This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json) Hash identifier: UuozPmJiA4ORNSt3qsVttHq02+e8cG2DbBJdu3g9I4Y= Subject key identifier: 85:D9:88:BB:6D:D2:0D:C5:F9:52:CF:BF:78:E5:BE:37:39:BE:0F:FA Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00 Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500 Certificate serial: 019AF49C65187215124F3D72C7632440C13A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=) 2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: qWg7SsV1iKAlL7ZnGy/8FSVTxzYEkZinEy7ZFhxCOBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:65:18:72:15:12:4f:3d:72:c7:63:24:40:c1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500 Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=85d988bb6dd20dc5f952cfbf78e5be3739be0ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:1a:ee:72:56:07:56:3f:03:32:6f:7e:8b: 9e:b9:cd:05:ab:30:d2:fb:e8:cd:d7:dc:92:cb:d8: 8b:06:67:bd:df:4e:ae:71:f7:31:c3:39:51:7d:0d: 0a:e7:60:6a:1d:98:f5:18:57:3d:ef:ed:64:bc:fe: a5:cd:5e:d1:0c:21:7d:80:a9:f6:db:0b:68:27:fa: 74:cd:ac:94:de:ac:52:6f:ae:d4:e0:9c:26:47:52: 40:d9:62:40:cd:58:20:bf:5d:85:d4:eb:f0:32:f1: c0:1f:fb:2e:75:a8:8c:80:15:92:12:3d:ca:92:ad: 5a:66:02:b6:2b:f2:13:9c:22:f6:60:9b:f0:2b:c1: 1d:33:6d:d1:5a:b7:9c:35:c9:0b:28:88:33:31:c8: 9b:95:66:ea:55:14:2e:3e:95:36:e6:19:29:73:43: 58:c1:da:c7:d5:eb:12:ee:91:70:dd:43:d9:dc:86: e6:5d:1d:ac:ff:93:bc:47:e5:66:8e:4f:94:46:06: 97:6b:8c:04:17:2a:ab:1f:35:e1:a8:79:ad:c7:dc: e5:cc:b7:b4:72:f3:76:9a:f4:fa:09:1b:af:d3:97: 04:08:ca:05:bf:f0:be:26:81:f8:fc:4f:17:cd:6a: 0b:a9:e3:fa:9f:0e:c8:55:8a:34:fc:e6:54:f5:c5: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:88:BB:6D:D2:0D:C5:F9:52:CF:BF:78:E5:BE:37:39:BE:0F:FA X509v3 Authority Key Identifier: keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:73:5c:d8:e9:a2:03:52:54:73:12:a4:94:81:7e:f6:c1:87: 56:d3:69:5b:8d:ea:82:b1:33:29:31:b9:a9:55:c3:72:6c:70: 19:6e:5c:b6:22:6f:d0:81:fe:e3:5d:c9:92:d0:fa:05:80:a7: 75:22:9e:0e:ea:e1:d5:67:b8:40:46:20:cc:be:dd:ff:b8:7e: 29:60:93:24:92:5a:c3:69:ee:df:c7:3a:c8:2d:16:7b:c7:87: 86:7e:6e:ec:53:9b:9e:ed:fb:dd:06:2c:5f:e7:59:2a:fe:38: 94:da:48:c6:b5:99:79:02:ff:d8:fe:2e:76:c3:16:0f:4e:13: 03:e2:1e:70:58:71:b1:1f:2c:00:e5:df:9f:69:d8:a2:af:05: df:29:ce:9c:23:2f:91:68:a0:c5:7f:26:b0:26:fb:a9:e4:61: 46:54:9d:60:3a:9b:f1:ec:ae:25:cd:1b:ad:75:b7:78:f0:bd: a1:42:9a:5b:b7:49:3b:83:b7:c5:1a:4f:6b:31:e6:a7:70:84: 9f:d5:01:03:2d:0c:90:1a:d6:09:b4:37:6e:6b:2d:8a:86:2d: a3:62:fe:f4:36:12:46:b0:2a:1b:aa:4c:9c:03:c5:30:08:92: a2:1e:4d:62:78:2b:04:ba:8c:2d:81:02:f0:a8:d8:a3:3d:e5: 81:13:69:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGUYchUSTz1yx2MkQME6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmMzY2UyMzcxYjlmMjFjNTdlMGMzYTU3ODdkOTVhNzM1 Y2I1MDAwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD Eyg4NWQ5ODhiYjZkZDIwZGM1Zjk1MmNmYmY3OGU1YmUzNzM5YmUwZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKUa7nJWB1Y/AzJvfoueuc0FqzDS ++jN19ySy9iLBme9306ucfcxwzlRfQ0K52BqHZj1GFc97+1kvP6lzV7RDCF9gKn2 2wtoJ/p0zayU3qxSb67U4JwmR1JA2WJAzVggv12F1OvwMvHAH/sudaiMgBWSEj3K kq1aZgK2K/ITnCL2YJvwK8EdM23RWrecNckLKIgzMciblWbqVRQuPpU25hkpc0NY wdrH1esS7pFw3UPZ3IbmXR2s/5O8R+Vmjk+URgaXa4wEFyqrHzXhqHmtx9zlzLe0 cvN2mvT6CRuv05cECMoFv/C+JoH4/E8XzWoLqeP6nw7IVYo0/OZU9cWdhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXZiLtt0g3F+VLPv3jlvjc5vg/6MB8GA1UdIwQY MBaAFKIsPOI3G58hxX4MOleH2VpzXLUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUt MDUzOTNmMmIzYTQ3LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUtMDUzOTNmMmIzYTQ3 LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3Nc2Omi A1JUcxKklIF+9sGHVtNpW43qgrEzKTG5qVXDcmxwGW5ctiJv0IH+413JktD6BYCn dSKeDurh1We4QEYgzL7d/7h+KWCTJJJaw2nu38c6yC0We8eHhn5u7FObnu373QYs X+dZKv44lNpIxrWZeQL/2P4udsMWD04TA+IecFhxsR8sAOXfn2nYoq8F3ynOnCMv kWigxX8msCb7qeRhRlSdYDqb8eyuJc0brXW3ePC9oUKaW7dJO4O3xRpPazHmp3CE n9UBAy0MkBrWCbQ3bmstioYto2L+9DYSRrAqG6pMnAPFMAiSoh5NYngrBLqMLYEC 8KjYoz3lgRNpQw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:45 2025 by rpki-client