This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft File: oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json) Hash identifier: wVEI6kD5WbePlzldUA3sKfRFQxU6w8bkcppTxeTsZAI= Subject key identifier: DA:1D:51:EE:97:39:55:5C:41:61:86:05:0F:B7:41:E6:EA:7E:12:5D Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC Certificate issuer: /CN=a1208242656123c0c90b6168d09b2d8a67617bec Certificate serial: 019AF12E02F70C066565838750D72004DDA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: YAoUenHihT4DQlafryFUSek-9CM.roa (hash: U8ZmX/KGlPOXoWxEXiPpdG5cQfV6PXbF8uCn/cMmNEA=) 2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: Qq2GhSMDhKc9qAGyUckfI4OcQolNqwayOxUCoqvLLN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:02:f7:0c:06:65:65:83:87:50:d7:20:04:dd:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=da1d51ee9739555c416186050fb741e6ea7e125d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:a8:0e:2f:6b:67:67:d1:91:3b:95:db:3e: 2c:7d:96:d1:ae:64:bf:24:38:10:a5:0b:df:55:62: bd:54:2e:b3:38:67:a4:6e:a5:2f:92:62:72:12:19: a9:37:91:67:cc:79:ab:30:91:05:cf:5d:31:3b:ac: b4:d9:73:91:7b:f9:0a:8e:18:85:c3:7a:d4:63:a4: 04:89:d8:93:5c:0b:47:2a:99:7a:d4:5b:cd:83:8b: da:e2:84:60:24:5a:b2:b2:5a:68:03:b2:f5:5d:d1: 0f:ba:ac:d5:ed:d1:2b:5e:28:59:ec:f4:58:77:46: 47:9a:e4:0d:ec:51:31:bb:7d:03:31:2d:e8:f0:ad: 3a:82:cc:92:5c:fd:63:58:d5:01:ac:05:f7:b8:95: a0:22:46:3b:12:7c:83:6f:e2:f5:94:8b:0f:cc:59: 0a:bb:e1:8a:91:48:fa:f5:65:cb:46:c1:0a:72:e6: cd:b8:27:b3:09:2b:bc:ed:9d:e5:49:fa:0c:f8:4b: 5c:5b:84:84:0e:5e:90:62:77:c1:4e:9f:ad:b3:3d: b5:14:97:74:ee:95:43:44:fe:32:9d:3c:67:01:dd: f9:48:a6:a3:f6:28:79:87:84:d8:b5:2b:db:6b:04: 15:9f:0d:ae:8b:91:7b:fd:aa:f4:92:d6:3c:03:42: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1D:51:EE:97:39:55:5C:41:61:86:05:0F:B7:41:E6:EA:7E:12:5D X509v3 Authority Key Identifier: keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:b4:39:8e:85:94:71:21:c7:00:6d:ba:cc:4a:9f:80:09: 37:fb:75:a5:ed:d0:5d:14:e9:e3:83:05:9f:cd:ad:b4:d7:91: b5:2f:19:40:e8:49:be:46:a3:e2:20:42:7b:e9:b8:00:5a:d4: f8:d6:dd:1b:d0:f9:ad:18:b5:2a:bc:aa:da:5c:07:05:66:fb: 1b:3c:7c:46:e6:d5:d3:be:7c:03:52:4d:dc:dc:56:b2:b3:4d: e9:22:49:d7:2b:b5:75:60:b3:65:74:fe:5e:47:f3:e8:97:c8: 84:90:be:e0:44:26:bd:38:9e:53:0a:2f:8d:4f:1b:3a:ca:69: 61:a1:6d:1f:7c:e4:c3:76:2d:22:99:03:a1:9e:42:b6:c9:cf: 61:11:c1:dd:ba:42:7d:bf:1b:4d:fe:34:1a:7f:27:e0:d5:79: be:91:b5:ef:af:15:02:77:f5:41:f4:d0:8e:5b:33:97:28:32: 78:b5:4a:5e:3a:3d:db:80:fa:f0:29:df:5a:ac:63:69:6f:3e: 8f:be:4b:52:bd:17:83:3c:6b:f5:27:b2:80:de:ba:42:7b:ef: cb:04:b0:be:42:07:0e:cb:c5:29:71:de:d9:0d:4c:9c:bc:41: d0:f0:78:2b:db:32:b6:f5:fc:35:2b:99:d1:58:0d:46:79:d2: 0f:43:f6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgL3DAZlZYOHUNcgBN2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4MjQyNjU2MTIzYzBjOTBiNjE2OGQwOWIyZDhhNjc2 MTdiZWMwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EyhkYTFkNTFlZTk3Mzk1NTVjNDE2MTg2MDUwZmI3NDFlNmVhN2UxMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg6oDi9rZ2fRkTuV2z4sfZbRrmS/ JDgQpQvfVWK9VC6zOGekbqUvkmJyEhmpN5FnzHmrMJEFz10xO6y02XORe/kKjhiF w3rUY6QEidiTXAtHKpl61FvNg4va4oRgJFqyslpoA7L1XdEPuqzV7dErXihZ7PRY d0ZHmuQN7FExu30DMS3o8K06gsySXP1jWNUBrAX3uJWgIkY7EnyDb+L1lIsPzFkK u+GKkUj69WXLRsEKcubNuCezCSu87Z3lSfoM+EtcW4SEDl6QYnfBTp+tsz21FJd0 7pVDRP4ynTxnAd35SKaj9ih5h4TYtSvbawQVnw2ui5F7/ar0ktY8A0LVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNodUe6XOVVcQWGGBQ+3QebqfhJdMB8GA1UdIwQY MBaAFKEggkJlYSPAyQthaNCbLYpnYXvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDQ1FtVmhJOERKQzJGbzBKc3RpbWRoZS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iYWZjNGYtZDY0Yy00NDA0LTkyMmIt YWRhZmFhZDI3YWVhLzEvb1NDQ1FtVmhJOERKQzJGbzBKc3RpbWRoZS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9iYWZjNGYtZDY0Yy00NDA0LTkyMmItYWRhZmFhZDI3YWVh LzEvb1NDQ1FtVmhJOERKQzJGbzBKc3RpbWRoZS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiS0OY6F lHEhxwBtusxKn4AJN/t1pe3QXRTp44MFn82ttNeRtS8ZQOhJvkaj4iBCe+m4AFrU +NbdG9D5rRi1Kryq2lwHBWb7Gzx8RubV0758A1JN3NxWsrNN6SJJ1yu1dWCzZXT+ Xkfz6JfIhJC+4EQmvTieUwovjU8bOsppYaFtH3zkw3YtIpkDoZ5CtsnPYRHB3bpC fb8bTf40Gn8n4NV5vpG1768VAnf1QfTQjlszlygyeLVKXjo924D68CnfWqxjaW8+ j75LUr0Xgzxr9SeygN66QnvvywSwvkIHDsvFKXHe2Q1MnLxB0PB4K9sytvX8NSuZ 0VgNRnnSD0P2Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:51 2025 by rpki-client