This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json) Hash identifier: Bpqyxt62BpSAdLqEPNBPPeSMnIpoZzexYUlUMGNX874= Subject key identifier: 6C:3D:BC:22:D2:E6:A2:DB:F9:EC:BF:CF:AE:06:AA:22:FB:D8:13:32 Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Certificate serial: 019B4E849AB3AD3B044D91CC17577428A7F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft Manifest number: 1325 Signing time: Wed 24 Dec 2025 04:01:11 +0000 Manifest this update: Wed 24 Dec 2025 04:01:11 +0000 Manifest next update: Thu 25 Dec 2025 04:01:11 +0000 Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=) 2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: rnddIlw/D1lLRslQ8gw4PudFFDXeiJNYo6zffCTKdcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:9a:b3:ad:3b:04:4d:91:cc:17:57:74:28:a7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Validity Not Before: Dec 24 04:01:11 2025 GMT Not After : Dec 25 04:01:11 2025 GMT Subject: CN=6c3dbc22d2e6a2dbf9ecbfcfae06aa22fbd81332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:52:a6:d2:88:fb:c0:a2:a6:2a:4b:02:89: 33:f3:5c:62:0d:c6:ef:7d:7d:a9:72:58:45:26:f6: dc:26:26:7a:f8:96:5d:bb:a3:25:14:e9:40:fe:04: 63:b8:e7:5b:45:c6:19:fc:69:d0:14:7f:83:42:f4: 84:cb:06:c7:ff:cb:b7:21:11:8c:f7:38:ce:60:e0: ad:05:be:26:d9:10:f6:3a:24:06:7b:00:32:a8:35: ce:2a:99:95:db:4f:81:61:72:94:1d:77:05:75:6a: e5:9a:18:49:a2:d2:ab:d3:29:1f:a3:1d:8b:4f:80: 9f:18:1b:7e:23:06:67:15:d6:2a:1a:29:17:3a:02: f9:6e:1f:1f:8a:bc:49:00:2c:bb:8a:6b:e9:d5:a2: 0a:f4:46:d4:4a:e8:2b:d1:24:79:ec:8e:dd:ae:cc: a8:c8:28:b7:2d:b4:cf:2a:7c:1c:d1:88:e7:31:2d: bc:de:b7:7e:47:d3:94:a4:c9:aa:14:58:8e:0c:ba: 61:13:a4:4b:60:c7:16:c3:ee:54:ea:cd:71:ad:f3: 15:f7:e7:4a:36:93:1e:b7:ac:66:7e:3b:5c:c9:5c: 47:91:70:75:8b:14:02:dc:15:73:3b:04:ec:73:89: 53:53:9c:92:d9:15:b6:cc:6f:d1:e6:6d:7c:77:05: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3D:BC:22:D2:E6:A2:DB:F9:EC:BF:CF:AE:06:AA:22:FB:D8:13:32 X509v3 Authority Key Identifier: keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1a:cc:9a:e8:5d:60:11:da:32:9a:5f:29:1f:81:8e:b3:fe: b6:8c:31:d7:5e:20:27:12:ea:b4:35:2c:a0:84:2b:d3:e4:e6: be:c3:0d:de:39:69:33:f7:43:21:db:ca:f4:c8:8b:a9:46:96: e5:6e:c8:03:60:ac:0d:81:c9:82:6a:b9:79:bc:dd:6d:6f:9f: e5:c2:83:dc:91:8b:ed:25:d4:81:22:f1:1a:6a:48:c6:3e:85: d8:a5:55:f8:63:68:a9:6e:e5:1a:23:55:67:55:76:71:0a:c4: d8:d3:62:bc:a8:3a:33:c6:9f:95:1d:22:9f:26:fb:e9:52:71: 8d:4e:d6:79:5a:d5:d4:14:05:8e:c6:22:64:eb:6e:d4:2d:cc: 5d:dd:ae:c2:98:42:fa:10:17:b1:15:cf:9b:04:43:62:39:19: e3:fd:6a:15:00:28:18:bf:8c:fd:a8:23:e9:76:fa:c6:58:1f: e5:b4:11:de:d7:61:b1:d4:4b:3a:90:33:04:d4:bf:91:f1:80: 9c:a3:25:1f:48:1d:8d:e6:45:4c:5a:3c:4d:fb:89:f0:fb:d7: 3e:25:6d:0d:ba:a1:11:2b:c9:61:89:0e:1f:cf:ad:d1:76:75: 73:71:83:8a:21:d4:7a:d5:b8:9c:7e:25:c5:e6:65:26:c5:5f: 98:82:e3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhJqzrTsETZHMF1d0KKfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGU0MWNiZmRlZmFkMGJiMGUyOTcyNDdhY2MxYTIwMWQy ZGY0YTAwHhcNMjUxMjI0MDQwMTExWhcNMjUxMjI1MDQwMTExWjAzMTEwLwYDVQQD Eyg2YzNkYmMyMmQyZTZhMmRiZjllY2JmY2ZhZTA2YWEyMmZiZDgxMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VhSptKI+8CipipLAokz81xiDcbv fX2pclhFJvbcJiZ6+JZdu6MlFOlA/gRjuOdbRcYZ/GnQFH+DQvSEywbH/8u3IRGM 9zjOYOCtBb4m2RD2OiQGewAyqDXOKpmV20+BYXKUHXcFdWrlmhhJotKr0ykfox2L T4CfGBt+IwZnFdYqGikXOgL5bh8firxJACy7imvp1aIK9EbUSugr0SR57I7drsyo yCi3LbTPKnwc0YjnMS283rd+R9OUpMmqFFiODLphE6RLYMcWw+5U6s1xrfMV9+dK NpMet6xmfjtcyVxHkXB1ixQC3BVzOwTsc4lTU5yS2RW2zG/R5m18dwUytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw9vCLS5qLb+ey/z64GqiL72BMyMB8GA1UdIwQY MBaAFKCOQcv9760LsOKXJHrMGiAdLfSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzkt NjU4ZDRjNDYyOGFkLzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzktNjU4ZDRjNDYyOGFk LzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxrMmuhd YBHaMppfKR+BjrP+towx114gJxLqtDUsoIQr0+TmvsMN3jlpM/dDIdvK9MiLqUaW 5W7IA2CsDYHJgmq5ebzdbW+f5cKD3JGL7SXUgSLxGmpIxj6F2KVV+GNoqW7lGiNV Z1V2cQrE2NNivKg6M8aflR0inyb76VJxjU7WeVrV1BQFjsYiZOtu1C3MXd2uwphC +hAXsRXPmwRDYjkZ4/1qFQAoGL+M/agj6Xb6xlgf5bQR3tdhsdRLOpAzBNS/kfGA nKMlH0gdjeZFTFo8TfuJ8PvXPiVtDbqhESvJYYkOH8+t0XZ1c3GDiiHUetW4nH4l xeZlJsVfmILjMA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:18 2025 by rpki-client