This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json) Hash identifier: vIJL35UtBtUDnxtS6zoVNJJBD8Bbt9LFiL6Cm6sEoI4= Subject key identifier: E6:A7:5C:6D:66:1A:5B:7E:03:BE:FF:CE:DB:9D:85:72:DB:F0:1C:76 Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Certificate serial: 019B3EDADB4C51580AB88E83E05BF9516AC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft Manifest number: 0CCF Signing time: Sun 21 Dec 2025 03:01:28 +0000 Manifest this update: Sun 21 Dec 2025 03:01:28 +0000 Manifest next update: Mon 22 Dec 2025 03:01:28 +0000 Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=) 2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: LFLtRy3p3Wjzl1dTmIW94xjbxoX1FP/icNRxrHpgFRg=) 3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:db:4c:51:58:0a:b8:8e:83:e0:5b:f9:51:6a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Validity Not Before: Dec 21 03:01:28 2025 GMT Not After : Dec 22 03:01:28 2025 GMT Subject: CN=e6a75c6d661a5b7e03beffcedb9d8572dbf01c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:28:3c:f0:77:e4:7a:df:99:76:2a:69:25: 42:e2:96:04:e5:f3:27:0e:59:b7:58:87:69:45:44: 46:a1:5b:84:8b:47:40:45:12:3c:f5:c5:81:1e:95: 15:f5:1f:8d:5b:30:98:25:2d:75:83:98:f4:d0:5b: 10:5a:c3:64:15:1a:59:ad:1e:9e:dc:09:36:9b:40: 59:fe:3d:ec:6a:9b:b6:25:08:0c:90:18:4a:70:b4: a0:d4:91:94:34:fb:4e:99:ef:8f:54:86:b5:36:55: db:e9:52:ac:c2:1d:09:50:ff:52:cc:3e:63:a4:63: de:c1:cd:b7:d3:d4:75:ec:6f:c8:13:4f:db:0b:f8: 63:39:f6:eb:3a:61:d8:d7:1f:22:15:4d:ff:c9:ba: 65:71:12:bf:64:fe:c7:9e:48:ee:70:25:74:c1:01: 58:5d:60:79:3c:4d:7e:e4:5e:e7:8d:74:4e:e2:fa: c3:e8:75:a5:82:e2:06:42:9f:67:76:fc:98:36:94: 80:9b:65:26:dc:27:29:66:43:56:30:cd:5c:1f:00: 87:92:08:81:e8:ea:09:31:92:58:0a:fa:22:c6:38: ba:ab:f1:1a:63:02:89:bf:98:0c:18:94:c0:ac:b2: c9:95:54:b3:40:c0:19:76:6c:fe:90:a4:bd:b1:43: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A7:5C:6D:66:1A:5B:7E:03:BE:FF:CE:DB:9D:85:72:DB:F0:1C:76 X509v3 Authority Key Identifier: keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:23:95:1c:9c:ce:9f:25:b5:f4:40:39:97:8f:11:e9:1f: e4:13:c5:26:ef:8e:10:6a:dd:88:44:9e:c3:f5:7f:78:01:ad: e2:77:55:89:f1:f4:72:e3:2a:5d:04:31:ca:5c:89:fa:5f:16: ed:9c:f0:2b:ad:60:79:9f:7b:c3:a0:aa:3f:51:af:a2:7a:3e: ea:a2:e2:9e:63:d1:9e:71:a4:2c:09:17:34:5b:eb:e1:02:5e: 52:e9:fa:6f:be:7c:89:07:bc:b5:39:d0:02:8a:8a:bb:50:55: 75:a7:38:4d:39:52:98:b1:cc:d4:57:6b:2e:52:63:49:ad:dc: 42:c4:57:1e:02:6e:91:66:8c:1b:90:54:4d:65:b4:db:27:1f: 73:1b:15:cf:72:12:d4:e4:65:5c:e2:76:97:73:2e:6b:ab:1e: 6f:ff:7b:47:69:a8:f4:5f:36:08:7d:f6:da:cf:13:5e:dd:f2: 70:11:6f:61:67:f7:c2:4a:e9:54:8a:ad:54:17:31:dc:a2:04: 2f:f1:aa:17:41:be:e9:92:ec:33:34:8d:f1:be:74:c8:6d:77: 8f:05:34:43:b3:04:79:c4:37:40:ae:5e:4d:70:90:b9:09:6f: b8:2e:54:79:b6:f2:57:8a:12:b1:84:5f:99:2d:4a:ae:cf:e3: 2a:04:f2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2ttMUVgKuI6D4Fv5UWrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi ZGY5ODAwHhcNMjUxMjIxMDMwMTI4WhcNMjUxMjIyMDMwMTI4WjAzMTEwLwYDVQQD EyhlNmE3NWM2ZDY2MWE1YjdlMDNiZWZmY2VkYjlkODU3MmRiZjAxYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/QoPPB35HrfmXYqaSVC4pYE5fMn Dlm3WIdpRURGoVuEi0dARRI89cWBHpUV9R+NWzCYJS11g5j00FsQWsNkFRpZrR6e 3Ak2m0BZ/j3sapu2JQgMkBhKcLSg1JGUNPtOme+PVIa1NlXb6VKswh0JUP9SzD5j pGPewc2309R17G/IE0/bC/hjOfbrOmHY1x8iFU3/ybplcRK/ZP7HnkjucCV0wQFY XWB5PE1+5F7njXRO4vrD6HWlguIGQp9ndvyYNpSAm2Um3CcpZkNWMM1cHwCHkgiB 6OoJMZJYCvoixji6q/EaYwKJv5gMGJTArLLJlVSzQMAZdmz+kKS9sUPcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOanXG1mGlt+A77/ztudhXLb8Bx2MB8GA1UdIwQY MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVUjlRyc zp8ltfRAOZePEekf5BPFJu+OEGrdiESew/V/eAGt4ndVifH0cuMqXQQxylyJ+l8W 7ZzwK61geZ97w6CqP1Gvono+6qLinmPRnnGkLAkXNFvr4QJeUun6b758iQe8tTnQ AoqKu1BVdac4TTlSmLHM1FdrLlJjSa3cQsRXHgJukWaMG5BUTWW02ycfcxsVz3IS 1ORlXOJ2l3Mua6seb/97R2mo9F82CH322s8TXt3ycBFvYWf3wkrpVIqtVBcx3KIE L/GqF0G+6ZLsMzSN8b50yG13jwU0Q7MEecQ3QK5eTXCQuQlvuC5UebbyV4oSsYRf mS1Krs/jKgTyXw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:36 2025 by rpki-client