This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json) Hash identifier: RoRWVdXOCQIrktDgYCHcq504xpHCjUC/H6vqTQR9pz4= Subject key identifier: 30:5C:EC:52:E2:0E:0A:CD:A8:B5:A3:15:40:76:EA:8C:BB:31:E7:32 Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77 Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77 Certificate serial: 019AF12D58B34F54C9902789A0FE3E53D0B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft Manifest number: 0E88 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=) 2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: yB62xHM8nzZHQ60Z50MrF0mFkdT/fgUa8EXuWj+9VOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:58:b3:4f:54:c9:90:27:89:a0:fe:3e:53:d0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=305cec52e20e0acda8b5a3154076ea8cbb31e732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:37:44:c8:de:12:99:f5:ea:bb:a3:01:0c: 5f:6b:85:27:ae:72:b9:4e:3b:51:18:e6:c1:ed:1b: 32:70:c7:e7:94:5a:da:d0:0f:95:aa:8d:68:26:0f: 8c:66:9b:b6:ce:ad:22:bb:9b:63:89:e4:23:aa:4b: 3f:22:9c:d4:d1:c7:2f:0b:e0:e2:72:fa:72:ec:5c: 0e:18:04:fd:8c:e8:f1:10:0f:bf:c4:fd:b2:49:76: b0:85:cd:df:eb:60:30:fc:20:ae:28:ef:84:52:d6: fc:6b:a4:61:1b:23:1c:da:8a:53:19:d4:28:12:93: 55:3b:83:6a:05:33:eb:e7:a7:b2:c2:27:dc:59:dc: 68:d1:77:20:db:87:50:aa:2b:4c:0f:6a:57:5b:47: a8:88:ab:10:67:e5:3c:76:4a:74:d8:7f:24:6c:64: c6:c8:c6:9e:9b:cb:57:c5:a3:95:2a:b0:51:4d:70: 90:3d:77:66:ba:3b:3d:08:dd:19:b6:5a:8f:0f:46: 09:c5:79:bc:76:f1:99:6e:88:04:3f:c6:b7:20:76: f2:2f:96:1e:31:91:2b:23:6b:a8:74:f1:29:c2:b5: ef:1b:99:94:54:cd:8e:47:23:aa:de:14:7c:b1:54: e5:eb:bb:34:a4:f7:ee:b3:ac:48:07:85:08:ae:ac: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5C:EC:52:E2:0E:0A:CD:A8:B5:A3:15:40:76:EA:8C:BB:31:E7:32 X509v3 Authority Key Identifier: keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9c:d6:73:7a:ae:72:ec:b8:1b:fe:9f:91:ff:ab:42:74:f5: 78:2f:2f:ac:f0:9a:c6:05:a2:20:fc:39:48:cd:5e:a8:c9:f2: 21:24:d0:0e:91:32:0d:ef:e2:7c:71:92:71:ff:d3:e5:3b:73: 6c:d5:18:3b:d0:a7:14:ae:c1:bb:23:09:3f:6f:66:88:20:e3: 51:a6:fa:10:70:f0:4b:94:2d:20:f6:62:99:f3:df:dd:6a:01: 24:e9:a4:03:32:08:96:19:a4:57:94:47:1f:d5:e4:a7:30:1f: 66:00:3c:af:b0:59:fa:d6:60:45:27:62:98:5c:fe:1c:2c:dd: 40:35:28:73:bb:ab:53:e5:0c:14:c5:bd:32:58:01:5c:54:55: 6f:43:aa:a1:0b:ae:24:07:72:73:16:ee:06:43:18:cb:36:9c: ef:bf:b3:cc:fc:40:14:6b:7e:b0:fd:ce:72:db:31:b3:55:3b: c8:02:a2:54:49:94:47:6a:75:d8:bd:c1:33:00:d1:2b:1c:c7: 8a:fa:45:0b:6b:da:44:71:08:1d:67:f1:d4:9f:ca:58:11:05: 51:ce:68:30:11:1f:4e:4d:06:06:df:68:72:db:e3:08:06:4f: c7:53:3d:1e:04:fb:4f:68:d6:47:53:8f:33:6c:f0:f0:f2:df: 95:3b:0f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVizT1TJkCeJoP4+U9C3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMjBkZGE2NDg0M2E0ZWUzNjRiMDg5MzU2Y2E4Nzk5NTgz MGZkNzcwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygzMDVjZWM1MmUyMGUwYWNkYThiNWEzMTU0MDc2ZWE4Y2JiMzFlNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUE3RMjeEpn16rujAQxfa4UnrnK5 TjtRGObB7RsycMfnlFra0A+Vqo1oJg+MZpu2zq0iu5tjieQjqks/IpzU0ccvC+Di cvpy7FwOGAT9jOjxEA+/xP2ySXawhc3f62Aw/CCuKO+EUtb8a6RhGyMc2opTGdQo EpNVO4NqBTPr56eywifcWdxo0Xcg24dQqitMD2pXW0eoiKsQZ+U8dkp02H8kbGTG yMaem8tXxaOVKrBRTXCQPXdmujs9CN0ZtlqPD0YJxXm8dvGZbogEP8a3IHbyL5Ye MZErI2uodPEpwrXvG5mUVM2ORyOq3hR8sVTl67s0pPfus6xIB4UIrqwoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBc7FLiDgrNqLWjFUB26oy7MecyMB8GA1UdIwQY MBaAFKIg3aZIQ6TuNksIk1bKh5lYMP13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYt ZjVmODE0NTY1MWQzLzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYtZjVmODE0NTY1MWQz LzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5zWc3qu cuy4G/6fkf+rQnT1eC8vrPCaxgWiIPw5SM1eqMnyISTQDpEyDe/ifHGScf/T5Ttz bNUYO9CnFK7BuyMJP29miCDjUab6EHDwS5QtIPZimfPf3WoBJOmkAzIIlhmkV5RH H9XkpzAfZgA8r7BZ+tZgRSdimFz+HCzdQDUoc7urU+UMFMW9MlgBXFRVb0OqoQuu JAdycxbuBkMYyzac77+zzPxAFGt+sP3Octsxs1U7yAKiVEmUR2p12L3BMwDRKxzH ivpFC2vaRHEIHWfx1J/KWBEFUc5oMBEfTk0GBt9octvjCAZPx1M9HgT7T2jWR1OP M2zw8PLflTsPTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:08 2025 by rpki-client