This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json) Hash identifier: k1O6YAzhUOrJ2nBndgqkrlcOb0mT/OwJq1Q/5yCnRnk= Subject key identifier: 7F:70:EF:EE:56:AE:7D:12:BC:66:FD:8E:66:98:CF:EC:81:DF:60:8B Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50 Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450 Certificate serial: 019B4B8374E9169FCC258B21D0667E96ACF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 14:01:04 +0000 Manifest this update: Tue 23 Dec 2025 14:01:04 +0000 Manifest next update: Wed 24 Dec 2025 14:01:04 +0000 Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=) 2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: YfRGxkiL9qQjqEjULvnhcGYc9eASijDZ/+Dc1zFbHJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:74:e9:16:9f:cc:25:8b:21:d0:66:7e:96:ac:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450 Validity Not Before: Dec 23 14:01:04 2025 GMT Not After : Dec 24 14:01:04 2025 GMT Subject: CN=7f70efee56ae7d12bc66fd8e6698cfec81df608b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:46:48:0c:c2:43:24:51:d0:08:52:80:f1: c6:19:7b:e5:5c:b7:1d:ff:cb:31:01:6c:0f:2d:06: 9c:15:f6:ce:8e:a6:6e:9f:8d:da:20:78:af:3e:6f: b7:d9:24:44:f8:fe:2d:ce:e4:d4:35:fe:24:a6:f6: 2a:de:61:b9:d1:3b:dc:e2:06:69:c9:2c:be:91:5d: 20:ed:dd:19:27:57:08:0c:74:fa:11:90:d6:1b:04: 1b:30:3b:e5:fd:79:92:57:10:7a:ab:93:f2:c1:a3: 9b:a6:84:66:bf:28:57:33:8d:7a:2f:c5:7e:1a:34: 85:d1:d7:d5:2f:44:9f:96:e3:13:6c:74:8e:bb:43: 4f:2a:8c:21:53:91:f4:04:44:3e:39:ae:64:b0:94: aa:04:5c:b3:5d:17:16:fa:e7:bb:5f:2a:87:70:ee: 31:00:a3:31:d7:9b:29:e4:6e:cd:b4:47:fb:ed:88: 18:a0:7f:d0:60:9e:9e:c9:86:61:b2:90:1c:d0:a3: d2:65:11:28:6b:43:35:14:26:56:34:0a:9b:f0:7c: 60:5d:a4:50:a2:5d:11:0c:04:92:d7:d7:37:14:89: 99:f1:ec:f8:a1:94:87:b2:5d:f3:4d:40:46:44:ba: 89:8f:d6:7a:3d:ef:7f:08:1b:06:43:4d:63:5a:ff: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:EF:EE:56:AE:7D:12:BC:66:FD:8E:66:98:CF:EC:81:DF:60:8B X509v3 Authority Key Identifier: keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:51:f2:68:76:f0:da:ad:2e:9c:7b:cf:47:6c:8d:a0:ed:df: 27:7c:3a:dc:c3:93:cb:e7:b4:4a:c1:08:d1:96:37:4a:15:3b: 5f:3e:ff:43:ad:9f:06:22:6a:a2:9c:95:54:63:70:60:9e:50: 72:94:0c:c4:a4:04:86:5a:49:c2:6e:72:8a:92:53:ff:62:1e: 28:7f:b2:17:33:d9:6c:0c:1a:86:7b:77:ec:9d:cb:ae:c2:1d: 2d:5c:d2:78:38:ef:d2:85:e1:13:80:fe:d0:76:83:b0:5a:eb: da:97:a7:b0:72:99:9a:88:d4:ab:3a:6e:2e:59:2e:12:de:cb: 86:d1:34:74:66:8a:ef:e4:47:1e:64:1a:32:4a:f4:11:8f:68: ca:6a:dd:30:bd:c3:a0:74:1b:87:fb:10:dc:3e:15:89:3a:24: 02:eb:1c:d0:ec:ac:2a:4e:ea:6b:b3:db:61:36:ba:ad:8d:51: aa:50:2f:8b:87:f2:28:ed:4c:e4:0e:d8:78:9a:4c:52:4e:f7: 3a:f8:26:8b:2b:2f:1e:95:51:b1:33:b9:4b:16:15:93:f8:63: e4:b8:d9:00:85:c9:42:f8:66:77:ec:81:40:0b:82:b4:6c:28: 47:e0:1a:d8:77:3c:a2:9a:e7:81:0e:b7:03:f2:b4:e4:94:87: b0:ce:9c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg3TpFp/MJYsh0GZ+lqz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4 Y2M0NTAwHhcNMjUxMjIzMTQwMTA0WhcNMjUxMjI0MTQwMTA0WjAzMTEwLwYDVQQD Eyg3ZjcwZWZlZTU2YWU3ZDEyYmM2NmZkOGU2Njk4Y2ZlYzgxZGY2MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukxGSAzCQyRR0AhSgPHGGXvlXLcd /8sxAWwPLQacFfbOjqZun43aIHivPm+32SRE+P4tzuTUNf4kpvYq3mG50Tvc4gZp ySy+kV0g7d0ZJ1cIDHT6EZDWGwQbMDvl/XmSVxB6q5PywaObpoRmvyhXM416L8V+ GjSF0dfVL0SfluMTbHSOu0NPKowhU5H0BEQ+Oa5ksJSqBFyzXRcW+ue7XyqHcO4x AKMx15sp5G7NtEf77YgYoH/QYJ6eyYZhspAc0KPSZREoa0M1FCZWNAqb8HxgXaRQ ol0RDASS19c3FImZ8ez4oZSHsl3zTUBGRLqJj9Z6Pe9/CBsGQ01jWv8waQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9w7+5Wrn0SvGb9jmaYz+yB32CLMB8GA1UdIwQY MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVHyaHbw 2q0unHvPR2yNoO3fJ3w63MOTy+e0SsEI0ZY3ShU7Xz7/Q62fBiJqopyVVGNwYJ5Q cpQMxKQEhlpJwm5yipJT/2IeKH+yFzPZbAwahnt37J3LrsIdLVzSeDjv0oXhE4D+ 0HaDsFrr2pensHKZmojUqzpuLlkuEt7LhtE0dGaK7+RHHmQaMkr0EY9oymrdML3D oHQbh/sQ3D4ViTokAusc0OysKk7qa7PbYTa6rY1RqlAvi4fyKO1M5A7YeJpMUk73 OvgmiysvHpVRsTO5SxYVk/hj5LjZAIXJQvhmd+yBQAuCtGwoR+Aa2Hc8oprngQ63 A/K05JSHsM6cQQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:42:46 2025 by rpki-client