This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json) Hash identifier: bcwfOW6dW14flkek7Zmjdgxgzh7buodc6qaoDShL+Ow= Subject key identifier: C0:33:D8:33:1F:27:9A:3B:B5:3E:DB:31:A8:23:71:7A:7E:D7:B3:C5 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019AF0BFA407C7FE0C71CDF476E5246A5F4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft Manifest number: 176D Signing time: Fri 05 Dec 2025 23:01:22 +0000 Manifest this update: Fri 05 Dec 2025 23:01:22 +0000 Manifest next update: Sat 06 Dec 2025 23:01:22 +0000 Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=) 2: DHT86uq93soXgimlreq7l63TpDc.roa (hash: wHf/DMhPu6ocTE0CoJNwsMGJB1c1KuC84P7yMVgDFoQ=) 3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: iTUSMfel7UTioViiN+hG9ywpZDht5V6yhasVjQ+sdZ0=) 4: PFZpLIhhyuxMIxoL3doX43uXr_0.roa (hash: vtL2UJAi6kU5TeC3dZFl0hJ0UyS0aR5hnJoB/XiExRo=) 5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=) 6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=) 7: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=) 8: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a4:07:c7:fe:0c:71:cd:f4:76:e5:24:6a:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Dec 5 23:01:22 2025 GMT Not After : Dec 6 23:01:22 2025 GMT Subject: CN=c033d8331f279a3bb53edb31a823717a7ed7b3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:a0:d0:86:98:81:67:8d:24:22:78:44:4f: a0:42:48:d2:a5:36:06:5f:d0:4d:fc:d4:d8:27:e4: a1:a3:1c:6b:de:8f:1d:49:3b:fa:ad:e3:4d:28:75: 93:e0:f6:ea:ac:ea:9d:62:fb:83:bc:d0:d4:30:93: a8:d5:bb:34:27:6c:70:9f:1c:d5:19:4a:5e:fb:2e: c7:3b:da:ba:8f:d2:8a:07:ba:11:e9:4c:47:d2:53: ec:ec:48:42:71:a3:7e:06:a6:92:da:cf:10:8a:56: a1:90:9d:2e:69:41:98:dd:af:e0:50:96:6a:df:c3: fe:d3:46:55:6d:d7:42:d7:be:8e:1b:67:e4:51:6b: 68:2f:21:5f:68:4e:dd:39:2c:28:e3:40:94:75:a8: c9:19:6c:d3:2f:64:f6:2c:df:0f:6e:e0:c6:a1:98: a7:fe:76:2e:a1:06:37:a2:70:b4:a0:dd:79:a1:b5: 98:a6:b5:b1:8d:28:d4:e3:3f:fc:ef:19:cc:b2:fe: 39:6e:ba:82:c7:ec:8b:3b:8a:d0:49:1b:b2:d9:f2: 68:22:b1:83:cd:12:a6:19:8e:ee:0c:4a:89:4e:90: 80:e0:ae:e3:49:27:0c:24:75:61:81:b9:f8:93:0a: 74:c8:97:b9:54:57:f4:a9:a8:44:50:81:f4:66:57: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:D8:33:1F:27:9A:3B:B5:3E:DB:31:A8:23:71:7A:7E:D7:B3:C5 X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2e:64:9e:00:ff:62:96:6d:80:27:92:ee:3f:d8:81:e7:21: c2:05:a3:81:ee:ed:97:55:b4:98:21:77:13:7a:82:b1:38:af: 3d:44:6a:d3:94:23:81:74:59:b7:d8:e7:b1:eb:56:08:38:b8: f7:a4:b3:13:67:b7:88:b5:3f:0f:a4:1f:12:e9:41:77:91:97: f8:8a:3c:ff:90:5b:21:93:96:93:f8:12:1a:db:ce:66:45:d8: ff:c3:79:ca:7c:96:34:71:cc:28:7d:d7:d4:b4:ef:21:e8:82: df:83:f4:95:0c:45:e2:5f:0c:ca:bb:05:29:fa:8f:a8:bf:cd: 5b:dd:16:c1:26:f4:b4:6a:a5:a4:a6:3a:eb:c8:3e:a2:e2:01: a9:07:65:42:f4:5b:da:56:fb:8e:39:01:e8:8c:40:7e:a0:30: 04:31:d5:b3:b2:a1:9b:66:87:48:64:1f:06:9c:f3:c8:4c:6c: 9b:81:9f:49:ac:f6:0b:58:95:20:a9:72:1c:44:d1:68:2f:a5: dd:5b:31:c7:ac:7d:43:15:95:4f:9d:80:06:24:a1:fb:a1:cd: 7f:3a:ab:37:00:0e:e2:85:e5:a1:98:2a:da:df:86:cc:6b:ed: 48:22:92:3b:af:0c:1a:25:f3:e2:1a:2b:6c:bb:b1:dc:73:53: 99:c5:88:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6QHx/4Mcc30duUkal9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjUxMjA1MjMwMTIyWhcNMjUxMjA2MjMwMTIyWjAzMTEwLwYDVQQD EyhjMDMzZDgzMzFmMjc5YTNiYjUzZWRiMzFhODIzNzE3YTdlZDdiM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSg0IaYgWeNJCJ4RE+gQkjSpTYG X9BN/NTYJ+Shoxxr3o8dSTv6reNNKHWT4PbqrOqdYvuDvNDUMJOo1bs0J2xwnxzV GUpe+y7HO9q6j9KKB7oR6UxH0lPs7EhCcaN+BqaS2s8QilahkJ0uaUGY3a/gUJZq 38P+00ZVbddC176OG2fkUWtoLyFfaE7dOSwo40CUdajJGWzTL2T2LN8PbuDGoZin /nYuoQY3onC0oN15obWYprWxjSjU4z/87xnMsv45brqCx+yLO4rQSRuy2fJoIrGD zRKmGY7uDEqJTpCA4K7jSScMJHVhgbn4kwp0yJe5VFf0qahEUIH0ZleKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAz2DMfJ5o7tT7bMagjcXp+17PFMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC5kngD/ YpZtgCeS7j/YgechwgWjge7tl1W0mCF3E3qCsTivPURq05QjgXRZt9jnsetWCDi4 96SzE2e3iLU/D6QfEulBd5GX+Io8/5BbIZOWk/gSGtvOZkXY/8N5ynyWNHHMKH3X 1LTvIeiC34P0lQxF4l8MyrsFKfqPqL/NW90WwSb0tGqlpKY668g+ouIBqQdlQvRb 2lb7jjkB6IxAfqAwBDHVs7Khm2aHSGQfBpzzyExsm4GfSaz2C1iVIKlyHETRaC+l 3Vsxx6x9QxWVT52ABiSh+6HNfzqrNwAO4oXloZgq2t+GzGvtSCKSO68MGiXz4hor bLux3HNTmcWIdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client