This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json) Hash identifier: AZ9nlpIRaKpNsVBRBq18CkvSTbH2tSUZTcC7pvoFMVM= Subject key identifier: 79:11:86:A4:96:BC:9F:2E:7F:9F:F4:33:79:84:A9:88:0B:8A:54:FA Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019B3D599007CE07356B4AFCDFB627D65CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft Manifest number: 0103 Signing time: Sat 20 Dec 2025 20:00:38 +0000 Manifest this update: Sat 20 Dec 2025 20:00:38 +0000 Manifest next update: Sun 21 Dec 2025 20:00:38 +0000 Files and hashes: 1: CiNflCU4KFn7Aa5TSRjV9Pq0QJI.roa (hash: LgbEtmeOGTEJrLh9qdeICYZRrdXVnu1tQuix4Y2QoGI=) 2: QOeRuiRAx6f12JzbMTw8bg77wX0.roa (hash: L8eA6191FsW9Vnzupg2J6urhYsN5bGDp5k/dBDH9G8c=) 3: Xo_7x8gM362sNUx9u7YODuCsWN0.roa (hash: kMd99CyUtMJl4Cu76HE19siKUa5sAjH27qVIWnJGM5I=) 4: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: PzGaNJ/VwfrUPgawlh59xClD8lTIqAASTR50A1sPVoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:90:07:ce:07:35:6b:4a:fc:df:b6:27:d6:5c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Dec 20 20:00:38 2025 GMT Not After : Dec 21 20:00:38 2025 GMT Subject: CN=791186a496bc9f2e7f9ff4337984a9880b8a54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:1f:9c:31:8b:86:0a:33:b0:b1:71:f4:49: 69:7d:51:b3:79:fd:bb:91:c1:a8:cc:98:91:75:10: 65:ab:68:97:4b:50:5e:d5:aa:59:00:b3:31:da:53: 04:c2:19:71:ae:c6:2d:a1:2d:a5:de:08:67:8f:0a: 49:46:f3:ac:82:ea:a0:70:67:5e:1a:c4:65:8a:63: bb:f5:d5:8d:96:cb:65:1d:db:1e:81:31:91:9d:da: 6d:74:a0:10:90:1a:67:13:d5:9a:18:00:e9:61:87: 93:58:b6:62:4c:6b:94:07:20:55:5b:32:24:74:b3: ec:2c:51:c4:5a:b7:f8:33:a1:94:46:90:32:17:54: aa:ca:96:89:ad:fd:4c:ad:e9:73:d7:57:c8:5c:cc: b8:1a:bc:14:1e:7e:69:ae:d4:9e:cb:dc:18:16:ba: e0:77:12:0c:5a:e5:32:86:09:8b:5c:c0:d4:af:11: 5d:ad:9c:22:3c:8c:33:5c:ba:eb:83:98:1f:27:66: 1b:a2:e9:6e:16:e7:1a:91:40:c5:1b:35:a8:74:15: 9f:07:90:8c:11:d4:0e:3c:e7:8a:09:a7:03:9c:0e: 95:b4:f9:69:43:ee:bd:6f:d0:34:b9:b9:b8:25:15: 35:dd:ca:8c:b8:bc:08:19:28:25:79:69:4e:8a:f3: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:86:A4:96:BC:9F:2E:7F:9F:F4:33:79:84:A9:88:0B:8A:54:FA X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:72:6f:87:9d:ea:d1:7a:ae:f2:4c:09:0f:4c:e6:bb:0a:c0: 48:a6:02:5b:2c:54:c1:65:b1:bc:9a:f5:3a:78:e3:d0:e6:9e: d3:98:c6:55:f0:1f:4a:59:2f:38:ad:d4:57:f7:ab:bb:05:76: c9:89:be:b7:14:c3:bf:8d:a6:de:24:b4:96:b4:c8:13:3c:03: d6:d6:97:80:1e:26:8e:26:83:49:3b:72:f3:2d:0e:45:63:b8: 09:3e:a0:15:45:0f:3a:4e:ad:37:a0:0b:00:8f:d1:cc:a8:e5: 91:38:fa:40:45:2a:9f:07:e4:a4:e6:77:e4:01:d0:70:cd:01: 8c:3e:04:33:20:c7:c4:45:d7:b2:ab:5a:80:b9:29:f6:4d:63: e3:49:3a:74:09:c6:29:e9:ea:c3:ab:8c:b2:ac:74:c9:c3:e0: dc:b6:b6:eb:b4:00:69:47:86:8d:a2:94:9a:3b:82:57:13:a0: ec:b2:a4:80:db:a5:78:2e:9d:af:c7:43:2c:97:eb:4c:d7:97: 42:e5:43:87:7c:8b:66:3f:f2:25:91:fa:9f:f3:ee:17:04:a0: 1e:c5:14:f2:60:91:44:f8:d0:f7:fa:4a:ec:0b:88:0c:87:a7: 93:0d:83:ab:47:d2:8f:9b:7b:e4:a5:49:34:f3:2c:95:54:34: c6:44:98:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZAHzgc1a0r837Yn1lynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjUxMjIwMjAwMDM4WhcNMjUxMjIxMjAwMDM4WjAzMTEwLwYDVQQD Eyg3OTExODZhNDk2YmM5ZjJlN2Y5ZmY0MzM3OTg0YTk4ODBiOGE1NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBEfnDGLhgozsLFx9ElpfVGzef27 kcGozJiRdRBlq2iXS1Be1apZALMx2lMEwhlxrsYtoS2l3ghnjwpJRvOsguqgcGde GsRlimO79dWNlstlHdsegTGRndptdKAQkBpnE9WaGADpYYeTWLZiTGuUByBVWzIk dLPsLFHEWrf4M6GURpAyF1SqypaJrf1Mrelz11fIXMy4GrwUHn5prtSey9wYFrrg dxIMWuUyhgmLXMDUrxFdrZwiPIwzXLrrg5gfJ2YbouluFucakUDFGzWodBWfB5CM EdQOPOeKCacDnA6VtPlpQ+69b9A0ubm4JRU13cqMuLwIGSgleWlOivN73QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkRhqSWvJ8uf5/0M3mEqYgLilT6MB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnJvh53q 0Xqu8kwJD0zmuwrASKYCWyxUwWWxvJr1Onjj0Oae05jGVfAfSlkvOK3UV/eruwV2 yYm+txTDv42m3iS0lrTIEzwD1taXgB4mjiaDSTty8y0ORWO4CT6gFUUPOk6tN6AL AI/RzKjlkTj6QEUqnwfkpOZ35AHQcM0BjD4EMyDHxEXXsqtagLkp9k1j40k6dAnG Kenqw6uMsqx0ycPg3La267QAaUeGjaKUmjuCVxOg7LKkgNuleC6dr8dDLJfrTNeX QuVDh3yLZj/yJZH6n/PuFwSgHsUU8mCRRPjQ9/pK7AuIDIenkw2Dq0fSj5t75KVJ NPMslVQ0xkSYWg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:44 2025 by rpki-client