This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json) Hash identifier: 0KDeXI2St40/GDCQ4svfWiCC7Yyr0VWECKFCwui2Qcc= Subject key identifier: E6:D6:6F:C4:C9:22:A4:42:59:6D:5D:30:53:50:A7:24:AA:98:80:9B Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Certificate serial: 019AF0BF2C589151E04680BAC888689CE975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft Manifest number: 176A Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=) 2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=) 3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: 4EBjTWFtxDbPv5aO+S6rBX4zCrOwFavpzJjl+ALqIIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2c:58:91:51:e0:46:80:ba:c8:88:68:9c:e9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=e6d66fc4c922a442596d5d305350a724aa98809b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:d8:4f:53:9f:38:0c:ab:35:eb:95:4d:d8: 09:0c:84:85:63:70:7c:76:68:0d:fa:58:2c:6b:e9: 84:73:52:64:6e:37:9d:d0:b5:a2:39:8b:e5:ff:d9: 71:f8:60:27:7d:14:78:fe:f7:fe:12:a3:d3:82:6f: 20:7a:be:7e:48:ad:6a:fd:84:d5:71:06:04:ea:78: f2:4e:40:18:ee:70:14:c4:98:0e:3a:3a:75:27:20: 49:08:66:7d:bb:7b:c3:40:c0:be:c7:81:65:39:cf: f0:06:68:24:f6:8c:e1:17:8c:df:d8:43:8f:0f:50: 39:45:45:a1:12:d0:fb:43:e2:e1:98:a8:7a:a2:a8: 99:c2:ad:ee:95:08:30:2a:39:10:1a:1c:58:eb:13: 32:69:cc:78:ba:d8:df:60:49:93:7a:cf:8d:0c:ca: 19:e7:cb:33:2d:3a:97:ed:16:d7:02:d8:83:a5:54: b6:bf:92:38:c7:68:eb:bc:81:9a:57:1f:ca:bb:b6: 6b:e7:cd:25:3d:cd:a6:48:a9:ff:ec:92:cf:c1:f3: 6a:67:fb:7f:a8:b6:aa:bc:74:ef:1f:12:23:a0:ff: 6d:0f:7a:6c:29:52:65:d1:21:2f:a2:34:fc:93:e0: 35:55:7f:ec:c6:f6:30:48:5b:95:26:70:9c:61:02: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:6F:C4:C9:22:A4:42:59:6D:5D:30:53:50:A7:24:AA:98:80:9B X509v3 Authority Key Identifier: keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:58:fe:b9:43:3e:d9:3b:ad:8e:91:ee:9b:4e:d9:52:4a:ad: 8b:5d:ae:78:8c:66:1b:1b:8f:37:63:76:87:c9:7b:c7:54:37: 08:ae:a2:03:2f:68:8f:3e:0c:f6:c1:be:72:e3:c9:9b:37:6c: a1:2a:49:b7:7f:a0:d4:c4:81:15:40:20:c6:5b:e4:d2:77:35: 02:eb:75:35:86:3d:f8:cd:c0:6e:3b:e2:d6:29:93:fe:ce:a5: 03:3c:6f:6d:71:a9:17:d6:31:a2:aa:6f:a4:c3:2e:61:9a:57: a0:9a:93:50:11:ec:d4:71:65:71:4c:9b:95:75:de:17:a0:9d: 67:9c:42:4f:2c:10:2d:7e:4a:b4:29:19:0a:d4:85:56:ca:77: 57:d8:04:46:66:d0:33:16:81:d2:28:f8:d6:a1:96:22:cb:99: ac:f4:4b:7a:c7:cb:fc:a1:92:b9:c0:5f:34:d0:ad:b3:03:89: 33:44:fd:57:1a:47:ff:98:a0:96:72:b8:de:96:2d:f1:cd:c1: 32:94:6e:5c:f8:7e:38:89:d4:ce:85:e3:7b:b3:f0:db:c4:bf: 77:9d:7e:91:a7:2d:d1:0c:67:41:9a:16:a3:d8:2a:cd:fe:da: de:8b:b0:de:33:49:25:ea:cd:26:b3:e0:93:8b:b0:9d:07:bf: 40:78:9a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyxYkVHgRoC6yIhonOl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm OWUwYTAwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EyhlNmQ2NmZjNGM5MjJhNDQyNTk2ZDVkMzA1MzUwYTcyNGFhOTg4MDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou7YT1OfOAyrNeuVTdgJDISFY3B8 dmgN+lgsa+mEc1Jkbjed0LWiOYvl/9lx+GAnfRR4/vf+EqPTgm8ger5+SK1q/YTV cQYE6njyTkAY7nAUxJgOOjp1JyBJCGZ9u3vDQMC+x4FlOc/wBmgk9ozhF4zf2EOP D1A5RUWhEtD7Q+LhmKh6oqiZwq3ulQgwKjkQGhxY6xMyacx4utjfYEmTes+NDMoZ 58szLTqX7RbXAtiDpVS2v5I4x2jrvIGaVx/Ku7Zr580lPc2mSKn/7JLPwfNqZ/t/ qLaqvHTvHxIjoP9tD3psKVJl0SEvojT8k+A1VX/sxvYwSFuVJnCcYQKQQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObWb8TJIqRCWW1dMFNQpySqmICbMB8GA1UdIwQY MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1j+uUM+ 2TutjpHum07ZUkqti12ueIxmGxuPN2N2h8l7x1Q3CK6iAy9ojz4M9sG+cuPJmzds oSpJt3+g1MSBFUAgxlvk0nc1Aut1NYY9+M3Abjvi1imT/s6lAzxvbXGpF9Yxoqpv pMMuYZpXoJqTUBHs1HFlcUyblXXeF6CdZ5xCTywQLX5KtCkZCtSFVsp3V9gERmbQ MxaB0ij41qGWIsuZrPRLesfL/KGSucBfNNCtswOJM0T9VxpH/5iglnK43pYt8c3B MpRuXPh+OInUzoXje7Pw28S/d51+kact0QxnQZoWo9gqzf7a3ouw3jNJJerNJrPg k4uwnQe/QHiauA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:02 2025 by rpki-client