This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json) Hash identifier: yBs4jMLc4AN7XJp2F7RhZxFYT5LAorAKUxO0qNr+hPA= Subject key identifier: 02:00:A2:85:88:44:85:2C:77:1D:DC:09:AB:9A:2D:2D:3E:A4:19:89 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019AF2ADC242764F126824620A77C0E67708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft Manifest number: 0B40 Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: 5zZrYH8O7nis-dqO-PSgPArwkbc.roa (hash: NdSLJTn0jtPND2RXMSjaEnJSSngo79NubRaezRYDprc=) 2: bREOai8G8_NHNyW5egygHYlKbVo.roa (hash: izOgPPSjI/SOnSj8uGxO2DGjcElibyhDV4NBvODzxHc=) 3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=) 4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: wPPr1KLoBwPfdsVw5tcBCLmDi7jxk1Ua5g/wVrRr6WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c2:42:76:4f:12:68:24:62:0a:77:c0:e6:77:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=0200a2858844852c771ddc09ab9a2d2d3ea41989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:f8:1d:e8:26:33:a3:ef:2a:22:80:4e:48: 06:75:38:60:4a:5c:96:7b:45:78:b0:77:f0:49:9d: 6b:2d:3f:60:9a:d8:38:a9:9d:44:51:79:dd:08:de: e7:39:f2:61:37:58:90:80:36:c1:98:16:d3:0d:a0: 7b:12:de:21:d2:5a:51:92:9d:79:27:eb:7b:de:9a: 84:a8:8b:fd:2d:c4:90:8f:53:a0:8b:59:b4:95:f7: e5:6a:1a:ad:78:fa:26:04:bf:eb:9a:88:1c:38:8c: 24:45:c9:51:04:e7:d1:fe:23:89:65:39:86:68:29: 0f:d3:c5:5e:5f:e9:0d:4d:bc:e6:c0:db:51:53:9d: df:fb:d6:d1:05:6f:1a:82:0a:77:4e:9d:66:ae:8b: 9a:2c:85:7e:6a:bc:ac:83:12:15:a2:fe:3f:a1:4d: 42:25:c4:fc:cc:5d:a8:9b:5e:61:5f:87:26:be:c3: f9:2b:bb:a6:3e:7c:12:9f:91:3a:eb:4c:27:85:4b: 14:c0:c4:23:f9:26:3a:e2:36:ef:5d:25:5a:f2:f4: bd:be:42:78:55:00:49:f9:8d:20:1f:7d:b8:5e:22: 38:de:97:bd:31:1f:81:39:31:af:59:87:ef:8f:d4: 4d:24:32:07:8f:8d:18:87:27:7e:19:de:5a:87:d8: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:A2:85:88:44:85:2C:77:1D:DC:09:AB:9A:2D:2D:3E:A4:19:89 X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1d:5b:3d:d7:ad:3d:a5:84:80:81:0f:ec:b1:ae:4b:0a:a0: ca:20:86:27:a5:f0:16:53:70:33:bd:2a:56:7e:45:f1:e3:f1: e5:2f:f0:3a:7c:1e:4c:69:b6:a4:f0:fb:03:ff:52:e4:dc:cb: 56:0c:21:94:d7:68:fa:08:57:bc:34:e4:3c:e9:a6:35:0d:7f: b8:10:fa:81:db:05:d0:e4:d0:f5:c9:02:df:57:d6:37:7e:dc: 74:ad:94:32:d7:23:25:f3:27:b4:dd:44:01:fb:5c:58:a1:ff: 39:f9:0f:3f:cc:c4:de:71:8d:99:e9:aa:fc:e3:d1:de:08:cb: 77:0d:77:20:d5:09:9b:de:21:bf:74:a9:50:26:a7:4a:05:9c: 8f:40:7a:4c:69:0b:78:7c:5c:80:28:4f:d9:f7:5e:0e:f0:e6: 36:56:fe:87:fd:50:4e:fe:84:2d:68:28:91:7f:eb:ac:f1:63: a0:c3:fd:f6:ef:cd:ee:b7:12:2f:f9:91:65:0f:5a:1e:df:59: 89:10:76:05:54:85:7c:74:54:85:e7:ec:ca:52:67:6e:1c:39: 88:bc:29:b3:95:3e:83:d4:8a:e5:6c:9b:3d:9a:af:52:b7:a9: 23:20:88:af:92:de:06:81:4c:ce:b1:0f:8b:4d:7a:ee:fc:65: 54:80:16:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcJCdk8SaCRiCnfA5ncIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EygwMjAwYTI4NTg4NDQ4NTJjNzcxZGRjMDlhYjlhMmQyZDNlYTQxOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE34HegmM6PvKiKATkgGdThgSlyW e0V4sHfwSZ1rLT9gmtg4qZ1EUXndCN7nOfJhN1iQgDbBmBbTDaB7Et4h0lpRkp15 J+t73pqEqIv9LcSQj1Ogi1m0lfflahqtePomBL/rmogcOIwkRclRBOfR/iOJZTmG aCkP08VeX+kNTbzmwNtRU53f+9bRBW8aggp3Tp1mrouaLIV+arysgxIVov4/oU1C JcT8zF2om15hX4cmvsP5K7umPnwSn5E660wnhUsUwMQj+SY64jbvXSVa8vS9vkJ4 VQBJ+Y0gH324XiI43pe9MR+BOTGvWYfvj9RNJDIHj40Yhyd+Gd5ah9iwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIAooWIRIUsdx3cCauaLS0+pBmJMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB1bPdet PaWEgIEP7LGuSwqgyiCGJ6XwFlNwM70qVn5F8ePx5S/wOnweTGm2pPD7A/9S5NzL VgwhlNdo+ghXvDTkPOmmNQ1/uBD6gdsF0OTQ9ckC31fWN37cdK2UMtcjJfMntN1E AftcWKH/OfkPP8zE3nGNmemq/OPR3gjLdw13INUJm94hv3SpUCanSgWcj0B6TGkL eHxcgChP2fdeDvDmNlb+h/1QTv6ELWgokX/rrPFjoMP99u/N7rcSL/mRZQ9aHt9Z iRB2BVSFfHRUhefsylJnbhw5iLwps5U+g9SK5WybPZqvUrepIyCIr5LeBoFMzrEP i0167vxlVIAWKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:25 2025 by rpki-client