:d5:c3:0c:ae:28:27:27:c7:f6:c0:47:25:16:ce: cc:e7:2e:48:46:8f:e9:ea:75:a3:26:9c:ff:47:bf:7b:90:3b: 63:37:4c:c3:fe:5c:05:ea:c1:67:37:ab:84:75:f0:88:ba:bd: db:ed:87:02:0c:78:3a:e2:9f:69:c3:21:b8:82:47:48:3f:b5: 9a:17:ee:75:04:b3:99:19:08:51:9f:4f:2b:41:b4:51:f2:92: cf:e8:12:23:0e:47:3c:e8:db:1b:af:2a:79:44:1f:7b:15:68: 6f:c3:e9:7a:70:5e:8e:be:98:9b:94:95:43:1a:db:56:a8:93: d4:33:e5:ba:8e:b3:8b:ab:25:66:67:12:5d:fd:c7:bd:ea:fb: ed:41:81:69:9a:5b:2d:01:84:e0:6e:c3:ab:ba:c0:e8:27:12: 8f:39:78:f1:1f:5e:23:ef:4e:bf:7a:b0:30:f5:49:6f:c0:8f: ff:13:a2:3c:a3:99:bc:df:12:cf:79:49:f6:b0:c1:4f:22:bc: 25:61:01:5b:16:e7:81:d6:b0:af:2c:f8:be:bb:ac:01:07:4e: 28:ac:d6:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTrnOqEQqBdsLi/TAuQfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1 ZjkwZTQwHhcNMjUxMjI0MTcwMTEyWhcNMjUxMjI1MTcwMTEyWjAzMTEwLwYDVQQD EyhkYWRmMDE5YTNiYTliZWZhMDc3MWFmMDNlM2MzZWI2NDA3NWRhNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQYmMewAUVL+q1VAyEYd4ux7Dxs ucKOAw1VqYHxfwQuSgc7ySCErI+k5MV03AaxPRBQCXR/Kxrha8FbYbW/6jgZfr5V N7iJ9uwrclxbaknmGlf/09YvYo14refDfhCXoj289mDUnijvoPnohfa7RKy6D3A/ fP43tg2OTQRKIBCI9QRuCvtPymK/YullGjzwki6P0wNAVbYbWF4kJtnOEmfBySKZ VezgK8yE56g3DOhaqhiC33a8uPvpdEpLlRYtx/DZdzsKwRtmtimGHQdR62tpVoFD 5GWUVmNag+o05QjFJFDb43FxLqMs7A38rTm3OwRJeXphmOLNLbTfmge5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrfAZo7qb76B3GvA+PD62QHXaW0MB8GA1UdIwQY MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIDNdFaR XgvYtJbi81PNbyfRiOZB+oH6Pi131gxRZUmhHhui5W43ltXDDK4oJyfH9sBHJRbO zOcuSEaP6ep1oyac/0e/e5A7YzdMw/5cBerBZzerhHXwiLq92+2HAgx4OuKfacMh uIJHSD+1mhfudQSzmRkIUZ9PK0G0UfKSz+gSIw5HPOjbG68qeUQfexVob8PpenBe jr6Ym5SVQxrbVqiT1DPluo6zi6slZmcSXf3Hver77UGBaZpbLQGE4G7Dq7rA6CcS jzl48R9eI+9Ov3qwMPVJb8CP/xOiPKOZvN8Sz3lJ9rDBTyK8JWEBWxbngdawryz4 vrusAQdOKKzWYg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:19:22 2025 by rpki-client