This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json) Hash identifier: ziPKWVhxKiBHw1GqXQ05Kd8m3AIqdi64e47E06X3DY8= Subject key identifier: 81:0C:C8:91:F1:68:B7:51:15:06:B6:65:0E:61:24:B8:68:64:C0:CE Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d Certificate serial: 019B36B3A7874EF8D0CADF7E5AD604CCE880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 13:01:41 +0000 Manifest this update: Fri 19 Dec 2025 13:01:41 +0000 Manifest next update: Sat 20 Dec 2025 13:01:41 +0000 Files and hashes: 1: aqX_aHr9DYDlihdIMBv6LMwHePY.roa (hash: CPN85FZ7OPhT7PlAx5nBT6Pw1xOtIkDQK0zxfnvB/+M=) 2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: p52ucik2f8oMmOpwS4cfnYxXwVb4yQVcQcT06Z9vuhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:a7:87:4e:f8:d0:ca:df:7e:5a:d6:04:cc:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d Validity Not Before: Dec 19 13:01:41 2025 GMT Not After : Dec 20 13:01:41 2025 GMT Subject: CN=810cc891f168b7511506b6650e6124b86864c0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:e4:6c:5d:8c:ad:23:0d:2e:83:d6:7a:f1: 9e:e4:c2:95:39:51:54:f4:7a:ad:8f:aa:ed:98:27: 16:10:bd:43:9d:72:8a:ec:e5:85:14:52:9f:eb:1d: 3b:f1:9b:0e:e2:97:6c:0d:ee:d8:13:9f:02:94:8c: 0c:70:c8:07:10:2f:be:29:77:b2:00:42:45:95:47: 1b:ee:a0:c4:3a:d9:ca:6c:7a:cb:e0:5f:28:a1:42: 5b:46:b1:7d:34:a0:51:d3:29:88:53:77:2c:c1:c4: 75:e5:2d:36:00:90:a2:3a:55:03:83:64:3b:26:8e: d6:21:7c:cb:2c:e5:e6:f0:c2:de:b5:37:ad:6c:2c: 47:c4:60:d9:75:a3:ea:58:6b:be:ad:0f:62:b2:f0: 3e:c7:87:1e:34:66:02:32:0f:7f:c6:94:70:98:4b: 47:c9:2c:48:f7:ef:38:5d:2b:a5:c1:bf:16:8c:bd: fa:1b:d3:0a:83:6c:e8:6c:79:57:83:10:0c:8e:03: 6a:29:1f:4d:7e:16:99:28:8a:18:11:52:16:db:f6: 25:84:c8:ae:47:1c:b6:d8:92:ea:0c:5f:2f:e1:4c: 94:ec:4e:f4:dc:75:ef:9e:69:33:63:57:28:f8:2e: ef:9c:c3:be:68:f4:4b:13:24:29:b0:31:87:24:cc: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:C8:91:F1:68:B7:51:15:06:B6:65:0E:61:24:B8:68:64:C0:CE X509v3 Authority Key Identifier: keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:00:f3:5b:bf:48:46:b2:16:40:a1:a0:90:10:f4:ee:90:b7: b0:b8:45:89:e5:79:38:ce:8c:ac:30:6e:02:be:88:fe:09:ff: ce:52:21:fa:bf:6d:e6:34:2c:b7:91:7e:f8:18:50:ba:68:3e: a9:11:bf:d2:f8:64:eb:e0:18:c2:53:75:9c:b0:9d:60:42:59: 94:a1:68:9d:5a:54:34:5a:bc:46:cc:cf:9c:26:38:f8:fe:0c: d4:65:7b:9b:9d:0a:49:d2:19:f6:3b:8e:c5:3d:7d:60:a4:99: 06:89:e1:d2:15:a8:4b:c4:a0:98:aa:97:86:1e:20:ac:27:e9: 27:9c:fa:be:4e:13:ff:4a:3a:33:86:44:f8:22:1c:23:99:94: d2:e3:e9:9e:67:32:43:6b:72:d1:58:eb:86:9c:ca:e6:14:55: 3b:14:7c:8a:70:07:b3:31:f6:e0:9a:ad:ae:00:68:ad:8e:0d: 32:ab:db:fe:2c:fd:b2:2d:d3:6f:df:5b:92:72:f2:f9:6d:a8: 3a:be:ab:39:96:b4:5b:96:b6:3e:f0:35:44:e9:66:c7:d1:45: 2f:1a:d6:31:42:e7:b3:63:af:96:6e:72:13:b7:18:e0:92:ef: 00:7d:81:f7:de:6f:c7:7b:8a:7d:1e:2d:ad:d6:4c:ed:2c:57: 90:cd:53:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s6eHTvjQyt9+WtYEzOiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTA0OWQwMGJhODQyMWU0YzQ1YTk0ODQ5Mjk0NWM3OGZk OWUxNmQwHhcNMjUxMjE5MTMwMTQxWhcNMjUxMjIwMTMwMTQxWjAzMTEwLwYDVQQD Eyg4MTBjYzg5MWYxNjhiNzUxMTUwNmI2NjUwZTYxMjRiODY4NjRjMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSfkbF2MrSMNLoPWevGe5MKVOVFU 9Hqtj6rtmCcWEL1DnXKK7OWFFFKf6x078ZsO4pdsDe7YE58ClIwMcMgHEC++KXey AEJFlUcb7qDEOtnKbHrL4F8ooUJbRrF9NKBR0ymIU3cswcR15S02AJCiOlUDg2Q7 Jo7WIXzLLOXm8MLetTetbCxHxGDZdaPqWGu+rQ9isvA+x4ceNGYCMg9/xpRwmEtH ySxI9+84XSulwb8WjL36G9MKg2zobHlXgxAMjgNqKR9NfhaZKIoYEVIW2/YlhMiu Rxy22JLqDF8v4UyU7E703HXvnmkzY1co+C7vnMO+aPRLEyQpsDGHJMwZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEMyJHxaLdRFQa2ZQ5hJLhoZMDOMB8GA1UdIwQY MBaAFKDgSdALqEIeTEWpSEkpRceP2eFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEt NWY0YTE1Y2I5MDU0LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEtNWY0YTE1Y2I5MDU0 LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQDzW79I RrIWQKGgkBD07pC3sLhFieV5OM6MrDBuAr6I/gn/zlIh+r9t5jQst5F++BhQumg+ qRG/0vhk6+AYwlN1nLCdYEJZlKFonVpUNFq8RszPnCY4+P4M1GV7m50KSdIZ9juO xT19YKSZBonh0hWoS8SgmKqXhh4grCfpJ5z6vk4T/0o6M4ZE+CIcI5mU0uPpnmcy Q2ty0VjrhpzK5hRVOxR8inAHszH24JqtrgBorY4NMqvb/iz9si3Tb99bknLy+W2o Or6rOZa0W5a2PvA1ROlmx9FFLxrWMULns2Ovlm5yE7cY4JLvAH2B995vx3uKfR4t rdZM7SxXkM1TwA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:51:21 2025 by rpki-client