This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json) Hash identifier: HC2erZPuPu42CdSIlIAbe7KjkYFuGetLf3uLES3gKv8= Subject key identifier: 5E:4C:22:3F:F1:D9:DA:56:FA:EA:C0:F8:93:1F:CA:5C:5E:77:96:36 Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a Certificate serial: 019B70A2907CDA4A2775AAE0C36A4DFC75EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 19:01:00 +0000 Manifest this update: Tue 30 Dec 2025 19:01:00 +0000 Manifest next update: Wed 31 Dec 2025 19:01:00 +0000 Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: 8SijAQG6k1lAItYQzT0SuHH6Xgmr3xL0E1r305S63Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:90:7c:da:4a:27:75:aa:e0:c3:6a:4d:fc:75:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a Validity Not Before: Dec 30 19:01:00 2025 GMT Not After : Dec 31 19:01:00 2025 GMT Subject: CN=5e4c223ff1d9da56faeac0f8931fca5c5e779636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:81:4a:90:6e:f6:a7:34:96:ab:c5:d2:e6: f2:c1:e1:61:02:56:9d:37:91:27:c7:4a:0a:86:1f: a6:4f:44:d9:c2:fa:ed:8d:c1:5a:87:f9:79:65:9e: 76:82:f0:cc:e5:f3:f8:63:4b:52:43:e7:0f:97:c3: 8c:d5:21:06:94:7f:0c:0b:93:be:4d:11:f8:ac:b7: 61:bf:8c:3a:2e:7d:6a:ce:f6:23:e2:d6:20:2c:8d: bb:20:b1:f5:5b:d1:c4:08:43:9b:87:ac:3c:c3:ac: a0:0a:3e:30:33:a5:b3:e5:1e:a1:79:ca:54:f9:59: d0:f4:fe:4c:7d:73:c4:8d:30:ea:ca:3d:13:5a:b8: d4:03:93:29:36:de:cd:f3:21:b4:9c:b5:fe:be:7d: f7:51:38:2f:74:4c:50:f0:48:98:c0:d8:db:93:2b: 87:40:b7:30:c8:96:09:e3:10:23:e5:6b:2c:f6:16: 2a:09:19:dc:81:bd:a9:7d:de:f5:74:53:52:8a:e6: 10:af:bf:6c:e1:ae:e7:7b:86:6e:19:74:70:2e:33: 4e:0b:dd:9e:3d:7d:34:d8:b0:9b:d0:25:ce:0c:92: 04:0c:f8:2c:ed:0f:a2:73:4b:c4:03:41:a0:c7:16: 35:ae:43:8d:e3:92:c4:18:89:77:43:b8:47:b6:cc: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:22:3F:F1:D9:DA:56:FA:EA:C0:F8:93:1F:CA:5C:5E:77:96:36 X509v3 Authority Key Identifier: keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2b:90:1f:fc:43:43:0b:5c:26:38:9c:74:46:13:8b:93:19: e8:4b:ac:df:5c:37:60:cc:f0:0a:c6:f1:85:3b:28:4f:06:c7: 21:39:42:9e:a3:50:57:c5:18:fc:d1:2c:85:60:71:63:ba:80: 1d:c8:58:e0:e1:7c:8b:5f:bd:be:92:22:90:bf:ec:b5:28:e6: a2:de:8a:32:2e:5b:67:a9:71:07:4a:0f:b6:83:e3:87:2a:79: 1d:bb:64:f8:7b:e5:50:73:b2:9a:e5:7c:30:e9:ca:99:0b:5c: 5e:0d:1a:08:3f:14:a2:be:20:7e:7c:c4:b4:b9:74:08:5c:d4: 67:28:e1:df:30:ee:31:f5:6f:22:ef:76:65:74:7e:6d:47:1a: 99:a5:d1:a7:ff:a5:60:67:33:51:41:70:ed:6f:74:e0:dd:11: 28:12:c1:f9:12:a2:c5:32:f5:4b:18:84:62:b4:6a:06:cf:7a: d7:f5:a3:3b:fa:b3:be:ce:a2:39:9b:18:57:97:a9:e0:b3:0f: 96:10:c4:22:51:d6:1e:c3:17:ef:d1:f2:a8:b2:de:80:33:b4: b9:73:52:42:23:55:00:f0:15:67:bf:f7:d1:94:37:cc:71:0d: f0:11:80:d0:37:8d:66:ea:ee:e2:d2:f2:16:45:50:ff:5d:d2: 55:3c:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwopB82kondargw2pN/HXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGYzNDFkM2FiNTYzYjlmYzQwOTgwYWU3YzE3NDAyYzIx NWVmMmEwHhcNMjUxMjMwMTkwMTAwWhcNMjUxMjMxMTkwMTAwWjAzMTEwLwYDVQQD Eyg1ZTRjMjIzZmYxZDlkYTU2ZmFlYWMwZjg5MzFmY2E1YzVlNzc5NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSSBSpBu9qc0lqvF0ubyweFhAlad N5Enx0oKhh+mT0TZwvrtjcFah/l5ZZ52gvDM5fP4Y0tSQ+cPl8OM1SEGlH8MC5O+ TRH4rLdhv4w6Ln1qzvYj4tYgLI27ILH1W9HECEObh6w8w6ygCj4wM6Wz5R6hecpU +VnQ9P5MfXPEjTDqyj0TWrjUA5MpNt7N8yG0nLX+vn33UTgvdExQ8EiYwNjbkyuH QLcwyJYJ4xAj5Wss9hYqCRncgb2pfd71dFNSiuYQr79s4a7ne4ZuGXRwLjNOC92e PX002LCb0CXODJIEDPgs7Q+ic0vEA0GgxxY1rkON45LEGIl3Q7hHtszwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5MIj/x2dpW+urA+JMfylxed5Y2MB8GA1UdIwQY MBaAFKEPNB06tWO5/ECYCufBdALCFe8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEt MTc0MDcxNjVhZmU2LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEtMTc0MDcxNjVhZmU2 LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCuQH/xD QwtcJjicdEYTi5MZ6Eus31w3YMzwCsbxhTsoTwbHITlCnqNQV8UY/NEshWBxY7qA HchY4OF8i1+9vpIikL/stSjmot6KMi5bZ6lxB0oPtoPjhyp5Hbtk+HvlUHOymuV8 MOnKmQtcXg0aCD8Uor4gfnzEtLl0CFzUZyjh3zDuMfVvIu92ZXR+bUcamaXRp/+l YGczUUFw7W904N0RKBLB+RKixTL1SxiEYrRqBs961/WjO/qzvs6iOZsYV5ep4LMP lhDEIlHWHsMX79HyqLLegDO0uXNSQiNVAPAVZ7/30ZQ3zHEN8BGA0DeNZuru4tLy FkVQ/13SVTy3HQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:11:47 2025 by rpki-client