This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json) Hash identifier: QcvnxbbRCuL+p7cftFNWPy/6cDedwvmnq6vR7l3axpI= Subject key identifier: 8C:6C:B7:9E:73:29:BC:FF:65:31:55:C1:1C:FB:F9:F1:04:0A:E0:49 Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019B57887DB6B62F333AD32392B594BA6D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft Manifest number: 0F73 Signing time: Thu 25 Dec 2025 22:02:01 +0000 Manifest this update: Thu 25 Dec 2025 22:02:01 +0000 Manifest next update: Fri 26 Dec 2025 22:02:01 +0000 Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=) 2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: B1S3sSUU4lO1fVvDUbrxXB0fm1WDMOJ0TMz0nE5imQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:7d:b6:b6:2f:33:3a:d3:23:92:b5:94:ba:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Dec 25 22:02:01 2025 GMT Not After : Dec 26 22:02:01 2025 GMT Subject: CN=8c6cb79e7329bcff653155c11cfbf9f1040ae049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:c7:b8:a4:8f:bd:de:7d:9c:5c:63:a4:a5: 25:66:f4:e9:ad:7f:99:ec:4a:32:02:ab:cd:bd:0f: 90:00:8c:93:c9:48:d8:dd:57:0f:19:29:10:d6:fa: 02:a7:15:1d:48:a9:4e:f7:65:05:66:97:f9:2d:90: d6:ad:2f:85:55:67:b5:e4:b9:5b:54:21:be:0e:3a: 0a:71:e1:68:27:4a:dc:c8:4f:ea:ff:2a:7c:4b:86: e0:37:ba:a2:23:1c:80:e2:55:20:cf:fe:c7:4d:0b: e2:39:e4:b9:ab:0b:b5:2a:c9:32:a0:54:0d:c5:5b: 10:2d:d6:3b:6f:83:40:41:e2:d7:d0:e6:81:54:39: 45:d8:c1:d2:5c:32:52:b3:b7:1b:0a:e8:86:db:27: 73:8b:ee:5e:b8:54:cf:d9:11:73:8e:de:d1:b8:ad: 68:4a:a0:cd:fb:28:ec:60:9b:6f:bb:38:24:8e:74: d3:86:d5:49:28:b7:0a:53:8c:b8:50:df:32:b2:8d: 91:ee:52:60:2a:b0:30:9d:26:21:dd:9d:4b:40:46: db:20:33:42:f8:f4:94:d5:63:51:7e:46:2c:4c:32: 04:93:a6:09:83:7e:63:9d:d7:3a:57:d4:f9:2d:45: 58:e4:81:cc:d5:01:35:89:b5:a1:7d:9b:dd:4f:9d: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6C:B7:9E:73:29:BC:FF:65:31:55:C1:1C:FB:F9:F1:04:0A:E0:49 X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:36:68:3c:0b:32:55:de:cb:04:b3:38:2c:41:33:39:9a:be: a8:b1:c3:ad:fb:61:f5:6e:71:e2:c9:32:63:75:af:98:d4:04: 35:44:89:8b:90:a8:85:80:45:7e:50:6f:f7:69:d8:d6:75:58: 3f:ca:a4:98:43:b9:ae:f5:1c:d5:1c:81:26:30:e1:f8:fc:e5: d0:18:9a:ee:e6:cc:22:f1:7f:4b:00:89:31:83:f4:57:68:fc: 99:49:b2:bf:2f:9b:f4:a9:14:dd:e3:0b:b9:0b:bc:79:6c:ec: 7b:f2:32:09:6c:fd:72:42:0d:82:06:6c:04:c4:fd:0b:f9:fc: d6:b4:fd:c8:8b:40:77:62:a7:ba:ef:40:1a:31:6b:b2:93:e5: 66:b9:1e:97:77:c5:4f:d0:d7:21:36:ba:4c:16:fd:e1:dd:18: f7:08:77:a6:a5:41:4b:ec:53:f0:53:d4:d5:26:b3:63:6c:cc: 0f:7f:1d:59:3d:f1:33:35:79:68:34:de:c0:f5:1a:a7:13:32: fd:b4:65:dd:dc:1a:e9:ac:6c:74:03:52:52:22:02:40:23:04: 3c:8f:ab:aa:ee:4c:43:69:f9:1a:4f:63:b7:0b:a6:09:ff:6f: 8c:62:37:2c:e8:b8:ed:c2:30:f6:ec:58:78:91:f5:14:db:09: c4:99:6a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiH22ti8zOtMjkrWUum1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjUxMjI1MjIwMjAxWhcNMjUxMjI2MjIwMjAxWjAzMTEwLwYDVQQD Eyg4YzZjYjc5ZTczMjliY2ZmNjUzMTU1YzExY2ZiZjlmMTA0MGFlMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCDHuKSPvd59nFxjpKUlZvTprX+Z 7EoyAqvNvQ+QAIyTyUjY3VcPGSkQ1voCpxUdSKlO92UFZpf5LZDWrS+FVWe15Llb VCG+DjoKceFoJ0rcyE/q/yp8S4bgN7qiIxyA4lUgz/7HTQviOeS5qwu1KskyoFQN xVsQLdY7b4NAQeLX0OaBVDlF2MHSXDJSs7cbCuiG2ydzi+5euFTP2RFzjt7RuK1o SqDN+yjsYJtvuzgkjnTThtVJKLcKU4y4UN8yso2R7lJgKrAwnSYh3Z1LQEbbIDNC +PSU1WNRfkYsTDIEk6YJg35jndc6V9T5LUVY5IHM1QE1ibWhfZvdT51VPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxst55zKbz/ZTFVwRz7+fEECuBJMB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTZoPAsy Vd7LBLM4LEEzOZq+qLHDrfth9W5x4skyY3WvmNQENUSJi5CohYBFflBv92nY1nVY P8qkmEO5rvUc1RyBJjDh+Pzl0Bia7ubMIvF/SwCJMYP0V2j8mUmyvy+b9KkU3eML uQu8eWzse/IyCWz9ckINggZsBMT9C/n81rT9yItAd2Knuu9AGjFrspPlZrkel3fF T9DXITa6TBb94d0Y9wh3pqVBS+xT8FPU1SazY2zMD38dWT3xMzV5aDTewPUapxMy /bRl3dwa6axsdANSUiICQCMEPI+rqu5MQ2n5Gk9jtwumCf9vjGI3LOi47cIw9uxY eJH1FNsJxJlqEg== -----END CERTIFICATE-----Generated at Fri Dec 26 01:40:47 2025 by rpki-client