This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json) Hash identifier: hpN0q2nTtYK04QeNuldGdFjo3AtxUnqpFdSi7qVGnbY= Subject key identifier: 59:A8:4E:41:94:65:B4:F0:87:9E:41:8A:A9:52:99:A4:36:23:A1:0A Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85 Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085 Certificate serial: 019B281BD5ACB25A77B6243BF9103BD22FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft Manifest number: 046E Signing time: Tue 16 Dec 2025 17:01:11 +0000 Manifest this update: Tue 16 Dec 2025 17:01:11 +0000 Manifest next update: Wed 17 Dec 2025 17:01:11 +0000 Files and hashes: 1: FXp8fQ6gh8oelASFQ2BfVeHiv6Y.roa (hash: JfDcJIX809/8XwYFjwqEGsiF/3/D+Oif9zz1ms1Fn7c=) 2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: Tk5UaXjN2kbQKMwtgfqhW3xOu8yx1WsAI34AEbJrtMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:d5:ac:b2:5a:77:b6:24:3b:f9:10:3b:d2:2f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085 Validity Not Before: Dec 16 17:01:11 2025 GMT Not After : Dec 17 17:01:11 2025 GMT Subject: CN=59a84e419465b4f0879e418aa95299a43623a10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:da:3a:a4:2f:a7:62:00:62:8f:d0:d8:cb: e3:dc:53:c9:31:75:3c:33:a0:3a:f7:ea:e9:9c:01: 43:9c:fd:b6:32:8a:cb:c9:5b:27:ae:f1:e2:f7:68: 64:db:34:d8:4c:9c:0c:53:94:c3:aa:7c:1a:59:5a: 8a:ef:90:1c:15:d6:a3:53:51:b4:cd:1d:19:b6:f3: cd:b3:9a:31:96:b8:8a:fa:89:b4:f7:28:31:2d:7f: c0:3f:04:35:61:75:67:6d:e5:b7:c0:cb:c1:e5:f7: e2:3a:33:3f:48:dc:09:e6:e6:2e:e4:c2:98:60:9b: fb:e1:4b:88:88:2b:19:3a:cf:a7:48:90:de:96:25: 3e:f6:44:f4:64:d4:36:64:65:f0:3f:06:f3:de:5f: 72:71:03:f6:f0:dc:4d:12:33:cd:6e:c8:a3:26:d1: 2d:2a:11:3d:83:69:a8:b3:05:55:51:87:b7:e8:54: 57:95:13:7a:9b:98:5f:e6:e3:2d:13:75:03:40:4d: 25:b2:53:0b:76:c1:9c:fb:01:3c:ae:f3:f9:c7:a2: 7e:12:be:3b:ed:74:38:f9:28:62:42:6d:a8:01:9f: 98:da:2b:61:e4:8d:54:ed:82:6e:0f:80:3d:d3:42: 44:8d:72:67:e3:11:0e:c9:c7:07:51:47:dd:cf:11: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:4E:41:94:65:B4:F0:87:9E:41:8A:A9:52:99:A4:36:23:A1:0A X509v3 Authority Key Identifier: keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a3:6d:d3:2a:ce:c2:5f:4d:e6:37:06:67:a5:e4:de:0b:53: 2c:04:65:fc:5e:53:14:2f:84:7d:0d:6c:40:3c:9b:32:34:fa: d3:3d:65:ef:81:33:f7:bb:08:5d:07:71:f7:13:c6:36:4a:ed: c5:e5:87:f0:aa:4a:57:8f:7f:b7:9c:95:8a:d8:d1:42:38:26: f6:d0:25:35:f9:0c:91:c3:34:b0:bf:53:05:87:4f:96:94:ef: 90:2d:b7:da:fc:78:58:6a:b2:1a:ef:e5:c1:0d:e8:3a:46:77: 27:ef:82:e4:26:67:ae:f7:02:42:d6:c0:c2:e4:30:a5:32:b5: 4c:41:58:2f:7e:a1:64:bd:84:5c:8e:6c:ac:c4:7c:7d:04:10: bc:99:d4:c1:4f:6a:1d:40:c2:ec:67:06:66:97:ab:36:3e:c2: 2b:a4:0d:41:9b:e0:82:19:48:99:35:96:c2:74:d5:3c:20:f6: d4:23:fb:34:3a:f0:21:3e:77:9a:bf:e1:03:d7:7b:22:b7:31: a0:b6:27:b3:c0:81:66:29:56:fc:89:f0:2f:27:1c:62:12:1b: 9d:11:b2:43:08:f0:0f:d9:e6:44:ba:e4:0f:b6:87:36:0a:56: 49:60:f0:52:43:fc:96:68:bb:a7:34:7a:0f:5b:f5:f7:13:15: b3:ed:d5:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG9Wsslp3tiQ7+RA70i+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjUxMmI4YTI2MmJhZDU5OWEzYjAyMzM1OGM1Y2VjY2Fj OWUwODUwHhcNMjUxMjE2MTcwMTExWhcNMjUxMjE3MTcwMTExWjAzMTEwLwYDVQQD Eyg1OWE4NGU0MTk0NjViNGYwODc5ZTQxOGFhOTUyOTlhNDM2MjNhMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HbaOqQvp2IAYo/Q2Mvj3FPJMXU8 M6A69+rpnAFDnP22MorLyVsnrvHi92hk2zTYTJwMU5TDqnwaWVqK75AcFdajU1G0 zR0ZtvPNs5oxlriK+om09ygxLX/APwQ1YXVnbeW3wMvB5ffiOjM/SNwJ5uYu5MKY YJv74UuIiCsZOs+nSJDeliU+9kT0ZNQ2ZGXwPwbz3l9ycQP28NxNEjPNbsijJtEt KhE9g2moswVVUYe36FRXlRN6m5hf5uMtE3UDQE0lslMLdsGc+wE8rvP5x6J+Er47 7XQ4+ShiQm2oAZ+Y2ith5I1U7YJuD4A900JEjXJn4xEOyccHUUfdzxEKgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmoTkGUZbTwh55BiqlSmaQ2I6EKMB8GA1UdIwQY MBaAFKFlEriiYrrVmaOwIzWMXOzKyeCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgt YzllYzNhOThmOWEzLzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgtYzllYzNhOThmOWEz LzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKNt0yrO wl9N5jcGZ6Xk3gtTLARl/F5TFC+EfQ1sQDybMjT60z1l74Ez97sIXQdx9xPGNkrt xeWH8KpKV49/t5yVitjRQjgm9tAlNfkMkcM0sL9TBYdPlpTvkC232vx4WGqyGu/l wQ3oOkZ3J++C5CZnrvcCQtbAwuQwpTK1TEFYL36hZL2EXI5srMR8fQQQvJnUwU9q HUDC7GcGZperNj7CK6QNQZvgghlImTWWwnTVPCD21CP7NDrwIT53mr/hA9d7Ircx oLYns8CBZilW/InwLyccYhIbnRGyQwjwD9nmRLrkD7aHNgpWSWDwUkP8lmi7pzR6 D1v19xMVs+3V5g== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:54 2025 by rpki-client