This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json) Hash identifier: TmXZvkYqssQXyYnnFBFP+zc7kGdNkm3QogxJYsx66AQ= Subject key identifier: 72:1E:12:FE:FF:BA:AB:AF:4E:3F:C5:BD:E8:B9:C1:55:8D:37:AB:F9 Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d Certificate serial: 019B3F7ED37FDFC1FAFABC71B088BFAB4667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 06:00:34 +0000 Manifest this update: Sun 21 Dec 2025 06:00:34 +0000 Manifest next update: Mon 22 Dec 2025 06:00:34 +0000 Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=) 2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: U4oHsN3II5e6JPJmXS4OHXNT8eRA8UTiCyhEObWFEfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d3:7f:df:c1:fa:fa:bc:71:b0:88:bf:ab:46:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d Validity Not Before: Dec 21 06:00:34 2025 GMT Not After : Dec 22 06:00:34 2025 GMT Subject: CN=721e12feffbaabaf4e3fc5bde8b9c1558d37abf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:b1:de:14:0c:cd:02:6d:8a:05:3c:ae:7c: 55:51:31:22:a7:ad:22:d5:cf:5b:e7:78:df:d0:ca: f1:71:f2:fe:01:f6:2d:44:35:4a:26:fa:ca:c5:c2: 05:ce:18:1c:43:0e:20:b1:29:68:bc:d0:f4:4a:ff: 3d:ae:f8:df:ef:49:bd:82:64:a2:fe:89:0d:4a:7a: 24:02:37:8a:db:eb:b3:2b:c6:59:47:41:26:a5:ed: 51:28:1e:0c:81:a7:45:a3:b3:b2:32:d0:92:e8:6b: 19:b3:10:6c:28:b7:7d:86:32:6b:34:13:45:b7:07: 85:fe:76:3f:fe:57:ac:70:4f:a5:72:a4:3a:7c:f3: e4:61:46:ef:96:58:42:a1:7e:b4:d9:a4:3d:9c:03: d5:bf:27:d5:2b:e3:6d:c1:53:bb:78:6b:c6:07:56: 99:bc:a2:af:be:54:e3:0d:10:10:26:f9:c3:f3:ea: bc:e0:95:c4:ca:e8:67:74:67:02:f2:d3:08:c5:9b: e3:ed:6d:38:b7:b3:b4:e3:18:41:83:72:c3:7f:dc: b8:8d:fe:63:b3:33:67:08:45:17:13:65:6c:f4:b5: 52:e1:65:93:dd:09:05:76:1d:b6:ab:da:2c:b2:19: ac:ae:36:a0:40:88:10:2c:2e:13:67:7d:0a:5d:20: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:12:FE:FF:BA:AB:AF:4E:3F:C5:BD:E8:B9:C1:55:8D:37:AB:F9 X509v3 Authority Key Identifier: keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ca:02:13:85:66:c8:2a:3c:f0:94:67:1c:13:06:54:99:71: f8:93:95:9f:d5:b3:37:8b:2d:cf:50:6e:3c:a6:be:ab:3c:04: bc:c8:8f:a8:cf:1c:dd:15:48:5b:d7:5e:9f:ac:7e:5b:f0:97: e9:a4:64:25:fa:f2:90:18:26:25:68:76:86:0f:ca:45:e5:70: 6b:50:3f:a9:e4:78:c8:ea:ee:4f:06:f1:eb:96:18:1a:c4:57: 58:fe:ed:2c:ad:13:e7:bc:e2:76:62:e9:aa:9c:e8:e2:0d:a5: 00:e7:e8:10:cf:dd:b2:ce:e6:99:25:78:90:4a:04:f9:1e:34: e2:45:7e:2a:a6:36:6f:fa:34:34:6d:93:18:1b:a6:e6:e0:41: 0b:8b:52:a4:2a:73:d1:c2:b5:89:08:02:6a:59:6a:90:ea:d7: ec:82:e8:c1:a9:7f:a0:6b:a6:35:b1:c0:4e:d2:62:fe:5e:e3: 32:53:89:a8:dc:11:de:a5:23:a7:fa:33:65:54:1d:6a:cd:03: 89:a6:4e:6a:16:41:27:e0:27:53:de:48:e3:c7:5f:6d:22:b2: c5:fb:16:ac:8e:33:a1:1f:9d:1e:5b:b3:a8:3d:67:54:72:01: bb:3a:d9:73:5b:fd:05:8a:6e:47:09:c3:02:83:a5:84:dd:2b: dd:4f:e4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftN/38H6+rxxsIi/q0ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjU1MjgyYmU0MTlkMjEyMjJiNTA2ZmI3YTM2OGMzZmU1 ZGIyM2QwHhcNMjUxMjIxMDYwMDM0WhcNMjUxMjIyMDYwMDM0WjAzMTEwLwYDVQQD Eyg3MjFlMTJmZWZmYmFhYmFmNGUzZmM1YmRlOGI5YzE1NThkMzdhYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJax3hQMzQJtigU8rnxVUTEip60i 1c9b53jf0MrxcfL+AfYtRDVKJvrKxcIFzhgcQw4gsSlovND0Sv89rvjf70m9gmSi /okNSnokAjeK2+uzK8ZZR0Empe1RKB4MgadFo7OyMtCS6GsZsxBsKLd9hjJrNBNF tweF/nY//lescE+lcqQ6fPPkYUbvllhCoX602aQ9nAPVvyfVK+NtwVO7eGvGB1aZ vKKvvlTjDRAQJvnD8+q84JXEyuhndGcC8tMIxZvj7W04t7O04xhBg3LDf9y4jf5j szNnCEUXE2Vs9LVS4WWT3QkFdh22q9osshmsrjagQIgQLC4TZ30KXSB22wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIeEv7/uquvTj/Fvei5wVWNN6v5MB8GA1UdIwQY MBaAFKFlUoK+QZ0hIitQb7ejaMP+XbI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjct OTFkYmM5ZjBlOGRiLzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjctOTFkYmM5ZjBlOGRi LzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8oCE4Vm yCo88JRnHBMGVJlx+JOVn9WzN4stz1BuPKa+qzwEvMiPqM8c3RVIW9den6x+W/CX 6aRkJfrykBgmJWh2hg/KReVwa1A/qeR4yOruTwbx65YYGsRXWP7tLK0T57zidmLp qpzo4g2lAOfoEM/dss7mmSV4kEoE+R404kV+KqY2b/o0NG2TGBum5uBBC4tSpCpz 0cK1iQgCallqkOrX7ILowal/oGumNbHATtJi/l7jMlOJqNwR3qUjp/ozZVQdas0D iaZOahZBJ+AnU95I48dfbSKyxfsWrI4zoR+dHluzqD1nVHIBuzrZc1v9BYpuRwnD AoOlhN0r3U/kgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:07:05 2025 by rpki-client