This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json) Hash identifier: ZLBi0RHFGUTdtUo6aOs7x/S2PSgKY1n4m085InUjbm0= Subject key identifier: CD:AE:A8:5E:5B:28:DF:36:11:C8:07:4A:C1:2A:30:F5:4B:27:35:90 Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Certificate serial: 019B38A307BBFEFCE2B04DE5256C67314200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 22:02:46 +0000 Manifest this update: Fri 19 Dec 2025 22:02:46 +0000 Manifest next update: Sat 20 Dec 2025 22:02:46 +0000 Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=) 2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: lZFSgT2DCnIa4K4HYlgtNvKLZFbufXeRm7cjnuUZveA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a3:07:bb:fe:fc:e2:b0:4d:e5:25:6c:67:31:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Validity Not Before: Dec 19 22:02:46 2025 GMT Not After : Dec 20 22:02:46 2025 GMT Subject: CN=cdaea85e5b28df3611c8074ac12a30f54b273590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:fe:df:6d:cb:dd:f0:b2:5f:8c:a1:d9:46: 9f:f8:bd:58:77:b8:ff:55:8b:28:ae:04:81:65:6c: 86:05:7d:ef:d9:d0:50:cc:b4:42:6a:f0:a8:98:a9: dc:ec:40:91:a8:e4:8e:98:fc:f6:85:ab:eb:31:b5: 25:72:d4:fc:64:93:dc:76:cb:f2:cd:de:5f:7e:ff: d7:8c:c4:b1:fb:36:46:3c:c2:55:05:9f:d1:ec:12: fc:44:ad:74:8a:ed:69:c6:9f:c4:31:12:a3:43:9c: d6:96:01:ae:27:1d:b1:8f:35:2b:a5:72:db:9b:7d: 22:93:50:20:19:95:90:3e:03:c9:ca:e8:c7:d3:bf: 35:48:5f:12:9e:93:99:98:06:f3:6e:e0:de:f1:78: b1:56:b1:0c:57:8a:19:6a:1a:45:6f:92:2d:01:90: 43:76:d8:51:80:1c:04:6f:53:7a:fa:89:2d:f0:86: 1f:b2:03:dc:1e:bb:ae:02:47:7e:a9:25:12:cd:84: d3:e6:b1:cd:8c:54:cf:30:92:1e:55:91:17:f1:f2: c7:06:bf:18:1d:d0:11:36:1f:f6:0c:ac:30:f1:cd: a8:bf:66:6f:92:84:f3:b9:74:50:41:ab:db:68:18: dd:9d:7a:41:41:84:4a:d3:31:8f:43:94:d1:fe:c4: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:A8:5E:5B:28:DF:36:11:C8:07:4A:C1:2A:30:F5:4B:27:35:90 X509v3 Authority Key Identifier: keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5c:32:30:d3:34:0d:93:39:a2:16:23:55:b2:17:4e:42:e8: ff:54:e9:51:4b:3e:b8:1c:d4:e5:4c:e3:df:d7:96:e4:56:0f: 8c:ed:a7:84:c9:35:ba:bd:88:09:84:b6:75:40:7a:37:e9:74: f4:53:db:4a:00:ac:f2:30:ba:16:ee:d9:77:80:06:6b:95:62: 37:71:ce:84:39:b5:3e:eb:68:21:56:4b:d7:85:75:72:99:1d: c6:45:6a:c1:be:a1:b4:89:f9:40:5d:ce:ca:7a:01:8e:53:d8: 2c:87:9d:94:a4:5b:e5:84:10:e3:85:6b:5c:8d:1e:bf:08:7c: 25:c5:a5:f2:c6:0f:bb:01:e5:2d:af:e4:1c:4f:78:2b:3e:aa: 68:32:46:d8:5f:72:ee:fc:2c:93:25:e2:f7:c0:da:11:fd:9a: 54:70:1e:5d:00:9f:0d:5e:9f:f9:76:b9:8f:44:4c:dc:12:44: 01:13:25:22:5a:50:83:86:fd:7f:40:23:10:33:f3:9d:d8:10: 7f:1a:32:6d:1f:73:3e:cc:99:fb:01:7f:78:b2:a1:f8:9f:a7: 2d:9f:47:c2:80:0b:c3:b2:b0:87:26:1e:01:31:78:c0:a2:54: 15:dd:cc:22:29:aa:99:64:5e:c9:da:cd:33:a9:67:b3:7c:af: 88:50:41:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4owe7/vzisE3lJWxnMUIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj NGQxOTgwHhcNMjUxMjE5MjIwMjQ2WhcNMjUxMjIwMjIwMjQ2WjAzMTEwLwYDVQQD EyhjZGFlYTg1ZTViMjhkZjM2MTFjODA3NGFjMTJhMzBmNTRiMjczNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiL+323L3fCyX4yh2Uaf+L1Yd7j/ VYsorgSBZWyGBX3v2dBQzLRCavComKnc7ECRqOSOmPz2havrMbUlctT8ZJPcdsvy zd5ffv/XjMSx+zZGPMJVBZ/R7BL8RK10iu1pxp/EMRKjQ5zWlgGuJx2xjzUrpXLb m30ik1AgGZWQPgPJyujH0781SF8SnpOZmAbzbuDe8XixVrEMV4oZahpFb5ItAZBD dthRgBwEb1N6+okt8IYfsgPcHruuAkd+qSUSzYTT5rHNjFTPMJIeVZEX8fLHBr8Y HdARNh/2DKww8c2ov2ZvkoTzuXRQQavbaBjdnXpBQYRK0zGPQ5TR/sRsmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2uqF5bKN82EcgHSsEqMPVLJzWQMB8GA1UdIwQY MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2 LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVwyMNM0 DZM5ohYjVbIXTkLo/1TpUUs+uBzU5Uzj39eW5FYPjO2nhMk1ur2ICYS2dUB6N+l0 9FPbSgCs8jC6Fu7Zd4AGa5ViN3HOhDm1PutoIVZL14V1cpkdxkVqwb6htIn5QF3O ynoBjlPYLIedlKRb5YQQ44VrXI0evwh8JcWl8sYPuwHlLa/kHE94Kz6qaDJG2F9y 7vwskyXi98DaEf2aVHAeXQCfDV6f+Xa5j0RM3BJEARMlIlpQg4b9f0AjEDPzndgQ fxoybR9zPsyZ+wF/eLKh+J+nLZ9HwoALw7KwhyYeATF4wKJUFd3MIimqmWReydrN M6lns3yviFBBMA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:35 2025 by rpki-client