This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json) Hash identifier: MCAHJjJAKPvm81GQplnqjvLkah34rRQYXWxTFfBsDdw= Subject key identifier: 61:5E:8A:C0:2C:C1:68:43:A0:45:22:C5:BD:D2:4C:7D:4D:57:40:C3 Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Certificate serial: 019B4A39C94A328E7319E3DEE5A38B4A86D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft Manifest number: 09A2 Signing time: Tue 23 Dec 2025 08:00:59 +0000 Manifest this update: Tue 23 Dec 2025 08:00:59 +0000 Manifest next update: Wed 24 Dec 2025 08:00:59 +0000 Files and hashes: 1: 4XG6DuE-VOpXPlm1OM2r12JgRic.roa (hash: A9cZGvYN3HxFKk3EJisSEe/6Tu/3YVMhQqYAsXSqvsk=) 2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=) 3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: Bn3VtoRl0ecRDZw4ubg1rnGYvs1nXWi7enInk1rNTQw=) 4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:c9:4a:32:8e:73:19:e3:de:e5:a3:8b:4a:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Validity Not Before: Dec 23 08:00:59 2025 GMT Not After : Dec 24 08:00:59 2025 GMT Subject: CN=615e8ac02cc16843a04522c5bdd24c7d4d5740c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:09:9e:24:79:81:b6:9b:c9:8d:67:53:ec: ff:fc:76:47:c2:bc:b2:34:ae:94:86:e4:99:75:3e: 20:fb:35:27:cc:66:f9:c5:eb:ee:3a:96:a1:9a:74: e1:bc:bb:5a:90:f7:b1:7b:ee:9d:0c:62:b5:7f:eb: 47:c1:12:a6:38:c1:5d:fc:df:65:e3:c5:94:70:aa: d7:66:89:fe:98:31:e3:a8:ef:7c:cb:c8:63:bf:8e: 7e:97:bd:de:da:9e:76:98:7b:ed:be:27:09:b2:e4: 1b:31:47:3f:5d:ff:1f:b7:5c:30:ad:a9:6d:4d:8e: e8:61:67:30:ed:ef:86:cb:6d:91:25:59:c0:7f:ac: 28:e0:e3:85:0e:eb:0d:e0:57:65:dd:18:64:ea:fb: 02:31:ed:e3:27:5a:51:40:c7:00:41:cc:ed:06:c1: c7:3b:17:48:fb:86:69:01:49:1e:89:a3:be:c4:27: 2b:b7:8f:10:e6:3f:63:d0:53:a4:bd:6e:78:2c:ea: 09:c5:1f:ef:3b:60:ee:38:b1:e5:85:89:30:ba:1b: db:b2:e5:64:bf:9f:fb:d0:7b:40:55:cb:ae:65:1b: 7a:a0:80:93:e2:30:89:ae:e6:c8:5f:30:13:7c:96: e2:d6:60:1a:b7:e1:81:0d:11:6b:c1:df:7b:93:ce: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:8A:C0:2C:C1:68:43:A0:45:22:C5:BD:D2:4C:7D:4D:57:40:C3 X509v3 Authority Key Identifier: keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2c:71:ae:ad:95:96:26:87:3e:4a:df:68:8d:0d:72:2e:0b: 46:b6:e6:e0:da:a3:b3:7b:28:d6:39:f3:a5:da:4f:71:ce:28: b2:6e:5a:62:54:d2:be:92:03:3e:59:27:17:cc:6a:db:77:f7: 25:68:2d:77:f3:56:7a:9c:ae:07:4e:54:cc:3c:68:9c:35:a8: 5c:e7:83:dd:87:84:0b:3d:65:40:27:70:1b:93:a5:41:b3:a0: 79:43:f8:52:28:a9:d1:c0:9a:e1:0b:73:2f:ba:0f:3c:78:df: c7:89:08:f6:cd:34:7f:d9:e8:58:65:47:44:92:8b:02:c2:83: 28:d7:ad:9d:51:31:07:cd:33:79:6a:59:49:c2:d2:69:67:57: 6a:38:ab:68:e1:8d:3d:a2:b4:74:d9:bb:28:19:22:4d:0a:5d: f1:8f:c8:d5:21:44:ad:49:ac:b0:25:25:b6:d4:28:e9:df:1f: 52:b8:df:d4:e1:cd:c9:88:b0:6f:aa:0e:0b:6f:0d:1d:1e:9e: 53:7b:b6:ba:1d:f0:de:c0:4b:de:42:5e:15:db:3d:09:81:d2: 32:ae:17:d1:6f:0c:7a:4f:43:6e:95:2d:9f:f0:c7:4c:6d:bb: be:92:16:f3:68:e7:3c:87:40:eb:d2:f9:d5:87:c9:06:d0:c1: 06:d2:63:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOclKMo5zGePe5aOLSobZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi ZDM3NDAwHhcNMjUxMjIzMDgwMDU5WhcNMjUxMjI0MDgwMDU5WjAzMTEwLwYDVQQD Eyg2MTVlOGFjMDJjYzE2ODQzYTA0NTIyYzViZGQyNGM3ZDRkNTc0MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BwJniR5gbabyY1nU+z//HZHwryy NK6UhuSZdT4g+zUnzGb5xevuOpahmnThvLtakPexe+6dDGK1f+tHwRKmOMFd/N9l 48WUcKrXZon+mDHjqO98y8hjv45+l73e2p52mHvtvicJsuQbMUc/Xf8ft1wwralt TY7oYWcw7e+Gy22RJVnAf6wo4OOFDusN4Fdl3Rhk6vsCMe3jJ1pRQMcAQcztBsHH OxdI+4ZpAUkeiaO+xCcrt48Q5j9j0FOkvW54LOoJxR/vO2DuOLHlhYkwuhvbsuVk v5/70HtAVcuuZRt6oICT4jCJrubIXzATfJbi1mAat+GBDRFrwd97k86MvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFeisAswWhDoEUixb3STH1NV0DDMB8GA1UdIwQY MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCxxrq2V liaHPkrfaI0Nci4LRrbm4Nqjs3so1jnzpdpPcc4osm5aYlTSvpIDPlknF8xq23f3 JWgtd/NWepyuB05UzDxonDWoXOeD3YeECz1lQCdwG5OlQbOgeUP4Uiip0cCa4Qtz L7oPPHjfx4kI9s00f9noWGVHRJKLAsKDKNetnVExB80zeWpZScLSaWdXajiraOGN PaK0dNm7KBkiTQpd8Y/I1SFErUmssCUlttQo6d8fUrjf1OHNyYiwb6oOC28NHR6e U3u2uh3w3sBL3kJeFds9CYHSMq4X0W8Mek9DbpUtn/DHTG27vpIW82jnPIdA69L5 1YfJBtDBBtJjQw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:51:30 2025 by rpki-client