This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json) Hash identifier: Pz29m9MycTobKOtGUnUcE5UBxfftE7M6IwtHTEHCx1A= Subject key identifier: 5F:2E:68:99:99:7B:F8:D5:7D:58:E4:55:CE:D5:34:2F:6B:8E:BF:2D Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Certificate serial: 019B3AFD43CF87A4CDF4E90E0C4089CBC507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft Manifest number: 1276 Signing time: Sat 20 Dec 2025 09:00:34 +0000 Manifest this update: Sat 20 Dec 2025 09:00:34 +0000 Manifest next update: Sun 21 Dec 2025 09:00:34 +0000 Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=) 2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: dqfqsTddnDnjmOnGBWODxn1piLn21Ie4UUHTdiqH37g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:43:cf:87:a4:cd:f4:e9:0e:0c:40:89:cb:c5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Validity Not Before: Dec 20 09:00:34 2025 GMT Not After : Dec 21 09:00:34 2025 GMT Subject: CN=5f2e6899997bf8d57d58e455ced5342f6b8ebf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:82:6d:f9:52:92:bb:43:e5:de:ec:65:ac: b2:0a:b1:65:c4:64:01:69:e8:ff:24:58:92:40:8f: 7f:8d:56:0d:30:74:3e:81:bc:db:3a:f6:de:cd:5f: b7:4d:39:f7:4a:b8:b8:53:06:b6:f0:59:08:f8:25: 2d:4c:d5:ec:c2:f5:c8:d3:fc:b4:c6:c2:84:3c:b5: e1:e6:d7:c0:fd:0f:54:b1:e2:a2:3e:ca:d9:95:1e: a2:60:8f:6f:71:1d:b6:30:2f:ed:b2:2c:d4:48:be: ec:d6:5e:df:2f:f4:e2:95:57:24:ee:99:3f:15:61: 1e:54:c2:45:21:fb:01:a2:2a:dd:d3:d6:d1:7c:de: 68:38:88:71:df:49:3e:fd:01:e6:bc:f3:4b:49:f7: 53:01:29:66:41:92:46:4d:e7:fc:f2:f7:f4:f8:ec: 70:23:a1:38:84:fd:ea:04:9d:f7:ee:87:ec:5a:31: ab:20:95:05:7c:3c:93:fe:0a:3b:d0:6f:97:24:fe: 17:0a:62:4c:a9:7b:84:33:b9:1a:b8:3f:9e:7b:a0: 36:12:4e:33:f4:50:ed:e9:36:9e:66:49:ef:c1:d4: ba:3e:c3:04:3b:1c:ca:a7:60:ea:a1:34:70:ac:0d: 85:66:c6:3f:d5:09:8e:69:3d:fb:b3:a5:4b:b9:cb: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:68:99:99:7B:F8:D5:7D:58:E4:55:CE:D5:34:2F:6B:8E:BF:2D X509v3 Authority Key Identifier: keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:50:61:60:8e:63:5c:c8:51:ed:c5:e8:2f:f2:27:4d:94:03: dc:12:6f:89:9e:16:e4:6b:00:3f:03:a3:7f:cd:0a:02:58:6a: 17:e1:91:c0:6b:9b:12:35:1b:c7:b2:5c:00:dd:68:7e:7e:87: fa:dd:95:de:cd:fc:76:0a:46:75:db:30:d7:3b:bc:5d:9a:db: 55:6a:4d:e3:86:21:93:71:d1:56:8d:11:c6:64:48:f3:e1:c4: a0:fa:b4:3b:43:55:4f:41:6a:df:54:c8:35:57:3a:33:c1:b7: fd:af:1d:d8:af:01:98:3b:bb:86:7d:00:7b:4d:be:cc:5a:a2: 77:5f:02:e2:aa:0c:8b:9a:72:f2:7b:8f:b6:6e:e1:09:15:a6: 19:8d:4f:a8:00:65:ca:f9:0b:e9:e9:94:b4:ac:3b:5c:4b:24: 4d:da:eb:d8:21:b2:45:e5:ae:75:6a:cc:22:83:0f:e4:fb:8f: 55:ec:7d:ef:a5:9e:cb:13:98:1c:32:58:5d:01:2a:9a:7f:c6: 09:5d:30:5b:48:75:39:e0:f1:ad:b1:6b:ca:0f:02:68:1f:bd: 3d:42:e1:b6:1b:db:a2:ab:52:c9:3c:02:0f:05:7c:29:d1:3c: 60:38:55:5c:24:f2:99:5d:1e:40:c7:e8:cd:7e:0f:02:c1:bd: 52:6a:5b:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/UPPh6TN9OkODECJy8UHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh YzhhZDMwHhcNMjUxMjIwMDkwMDM0WhcNMjUxMjIxMDkwMDM0WjAzMTEwLwYDVQQD Eyg1ZjJlNjg5OTk5N2JmOGQ1N2Q1OGU0NTVjZWQ1MzQyZjZiOGViZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bqCbflSkrtD5d7sZayyCrFlxGQB aej/JFiSQI9/jVYNMHQ+gbzbOvbezV+3TTn3Sri4Uwa28FkI+CUtTNXswvXI0/y0 xsKEPLXh5tfA/Q9UseKiPsrZlR6iYI9vcR22MC/tsizUSL7s1l7fL/TilVck7pk/ FWEeVMJFIfsBoird09bRfN5oOIhx30k+/QHmvPNLSfdTASlmQZJGTef88vf0+Oxw I6E4hP3qBJ337ofsWjGrIJUFfDyT/go70G+XJP4XCmJMqXuEM7kauD+ee6A2Ek4z 9FDt6TaeZknvwdS6PsMEOxzKp2DqoTRwrA2FZsY/1QmOaT37s6VLucsWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8uaJmZe/jVfVjkVc7VNC9rjr8tMB8GA1UdIwQY MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt NDgwOTNmYjZjNjdmLzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlBhYI5j XMhR7cXoL/InTZQD3BJviZ4W5GsAPwOjf80KAlhqF+GRwGubEjUbx7JcAN1ofn6H +t2V3s38dgpGddsw1zu8XZrbVWpN44Yhk3HRVo0RxmRI8+HEoPq0O0NVT0Fq31TI NVc6M8G3/a8d2K8BmDu7hn0Ae02+zFqid18C4qoMi5py8nuPtm7hCRWmGY1PqABl yvkL6emUtKw7XEskTdrr2CGyReWudWrMIoMP5PuPVex976WeyxOYHDJYXQEqmn/G CV0wW0h1OeDxrbFryg8CaB+9PULhthvboqtSyTwCDwV8KdE8YDhVXCTymV0eQMfo zX4PAsG9UmpbNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:36:19 2025 by rpki-client