This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json) Hash identifier: O0GCqhq+X6N/1WmrOj/oVbTIHkpgKQiHp2qAN4zm7A0= Subject key identifier: CA:09:2C:E3:63:EA:70:65:79:41:CB:1B:FA:46:49:22:D2:06:61:BA Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417 Certificate serial: 019AF3F7107C950BFD9D5E9F8052B870C810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft Manifest number: 0CF5 Signing time: Sat 06 Dec 2025 14:00:46 +0000 Manifest this update: Sat 06 Dec 2025 14:00:46 +0000 Manifest next update: Sun 07 Dec 2025 14:00:46 +0000 Files and hashes: 1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=) 2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: Ek3cH7GkBUFr8QWHCfW9oYpjkqZ4SKOW1j1Q7s68Q7U=) 3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=) 4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=) 5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=) 6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:10:7c:95:0b:fd:9d:5e:9f:80:52:b8:70:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417 Validity Not Before: Dec 6 14:00:46 2025 GMT Not After : Dec 7 14:00:46 2025 GMT Subject: CN=ca092ce363ea70657941cb1bfa464922d20661ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:d9:00:21:1f:e4:64:b1:f3:45:9b:d8:17: 36:1c:de:01:54:4d:2a:3e:cc:a5:68:54:d9:e5:14: 4c:8b:1a:b6:52:87:7e:8a:bb:7a:44:25:f8:18:5d: ea:12:ea:df:c4:84:87:31:fe:10:e8:39:b2:e3:0c: e2:a7:53:9a:bf:36:63:2b:d5:ae:7f:9f:4b:8a:dc: 0b:8e:fb:e5:bb:1a:a2:cf:04:fc:8e:22:f8:d2:a8: e3:6d:fa:27:fb:8d:71:9c:6d:4f:14:3f:dc:b1:49: ad:53:f7:6b:a4:e8:c0:44:08:71:6c:42:e6:b9:f9: ee:23:2e:3c:a7:f3:1b:55:39:4c:ef:57:85:23:23: 8a:7d:fb:f1:8b:03:0c:c3:38:b4:15:c5:44:95:6b: f8:cf:dd:a1:dc:3b:d0:db:8b:35:75:4e:81:75:d8: fd:5f:9d:1e:79:53:c3:82:e1:ae:27:62:aa:f8:90: e7:76:8c:4c:5c:4a:56:f8:2a:15:2a:61:78:ac:bd: 69:ab:a8:38:66:9d:3f:c4:f3:b3:64:32:80:8d:01: 1f:49:c2:f8:f9:76:25:54:69:ac:14:34:58:8c:cf: 45:ed:62:f0:28:c0:3b:d2:35:23:64:7d:1c:92:94: 55:65:9d:c0:98:fd:49:7c:b9:fe:7b:03:00:bb:9c: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:09:2C:E3:63:EA:70:65:79:41:CB:1B:FA:46:49:22:D2:06:61:BA X509v3 Authority Key Identifier: keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:22:60:53:86:a5:cf:70:d5:5a:43:d1:e0:af:73:c2:7a:14: 1b:28:d7:3d:fe:23:68:d7:20:c6:5e:a0:73:b0:dd:61:3f:36: ab:ea:cb:b5:fb:af:f7:60:53:5c:56:e9:03:9e:05:aa:36:03: 7d:04:15:33:45:f3:f0:c8:3f:7f:5d:e1:8d:0d:93:64:d8:ac: a8:39:71:14:4b:b4:07:24:d9:aa:7b:ee:8c:96:04:2b:53:82: 8a:2d:62:aa:7f:5f:a5:33:6c:f8:89:88:60:79:46:17:98:60: d9:33:3f:4d:23:c6:ec:d9:54:70:59:c8:b3:09:be:6b:c9:3d: 2f:2b:8a:88:52:86:24:d4:18:4e:95:e1:fd:ed:1d:11:9b:b0: 73:75:e7:1a:bb:29:2b:b8:d1:47:29:74:99:1b:f4:2a:ab:8a: 8c:9b:53:ed:65:8a:89:a7:fb:09:69:29:20:c1:63:87:d1:a7: 8e:9b:ce:b9:78:36:2a:d1:3a:0e:7c:ca:3c:f2:b5:ea:31:3f: 71:a7:d8:d8:80:57:e0:b7:55:d2:b2:2c:f4:6c:21:19:12:a5: eb:fc:8d:12:8e:7f:c8:bf:0d:f1:5b:77:bf:ff:cb:2e:d7:0f: 88:e5:95:0a:11:0c:ed:13:51:87:0b:c6:c3:b7:74:96:46:3e: 52:c8:3b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xB8lQv9nV6fgFK4cMgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx YmM0MTcwHhcNMjUxMjA2MTQwMDQ2WhcNMjUxMjA3MTQwMDQ2WjAzMTEwLwYDVQQD EyhjYTA5MmNlMzYzZWE3MDY1Nzk0MWNiMWJmYTQ2NDkyMmQyMDY2MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLXZACEf5GSx80Wb2Bc2HN4BVE0q PsylaFTZ5RRMixq2Uod+irt6RCX4GF3qEurfxISHMf4Q6Dmy4wzip1OavzZjK9Wu f59LitwLjvvluxqizwT8jiL40qjjbfon+41xnG1PFD/csUmtU/drpOjARAhxbELm ufnuIy48p/MbVTlM71eFIyOKffvxiwMMwzi0FcVElWv4z92h3DvQ24s1dU6Bddj9 X50eeVPDguGuJ2Kq+JDndoxMXEpW+CoVKmF4rL1pq6g4Zp0/xPOzZDKAjQEfScL4 +XYlVGmsFDRYjM9F7WLwKMA70jUjZH0ckpRVZZ3AmP1JfLn+ewMAu5z3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoJLONj6nBleUHLG/pGSSLSBmG6MB8GA1UdIwQY MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiJgU4al z3DVWkPR4K9zwnoUGyjXPf4jaNcgxl6gc7DdYT82q+rLtfuv92BTXFbpA54FqjYD fQQVM0Xz8Mg/f13hjQ2TZNisqDlxFEu0ByTZqnvujJYEK1OCii1iqn9fpTNs+ImI YHlGF5hg2TM/TSPG7NlUcFnIswm+a8k9LyuKiFKGJNQYTpXh/e0dEZuwc3XnGrsp K7jRRyl0mRv0KquKjJtT7WWKiaf7CWkpIMFjh9GnjpvOuXg2KtE6DnzKPPK16jE/ cafY2IBX4LdV0rIs9GwhGRKl6/yNEo5/yL8N8Vt3v//LLtcPiOWVChEM7RNRhwvG w7d0lkY+Usg7dw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:51 2025 by rpki-client