This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json) Hash identifier: VSSKEguSKqNM11czS3B4G2xtx0qF+CkVv/JirFiNVyE= Subject key identifier: 92:68:8B:86:AC:53:B7:BF:5E:75:B5:55:9F:2F:C1:06:93:F1:D4:A4 Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Certificate serial: 019AF2AD8CB15868FFD1E71FED64E839CCE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft Manifest number: 08DC Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=) 2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: 6OYQvg2HF3L5IfbSThjJnsYXCvQEPf+np7hNOGp648w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8c:b1:58:68:ff:d1:e7:1f:ed:64:e8:39:cc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=92688b86ac53b7bf5e75b5559f2fc10693f1d4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:5d:6e:ff:c2:32:e0:43:76:71:a7:ee:f1: 9d:e4:31:0c:61:d2:09:d0:1b:79:54:37:eb:11:ac: a3:84:3b:0d:64:ea:85:44:a2:33:77:03:b2:9e:e8: 08:fa:05:40:30:9f:d9:09:a3:af:87:3b:82:60:1f: 0a:6c:82:bc:f6:84:18:99:33:9b:b3:c0:04:ed:45: 20:47:73:7d:ad:70:9d:ff:99:06:77:e6:2d:bc:dd: be:4d:4d:87:83:60:1b:5e:d1:64:52:4d:24:80:52: f7:26:3e:ba:41:49:01:2d:ce:d0:82:f3:f5:9f:4d: 78:0a:01:7a:d6:ea:ec:12:ce:89:1d:c0:c9:6f:4a: 3e:8d:d1:6f:1c:6f:0c:b3:98:80:7a:2e:38:c0:96: 50:79:94:fb:a1:d0:a8:b5:d6:3f:2d:92:b7:bb:7e: d3:b0:99:71:07:44:bb:10:b7:3e:a6:27:0c:43:68: 88:a8:96:75:70:c1:aa:b7:eb:d9:87:97:ea:82:5a: 80:5f:cd:67:22:2b:ca:ac:4e:a9:52:d8:26:85:91: 9f:f1:cb:74:5c:d7:f7:64:b9:2d:4c:56:73:9f:16: 1f:46:62:46:98:9b:54:b3:43:4f:d9:29:1f:7a:71: 7d:53:30:b0:28:8d:05:48:2e:5e:6b:85:4f:8d:9c: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:68:8B:86:AC:53:B7:BF:5E:75:B5:55:9F:2F:C1:06:93:F1:D4:A4 X509v3 Authority Key Identifier: keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2a:8b:ad:93:3c:67:ca:8e:02:32:fc:78:b6:ba:15:70:7b: 4c:c8:7c:21:ac:ae:6d:86:c1:b1:c1:4e:40:5a:e3:d7:93:6e: 3d:26:c7:4f:32:28:37:59:2d:70:cd:18:41:7f:30:99:b0:52: c8:c7:63:5d:df:d3:9a:fb:55:4c:f8:25:eb:9b:dc:7c:94:6f: d1:17:e0:8c:03:7b:ac:93:b9:1a:d0:1b:67:d4:46:ae:61:18: 02:1b:1f:48:f2:3c:6b:a0:ff:05:17:63:db:e3:d8:72:75:a6: 86:e6:f7:3c:cf:f6:2f:f6:59:bc:78:31:75:a8:49:51:f7:a4: 51:41:4f:7b:ee:59:88:70:33:00:40:8d:d9:94:04:7d:45:7b: d1:c3:4f:50:35:80:1f:c2:72:f2:0c:ce:9b:03:3f:6d:80:25: c3:de:7d:a2:f2:0b:68:84:34:67:52:33:e2:e9:bc:2c:ed:0b: d5:ac:15:14:12:f6:52:43:40:62:89:9c:c3:a9:87:8f:d0:a2: d7:98:84:43:90:9e:46:ae:fa:94:7d:28:5c:99:f2:ff:62:78: 66:a4:74:e2:57:37:d9:b6:99:75:62:f4:c2:fd:2c:24:da:d7: 5e:9f:12:a1:d8:66:53:3c:b6:11:fb:4c:72:57:43:c6:40:64: 5c:e3:4e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYyxWGj/0ecf7WToOcziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTQ3MDM5ZDlmMDgwYTQyN2Y3NTI1YzVkMDY2ZjZjZjYy MTM0ZjMwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD Eyg5MjY4OGI4NmFjNTNiN2JmNWU3NWI1NTU5ZjJmYzEwNjkzZjFkNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM5dbv/CMuBDdnGn7vGd5DEMYdIJ 0Bt5VDfrEayjhDsNZOqFRKIzdwOynugI+gVAMJ/ZCaOvhzuCYB8KbIK89oQYmTOb s8AE7UUgR3N9rXCd/5kGd+YtvN2+TU2Hg2AbXtFkUk0kgFL3Jj66QUkBLc7QgvP1 n014CgF61ursEs6JHcDJb0o+jdFvHG8Ms5iAei44wJZQeZT7odCotdY/LZK3u37T sJlxB0S7ELc+picMQ2iIqJZ1cMGqt+vZh5fqglqAX81nIivKrE6pUtgmhZGf8ct0 XNf3ZLktTFZznxYfRmJGmJtUs0NP2SkfenF9UzCwKI0FSC5ea4VPjZx5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJoi4asU7e/XnW1VZ8vwQaT8dSkMB8GA1UdIwQY MBaAFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQt YzhiM2FjMGJlZmNiLzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQtYzhiM2FjMGJlZmNi LzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCqLrZM8 Z8qOAjL8eLa6FXB7TMh8IayubYbBscFOQFrj15NuPSbHTzIoN1ktcM0YQX8wmbBS yMdjXd/TmvtVTPgl65vcfJRv0RfgjAN7rJO5GtAbZ9RGrmEYAhsfSPI8a6D/BRdj 2+PYcnWmhub3PM/2L/ZZvHgxdahJUfekUUFPe+5ZiHAzAECN2ZQEfUV70cNPUDWA H8Jy8gzOmwM/bYAlw959ovILaIQ0Z1Iz4um8LO0L1awVFBL2UkNAYomcw6mHj9Ci 15iEQ5CeRq76lH0oXJny/2J4ZqR04lc32baZdWL0wv0sJNrXXp8SodhmUzy2EftM cldDxkBkXONO4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:56 2025 by rpki-client