This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json) Hash identifier: 8M4lY7hi9b5d8DUP05zsvKfEUoe/ZShiHM2rG/angTY= Subject key identifier: 8C:B2:FF:0D:FD:A0:C8:A5:31:B4:82:A5:D6:74:29:2D:9C:98:8E:BA Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Certificate serial: 019AF49BECB0D114B345DFFA0811D252D2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft Manifest number: 0726 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: GgU4V3exF_KMsbXxFhlxd1M5pl8.roa (hash: l8v1ZDd4kP5GR80G/4+UL0QS/Pev1eqpTKkPGhrjSW4=) 2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: AJwZFWJJ5lnD+U641xqmT8p9n6X4oWllBRCqnswgzY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ec:b0:d1:14:b3:45:df:fa:08:11:d2:52:d2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=8cb2ff0dfda0c8a531b482a5d674292d9c988eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:64:1f:6a:34:0b:82:e2:11:9d:11:51:49: 0c:78:db:67:16:3c:4c:9b:4b:21:76:c4:d2:86:28: 29:7d:1f:44:b0:fb:36:1b:8f:e4:7a:78:ec:e2:c5: 87:b4:e8:f3:f1:74:8f:f6:a3:60:10:32:68:16:a4: 6c:42:5c:f7:c7:e6:a0:68:03:ac:92:17:ed:45:1c: 7e:a1:fd:a1:09:1b:ea:d6:10:93:5a:aa:6c:19:27: 4c:92:6d:3d:b7:3a:a6:99:32:52:0d:ea:cb:a3:fc: e9:9f:1c:45:fd:3b:89:c2:5a:60:2a:1f:ab:e9:7a: c9:d9:e8:30:e2:22:a9:93:d6:a6:22:57:a1:bc:2c: b1:50:83:8e:c2:ed:20:23:9a:e7:3d:ac:cb:4a:f9: 2b:35:7c:eb:eb:53:51:7e:a0:bc:46:83:0e:22:0e: 22:2a:e9:f5:d7:f8:5b:48:b7:c9:11:f6:28:38:14: df:d5:83:4f:8f:23:c4:41:82:34:3e:18:2b:5c:87: c0:29:d8:77:42:24:75:2e:c5:b7:30:56:c4:20:5a: 9a:2d:96:6d:97:91:8c:e2:00:83:31:24:7e:16:42: de:53:36:d3:42:03:ed:f8:b5:fa:9b:28:aa:bf:1e: 42:f4:46:68:9d:ff:22:c0:71:cd:0c:3c:bf:eb:48: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:FF:0D:FD:A0:C8:A5:31:B4:82:A5:D6:74:29:2D:9C:98:8E:BA X509v3 Authority Key Identifier: keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:22:1c:f6:45:4d:2a:3a:10:a2:3b:f9:10:e8:78:64:e5:c5: b0:49:04:45:ef:0b:94:c1:f6:72:4c:0f:f4:98:f3:b0:3d:ad: 0a:11:8c:9d:89:86:2d:5b:99:e7:00:30:5c:c6:d7:af:88:0e: 71:d1:a2:92:93:e5:ff:34:ae:68:98:28:a6:9e:9d:45:6d:6b: d1:15:35:cc:23:12:19:ed:87:2b:ad:ec:2b:42:27:48:ca:f6: a1:5e:b1:45:10:ad:70:c3:28:c7:05:49:52:2d:b1:ce:d3:3a: fd:3a:f8:a8:57:b9:cd:40:8d:a7:b6:eb:77:9d:e6:e7:2e:23: ed:2d:92:50:5a:a2:43:40:3a:fb:00:90:83:a8:cf:29:5a:9c: da:d5:21:8b:e4:09:56:2e:79:b1:ac:32:42:6c:d4:66:1c:f5: 61:b2:a8:a7:75:43:20:0a:64:72:66:f8:2c:c7:67:cd:f7:ab: 30:23:15:55:ea:37:e0:91:25:d5:db:64:87:9f:64:f3:b4:2e: d6:31:3b:27:a4:f5:c5:72:6f:65:04:1d:c1:62:3b:55:54:b5: 3e:63:1e:18:12:86:bf:89:0d:64:19:9e:54:26:0f:04:05:fd: 05:c3:a3:63:fe:4a:52:5f:c2:06:a8:68:2e:45:2a:51:5b:d2: 98:3a:7d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+yw0RSzRd/6CBHSUtK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3 MGRmZTcwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD Eyg4Y2IyZmYwZGZkYTBjOGE1MzFiNDgyYTVkNjc0MjkyZDljOTg4ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/VkH2o0C4LiEZ0RUUkMeNtnFjxM m0shdsTShigpfR9EsPs2G4/kenjs4sWHtOjz8XSP9qNgEDJoFqRsQlz3x+agaAOs khftRRx+of2hCRvq1hCTWqpsGSdMkm09tzqmmTJSDerLo/zpnxxF/TuJwlpgKh+r 6XrJ2egw4iKpk9amIlehvCyxUIOOwu0gI5rnPazLSvkrNXzr61NRfqC8RoMOIg4i Kun11/hbSLfJEfYoOBTf1YNPjyPEQYI0PhgrXIfAKdh3QiR1LsW3MFbEIFqaLZZt l5GM4gCDMSR+FkLeUzbTQgPt+LX6myiqvx5C9EZonf8iwHHNDDy/60gaSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyy/w39oMilMbSCpdZ0KS2cmI66MB8GA1UdIwQY MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0 LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCIc9kVN KjoQojv5EOh4ZOXFsEkERe8LlMH2ckwP9JjzsD2tChGMnYmGLVuZ5wAwXMbXr4gO cdGikpPl/zSuaJgopp6dRW1r0RU1zCMSGe2HK63sK0InSMr2oV6xRRCtcMMoxwVJ Ui2xztM6/Tr4qFe5zUCNp7brd53m5y4j7S2SUFqiQ0A6+wCQg6jPKVqc2tUhi+QJ Vi55sawyQmzUZhz1YbKop3VDIApkcmb4LMdnzferMCMVVeo34JEl1dtkh59k87Qu 1jE7J6T1xXJvZQQdwWI7VVS1PmMeGBKGv4kNZBmeVCYPBAX9BcOjY/5KUl/CBqho LkUqUVvSmDp9Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:21 2025 by rpki-client