This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json) Hash identifier: fV0tw/CZ3HOlpo6H7vtIyKTcQLIeoLrFDN0PPU3c6NQ= Subject key identifier: 3F:13:3A:1D:98:F6:AD:92:17:A1:59:32:D6:09:F3:07:1B:B1:66:E5 Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B3C46D3D3B4A286A2C95C402459BADA18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft Manifest number: 1165 Signing time: Sat 20 Dec 2025 15:00:33 +0000 Manifest this update: Sat 20 Dec 2025 15:00:33 +0000 Manifest next update: Sun 21 Dec 2025 15:00:33 +0000 Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=) 2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=) 3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=) 4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=) 5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=) 6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: TddID9Akr2k9Gg+W7WHmyZjumVdM+qco4Z09jvEk0RI=) 7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d3:d3:b4:a2:86:a2:c9:5c:40:24:59:ba:da:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Dec 20 15:00:33 2025 GMT Not After : Dec 21 15:00:33 2025 GMT Subject: CN=3f133a1d98f6ad9217a15932d609f3071bb166e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:57:78:00:28:41:5d:2a:ff:8d:2b:74:c3: be:2c:51:50:ba:f8:e0:76:eb:6c:a3:bf:c9:63:94: 98:b6:50:45:b2:1b:2d:cf:4b:25:c2:a0:90:02:c3: ad:df:3e:8e:b0:b1:f8:5c:67:2c:d9:a5:01:a3:d7: 43:20:d5:90:85:53:4f:8f:81:7e:3e:f0:e4:ee:26: 45:b2:41:cd:92:7d:37:f2:4d:24:63:74:84:f1:42: b6:d4:de:29:f9:99:bc:c1:cc:7f:8c:cb:b1:92:b1: 95:48:76:19:25:c9:e3:fa:f0:92:66:aa:f2:c2:f6: 7d:fd:a1:28:51:39:4e:20:f6:2d:df:c9:72:c0:f4: 2f:73:70:f0:e7:1f:61:8d:c7:37:af:6e:fa:e5:01: 6b:83:c4:97:3d:c9:e8:fb:63:38:7a:43:f2:2e:68: 1d:7c:fe:92:03:48:90:d5:d9:ba:08:1f:2a:d7:3c: 00:97:07:13:0c:2e:34:76:9c:5b:98:4a:6e:a6:7a: 2b:a4:af:7b:64:db:a3:7a:d6:2a:3b:78:f2:ce:0d: 44:f7:7d:50:28:3f:2c:af:94:8a:1c:ea:5c:14:f5: d7:60:1a:f5:82:17:85:f3:60:e9:99:48:e1:fe:2e: 0d:31:5a:2d:a6:34:c6:42:ca:53:de:a1:91:db:ca: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:3A:1D:98:F6:AD:92:17:A1:59:32:D6:09:F3:07:1B:B1:66:E5 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:27:cf:eb:32:cc:4e:af:76:64:c9:5e:07:73:12:e3:e2:3e: fa:ba:34:4d:91:2a:48:bb:70:44:99:98:24:5a:81:35:29:2c: 0d:40:f0:09:38:70:87:76:c4:db:ad:27:f9:3f:1b:6e:63:2b: ba:53:8c:77:10:cc:4d:01:85:b5:cc:65:47:1e:cd:e6:90:3e: 9f:a0:98:7e:17:97:ac:40:fa:7c:ff:cc:51:d2:ae:7b:b2:35: 6b:f8:1b:fb:e2:04:7d:26:e8:47:0b:51:68:ce:2a:30:85:b3: dc:40:68:15:7f:aa:4a:25:d1:fd:91:73:7a:06:3a:80:d9:e7: 1e:4a:2f:4f:07:47:42:8b:76:3b:b7:9e:4d:f5:2b:96:db:78: 32:7c:06:e2:78:10:0f:c3:0b:fb:a9:0e:18:fd:59:9e:9a:86: 18:5e:b8:7f:e2:c1:49:08:d3:94:d4:f7:e3:82:b7:56:bf:7d: 4a:89:ba:9f:79:f6:a3:1b:aa:84:74:95:70:c7:f8:97:36:a5: 1d:90:ab:95:f6:44:29:c8:7e:33:37:81:4c:cd:be:fa:45:07: ca:e1:23:1e:eb:81:25:74:51:ab:85:72:e7:0e:5d:d7:22:82: bf:c9:38:52:85:08:9c:80:14:c9:25:3a:d6:82:1f:2c:2d:dd: 83:ba:b5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtPTtKKGoslcQCRZutoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjUxMjIwMTUwMDMzWhcNMjUxMjIxMTUwMDMzWjAzMTEwLwYDVQQD EygzZjEzM2ExZDk4ZjZhZDkyMTdhMTU5MzJkNjA5ZjMwNzFiYjE2NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2pXeAAoQV0q/40rdMO+LFFQuvjg dutso7/JY5SYtlBFshstz0slwqCQAsOt3z6OsLH4XGcs2aUBo9dDINWQhVNPj4F+ PvDk7iZFskHNkn038k0kY3SE8UK21N4p+Zm8wcx/jMuxkrGVSHYZJcnj+vCSZqry wvZ9/aEoUTlOIPYt38lywPQvc3Dw5x9hjcc3r2765QFrg8SXPcno+2M4ekPyLmgd fP6SA0iQ1dm6CB8q1zwAlwcTDC40dpxbmEpupnorpK97ZNujetYqO3jyzg1E931Q KD8sr5SKHOpcFPXXYBr1gheF82DpmUjh/i4NMVotpjTGQspT3qGR28pScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8TOh2Y9q2SF6FZMtYJ8wcbsWblMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSfP6zLM Tq92ZMleB3MS4+I++ro0TZEqSLtwRJmYJFqBNSksDUDwCThwh3bE260n+T8bbmMr ulOMdxDMTQGFtcxlRx7N5pA+n6CYfheXrED6fP/MUdKue7I1a/gb++IEfSboRwtR aM4qMIWz3EBoFX+qSiXR/ZFzegY6gNnnHkovTwdHQot2O7eeTfUrltt4MnwG4ngQ D8ML+6kOGP1ZnpqGGF64f+LBSQjTlNT344K3Vr99Som6n3n2oxuqhHSVcMf4lzal HZCrlfZEKch+MzeBTM2++kUHyuEjHuuBJXRRq4Vy5w5d1yKCv8k4UoUInIAUySU6 1oIfLC3dg7q1Gw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:08 2025 by rpki-client