This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json) Hash identifier: OmLNcI4CZo8i+pSpbNxRZgPUp8q/oq93Dzohf/f/r/M= Subject key identifier: 41:2A:99:A3:BF:25:53:0E:CB:1B:65:26:42:C1:4F:6C:D6:17:F1:F9 Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced Certificate serial: 019AF31BE830CAF47A88139AEC25DED70A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft Manifest number: 03D4 Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=) 2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=) 3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: egQjgqIt4wNvvGmFstNi5a4J0iSoi1pP0Ztwe+67akM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e8:30:ca:f4:7a:88:13:9a:ec:25:de:d7:0a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=412a99a3bf25530ecb1b652642c14f6cd617f1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:6c:11:65:22:93:e8:a5:33:82:34:81:c7: 88:b1:9d:81:b7:d3:52:2f:96:fb:4a:cf:d7:25:f4: 01:75:90:65:29:e2:bd:90:cc:26:b4:f3:45:56:81: 38:09:2c:b9:cb:86:0f:96:fb:f2:0a:b6:41:ae:6e: e9:a3:bf:d8:2a:8f:37:2b:30:1d:a8:13:3b:d5:11: c8:d7:9f:41:be:33:8f:d1:1a:e7:04:eb:7e:c5:66: 92:f9:bb:d8:bf:7c:40:28:cd:1d:e8:29:92:63:7b: 0c:08:9a:98:bf:2d:56:32:28:95:4f:47:2a:e6:fa: bc:49:3c:8f:20:7b:7d:c5:d9:a4:4b:f4:f8:f0:cc: b7:9c:d3:4d:d6:ac:8b:13:f8:26:cc:e5:b3:ba:6a: 0e:cf:c7:7f:86:6e:9a:ba:80:98:d9:ea:48:50:29: c3:7e:be:0a:b0:fa:72:d0:6f:71:82:67:40:0f:22: ed:39:40:d7:78:e1:68:e5:8f:68:bf:65:fe:42:95: b6:62:03:29:80:69:5b:15:e5:d2:b5:2c:ab:5e:66: 79:4b:dc:38:85:fd:d4:58:81:69:f7:f4:f4:8f:47: 51:95:4a:81:aa:4b:fa:5c:31:49:63:7f:b5:84:a9: 0b:cb:2d:00:76:fd:4e:31:74:62:d0:8f:ee:f3:02: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:99:A3:BF:25:53:0E:CB:1B:65:26:42:C1:4F:6C:D6:17:F1:F9 X509v3 Authority Key Identifier: keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2a:eb:7f:d6:76:cf:49:8a:d2:a9:22:ba:98:37:fc:6e:4a: 20:bc:47:0a:ae:ab:a2:f9:a9:6c:fd:7a:4c:28:40:35:98:ed: 87:50:e0:06:83:65:c3:59:71:96:1e:82:b3:72:95:25:d0:5f: aa:b6:84:37:41:68:7a:0c:24:b3:0d:b9:5d:3d:e8:e5:c5:1c: 52:14:f1:7a:5b:a7:3c:45:67:91:66:6b:a4:cd:7f:1f:e2:b8: 2f:73:78:3c:e7:1e:29:c2:fd:4c:f0:2c:09:40:15:14:7b:08: 5c:38:cd:a6:07:45:6a:bb:e4:65:75:56:8f:91:8f:23:cb:ab: c8:d2:fb:13:24:fd:52:dd:ac:3c:56:68:62:f0:53:75:39:e4: b7:25:5a:b3:ce:f1:80:86:23:09:41:ae:73:b9:1d:d6:be:b9: ce:a8:c0:be:86:b9:19:67:1e:fc:0e:69:4a:8b:a5:bd:62:e9: c4:84:c2:c0:b8:5a:91:65:63:7e:12:01:60:4b:6b:b9:20:81: 2d:9a:5d:37:e5:8d:04:36:77:53:74:af:6f:70:7d:3e:58:46: fa:8a:fc:89:b5:9a:0f:58:88:e0:1f:2a:95:33:6d:39:3e:28: ed:57:e9:38:5a:22:76:72:53:9f:ba:54:03:e0:f8:df:50:77: f6:fc:33:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+gwyvR6iBOa7CXe1wp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj NDBjZWQwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD Eyg0MTJhOTlhM2JmMjU1MzBlY2IxYjY1MjY0MmMxNGY2Y2Q2MTdmMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf1sEWUik+ilM4I0gceIsZ2Bt9NS L5b7Ss/XJfQBdZBlKeK9kMwmtPNFVoE4CSy5y4YPlvvyCrZBrm7po7/YKo83KzAd qBM71RHI159BvjOP0RrnBOt+xWaS+bvYv3xAKM0d6CmSY3sMCJqYvy1WMiiVT0cq 5vq8STyPIHt9xdmkS/T48My3nNNN1qyLE/gmzOWzumoOz8d/hm6auoCY2epIUCnD fr4KsPpy0G9xgmdADyLtOUDXeOFo5Y9ov2X+QpW2YgMpgGlbFeXStSyrXmZ5S9w4 hf3UWIFp9/T0j0dRlUqBqkv6XDFJY3+1hKkLyy0Adv1OMXRi0I/u8wK+jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEqmaO/JVMOyxtlJkLBT2zWF/H5MB8GA1UdIwQY MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0 LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSrrf9Z2 z0mK0qkiupg3/G5KILxHCq6rovmpbP16TChANZjth1DgBoNlw1lxlh6Cs3KVJdBf qraEN0Foegwksw25XT3o5cUcUhTxelunPEVnkWZrpM1/H+K4L3N4POceKcL9TPAs CUAVFHsIXDjNpgdFarvkZXVWj5GPI8uryNL7EyT9Ut2sPFZoYvBTdTnktyVas87x gIYjCUGuc7kd1r65zqjAvoa5GWce/A5pSoulvWLpxITCwLhakWVjfhIBYEtruSCB LZpdN+WNBDZ3U3Svb3B9PlhG+or8ibWaD1iI4B8qlTNtOT4o7VfpOFoidnJTn7pU A+D431B39vwzzw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:44 2025 by rpki-client