This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json) Hash identifier: Xp78eT7ca0/kQeTS+18dsF2ok6aRM4se9NMeeNkuuvw= Subject key identifier: 98:3E:BD:E9:F6:8A:33:22:2F:07:F1:6B:B2:E1:15:C8:26:51:C8:78 Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019B251A3343A1337FF63B8F66C6B4B957A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft Manifest number: 1794 Signing time: Tue 16 Dec 2025 03:00:32 +0000 Manifest this update: Tue 16 Dec 2025 03:00:32 +0000 Manifest next update: Wed 17 Dec 2025 03:00:32 +0000 Files and hashes: 1: 9i_Fy4mZRlfNURa4hayKcHdiMEY.roa (hash: PDPb352f2JPLuJHrhYLanZ+7oePAn4VxO33SNBFdxI0=) 2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: oCv+JUwE9P79OzNe8mZ4KvUwcRO3k79eDZPbkDH/Nhs=) 3: sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa (hash: /IXlZY/hi3esdJuWdO3U7HevNnK2FSj61hj5YPxercA=) 4: vZVAzO1comLh9rD--AKOhaNfFxQ.roa (hash: H/PssdlCji8ajNbZih50zN0dew5cG4Cssgd64RB/Rhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:33:43:a1:33:7f:f6:3b:8f:66:c6:b4:b9:57:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Dec 16 03:00:32 2025 GMT Not After : Dec 17 03:00:32 2025 GMT Subject: CN=983ebde9f68a33222f07f16bb2e115c82651c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:27:74:62:04:83:76:d7:b8:56:8d:28:cb: 73:cb:5f:8d:6c:38:49:ef:62:99:41:3e:de:9f:fc: a2:a8:cf:8a:6b:fa:6b:67:cb:e6:66:f8:37:27:86: bd:2d:47:05:65:d4:82:b5:e5:56:f8:4c:a9:a3:50: 54:e3:42:b8:15:91:cb:5f:96:08:85:f9:19:8d:e4: 00:56:43:98:34:50:7a:eb:26:16:9a:b3:88:53:40: d0:9b:db:d8:37:20:2b:36:3e:af:9a:bc:7c:83:75: 3f:65:35:28:f0:4a:97:a5:23:93:0b:8b:17:c5:79: 66:76:bb:46:6c:db:83:3a:76:13:17:65:0e:16:c7: 88:1d:dc:f0:42:56:1f:e6:33:97:81:8b:00:5e:f6: 2a:d7:e1:e1:2a:ce:48:20:a8:81:a6:22:2a:85:d0: b5:b4:07:be:d6:2d:15:a1:54:aa:e3:80:cc:2e:0a: 7a:d5:92:8a:2c:65:94:38:6b:3a:ef:0c:9a:91:95: 2c:8a:5a:8c:c9:3a:aa:00:3f:a6:97:77:ac:98:4b: 36:48:7c:80:a7:3e:1e:d3:48:0e:a3:be:82:ae:12: e1:bf:dd:32:c9:ea:1b:b3:1f:2e:ce:58:05:f2:11: 97:62:96:68:14:f6:86:1c:4d:bc:d3:e4:42:3e:8b: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:BD:E9:F6:8A:33:22:2F:07:F1:6B:B2:E1:15:C8:26:51:C8:78 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:65:45:bd:56:dc:ca:91:26:f4:c8:93:cc:6b:c2:b0:73:7a: 2d:cb:12:40:96:4a:63:ab:47:ec:4b:90:da:a8:ee:66:80:f5: 4b:d3:de:90:5b:d5:4c:27:c6:fa:c7:ca:f5:62:2e:8a:41:2c: 67:30:04:f3:f0:c1:c3:1f:c7:28:40:a7:32:95:83:17:1b:6a: e4:28:b6:99:1a:bf:3e:66:60:5c:f6:c0:fb:f4:14:76:da:c2: 4a:f3:c2:c2:56:9f:60:bb:65:aa:c9:ec:8d:34:04:b1:e3:93: fe:08:a9:04:fb:16:29:35:60:9a:49:02:ce:89:f9:ff:8e:89: bb:63:41:43:1c:0a:ee:9b:97:50:29:0e:94:1e:c7:aa:c0:6a: fd:4c:84:cf:4e:1e:75:db:6c:96:43:15:4c:4d:6d:dd:69:74: db:ef:ad:08:dd:af:41:9d:25:f3:b3:db:29:26:1a:02:ad:18: 36:59:10:c0:b3:76:6e:df:89:53:4a:c9:8c:c1:ec:d8:5d:dc: 13:4d:d1:9f:6b:36:ea:fd:1c:05:78:fa:b0:4d:ae:64:be:b0: 98:8b:4d:ae:ce:b6:7f:6e:ab:f6:77:83:59:7e:8f:f3:e5:ca: 3e:fc:08:9f:3e:a6:71:2e:6e:a5:42:a5:ff:97:36:a9:5d:e9: 88:86:be:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGjNDoTN/9juPZsa0uVelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMjE2MDMwMDMyWhcNMjUxMjE3MDMwMDMyWjAzMTEwLwYDVQQD Eyg5ODNlYmRlOWY2OGEzMzIyMmYwN2YxNmJiMmUxMTVjODI2NTFjODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/sndGIEg3bXuFaNKMtzy1+NbDhJ 72KZQT7en/yiqM+Ka/prZ8vmZvg3J4a9LUcFZdSCteVW+Eypo1BU40K4FZHLX5YI hfkZjeQAVkOYNFB66yYWmrOIU0DQm9vYNyArNj6vmrx8g3U/ZTUo8EqXpSOTC4sX xXlmdrtGbNuDOnYTF2UOFseIHdzwQlYf5jOXgYsAXvYq1+HhKs5IIKiBpiIqhdC1 tAe+1i0VoVSq44DMLgp61ZKKLGWUOGs67wyakZUsilqMyTqqAD+ml3esmEs2SHyA pz4e00gOo76CrhLhv90yyeobsx8uzlgF8hGXYpZoFPaGHE280+RCPovKgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg+ven2ijMiLwfxa7LhFcgmUch4MB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWVFvVbc ypEm9MiTzGvCsHN6LcsSQJZKY6tH7EuQ2qjuZoD1S9PekFvVTCfG+sfK9WIuikEs ZzAE8/DBwx/HKECnMpWDFxtq5Ci2mRq/PmZgXPbA+/QUdtrCSvPCwlafYLtlqsns jTQEseOT/gipBPsWKTVgmkkCzon5/46Ju2NBQxwK7puXUCkOlB7HqsBq/UyEz04e ddtslkMVTE1t3Wl02++tCN2vQZ0l87PbKSYaAq0YNlkQwLN2bt+JU0rJjMHs2F3c E03Rn2s26v0cBXj6sE2uZL6wmItNrs62f26r9neDWX6P8+XKPvwInz6mcS5upUKl /5c2qV3piIa+sQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:32 2025 by rpki-client