This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json) Hash identifier: ZvCThn/Uvlc9yT8Cuz471ZBlHObjT22BebxkIpJhzSE= Subject key identifier: 43:EF:D1:E6:EE:93:15:C3:21:0E:28:B8:3A:9E:E3:99:27:0F:48:4C Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Certificate serial: 019AF2AD42010A55C358AA60B46CFFAB36AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft Manifest number: 134B Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=) 2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: /Ei/OIRRnockzFsa6O/RYJEU5I4okq8957HJZQ9rdx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:42:01:0a:55:c3:58:aa:60:b4:6c:ff:ab:36:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=43efd1e6ee9315c3210e28b83a9ee399270f484c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:f7:46:78:09:15:27:ab:2f:4d:e1:90:6b: 71:7f:c9:82:28:6a:8e:1c:19:5d:c8:26:af:41:30: d2:4d:4a:f0:9a:43:95:b7:0b:6f:a8:26:93:01:01: 9e:da:76:db:69:4a:1c:0f:74:a7:33:20:d4:3b:3b: 89:74:7d:17:92:14:05:1b:89:6f:2b:f1:7c:21:d7: cf:8d:b9:17:90:64:fe:79:2a:00:2b:5f:04:1c:75: c4:0e:0a:9f:ea:10:fc:df:8c:b6:70:d3:1a:2f:ad: 1b:fa:9d:37:4f:bf:73:93:59:3d:49:06:9c:f4:d0: 5f:77:41:ed:ab:ba:38:fd:f3:c7:e6:05:24:c7:27: 45:5c:85:82:32:d8:20:4c:71:e2:0c:46:fa:df:fb: 2e:eb:57:d5:b5:c4:cd:a7:db:b6:70:22:7b:35:89: bf:ff:2e:aa:2b:df:c6:84:c6:b4:8c:46:a2:73:2d: 79:c5:29:4b:b5:a2:a1:ec:e8:88:5b:d4:ae:bb:85: 2c:cd:7e:db:d2:6c:62:92:dc:38:0b:a1:1b:d4:49: f1:64:a8:a4:eb:fa:19:f8:a7:c4:c8:4c:c4:64:1f: fb:e7:51:fc:0b:21:95:42:0f:b8:53:eb:c6:4f:cf: 88:3b:7c:93:ee:20:b6:eb:2f:4c:7c:2e:72:33:0c: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EF:D1:E6:EE:93:15:C3:21:0E:28:B8:3A:9E:E3:99:27:0F:48:4C X509v3 Authority Key Identifier: keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ce:90:bd:53:da:93:28:09:9d:6d:44:e7:04:0d:c3:ca:1d: 43:6d:c5:c6:6d:44:73:0e:39:24:e1:58:fb:19:57:d6:69:2f: 39:a9:fc:6c:3e:1f:1b:35:3c:8e:67:e7:6d:75:c6:e1:7c:5f: 8e:32:ec:e4:fd:77:df:91:ee:d8:a0:cb:67:3c:97:31:c6:13: 97:93:56:f4:e8:2e:18:c2:54:c7:5c:c6:da:cc:ec:e9:17:3e: 36:03:14:ad:ee:1c:3f:af:55:fb:5f:5b:a2:4d:11:44:7e:eb: e7:5d:20:54:c9:b8:0d:06:d7:13:e7:c4:23:c0:97:83:45:18: f0:cc:67:c1:e0:27:78:18:d4:53:5a:dd:39:c0:99:30:14:ae: bb:55:ca:47:f3:93:9d:c3:7a:2c:70:9b:11:98:08:a8:60:53: cb:45:cd:ac:99:89:98:ef:d1:23:04:a3:d6:90:98:e8:ce:8c: be:b3:59:d1:0d:0a:d8:2f:ee:97:2a:e3:95:b7:74:2a:3f:cd: de:c2:e4:a3:2b:0a:eb:d6:a0:04:9e:d9:44:67:c3:9f:e7:48: b6:3f:b6:c3:98:62:f9:93:67:87:fd:2e:d7:17:3a:dc:e1:c9: 1a:cb:c6:61:55:07:14:a9:7c:7f:7a:d4:a5:3d:67:b5:5c:fb: f7:a4:28:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUIBClXDWKpgtGz/qzasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTZmYzcyNjJiYTc4MmRkNWY2NDMwODU5ODJiNWQzNjcw M2RiZmIwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD Eyg0M2VmZDFlNmVlOTMxNWMzMjEwZTI4YjgzYTllZTM5OTI3MGY0ODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgz3RngJFSerL03hkGtxf8mCKGqO HBldyCavQTDSTUrwmkOVtwtvqCaTAQGe2nbbaUocD3SnMyDUOzuJdH0XkhQFG4lv K/F8IdfPjbkXkGT+eSoAK18EHHXEDgqf6hD834y2cNMaL60b+p03T79zk1k9SQac 9NBfd0Htq7o4/fPH5gUkxydFXIWCMtggTHHiDEb63/su61fVtcTNp9u2cCJ7NYm/ /y6qK9/GhMa0jEaicy15xSlLtaKh7OiIW9Suu4UszX7b0mxiktw4C6Eb1EnxZKik 6/oZ+KfEyEzEZB/751H8CyGVQg+4U+vGT8+IO3yT7iC26y9MfC5yMwwyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPv0ebukxXDIQ4ouDqe45knD0hMMB8GA1UdIwQY MBaAFKGm/HJiungt1fZDCFmCtdNnA9v7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTct YzUzNzg1ODFiMGUxLzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTctYzUzNzg1ODFiMGUx LzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs6QvVPa kygJnW1E5wQNw8odQ23Fxm1Ecw45JOFY+xlX1mkvOan8bD4fGzU8jmfnbXXG4Xxf jjLs5P1335Hu2KDLZzyXMcYTl5NW9OguGMJUx1zG2szs6Rc+NgMUre4cP69V+19b ok0RRH7r510gVMm4DQbXE+fEI8CXg0UY8MxnweAneBjUU1rdOcCZMBSuu1XKR/OT ncN6LHCbEZgIqGBTy0XNrJmJmO/RIwSj1pCY6M6MvrNZ0Q0K2C/ulyrjlbd0Kj/N 3sLkoysK69agBJ7ZRGfDn+dItj+2w5hi+ZNnh/0u1xc63OHJGsvGYVUHFKl8f3rU pT1ntVz796Qo2A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:30 2025 by rpki-client