This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json) Hash identifier: s5DhPSPfXHEFdIvYU+h80U5015wvEtYfrbPsQ66vYwA= Subject key identifier: 93:01:F8:38:4E:45:26:3E:AF:AD:C9:0C:32:8A:68:82:14:19:A6:6A Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Certificate serial: 019B73A3623A5514679E5943A8946BC0ADBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft Manifest number: 066D Signing time: Wed 31 Dec 2025 09:00:45 +0000 Manifest this update: Wed 31 Dec 2025 09:00:45 +0000 Manifest next update: Thu 01 Jan 2026 09:00:45 +0000 Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=) 2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: qdLAmJPDZOIr/Ttx6i6mQhOenezX680ySog94IwQQtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:a3:62:3a:55:14:67:9e:59:43:a8:94:6b:c0:ad:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Validity Not Before: Dec 31 09:00:45 2025 GMT Not After : Jan 1 09:00:45 2026 GMT Subject: CN=9301f8384e45263eafadc90c328a68821419a66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:a5:34:4e:f6:60:87:a9:3b:20:64:51:4b: f8:3d:bb:1f:ba:47:3f:21:88:81:d4:e7:2b:6c:2a: 80:cd:f3:02:08:30:f2:42:10:c2:de:84:90:48:5b: 90:14:fa:bf:1e:5d:e3:e6:28:cb:a6:fc:41:27:a3: 59:ea:5b:9f:4d:a5:fd:ef:e7:d2:e6:81:48:b9:d0: ec:67:0c:80:a2:7d:f6:05:f4:2c:73:ce:05:9d:58: 74:e5:f0:7e:4c:b1:07:fe:c8:19:e2:a3:65:1e:89: 97:b4:89:d3:fb:01:eb:ed:16:dd:4e:a0:26:4c:47: 97:31:38:41:87:3d:6f:1e:a3:ee:ab:95:5b:a8:0f: e2:f0:c9:23:13:de:6a:82:60:31:56:1e:dd:84:bc: 65:f8:2d:6e:8f:c8:36:d3:cb:87:4f:3a:e3:46:36: 07:db:27:08:31:97:05:24:b2:ec:69:46:f7:b8:8b: 89:e7:45:84:7e:3a:1c:61:68:9f:17:31:3f:48:31: 0b:f3:55:d7:53:db:b0:77:2c:e0:3e:9c:03:98:99: e8:7f:f3:f1:6c:07:b0:23:1b:12:b4:d8:24:9a:69: d7:18:4a:bb:91:6e:b9:4e:3c:b8:5d:7b:3d:2c:b9: fe:47:f6:38:7a:ea:03:de:77:60:2b:f2:16:04:33: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:F8:38:4E:45:26:3E:AF:AD:C9:0C:32:8A:68:82:14:19:A6:6A X509v3 Authority Key Identifier: keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:56:44:26:ea:6c:dd:3b:15:06:62:78:b7:f0:d6:b7:a6:8d: 5c:61:c8:bb:91:28:8e:05:af:fc:4b:e6:98:ca:cf:55:84:a7: 42:94:e0:76:29:a3:c7:81:8e:1c:f6:7a:ed:6d:bc:4f:8b:7d: f7:64:66:fc:67:5e:1a:6e:60:0f:ff:0b:bf:62:be:44:ff:eb: 8d:34:1e:35:0c:1a:fa:c8:59:00:d6:ee:66:a0:52:7e:c7:b0: bb:e8:fe:88:2c:c8:23:d0:27:a7:53:c6:8e:b4:94:a2:1d:76: 2a:07:28:84:62:d6:92:4b:8d:7b:7b:4b:2c:86:d5:12:f2:30: 1b:56:77:80:20:6d:9d:3d:b8:81:41:32:38:1e:5d:9f:24:c6: 88:89:61:db:20:86:54:98:24:c0:87:45:20:ea:ea:72:94:b7: 4a:68:c5:29:c2:52:fe:fa:d0:82:3f:c4:d5:54:d9:a9:c2:12: 95:51:11:22:f8:7b:be:33:06:a1:4f:01:08:05:4b:3f:6d:ca: b6:f3:8b:dc:d2:e1:d5:78:cc:d7:19:b0:18:ab:c6:b8:7b:12: a2:a8:bf:a3:dc:22:3e:07:e3:45:4c:15:27:d8:c9:94:c1:59: 8e:bd:56:43:87:73:e6:00:51:2d:af:49:76:04:2d:1b:94:9f: a3:2b:c3:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzo2I6VRRnnllDqJRrwK27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj OWQ4ZGEwHhcNMjUxMjMxMDkwMDQ1WhcNMjYwMTAxMDkwMDQ1WjAzMTEwLwYDVQQD Eyg5MzAxZjgzODRlNDUyNjNlYWZhZGM5MGMzMjhhNjg4MjE0MTlhNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJilNE72YIepOyBkUUv4Pbsfukc/ IYiB1OcrbCqAzfMCCDDyQhDC3oSQSFuQFPq/Hl3j5ijLpvxBJ6NZ6lufTaX97+fS 5oFIudDsZwyAon32BfQsc84FnVh05fB+TLEH/sgZ4qNlHomXtInT+wHr7RbdTqAm TEeXMThBhz1vHqPuq5VbqA/i8MkjE95qgmAxVh7dhLxl+C1uj8g208uHTzrjRjYH 2ycIMZcFJLLsaUb3uIuJ50WEfjocYWifFzE/SDEL81XXU9uwdyzgPpwDmJnof/Px bAewIxsStNgkmmnXGEq7kW65Tjy4XXs9LLn+R/Y4euoD3ndgK/IWBDOHTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMB+DhORSY+r63JDDKKaIIUGaZqMB8GA1UdIwQY MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ZEJups 3TsVBmJ4t/DWt6aNXGHIu5EojgWv/EvmmMrPVYSnQpTgdimjx4GOHPZ67W28T4t9 92Rm/GdeGm5gD/8Lv2K+RP/rjTQeNQwa+shZANbuZqBSfsewu+j+iCzII9Anp1PG jrSUoh12KgcohGLWkkuNe3tLLIbVEvIwG1Z3gCBtnT24gUEyOB5dnyTGiIlh2yCG VJgkwIdFIOrqcpS3SmjFKcJS/vrQgj/E1VTZqcISlVERIvh7vjMGoU8BCAVLP23K tvOL3NLh1XjM1xmwGKvGuHsSoqi/o9wiPgfjRUwVJ9jJlMFZjr1WQ4dz5gBRLa9J dgQtG5SfoyvDIw== -----END CERTIFICATE-----Generated at Wed Dec 31 11:03:58 2025 by rpki-client