This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json) Hash identifier: Ce2497qIeGME9IslOjLa/ys3e8/Fg5ePA1HYBIm9jaQ= Subject key identifier: 88:E3:2F:C5:94:C4:F0:43:D2:66:5F:9C:D6:BC:96:76:8D:F6:EC:F9 Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d Certificate serial: 019B495E01F8A7FD48E37D988CE481A82180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft Manifest number: 1361 Signing time: Tue 23 Dec 2025 04:00:56 +0000 Manifest this update: Tue 23 Dec 2025 04:00:56 +0000 Manifest next update: Wed 24 Dec 2025 04:00:56 +0000 Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=) 2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: K1v0jar/6rGBUEx/eLx422OL+2pC3S2PJ3pTu5oRiR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:01:f8:a7:fd:48:e3:7d:98:8c:e4:81:a8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d Validity Not Before: Dec 23 04:00:56 2025 GMT Not After : Dec 24 04:00:56 2025 GMT Subject: CN=88e32fc594c4f043d2665f9cd6bc96768df6ecf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:a9:88:88:7d:aa:08:47:7f:f4:88:21:ea: 1b:0f:16:d0:37:73:6d:41:af:dc:7d:c1:ed:2d:89: bf:43:a6:fe:4e:1b:f3:e5:26:2a:c9:07:82:a8:1d: 6b:81:21:de:45:d9:0e:e3:25:ca:58:08:6b:75:a9: ca:21:c7:5b:7a:d3:38:88:f6:77:4e:5a:e7:cb:05: fa:a5:ec:99:63:ca:08:6f:d2:c8:b9:10:c9:58:59: b8:73:3f:97:f9:c3:16:e2:b2:be:83:15:ad:15:75: 67:94:7b:e9:e8:1f:d7:93:4a:c4:24:e5:58:78:44: 88:da:e0:c2:ec:8b:b4:57:c0:84:a4:e3:db:22:b3: c9:53:b2:c4:c5:a5:3f:29:79:11:38:2e:a5:b6:11: aa:20:10:98:3f:ad:7a:3d:0c:55:8d:35:50:a7:72: 48:3b:4d:4f:11:a8:ad:37:97:ef:15:b2:50:42:e1: 9f:07:d5:44:cd:26:95:11:b0:df:0c:ba:3a:c4:ca: b9:eb:44:6c:ba:c5:5d:bb:97:d5:5b:5c:2c:73:ff: fe:de:a6:14:9b:44:53:aa:a0:ae:26:44:3e:8a:58: 6e:af:11:05:19:a6:e8:d4:64:17:d5:49:49:5e:8f: 94:66:05:89:d5:17:ee:e5:b9:58:95:05:85:e5:92: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:2F:C5:94:C4:F0:43:D2:66:5F:9C:D6:BC:96:76:8D:F6:EC:F9 X509v3 Authority Key Identifier: keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:66:f5:98:c8:36:a6:29:4e:c0:bc:e8:61:98:0b:c1:13:b0: 5a:b7:c9:37:83:76:2f:c0:f3:42:03:78:74:5c:21:76:a4:97: 8f:13:ca:3d:c3:81:83:de:a8:50:00:44:c7:2d:08:e2:d8:ca: e2:11:91:d4:bb:8a:eb:67:ec:da:55:97:3f:95:dc:6a:15:35: e9:ca:7b:44:1a:17:e6:2b:75:44:8f:11:53:58:90:47:a2:c5: 87:82:26:de:e0:ea:85:cf:08:e7:61:54:f9:6c:46:e2:54:c2: 40:9e:dd:18:e8:80:f0:6d:d9:f3:4f:81:ad:a5:8f:bf:2f:dd: 16:e2:4a:d1:02:97:ca:8c:f2:59:67:e5:21:34:ac:46:9b:0a: 91:8f:eb:26:3e:dd:1f:88:ce:f2:94:9b:91:d8:1b:cf:55:53: 07:9d:79:4b:99:e9:39:e7:26:bf:33:ee:e3:84:4f:62:e5:fa: af:50:09:8c:cb:2e:03:07:06:d6:7c:9a:70:9f:3f:bd:4a:8b: 03:b2:f8:bd:46:b7:fa:a1:d4:be:d2:3f:98:02:f4:50:92:5b: 39:76:f4:ca:54:06:ff:21:d0:87:f1:74:68:d2:a3:04:da:f7: d7:c2:b4:9a:f8:61:40:2f:91:46:42:59:62:7e:2c:60:75:a6: 4a:14:59:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXgH4p/1I432YjOSBqCGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjI4ZTM5ZjQ3MWFkZGM3NWU3MWEzOTFiODJkZDkyNWM3 ZjA4MWQwHhcNMjUxMjIzMDQwMDU2WhcNMjUxMjI0MDQwMDU2WjAzMTEwLwYDVQQD Eyg4OGUzMmZjNTk0YzRmMDQzZDI2NjVmOWNkNmJjOTY3NjhkZjZlY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8WpiIh9qghHf/SIIeobDxbQN3Nt Qa/cfcHtLYm/Q6b+Thvz5SYqyQeCqB1rgSHeRdkO4yXKWAhrdanKIcdbetM4iPZ3 TlrnywX6peyZY8oIb9LIuRDJWFm4cz+X+cMW4rK+gxWtFXVnlHvp6B/Xk0rEJOVY eESI2uDC7Iu0V8CEpOPbIrPJU7LExaU/KXkROC6lthGqIBCYP616PQxVjTVQp3JI O01PEaitN5fvFbJQQuGfB9VEzSaVEbDfDLo6xMq560RsusVdu5fVW1wsc//+3qYU m0RTqqCuJkQ+ilhurxEFGabo1GQX1UlJXo+UZgWJ1Rfu5blYlQWF5ZK5UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjjL8WUxPBD0mZfnNa8lnaN9uz5MB8GA1UdIwQY MBaAFKFijjn0ca3cdecaORuC3ZJcfwgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEt MDI1YTBlNmYwNWFlLzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEtMDI1YTBlNmYwNWFl LzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGb1mMg2 pilOwLzoYZgLwROwWrfJN4N2L8DzQgN4dFwhdqSXjxPKPcOBg96oUABExy0I4tjK 4hGR1LuK62fs2lWXP5XcahU16cp7RBoX5it1RI8RU1iQR6LFh4Im3uDqhc8I52FU +WxG4lTCQJ7dGOiA8G3Z80+BraWPvy/dFuJK0QKXyozyWWflITSsRpsKkY/rJj7d H4jO8pSbkdgbz1VTB515S5npOecmvzPu44RPYuX6r1AJjMsuAwcG1nyacJ8/vUqL A7L4vUa3+qHUvtI/mAL0UJJbOXb0ylQG/yHQh/F0aNKjBNr318K0mvhhQC+RRkJZ Yn4sYHWmShRZ9A== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:36 2025 by rpki-client