This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json) Hash identifier: gd2ywHxOnC285x+Gakxk7aqDEnqlc1+L+gzBAyivKXg= Subject key identifier: B6:A9:EF:24:36:EB:7A:F4:BD:D2:30:47:D7:FD:BB:E7:9A:3B:2F:48 Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84 Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384 Certificate serial: 019AF0884677420DF5838B740130564BDE2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft Manifest number: 1484 Signing time: Fri 05 Dec 2025 22:00:53 +0000 Manifest this update: Fri 05 Dec 2025 22:00:53 +0000 Manifest next update: Sat 06 Dec 2025 22:00:53 +0000 Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=) 2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=) 3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: Ondh/NEHqwrKjchWSzDF+9RXPKc1FgyWFPXZ9TKeA4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:46:77:42:0d:f5:83:8b:74:01:30:56:4b:de:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384 Validity Not Before: Dec 5 22:00:53 2025 GMT Not After : Dec 6 22:00:53 2025 GMT Subject: CN=b6a9ef2436eb7af4bdd23047d7fdbbe79a3b2f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:7d:3e:cf:3e:9b:5d:ab:89:4c:56:33:3a: ed:30:60:05:a1:57:18:87:85:90:98:73:28:b5:5f: bd:90:63:34:c3:be:e9:08:50:d7:46:84:40:b2:85: e8:fe:37:a6:35:62:5b:4d:70:73:25:72:46:e7:67: ec:b0:6e:97:9b:77:09:ad:fb:9e:32:7e:2e:6f:51: 1a:c6:ba:cc:5e:7b:92:e5:b5:56:62:7a:8d:cd:fb: 60:ee:02:df:19:d2:34:a7:d8:0c:30:13:4b:0e:89: 9b:33:5d:92:ae:51:7e:49:1b:26:42:32:11:8d:c3: 5d:b3:ac:4e:50:81:24:5d:57:f3:75:ff:68:56:70: ac:b5:4c:e9:c6:f2:42:58:e2:8a:34:36:ad:b6:51: e4:26:48:aa:42:0f:87:7a:fb:19:2f:45:09:e8:6c: e9:0f:39:ab:87:c4:5d:5c:b8:88:e6:67:cc:d0:92: 7c:0c:bb:eb:55:36:4d:31:61:0e:48:ef:44:8e:60: 8a:74:ca:ea:9c:5f:40:7d:e7:cd:08:f3:38:c2:1a: f0:e1:9a:1b:d6:c2:81:0c:f3:72:6d:01:89:7e:09: 25:91:ef:90:aa:41:a1:b1:b4:27:97:15:a2:2a:b4: 12:88:da:f3:fd:9f:ce:7d:f9:73:c3:29:55:eb:0d: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:EF:24:36:EB:7A:F4:BD:D2:30:47:D7:FD:BB:E7:9A:3B:2F:48 X509v3 Authority Key Identifier: keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:27:fc:db:92:46:29:06:50:8d:d8:15:9e:f8:f8:a7:dd: ad:d1:58:c7:d0:e5:13:21:ad:46:1c:14:b4:9a:17:d8:22:fc: f9:2c:1d:bc:d5:bf:31:f4:13:1b:3d:15:34:9e:f8:d0:32:e9: 60:f6:e5:74:cc:aa:dd:d6:a9:36:c8:d8:05:3a:6d:9c:c5:3d: 44:43:7b:26:85:03:ad:0d:a4:a6:bf:13:f9:fa:8d:16:39:ab: af:3a:62:e3:27:5f:a3:14:c9:ef:1c:c8:54:a3:c7:6d:36:16: 08:c4:84:81:63:80:bc:d5:4e:58:e8:65:25:ab:8e:20:4b:f5: b6:d6:f0:97:32:d5:3a:eb:64:7c:b5:95:46:b2:be:40:29:f4: 4c:ce:c9:39:d5:4f:a3:5b:46:b3:a8:36:71:50:a7:2a:00:85: 62:3c:30:5b:f1:be:93:07:c8:fa:47:59:36:26:37:2c:ae:9a: 5a:46:55:77:88:3d:4b:51:b7:8f:c6:ce:1d:99:bd:97:41:00: 6e:87:bf:40:25:cc:20:63:ab:9c:3d:00:4d:e6:55:66:72:f8: 57:c2:51:0d:d5:d5:f8:e5:d8:2c:9a:b7:b8:29:e1:de:ed:88: 8f:2f:2d:43:ce:cd:cb:c7:18:45:ab:5b:0a:3b:a4:24:27:36: 5a:56:7a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEZ3Qg31g4t0ATBWS94uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTdhZDA1OTgyMDhhNmFmOWQxNTAwYTc0MGQ3M2JjZjI4 ZjAzODQwHhcNMjUxMjA1MjIwMDUzWhcNMjUxMjA2MjIwMDUzWjAzMTEwLwYDVQQD EyhiNmE5ZWYyNDM2ZWI3YWY0YmRkMjMwNDdkN2ZkYmJlNzlhM2IyZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXV9Ps8+m12riUxWMzrtMGAFoVcY h4WQmHMotV+9kGM0w77pCFDXRoRAsoXo/jemNWJbTXBzJXJG52fssG6Xm3cJrfue Mn4ub1EaxrrMXnuS5bVWYnqNzftg7gLfGdI0p9gMMBNLDombM12SrlF+SRsmQjIR jcNds6xOUIEkXVfzdf9oVnCstUzpxvJCWOKKNDattlHkJkiqQg+HevsZL0UJ6Gzp Dzmrh8RdXLiI5mfM0JJ8DLvrVTZNMWEOSO9EjmCKdMrqnF9AfefNCPM4whrw4Zob 1sKBDPNybQGJfgklke+QqkGhsbQnlxWiKrQSiNrz/Z/OfflzwylV6w2kWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLap7yQ263r0vdIwR9f9u+eaOy9IMB8GA1UdIwQY MBaAFHDnrQWYIIpq+dFQCnQNc7zyjwOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQt NjA3ZTE3YWVjNzUwLzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQtNjA3ZTE3YWVjNzUw LzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElUn/NuS RikGUI3YFZ74+KfdrdFYx9DlEyGtRhwUtJoX2CL8+SwdvNW/MfQTGz0VNJ740DLp YPbldMyq3dapNsjYBTptnMU9REN7JoUDrQ2kpr8T+fqNFjmrrzpi4ydfoxTJ7xzI VKPHbTYWCMSEgWOAvNVOWOhlJauOIEv1ttbwlzLVOutkfLWVRrK+QCn0TM7JOdVP o1tGs6g2cVCnKgCFYjwwW/G+kwfI+kdZNiY3LK6aWkZVd4g9S1G3j8bOHZm9l0EA boe/QCXMIGOrnD0ATeZVZnL4V8JRDdXV+OXYLJq3uCnh3u2Ijy8tQ87Ny8cYRatb CjukJCc2WlZ6kg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:34 2025 by rpki-client