This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json) Hash identifier: bmt93KzmuYAz/3E3x3UEZM/z7tPfKTtlxUdnteSONro= Subject key identifier: 56:CE:BC:D9:50:2D:1A:6B:88:12:56:CF:E1:AF:C0:11:25:5F:2A:FF Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Certificate serial: 019B4F5FFC0100C6329665660CA83B9FBEFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft Manifest number: 11E3 Signing time: Wed 24 Dec 2025 08:00:48 +0000 Manifest this update: Wed 24 Dec 2025 08:00:48 +0000 Manifest next update: Thu 25 Dec 2025 08:00:48 +0000 Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=) 2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: b2Qkcx5pZY6Bd6zhSqvlTW5J+1HYjMG32hqZTr3wrLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:fc:01:00:c6:32:96:65:66:0c:a8:3b:9f:be:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Validity Not Before: Dec 24 08:00:48 2025 GMT Not After : Dec 25 08:00:48 2025 GMT Subject: CN=56cebcd9502d1a6b881256cfe1afc011255f2aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:82:f4:a2:e1:99:ba:58:64:0f:9d:62:5d: fb:98:42:4d:f8:f9:9b:69:90:4d:85:d8:eb:b4:c6: 17:ae:57:f0:29:4e:c9:7c:93:28:bf:10:5d:88:fe: 80:d9:c3:89:18:f7:83:18:a7:e5:86:a0:ed:78:27: fa:55:b2:d4:f1:8e:6e:9a:8b:08:5a:ec:75:e1:94: 68:57:48:d9:1b:29:73:23:f2:16:a2:e0:e8:c3:fa: c7:86:a7:39:c2:b5:cf:26:41:a4:b4:12:ae:a1:51: 7b:db:f7:10:31:c1:cd:2f:36:d4:4b:cb:ea:69:4f: 68:c5:2c:20:13:99:9a:0c:33:09:11:3f:e2:6a:22: c7:1c:58:33:3b:ca:15:bc:10:65:63:29:0a:8f:01: 1a:c8:1f:87:2e:bb:3e:34:b3:64:8e:f8:71:8f:12: b4:61:49:d6:9f:79:8c:7f:ac:26:d0:6a:f7:2e:4f: 2b:fe:e8:e3:8b:b1:ec:3b:92:cd:48:75:be:2a:b1: 62:d8:ce:b3:9c:8a:28:5e:98:41:88:dc:7e:e0:2b: 59:b7:45:51:af:aa:26:ba:e9:6d:45:b8:77:10:bf: e8:32:a4:d2:c1:f9:63:b2:13:4d:f5:5e:3a:e4:32: e4:05:88:08:63:14:14:a7:76:a1:ae:e0:58:c5:23: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:BC:D9:50:2D:1A:6B:88:12:56:CF:E1:AF:C0:11:25:5F:2A:FF X509v3 Authority Key Identifier: keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5e:7d:75:8a:ef:0e:a1:98:2c:f1:b7:2e:ea:b5:53:4b:98: de:82:90:3d:71:5b:a1:6a:4e:ee:bf:f3:01:0a:53:f3:1a:8a: 31:92:15:4b:06:49:0e:0a:3a:7d:b5:67:7c:32:07:01:ef:60: 18:ab:35:b5:f1:2e:f6:36:fd:d6:d4:fe:4d:c8:d2:ab:22:a4: c6:4b:b1:83:eb:a6:6f:6d:38:18:8a:b0:04:42:ca:49:81:b9: ac:ec:af:e2:1e:da:68:89:9a:95:6d:8f:ec:47:97:9d:f7:9d: c2:38:83:79:01:af:29:db:b3:5b:5a:80:94:41:38:18:26:f2: 30:bf:df:ca:39:b7:21:eb:d6:2d:a6:35:96:f9:7d:51:1f:cd: db:f3:e0:cf:05:a4:55:7c:89:9c:7f:86:4c:4d:68:b8:a0:a9: 86:a7:f9:89:01:71:aa:39:f0:90:fa:25:4d:92:29:b1:a0:cd: d1:65:7d:67:3d:92:bf:73:61:43:26:99:48:ff:02:bf:74:66: 4b:42:fd:de:b4:e2:5e:cc:50:73:7e:a9:aa:01:1c:66:77:a4: da:fb:a8:4c:ea:95:16:0a:4d:d5:6d:ed:ec:49:1c:1c:cb:f7: c1:3c:a3:ba:62:35:5a:cc:46:67:24:52:4b:3f:73:94:af:04: 1f:70:d7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX/wBAMYylmVmDKg7n776MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOTUyMWM3MzUyZDFjYWMzZjk4Yzc1NmZjN2E2YjRiM2Fl OTc1M2QwHhcNMjUxMjI0MDgwMDQ4WhcNMjUxMjI1MDgwMDQ4WjAzMTEwLwYDVQQD Eyg1NmNlYmNkOTUwMmQxYTZiODgxMjU2Y2ZlMWFmYzAxMTI1NWYyYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM6C9KLhmbpYZA+dYl37mEJN+Pmb aZBNhdjrtMYXrlfwKU7JfJMovxBdiP6A2cOJGPeDGKflhqDteCf6VbLU8Y5umosI Wux14ZRoV0jZGylzI/IWouDow/rHhqc5wrXPJkGktBKuoVF72/cQMcHNLzbUS8vq aU9oxSwgE5maDDMJET/iaiLHHFgzO8oVvBBlYykKjwEayB+HLrs+NLNkjvhxjxK0 YUnWn3mMf6wm0Gr3Lk8r/ujji7HsO5LNSHW+KrFi2M6znIooXphBiNx+4CtZt0VR r6omuultRbh3EL/oMqTSwfljshNN9V465DLkBYgIYxQUp3ahruBYxSNrFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbOvNlQLRpriBJWz+GvwBElXyr/MB8GA1UdIwQY MBaAFKGVIcc1LRysP5jHVvx6a0s66XU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMt ZTVhZGEzNmZhMWYzLzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMtZTVhZGEzNmZhMWYz LzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV159dYrv DqGYLPG3Luq1U0uY3oKQPXFboWpO7r/zAQpT8xqKMZIVSwZJDgo6fbVnfDIHAe9g GKs1tfEu9jb91tT+TcjSqyKkxkuxg+umb204GIqwBELKSYG5rOyv4h7aaImalW2P 7EeXnfedwjiDeQGvKduzW1qAlEE4GCbyML/fyjm3IevWLaY1lvl9UR/N2/PgzwWk VXyJnH+GTE1ouKCphqf5iQFxqjnwkPolTZIpsaDN0WV9Zz2Sv3NhQyaZSP8Cv3Rm S0L93rTiXsxQc36pqgEcZnek2vuoTOqVFgpN1W3t7EkcHMv3wTyjumI1WsxGZyRS Sz9zlK8EH3DX2A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:08:35 2025 by rpki-client