This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json) Hash identifier: mzLo5OaU6xg3vs95MVpr4zacT/OOrKDZimrbjpjy4zU= Subject key identifier: 36:53:49:E8:5C:F4:5B:E3:04:F2:55:CB:B4:4C:1C:0A:01:E1:EC:BE Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db Certificate serial: 019AF19B3ECEF2B601043D0A4BBEA5BAE87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=) 2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=) 3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: pne5VhgDK+QDc8oxnfpq3dU2o61H1OMaFaVT+ruL2sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3e:ce:f2:b6:01:04:3d:0a:4b:be:a5:ba:e8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=365349e85cf45be304f255cbb44c1c0a01e1ecbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:4d:1a:1a:57:f4:bb:56:44:3c:63:47:c4: 45:87:92:1b:6f:0f:67:c0:74:2b:4d:25:15:eb:48: c2:57:12:fc:ad:07:81:8a:59:ac:d7:6a:eb:a5:78: a3:15:5d:c0:64:88:24:0a:a9:c8:79:ce:73:cd:4f: 21:4e:aa:45:15:75:2c:6c:fa:8f:04:0d:51:0f:7c: 03:98:2e:57:aa:59:43:77:9a:3f:98:9d:30:93:42: 80:6e:83:a3:e9:39:5e:c5:27:17:53:c9:c9:e6:30: 23:c9:3c:b3:83:2b:6e:4b:cc:24:17:4d:f6:3c:46: 33:c3:e1:6a:26:c2:48:46:d2:cc:4d:05:c1:44:96: 1f:bd:88:0a:c7:b7:0c:a5:b5:42:c5:c8:db:a6:88: e4:42:8a:e4:61:f7:6f:ba:78:83:b4:ba:e5:c3:e2: 79:6d:a7:41:46:a2:64:aa:10:78:7b:5b:0a:72:ba: 42:50:2d:14:54:bd:f4:de:46:92:fb:9a:a9:d5:58: 50:49:2e:0b:2f:4d:1e:03:ae:f4:1a:60:64:25:be: 42:90:11:bb:29:22:d8:7b:20:c0:f5:78:e2:db:bd: 19:7a:59:2d:34:bb:ee:c2:0a:d9:aa:b8:4a:4e:b9: 56:8e:4e:88:9e:be:f8:6a:0d:cb:89:a0:0a:24:b2: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:49:E8:5C:F4:5B:E3:04:F2:55:CB:B4:4C:1C:0A:01:E1:EC:BE X509v3 Authority Key Identifier: keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f7:fb:15:0e:21:ca:40:5d:fc:57:01:f3:1e:40:78:ab:9e: ac:f5:cb:77:58:99:4a:03:c4:4e:4b:26:9b:f2:91:e9:f9:e3: e6:8a:9c:06:cd:b7:62:85:9a:e6:08:cb:ce:b3:14:62:66:ef: 3f:82:e5:d7:f0:ff:0d:2d:71:59:3d:4d:fc:05:29:e1:02:35: ec:6f:70:1c:4a:3b:63:b0:db:a4:18:50:1c:55:90:61:aa:2f: a5:ce:50:2b:fb:ec:0b:51:47:aa:31:fd:c3:2b:43:fb:e8:08: 76:31:84:cb:da:da:bc:2a:3d:66:a2:45:cf:5e:d3:fd:4e:ec: 2f:3b:fb:8b:6f:08:5b:d9:31:9a:fe:46:f1:83:6f:55:6b:6b: 9b:da:51:3b:71:de:21:d8:f7:34:cd:ab:d3:e0:00:b9:bc:b6: 34:bb:20:2a:e4:7b:2c:e0:7c:1c:46:7d:8d:a4:c1:4f:95:9a: 88:b2:47:e1:57:86:7b:da:7b:24:c2:bb:7c:ad:5c:d1:b3:4f: b8:fd:dc:45:c8:7f:6f:77:f1:9b:9a:d3:40:f6:6e:f8:1e:9a: 81:ef:9c:2e:24:63:63:68:98:01:81:3b:e1:65:8b:80:12:26: 72:b4:19:df:ec:64:31:82:4e:03:ca:2c:ab:e6:c9:22:24:74: f1:09:f1:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz7O8rYBBD0KS76luuh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2EwMjU4YTUyMWU5OWQyMTNmYjMwZTc5NjY3ZTU4NGUz N2M3ZGIwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EygzNjUzNDllODVjZjQ1YmUzMDRmMjU1Y2JiNDRjMWMwYTAxZTFlY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhNGhpX9LtWRDxjR8RFh5Ibbw9n wHQrTSUV60jCVxL8rQeBilms12rrpXijFV3AZIgkCqnIec5zzU8hTqpFFXUsbPqP BA1RD3wDmC5XqllDd5o/mJ0wk0KAboOj6TlexScXU8nJ5jAjyTyzgytuS8wkF032 PEYzw+FqJsJIRtLMTQXBRJYfvYgKx7cMpbVCxcjbpojkQorkYfdvuniDtLrlw+J5 badBRqJkqhB4e1sKcrpCUC0UVL303kaS+5qp1VhQSS4LL00eA670GmBkJb5CkBG7 KSLYeyDA9Xji270ZelktNLvuwgrZqrhKTrlWjk6Inr74ag3LiaAKJLLI/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZTSehc9FvjBPJVy7RMHAoB4ey+MB8GA1UdIwQY MBaAFL96AlilIemdIT+zDnlmflhON8fbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgt YjUzOWQ2Y2VhNmUxLzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgtYjUzOWQ2Y2VhNmUx LzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvf7FQ4h ykBd/FcB8x5AeKuerPXLd1iZSgPETksmm/KR6fnj5oqcBs23YoWa5gjLzrMUYmbv P4Ll1/D/DS1xWT1N/AUp4QI17G9wHEo7Y7DbpBhQHFWQYaovpc5QK/vsC1FHqjH9 wytD++gIdjGEy9ravCo9ZqJFz17T/U7sLzv7i28IW9kxmv5G8YNvVWtrm9pRO3He Idj3NM2r0+AAuby2NLsgKuR7LOB8HEZ9jaTBT5WaiLJH4VeGe9p7JMK7fK1c0bNP uP3cRch/b3fxm5rTQPZu+B6age+cLiRjY2iYAYE74WWLgBImcrQZ3+xkMYJOA8os q+bJIiR08Qnxww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:25 2025 by rpki-client