This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json) Hash identifier: ZqynBnqCjA27GuFd+Kl1mrqupDuWMusm90PMT70tmqg= Subject key identifier: B7:D0:8A:E3:81:E0:06:21:6A:4A:DC:3F:94:7D:C0:63:5B:3F:FE:B2 Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Certificate serial: 019B30E7DB2F2F71AAA0994F3BCCFF954E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 10:00:59 +0000 Manifest this update: Thu 18 Dec 2025 10:00:59 +0000 Manifest next update: Fri 19 Dec 2025 10:00:59 +0000 Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=) 2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: 3Y4dvUt88h99JG5JZrlcEO6rosmaQYa9/9/hwcfjjsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:db:2f:2f:71:aa:a0:99:4f:3b:cc:ff:95:4e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Validity Not Before: Dec 18 10:00:59 2025 GMT Not After : Dec 19 10:00:59 2025 GMT Subject: CN=b7d08ae381e006216a4adc3f947dc0635b3ffeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:8f:41:a4:0f:16:9d:f6:db:24:92:57:1a: 51:d6:89:37:9a:4a:2e:f2:82:f5:25:50:ce:dd:60: a8:b2:2a:93:5a:8a:6c:6b:34:16:1a:97:7c:5e:9f: 84:2d:3c:75:51:ce:73:f3:b2:d1:e3:f7:cf:6e:85: a7:eb:f5:f7:a7:14:6c:23:65:36:87:a0:94:db:da: 60:ff:05:23:66:7b:b4:17:6b:a4:7c:7e:09:6c:73: a6:c1:e3:ff:3b:88:5a:48:5e:ec:1c:52:8a:a1:8a: 76:d3:bd:b6:66:1a:6a:2c:22:d7:eb:6c:a3:ca:26: 67:37:cf:a9:b1:32:72:9d:8d:5a:6e:85:b6:69:24: 50:5d:e3:cb:89:43:a2:54:06:4f:4e:84:b9:8d:6d: 66:92:58:52:6e:37:c3:5b:10:e5:f5:35:4a:ab:e0: da:ed:34:ad:fd:e5:c0:66:95:09:0b:08:f9:5c:62: ad:c9:3a:57:73:24:ef:a0:10:c6:f9:cc:7b:d2:05: b2:7f:94:b5:36:2f:31:6b:ff:e1:fa:be:77:38:26: b9:2d:57:65:a7:0d:28:ab:54:0c:11:9c:78:97:f8: ca:3f:58:60:99:3f:0d:ba:66:db:1b:39:bc:b7:f7: 7e:46:d8:43:6f:1a:50:ca:c8:5a:75:09:60:41:5a: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D0:8A:E3:81:E0:06:21:6A:4A:DC:3F:94:7D:C0:63:5B:3F:FE:B2 X509v3 Authority Key Identifier: keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:15:a5:0c:ad:a8:25:ec:d1:12:0e:9a:ea:b1:9e:92:4f:03: 22:8f:46:4e:a5:1d:cb:71:3c:1c:93:bb:62:fb:d8:53:10:3e: 2d:ac:72:57:b8:27:91:5b:d6:96:9a:1e:5f:55:1c:17:2f:64: 13:4a:00:92:97:af:ac:74:dd:28:f2:24:d1:3c:c0:66:36:f3: 1a:5f:7e:53:bc:5b:1d:30:5e:5f:06:e7:d7:98:38:16:72:3e: 0c:75:80:5c:59:c0:02:59:3e:41:c6:57:98:d0:2d:41:5d:d5: 0e:6b:94:dd:9e:95:53:7c:cc:e9:86:60:d5:a3:a7:70:a5:22: d1:56:d4:48:78:6c:cf:ab:12:4d:7e:a4:34:b4:46:8b:0a:bc: 46:bf:69:0b:9b:91:99:1e:d7:87:33:fc:6a:80:6b:ce:06:40: d2:41:db:dd:d1:9e:1d:4e:43:60:35:ed:e3:3c:ba:5b:bd:5f: 90:58:8e:69:d8:51:8e:81:f0:c3:d0:3b:76:6e:c2:49:f3:1d: 5d:0a:d1:3c:33:d6:87:79:65:ef:f4:db:b2:8c:33:b1:b2:3a: e8:57:cb:e2:4f:fa:83:67:41:81:0e:75:0d:6d:47:b9:c7:0d: 7a:f1:02:aa:16:1a:80:0e:a3:91:8b:b6:19:f5:40:51:ec:de: 1c:a0:eb:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw59svL3GqoJlPO8z/lU54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4 YTFmODIwHhcNMjUxMjE4MTAwMDU5WhcNMjUxMjE5MTAwMDU5WjAzMTEwLwYDVQQD EyhiN2QwOGFlMzgxZTAwNjIxNmE0YWRjM2Y5NDdkYzA2MzViM2ZmZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXGPQaQPFp322ySSVxpR1ok3mkou 8oL1JVDO3WCosiqTWopsazQWGpd8Xp+ELTx1Uc5z87LR4/fPboWn6/X3pxRsI2U2 h6CU29pg/wUjZnu0F2ukfH4JbHOmweP/O4haSF7sHFKKoYp20722ZhpqLCLX62yj yiZnN8+psTJynY1aboW2aSRQXePLiUOiVAZPToS5jW1mklhSbjfDWxDl9TVKq+Da 7TSt/eXAZpUJCwj5XGKtyTpXcyTvoBDG+cx70gWyf5S1Ni8xa//h+r53OCa5LVdl pw0oq1QMEZx4l/jKP1hgmT8NumbbGzm8t/d+RthDbxpQyshadQlgQVqkNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfQiuOB4AYhakrcP5R9wGNbP/6yMB8GA1UdIwQY MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphWlDK2o JezREg6a6rGekk8DIo9GTqUdy3E8HJO7YvvYUxA+LaxyV7gnkVvWlpoeX1UcFy9k E0oAkpevrHTdKPIk0TzAZjbzGl9+U7xbHTBeXwbn15g4FnI+DHWAXFnAAlk+QcZX mNAtQV3VDmuU3Z6VU3zM6YZg1aOncKUi0VbUSHhsz6sSTX6kNLRGiwq8Rr9pC5uR mR7XhzP8aoBrzgZA0kHb3dGeHU5DYDXt4zy6W71fkFiOadhRjoHww9A7dm7CSfMd XQrRPDPWh3ll7/TbsowzsbI66FfL4k/6g2dBgQ51DW1HuccNevECqhYagA6jkYu2 GfVAUezeHKDrQg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:20 2025 by rpki-client