This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json) Hash identifier: DQJcUfl3MbVV4194+XRHrT7m4Kk9iXTN1HFTcMYUEWo= Subject key identifier: EB:E0:89:44:E5:7E:5B:C8:59:BC:36:05:83:1E:72:2D:D6:8F:D9:B5 Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019B3C10A3E1D91EF22098EFB71C1B449872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft Manifest number: 2F Signing time: Sat 20 Dec 2025 14:01:22 +0000 Manifest this update: Sat 20 Dec 2025 14:01:22 +0000 Manifest next update: Sun 21 Dec 2025 14:01:22 +0000 Files and hashes: 1: 7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa (hash: 2hfPMHbWihqBZrYe5pg+hp4U1d6XfZrolVYNzjr0Hc4=) 2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: LHXiAfGc6l9JY/jhbj7ym+45hmn7iPZTnFU5H7BYbeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:a3:e1:d9:1e:f2:20:98:ef:b7:1c:1b:44:98:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Dec 20 14:01:22 2025 GMT Not After : Dec 21 14:01:22 2025 GMT Subject: CN=ebe08944e57e5bc859bc3605831e722dd68fd9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:04:b7:aa:2f:95:a2:2a:80:a5:6a:b7:aa: fc:7d:b5:18:0e:eb:a8:d1:fb:9e:17:36:1d:6c:9f: 12:53:23:4d:ed:20:24:a2:16:4c:94:aa:29:0f:dd: 35:70:ef:46:f1:6f:0c:92:87:bb:5b:39:a2:1f:a2: 5c:ef:e7:6f:86:be:38:9f:e7:f4:7e:c6:0e:72:4b: 8c:0f:7b:6a:43:a0:0d:af:c7:a4:66:78:ec:49:f5: 1a:77:e5:44:33:fb:e5:69:e3:7a:40:33:0f:c4:df: 14:60:e9:84:5e:d6:15:0d:6a:d4:ed:2f:ce:c1:d4: 25:dc:f6:a6:c9:c7:02:c1:f0:fb:67:d2:45:72:6e: d8:3c:e1:4b:d8:48:dc:9a:fa:43:a5:07:45:fb:d1: 5d:5d:b0:b8:55:73:f3:51:01:0f:18:7a:ca:6a:49: a3:5c:bd:5b:32:f7:82:27:65:87:17:f2:3a:11:d6: be:77:6c:01:de:6e:aa:2a:6f:6d:8c:d2:58:14:dc: ab:e5:90:73:8d:52:d5:2f:6d:11:1a:b3:8a:a3:5e: a2:e7:19:ef:0d:9d:b7:20:8a:42:33:f7:df:51:d9: 65:df:eb:72:53:8e:c3:6d:25:8e:00:ab:91:af:e2: 66:4e:f1:0b:17:0f:2a:61:bc:d2:7c:78:af:68:e2: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:89:44:E5:7E:5B:C8:59:BC:36:05:83:1E:72:2D:D6:8F:D9:B5 X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e2:ef:fc:21:23:4a:c4:6a:a2:14:6e:5c:ff:4e:3b:98:21: ba:b5:06:ac:65:25:c5:81:42:f2:ff:66:f7:29:b2:d7:cb:be: 41:3b:ea:cf:c8:aa:45:40:71:cc:7e:3c:11:31:fd:93:19:1c: 70:1b:db:f2:fc:da:42:8b:96:59:09:23:54:31:7c:2a:b6:59: 97:2f:08:2d:33:11:96:10:42:55:77:d3:b4:07:83:02:6f:46: df:16:cd:bd:d3:c7:37:6e:89:42:c9:aa:f7:fd:ba:2f:18:1a: 95:6b:a8:dd:d2:02:96:f6:a8:07:cc:2e:f2:b2:a3:3d:2e:94: 19:e4:6f:85:22:bd:0e:43:9d:fc:f4:fc:90:44:a8:b4:8e:33: 3c:cc:b0:a2:e4:3b:99:42:82:c1:01:6b:ca:d3:7c:94:b6:eb: f6:3a:d4:87:cb:24:f1:a4:34:c0:d5:92:4a:58:59:80:e4:97: 4b:c0:66:7d:bd:23:ff:11:31:69:fa:7e:dd:08:0c:4d:fb:fd: 90:e7:8b:44:25:45:91:ac:55:d3:ce:b4:99:4c:69:6b:55:3c: 39:60:fc:62:1d:15:69:7b:27:93:9d:72:cf:ee:7c:5e:4c:e1: 64:05:b3:15:47:27:11:96:84:c5:db:03:68:83:45:0a:16:91: 66:69:92:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EKPh2R7yIJjvtxwbRJhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjUxMjIwMTQwMTIyWhcNMjUxMjIxMTQwMTIyWjAzMTEwLwYDVQQD EyhlYmUwODk0NGU1N2U1YmM4NTliYzM2MDU4MzFlNzIyZGQ2OGZkOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D4Et6ovlaIqgKVqt6r8fbUYDuuo 0fueFzYdbJ8SUyNN7SAkohZMlKopD901cO9G8W8Mkoe7WzmiH6Jc7+dvhr44n+f0 fsYOckuMD3tqQ6ANr8ekZnjsSfUad+VEM/vlaeN6QDMPxN8UYOmEXtYVDWrU7S/O wdQl3PamyccCwfD7Z9JFcm7YPOFL2EjcmvpDpQdF+9FdXbC4VXPzUQEPGHrKakmj XL1bMveCJ2WHF/I6Eda+d2wB3m6qKm9tjNJYFNyr5ZBzjVLVL20RGrOKo16i5xnv DZ23IIpCM/ffUdll3+tyU47DbSWOAKuRr+JmTvELFw8qYbzSfHivaOILmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvgiUTlflvIWbw2BYMeci3Wj9m1MB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+Lv/CEj SsRqohRuXP9OO5ghurUGrGUlxYFC8v9m9ymy18u+QTvqz8iqRUBxzH48ETH9kxkc cBvb8vzaQouWWQkjVDF8KrZZly8ILTMRlhBCVXfTtAeDAm9G3xbNvdPHN26JQsmq 9/26LxgalWuo3dIClvaoB8wu8rKjPS6UGeRvhSK9DkOd/PT8kESotI4zPMywouQ7 mUKCwQFrytN8lLbr9jrUh8sk8aQ0wNWSSlhZgOSXS8Bmfb0j/xExafp+3QgMTfv9 kOeLRCVFkaxV0860mUxpa1U8OWD8Yh0VaXsnk51yz+58XkzhZAWzFUcnEZaExdsD aINFChaRZmmSwg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:41 2025 by rpki-client