This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft File: PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json) Hash identifier: 55M1NpzVPIfXyeHFkOFpaoHPGkS5wAaPEiR14uAm5u0= Subject key identifier: C4:9C:E6:53:E0:31:88:1C:B4:09:A4:C2:67:2B:79:F4:F7:C1:33:39 Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019B3F7F7A91EDD9A9370AD42C0686FE77E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 06:01:17 +0000 Manifest this update: Sun 21 Dec 2025 06:01:17 +0000 Manifest next update: Mon 22 Dec 2025 06:01:17 +0000 Files and hashes: 1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=) 2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=) 3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=) 4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: mB9jYhPLJEqNWCI77j9DAwOaUT9issVcvioENR4qQ9w=) 5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=) 6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=) 7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:7a:91:ed:d9:a9:37:0a:d4:2c:06:86:fe:77:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Dec 21 06:01:17 2025 GMT Not After : Dec 22 06:01:17 2025 GMT Subject: CN=c49ce653e031881cb409a4c2672b79f4f7c13339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:8c:82:e0:b6:fd:88:3b:53:ab:29:e1:db: ed:29:68:f7:5b:b0:68:83:4c:23:ca:7a:a6:3d:e2: 02:08:00:32:33:36:18:92:93:b7:8f:58:06:93:55: 28:a3:d5:06:f9:cf:10:ca:ca:32:d3:57:37:05:99: c7:bc:54:40:d4:6a:76:fe:86:6d:0e:9d:b0:2b:4c: 9b:1f:fe:a5:b1:4b:9a:be:1d:92:ab:f4:2b:42:16: a6:fb:95:7e:de:27:81:d8:34:90:09:1b:87:73:38: 31:db:02:65:38:fd:e1:e0:76:ae:16:10:b5:37:76: 94:cf:f9:25:74:23:0c:3e:2d:a1:e1:82:ba:e7:04: 94:ce:ab:99:1b:07:de:9d:b0:4d:d1:ab:fd:5f:80: 65:82:e9:e3:73:21:09:a7:db:a6:01:d9:3f:e0:c9: 85:e3:4c:41:25:b4:97:8f:1e:61:38:9c:79:7b:3a: 9e:ca:1b:2c:20:c4:85:0c:61:d4:4a:47:0f:11:4a: ca:38:46:2f:f5:07:fc:e7:a2:64:9c:91:d7:1d:a1: 6b:85:4d:c9:f7:e8:fd:08:a7:4c:5a:55:d9:ed:d2: 0d:45:30:2a:33:d5:52:0a:1b:82:a8:bd:31:60:e5: 9a:27:b0:c6:c6:99:ab:d0:91:66:e3:55:81:d0:21: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:E6:53:E0:31:88:1C:B4:09:A4:C2:67:2B:79:F4:F7:C1:33:39 X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8d:7a:dc:9f:1b:1b:f6:a8:81:a4:3b:28:81:70:e0:20:c7: 4e:98:86:21:10:18:36:5a:f6:79:e6:6c:c2:27:3b:4c:77:7b: 0f:1e:7f:be:1b:48:ea:b8:80:83:18:aa:ee:90:9e:b3:de:f7: 76:c9:6a:b9:23:3e:e8:1f:a9:c4:3e:71:9c:33:63:74:54:78: b7:22:52:58:75:b2:23:1f:87:ca:7f:93:76:1c:3c:e5:22:42: 20:59:31:fa:48:5e:e0:8b:45:8c:1b:4b:7c:56:13:a0:7d:d5: 01:a0:9e:90:d8:da:e2:55:d7:3d:83:bb:8c:d8:f2:3d:f3:c2: 0f:fb:f2:1d:14:b9:12:9e:06:91:56:d3:5c:9f:66:51:e6:12: 73:53:89:c6:09:84:71:99:42:41:0b:10:f9:66:82:c8:d1:bb: d9:ea:65:95:b3:5f:c4:3d:b1:ed:1a:2f:90:8e:2e:64:e7:b3: ce:4d:08:5c:91:ba:ca:b5:9a:0e:45:d8:bc:57:03:b2:95:bc: 54:0a:ef:98:6b:d9:71:b0:51:21:a0:d6:af:7a:e1:99:8f:5f: ac:1b:74:64:e5:24:4e:69:76:51:4a:40:34:e0:89:77:c0:1e: 33:fd:8e:72:6b:36:1e:6c:eb:bf:df:d8:bf:bb:7d:c9:44:d3: 52:d9:10:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f3qR7dmpNwrULAaG/nfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjUxMjIxMDYwMTE3WhcNMjUxMjIyMDYwMTE3WjAzMTEwLwYDVQQD EyhjNDljZTY1M2UwMzE4ODFjYjQwOWE0YzI2NzJiNzlmNGY3YzEzMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I+MguC2/Yg7U6sp4dvtKWj3W7Bo g0wjynqmPeICCAAyMzYYkpO3j1gGk1Uoo9UG+c8Qysoy01c3BZnHvFRA1Gp2/oZt Dp2wK0ybH/6lsUuavh2Sq/QrQham+5V+3ieB2DSQCRuHczgx2wJlOP3h4HauFhC1 N3aUz/kldCMMPi2h4YK65wSUzquZGwfenbBN0av9X4BlgunjcyEJp9umAdk/4MmF 40xBJbSXjx5hOJx5ezqeyhssIMSFDGHUSkcPEUrKOEYv9Qf856JknJHXHaFrhU3J 9+j9CKdMWlXZ7dINRTAqM9VSChuCqL0xYOWaJ7DGxpmr0JFm41WB0CHdIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSc5lPgMYgctAmkwmcrefT3wTM5MB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY163J8b G/aogaQ7KIFw4CDHTpiGIRAYNlr2eeZswic7THd7Dx5/vhtI6riAgxiq7pCes973 dslquSM+6B+pxD5xnDNjdFR4tyJSWHWyIx+Hyn+Tdhw85SJCIFkx+khe4ItFjBtL fFYToH3VAaCekNja4lXXPYO7jNjyPfPCD/vyHRS5Ep4GkVbTXJ9mUeYSc1OJxgmE cZlCQQsQ+WaCyNG72epllbNfxD2x7RovkI4uZOezzk0IXJG6yrWaDkXYvFcDspW8 VArvmGvZcbBRIaDWr3rhmY9frBt0ZOUkTml2UUpANOCJd8AeM/2Ocms2Hmzrv9/Y v7t9yUTTUtkQjA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:50:05 2025 by rpki-client