This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json) Hash identifier: 85I7az5J4BPVtK6WYuKMN+SQhmiQFvx7JjvHqYRuWCA= Subject key identifier: 14:DF:96:F9:38:87:24:2F:5F:E8:33:3D:9C:B2:07:B5:73:19:AD:E9 Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5 Certificate serial: 019B35693CD3FE00C2806D615DEBBDBFCDF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 07:00:47 +0000 Manifest this update: Fri 19 Dec 2025 07:00:47 +0000 Manifest next update: Sat 20 Dec 2025 07:00:47 +0000 Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=) 2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: FnhvZtHbLethaRn6uePKmWvg5mi5fPj9hasy9BwBNs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:3c:d3:fe:00:c2:80:6d:61:5d:eb:bd:bf:cd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5 Validity Not Before: Dec 19 07:00:47 2025 GMT Not After : Dec 20 07:00:47 2025 GMT Subject: CN=14df96f93887242f5fe8333d9cb207b57319ade9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:f7:bf:10:4c:bf:79:ab:50:3b:92:5f:b1: 2a:8b:6d:53:2e:19:29:ad:db:90:20:a4:da:54:21: 9d:e4:2f:2f:77:4a:c2:6a:66:d3:aa:e9:1c:f6:13: 36:dd:30:d6:13:5b:29:9c:cc:73:da:1f:e6:50:a1: f1:d4:a5:87:0a:a7:73:51:c4:25:1e:38:0f:1d:f2: ca:33:97:ed:1d:95:24:c5:a8:1f:76:71:90:2c:ae: 45:fa:69:b2:bf:5d:ae:9f:b0:2b:56:37:28:37:74: 46:cd:81:0e:63:8b:0e:ca:d1:d3:15:4c:77:f4:c4: a7:11:c1:e9:eb:0a:4f:10:4c:ea:f6:43:70:4e:39: 90:39:fc:e9:08:e6:d0:84:57:50:80:b6:8d:50:2f: 96:fa:36:1e:1a:fa:d4:ec:d8:ea:9e:a8:4e:2d:2f: d1:14:59:78:8a:30:3f:41:b6:6d:c9:8f:d0:83:f0: 5b:38:79:d5:dc:3f:45:16:10:7a:ae:96:d7:38:b6: 64:63:d8:37:8c:8b:e6:72:f3:ab:51:f4:79:7a:53: 44:15:2f:72:9f:65:4c:9c:66:fd:03:d8:cd:67:d7: c5:26:04:ed:b1:06:86:76:30:02:a6:13:0f:da:ef: e5:75:9e:27:c0:55:e4:11:ed:9b:82:b5:ff:67:74: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:96:F9:38:87:24:2F:5F:E8:33:3D:9C:B2:07:B5:73:19:AD:E9 X509v3 Authority Key Identifier: keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:69:51:37:ee:66:6d:20:0d:1a:a8:73:84:dd:39:2c:20:1d: 7e:89:5f:94:98:de:62:71:6c:7f:58:ab:75:77:48:91:e1:03: ee:03:50:8b:d5:c2:d0:7a:35:8c:22:71:23:60:d4:70:34:3b: af:0e:39:45:8f:f8:cd:de:36:4f:1d:28:91:70:91:ad:c7:67: 31:5e:04:e0:08:b1:a2:45:93:8f:af:3d:0d:c7:bc:7b:80:f8: 40:0b:39:a7:08:33:3d:e9:bd:cc:ec:92:56:7c:88:1c:5e:46: a5:d6:3c:f0:ec:c9:dd:7b:f9:fa:39:53:8e:18:c6:20:c6:27: 70:fa:a4:00:0e:c9:2a:2e:0d:79:45:cc:a2:d8:e9:ba:a2:aa: 80:68:27:4c:c7:d2:77:1e:25:e2:b3:cb:db:df:16:54:ea:19: 78:41:d1:31:60:3d:ce:9d:ba:dc:2f:1e:42:e4:16:4f:5b:3c: 64:81:d8:bf:41:4e:1d:bc:44:f2:aa:10:53:23:b2:31:b6:c5: cc:4b:15:78:ce:20:49:94:dc:34:d5:a4:2e:9f:a0:df:0d:46: e2:8b:e4:c8:60:8a:fe:ab:c6:53:77:3c:b0:5e:f6:bb:81:eb: 72:4f:ee:38:a7:0e:40:a5:1e:e5:d0:ed:b1:54:c5:cd:74:64: e3:8a:1c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTzT/gDCgG1hXeu9v832MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTdkNmEyY2Y0Mjg4MGRiZWJmNDJhMzI1MTkwN2EyMWM5 MWE0YTUwHhcNMjUxMjE5MDcwMDQ3WhcNMjUxMjIwMDcwMDQ3WjAzMTEwLwYDVQQD EygxNGRmOTZmOTM4ODcyNDJmNWZlODMzM2Q5Y2IyMDdiNTczMTlhZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ33vxBMv3mrUDuSX7Eqi21TLhkp rduQIKTaVCGd5C8vd0rCambTqukc9hM23TDWE1spnMxz2h/mUKHx1KWHCqdzUcQl HjgPHfLKM5ftHZUkxagfdnGQLK5F+mmyv12un7ArVjcoN3RGzYEOY4sOytHTFUx3 9MSnEcHp6wpPEEzq9kNwTjmQOfzpCObQhFdQgLaNUC+W+jYeGvrU7NjqnqhOLS/R FFl4ijA/QbZtyY/Qg/BbOHnV3D9FFhB6rpbXOLZkY9g3jIvmcvOrUfR5elNEFS9y n2VMnGb9A9jNZ9fFJgTtsQaGdjACphMP2u/ldZ4nwFXkEe2bgrX/Z3SVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTflvk4hyQvX+gzPZyyB7VzGa3pMB8GA1UdIwQY MBaAFKCX1qLPQogNvr9CoyUZB6IckaSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt NmZjYWYyNzI5YmU1LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1 LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimlRN+5m bSANGqhzhN05LCAdfolflJjeYnFsf1irdXdIkeED7gNQi9XC0Ho1jCJxI2DUcDQ7 rw45RY/4zd42Tx0okXCRrcdnMV4E4AixokWTj689Dce8e4D4QAs5pwgzPem9zOyS VnyIHF5GpdY88OzJ3Xv5+jlTjhjGIMYncPqkAA7JKi4NeUXMotjpuqKqgGgnTMfS dx4l4rPL298WVOoZeEHRMWA9zp263C8eQuQWT1s8ZIHYv0FOHbxE8qoQUyOyMbbF zEsVeM4gSZTcNNWkLp+g3w1G4ovkyGCK/qvGU3c8sF72u4Hrck/uOKcOQKUe5dDt sVTFzXRk44ocZg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:07 2025 by rpki-client