This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json) Hash identifier: 65XV6I9WHbWPYwq2HkJWweamv4d9+VGPZk/9vILRTC0= Subject key identifier: E2:DE:38:51:95:20:E0:A2:29:30:1F:03:6B:BC:7A:5C:F3:48:62:E0 Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Certificate serial: 019B3FECD10F572CFAEDBB590F86A83BC08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft Manifest number: 11DB Signing time: Sun 21 Dec 2025 08:00:43 +0000 Manifest this update: Sun 21 Dec 2025 08:00:43 +0000 Manifest next update: Mon 22 Dec 2025 08:00:43 +0000 Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=) 2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: wJl0z5g+QFysN0JtxNVR4mpkdBi4BEXSNpwN0z6zSts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d1:0f:57:2c:fa:ed:bb:59:0f:86:a8:3b:c0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Validity Not Before: Dec 21 08:00:43 2025 GMT Not After : Dec 22 08:00:43 2025 GMT Subject: CN=e2de38519520e0a229301f036bbc7a5cf34862e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:0a:7c:e6:36:f3:cc:0b:8b:da:de:2f:1b: 33:6f:62:fb:ee:95:66:45:33:85:db:86:74:72:62: 74:ce:31:d8:08:d6:1f:d8:d8:73:b9:d0:db:dd:a6: 42:bf:2a:14:8c:9f:7a:17:40:df:f2:92:12:c7:72: bf:11:ae:fa:78:e0:2b:31:d1:5c:ff:f7:50:59:79: d0:65:32:77:eb:09:e8:67:1c:f3:19:f3:38:2a:76: 1a:a9:8f:54:31:5c:6b:ab:dc:fc:c7:41:ce:06:6d: d1:71:3b:3c:3f:46:19:77:60:90:28:9c:96:49:e7: 21:fc:a7:63:82:11:79:56:ae:74:3e:59:53:90:04: 00:34:cf:d5:e4:67:14:dd:fc:c6:9b:33:80:bb:fe: e3:e4:ab:64:96:23:e9:fc:1f:7b:bd:05:e2:b7:2d: bb:55:52:5c:68:ea:3d:b5:92:38:9b:bf:47:ba:ff: ad:ef:b9:5f:b8:d5:c7:45:00:b6:79:b5:9b:4d:10: ed:03:e3:49:17:2d:80:a0:4c:31:cf:93:0c:b2:77: 32:8c:8c:2b:f0:c2:eb:ef:29:07:be:c5:41:3c:b3: e8:f9:1a:98:45:69:bb:24:86:84:07:a8:33:f8:e1: 75:ee:9e:6a:45:09:f7:ed:10:f2:ff:1a:60:27:20: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DE:38:51:95:20:E0:A2:29:30:1F:03:6B:BC:7A:5C:F3:48:62:E0 X509v3 Authority Key Identifier: keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5a:96:6a:1e:cc:79:e2:b4:48:2c:43:b3:0a:87:7c:32:b7: 47:aa:1d:80:ef:83:f6:46:6f:1e:d8:5e:80:27:20:06:5c:e9: 65:52:79:b0:6f:7b:89:ac:81:b2:67:c6:81:84:95:04:2b:b8: 37:a7:ff:32:4a:84:86:e0:c8:1a:60:9a:02:97:fd:40:bd:a1: 27:81:bc:6c:24:6a:9b:72:2f:fa:0e:bd:03:63:f5:38:5f:93: d5:f8:05:47:49:09:2f:10:1c:2a:ef:a1:a2:5d:78:42:7d:49: 6a:f7:f9:2b:1b:a8:48:75:b2:b2:c7:a9:b0:4d:1a:d3:e1:f9: 44:47:0b:4e:1b:2f:e8:01:42:92:9f:10:ec:55:85:4c:83:85: 07:fa:08:be:72:cc:9f:51:87:da:db:3b:19:a8:ba:79:98:e2: df:24:98:5c:45:80:97:6c:1a:d5:37:5e:c5:c0:18:37:f6:40: 33:7d:63:7e:bb:db:f6:f6:c2:fe:8e:2e:e4:2e:d4:bb:44:c7: 0b:f2:56:0e:fb:bd:8f:16:ef:77:0f:f5:4d:11:f6:2e:25:f2: e3:a6:33:5c:4d:6f:ee:dc:28:34:53:0e:0c:46:4d:ff:57:07: de:a8:0a:6a:f3:01:ec:7c:9b:b3:f5:7a:8e:95:a2:e8:54:b2: 96:03:91:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NEPVyz67btZD4aoO8CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOTUyMWM3MzUyZDFjYWMzZjk4Yzc1NmZjN2E2YjRiM2Fl OTc1M2QwHhcNMjUxMjIxMDgwMDQzWhcNMjUxMjIyMDgwMDQzWjAzMTEwLwYDVQQD EyhlMmRlMzg1MTk1MjBlMGEyMjkzMDFmMDM2YmJjN2E1Y2YzNDg2MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuIKfOY288wLi9reLxszb2L77pVm RTOF24Z0cmJ0zjHYCNYf2NhzudDb3aZCvyoUjJ96F0Df8pISx3K/Ea76eOArMdFc //dQWXnQZTJ36wnoZxzzGfM4KnYaqY9UMVxrq9z8x0HOBm3RcTs8P0YZd2CQKJyW Sech/KdjghF5Vq50PllTkAQANM/V5GcU3fzGmzOAu/7j5KtkliPp/B97vQXity27 VVJcaOo9tZI4m79Huv+t77lfuNXHRQC2ebWbTRDtA+NJFy2AoEwxz5MMsncyjIwr 8MLr7ykHvsVBPLPo+RqYRWm7JIaEB6gz+OF17p5qRQn37RDy/xpgJyCLDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLeOFGVIOCiKTAfA2u8elzzSGLgMB8GA1UdIwQY MBaAFKGVIcc1LRysP5jHVvx6a0s66XU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMt ZTVhZGEzNmZhMWYzLzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMtZTVhZGEzNmZhMWYz LzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFqWah7M eeK0SCxDswqHfDK3R6odgO+D9kZvHthegCcgBlzpZVJ5sG97iayBsmfGgYSVBCu4 N6f/MkqEhuDIGmCaApf9QL2hJ4G8bCRqm3Iv+g69A2P1OF+T1fgFR0kJLxAcKu+h ol14Qn1Javf5KxuoSHWyssepsE0a0+H5REcLThsv6AFCkp8Q7FWFTIOFB/oIvnLM n1GH2ts7Gai6eZji3ySYXEWAl2wa1TdexcAYN/ZAM31jfrvb9vbC/o4u5C7Uu0TH C/JWDvu9jxbvdw/1TRH2LiXy46YzXE1v7twoNFMODEZN/1cH3qgKavMB7Hybs/V6 jpWi6FSylgORvA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:42 2025 by rpki-client