This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json) Hash identifier: MDbqrivMmhjO0Wdih8vr+X4s9wymTPA8xfPweRso6oY= Subject key identifier: EE:2F:DB:12:0A:F7:D9:E5:4C:AF:5D:86:CB:8C:72:7B:5C:B1:F0:B2 Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009 Certificate serial: 019B4438F337E17745C97209808F5E34459D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:02:21 +0000 Manifest this update: Mon 22 Dec 2025 04:02:21 +0000 Manifest next update: Tue 23 Dec 2025 04:02:21 +0000 Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=) 2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: CL1uHNa5SPEHDIOMz8ePrqWd0bkreuEcID235bbU4rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:f3:37:e1:77:45:c9:72:09:80:8f:5e:34:45:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009 Validity Not Before: Dec 22 04:02:21 2025 GMT Not After : Dec 23 04:02:21 2025 GMT Subject: CN=ee2fdb120af7d9e54caf5d86cb8c727b5cb1f0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:cb:8a:47:11:f2:d7:dc:83:da:87:48:9d: 68:b9:21:2f:01:11:6f:40:fe:83:50:65:e7:c4:c2: da:81:b1:1a:de:6d:f4:1a:5f:81:a5:4d:cf:dd:ef: 6e:f2:99:4f:b5:b4:19:3b:7c:91:40:ff:32:b3:2b: 5a:be:1b:e4:16:78:ce:23:61:d2:62:40:37:b6:39: b9:f5:fc:92:6b:4b:9b:ae:2f:65:69:e3:a0:84:37: 4f:91:8b:88:68:a5:a1:03:59:89:bf:30:15:28:c3: e2:f4:f5:b5:c8:4f:47:06:6b:51:39:a8:84:d1:bb: 69:af:80:37:04:28:2a:af:ac:b2:29:af:7b:ec:b8: 80:46:02:c4:4b:92:e6:3e:31:e6:b5:da:31:84:62: 1b:66:63:fd:d6:d5:6f:13:f9:69:e6:6b:d7:1e:ed: 8d:9c:7a:86:42:7b:01:0d:04:6e:95:2f:75:89:35: 60:a5:4a:37:b6:38:98:d2:53:c4:d2:52:58:21:b6: b5:72:2b:b1:c8:db:d3:bd:a4:ec:3f:50:54:e4:44: dd:ad:62:60:5d:af:b6:44:fa:d5:3d:a6:cb:97:22: 81:d3:41:8f:97:4c:53:a2:a0:fc:e9:cb:09:05:d0: 38:72:76:9e:a2:45:60:61:12:d2:b9:b6:11:81:60: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2F:DB:12:0A:F7:D9:E5:4C:AF:5D:86:CB:8C:72:7B:5C:B1:F0:B2 X509v3 Authority Key Identifier: keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:aa:7f:b9:32:39:49:65:ef:46:d6:5f:dd:10:1c:1c:38:3b: 2c:7f:d6:27:89:56:94:82:fc:f2:f3:8d:70:2c:d8:eb:71:c1: 69:2b:6d:83:11:a0:a0:59:57:94:3b:18:d7:8d:70:d5:34:54: 61:4a:12:73:b0:cc:69:6e:5a:e7:31:a5:b5:be:0b:99:87:7f: f4:d4:27:0b:f0:86:3d:4b:a7:73:83:a1:f6:00:19:21:4c:6b: a3:02:95:a5:54:2c:f2:57:e0:38:58:a1:f1:a5:a4:b1:db:29: 30:89:2b:72:a0:5c:d1:19:6c:33:da:55:91:7f:9f:97:95:7e: 6b:3d:9b:61:e3:24:3b:c7:90:45:a4:0d:36:01:82:c7:71:65: 7b:35:2b:34:8e:87:1c:0e:5b:7b:5a:ed:c4:42:ba:af:80:cc: 2e:84:77:ae:ad:91:6b:c7:22:4a:61:28:c5:2a:46:04:b4:6a: c2:96:2c:28:eb:16:ba:43:9e:5d:d3:41:86:8a:13:76:ee:4d: fa:df:07:aa:9c:51:58:a5:33:6c:e0:cd:26:1d:b7:06:49:82: 58:02:5d:74:7e:31:63:4c:04:76:36:c4:bb:58:f3:eb:72:8c: b4:fb:8d:09:8d:e5:9f:ad:7d:58:b0:f5:64:37:5b:eb:10:3f: a0:e2:7c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPM34XdFyXIJgI9eNEWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMmJiMTFkMDE5NTU3ZTEyZjVmYjZlYjkwMzgzNzQyMTE2 MGQwMDkwHhcNMjUxMjIyMDQwMjIxWhcNMjUxMjIzMDQwMjIxWjAzMTEwLwYDVQQD EyhlZTJmZGIxMjBhZjdkOWU1NGNhZjVkODZjYjhjNzI3YjVjYjFmMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4TLikcR8tfcg9qHSJ1ouSEvARFv QP6DUGXnxMLagbEa3m30Gl+BpU3P3e9u8plPtbQZO3yRQP8ysytavhvkFnjOI2HS YkA3tjm59fySa0ubri9laeOghDdPkYuIaKWhA1mJvzAVKMPi9PW1yE9HBmtROaiE 0btpr4A3BCgqr6yyKa977LiARgLES5LmPjHmtdoxhGIbZmP91tVvE/lp5mvXHu2N nHqGQnsBDQRulS91iTVgpUo3tjiY0lPE0lJYIba1ciuxyNvTvaTsP1BU5ETdrWJg Xa+2RPrVPabLlyKB00GPl0xToqD86csJBdA4cnaeokVgYRLSubYRgWAPRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4v2xIK99nlTK9dhsuMcntcsfCyMB8GA1UdIwQY MBaAFKArsR0BlVfhL1+265A4N0IRYNAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUt N2JkM2FiNzNlMTcyLzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUtN2JkM2FiNzNlMTcy LzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKp/uTI5 SWXvRtZf3RAcHDg7LH/WJ4lWlIL88vONcCzY63HBaSttgxGgoFlXlDsY141w1TRU YUoSc7DMaW5a5zGltb4LmYd/9NQnC/CGPUunc4Oh9gAZIUxrowKVpVQs8lfgOFih 8aWksdspMIkrcqBc0RlsM9pVkX+fl5V+az2bYeMkO8eQRaQNNgGCx3FlezUrNI6H HA5be1rtxEK6r4DMLoR3rq2Ra8ciSmEoxSpGBLRqwpYsKOsWukOeXdNBhooTdu5N +t8HqpxRWKUzbODNJh23BkmCWAJddH4xY0wEdjbEu1jz63KMtPuNCY3ln619WLD1 ZDdb6xA/oOJ8MA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:18:33 2025 by rpki-client