This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json) Hash identifier: JvD6GA+04muXgkREP8VyXgFJuInZtdEuNDXHFRQkLDI= Subject key identifier: 4D:CA:02:8A:53:BC:7A:33:2B:36:19:B2:06:08:3B:E4:45:88:E5:7F Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Certificate serial: 019B72C78D91B3A1E73F5152389B908C070B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft Manifest number: 14DE Signing time: Wed 31 Dec 2025 05:00:39 +0000 Manifest this update: Wed 31 Dec 2025 05:00:39 +0000 Manifest next update: Thu 01 Jan 2026 05:00:39 +0000 Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=) 2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: fxuw58orGHSHuPO9MKWbbOSOMPjKOKMYP3ERIv3ZRTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:8d:91:b3:a1:e7:3f:51:52:38:9b:90:8c:07:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Validity Not Before: Dec 31 05:00:39 2025 GMT Not After : Jan 1 05:00:39 2026 GMT Subject: CN=4dca028a53bc7a332b3619b206083be44588e57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:c0:96:97:16:7f:82:aa:1b:35:75:02:b9: dd:0a:28:56:b2:39:af:0c:a9:02:4e:8c:62:8e:34: 8a:04:74:2a:04:8a:c4:ce:86:bc:17:bb:50:9b:4a: 20:08:80:39:1c:d7:ce:36:2f:93:b6:74:6f:5f:a4: 78:d8:50:36:8b:56:05:5b:1e:5d:db:d2:00:31:29: cb:b4:1d:d9:98:55:f2:ec:79:0e:f7:05:cd:9f:76: 6e:b7:e8:3f:74:e9:34:75:64:27:5f:ce:63:87:a6: bb:c1:1e:6d:78:06:89:7d:1d:05:43:45:e0:85:e5: d3:e3:b1:1a:63:eb:4d:31:55:ba:8e:d3:d7:bc:1a: ed:c9:ef:68:86:4c:4a:e2:ff:cf:d5:7d:0b:89:d5: 67:a4:56:f6:8d:42:cb:d3:c2:1b:23:79:0e:33:1e: f2:4f:9e:b7:0e:20:de:39:5a:31:b3:1f:0f:ed:26: 35:d8:13:a4:96:8f:68:a0:14:e5:d3:6d:c7:b1:24: 6c:52:52:12:f6:f6:e7:19:55:df:dc:72:9f:84:a9: c7:e8:d0:af:57:04:de:b5:d8:35:9f:b1:89:98:36: 14:16:19:45:ec:f6:77:f5:69:f1:93:a2:ab:1a:cb: 4f:60:b1:ad:15:97:81:13:bf:c0:33:fc:bc:d6:69: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:02:8A:53:BC:7A:33:2B:36:19:B2:06:08:3B:E4:45:88:E5:7F X509v3 Authority Key Identifier: keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cc:de:40:28:fe:92:0e:7a:8f:ad:b4:29:9e:c7:53:db:d6: a8:c7:5f:35:a4:5d:14:94:60:2f:a9:5e:4c:10:9e:65:04:85: 8b:bb:c9:30:80:71:b5:20:be:cd:a6:d8:79:cd:83:c7:54:8f: 80:d4:33:85:29:2b:72:04:7e:f1:6b:0b:8d:46:27:6b:9a:b8: d9:de:fc:bf:fa:ff:a6:30:79:cf:08:9b:ba:4f:3a:1a:8b:41: 76:bc:7f:2f:5d:31:cc:da:2d:9e:e6:5a:f4:50:00:b5:df:65: fd:36:6e:7a:dd:35:55:20:2f:7e:c3:cb:1e:54:e8:00:fe:a7: 94:c0:7e:15:80:67:11:e1:2d:e9:17:6f:e0:3d:54:2d:da:bc: a1:ed:c5:18:f2:85:c0:1a:01:4f:78:77:35:db:bf:21:ab:2c: d2:ae:d5:1d:0b:11:2b:be:55:5b:d5:eb:e0:82:66:da:df:da: 8e:8a:f8:9b:d7:f3:87:ef:fc:94:3d:8e:f7:3b:9e:d5:12:fa: 0b:30:d0:de:c9:c0:11:72:46:34:d5:f0:4b:99:00:6f:58:ba: 94:0d:b1:75:50:7d:1b:55:e9:23:de:58:fd:e4:a2:36:f6:13: 00:45:fc:5f:62:51:09:13:60:db:a1:f3:bd:ea:91:3e:d0:3b: c9:71:4a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx42Rs6HnP1FSOJuQjAcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw YTVmZDQwHhcNMjUxMjMxMDUwMDM5WhcNMjYwMTAxMDUwMDM5WjAzMTEwLwYDVQQD Eyg0ZGNhMDI4YTUzYmM3YTMzMmIzNjE5YjIwNjA4M2JlNDQ1ODhlNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN7AlpcWf4KqGzV1ArndCihWsjmv DKkCToxijjSKBHQqBIrEzoa8F7tQm0ogCIA5HNfONi+TtnRvX6R42FA2i1YFWx5d 29IAMSnLtB3ZmFXy7HkO9wXNn3Zut+g/dOk0dWQnX85jh6a7wR5teAaJfR0FQ0Xg heXT47EaY+tNMVW6jtPXvBrtye9ohkxK4v/P1X0LidVnpFb2jULL08IbI3kOMx7y T563DiDeOVoxsx8P7SY12BOklo9ooBTl023HsSRsUlIS9vbnGVXf3HKfhKnH6NCv VwTetdg1n7GJmDYUFhlF7PZ39Wnxk6KrGstPYLGtFZeBE7/AM/y81mmHiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3KAopTvHozKzYZsgYIO+RFiOV/MB8GA1UdIwQY MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt YjhlZDY2ZDQyNzgyLzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8zeQCj+ kg56j620KZ7HU9vWqMdfNaRdFJRgL6leTBCeZQSFi7vJMIBxtSC+zabYec2Dx1SP gNQzhSkrcgR+8WsLjUYna5q42d78v/r/pjB5zwibuk86GotBdrx/L10xzNotnuZa 9FAAtd9l/TZuet01VSAvfsPLHlToAP6nlMB+FYBnEeEt6Rdv4D1ULdq8oe3FGPKF wBoBT3h3Ndu/Iass0q7VHQsRK75VW9Xr4IJm2t/ajor4m9fzh+/8lD2O9zue1RL6 CzDQ3snAEXJGNNXwS5kAb1i6lA2xdVB9G1XpI95Y/eSiNvYTAEX8X2JRCRNg26Hz veqRPtA7yXFKGQ== -----END CERTIFICATE-----Generated at Wed Dec 31 11:54:14 2025 by rpki-client