This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json) Hash identifier: b4xbucMPddQJRR1K64P5FRwMQL/cMKUlm/31mEoDqbc= Subject key identifier: CD:06:5B:B1:F6:7B:92:06:94:31:CC:BC:AD:A8:CE:D4:63:22:CB:BC Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Certificate serial: 019AF0F5E2589CD9DFF8FB3ACE1276FB6727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=) 2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: evZH8FoRfoS5fZiCCVmsCIX6ov7mh9jVI9aBkTAWou8=) 3: vsChqdV9QNAz7EayVZoIHMnjpWg.roa (hash: r1XMRe1nj9DOTDD7unw3r1JUhLy1Jx4/fx70JvzsGIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e2:58:9c:d9:df:f8:fb:3a:ce:12:76:fb:67:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=cd065bb1f67b92069431ccbcada8ced46322cbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:fe:e2:36:73:ef:4a:27:8c:73:33:3e:2a: 1c:b9:c0:f5:d5:59:1e:15:80:ff:03:ae:c6:2a:90: b4:92:b3:ee:e4:d7:1b:b2:cf:82:a9:27:17:de:d3: 00:f7:f6:01:c4:19:84:71:8b:02:0a:87:18:bb:20: e8:89:a1:cb:78:36:50:24:18:43:37:d2:29:79:a1: d1:ce:50:72:bf:27:85:de:13:77:32:60:39:5f:44: 9d:c5:72:82:a2:ee:b1:ba:cd:14:11:ab:4d:b0:e0: 42:2c:b8:2e:75:5e:07:7e:3f:c2:d4:16:ed:13:72: d2:dc:73:b9:87:b0:13:52:68:1e:b7:99:91:81:38: e3:e7:87:bf:5f:b9:7e:01:0a:85:fb:ab:d2:e5:95: c0:12:ad:07:12:d6:58:2b:64:5d:1e:47:cd:70:e9: 37:9a:c0:29:4e:c3:2d:51:b8:03:f2:96:82:08:ab: 40:55:20:16:a6:4a:fa:72:72:29:49:98:3e:7c:d5: 50:be:98:68:17:f1:66:00:b5:d3:89:6c:9c:f9:a4: 85:8b:88:59:98:57:24:74:f7:41:fe:c8:65:4e:fa: 22:74:80:24:2a:26:6b:c7:bc:84:63:b5:3d:10:47: 31:b2:1f:0d:b7:3d:3a:e5:c4:ad:f1:36:71:38:35: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:06:5B:B1:F6:7B:92:06:94:31:CC:BC:AD:A8:CE:D4:63:22:CB:BC X509v3 Authority Key Identifier: keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6b:3b:10:77:20:48:26:8e:d7:9d:a0:11:30:c2:c9:e4:46: 9e:d4:92:77:19:83:22:74:45:c0:1c:4a:91:ec:c1:63:02:7c: 60:9b:b9:b8:0e:28:0c:d9:4a:2e:b7:fc:5c:b8:7e:d3:c6:19: 84:7b:86:ab:6e:4b:62:29:b4:7d:04:b4:8a:65:92:a4:94:69: 98:d6:39:97:26:86:ab:b8:c4:84:47:0b:39:da:e4:7a:e3:46: 4a:3c:98:9b:44:d8:19:b2:22:ed:17:fb:ae:cb:35:74:de:14: eb:98:47:7a:ba:a2:7c:b2:ea:5a:11:b0:5a:3f:ee:17:da:5e: d4:e5:56:84:54:79:b5:0b:08:dc:8b:21:30:8b:28:4d:d0:7f: 67:db:0d:4d:dc:e9:ef:eb:fa:bc:8b:66:c3:bc:c9:bd:dd:2b: 25:d0:e3:e2:24:d5:17:c0:a9:02:7b:50:9c:e8:74:ec:84:73: 38:4a:4c:95:78:41:3e:a5:46:ad:37:01:c6:04:95:80:63:de: ff:ee:b7:b9:b1:4c:57:a1:de:98:9d:a4:a1:44:44:8e:9c:2b: 2e:5d:a3:b2:b2:f3:61:43:7c:b1:e5:c7:30:83:96:5a:7b:71: d8:69:61:d5:61:13:4f:87:43:df:3b:d9:04:5b:f6:11:8e:53: 28:ab:f5:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eJYnNnf+Ps6zhJ2+2cnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2 NTBkZGMwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EyhjZDA2NWJiMWY2N2I5MjA2OTQzMWNjYmNhZGE4Y2VkNDYzMjJjYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP7+4jZz70onjHMzPiocucD11Vke FYD/A67GKpC0krPu5Ncbss+CqScX3tMA9/YBxBmEcYsCCocYuyDoiaHLeDZQJBhD N9IpeaHRzlByvyeF3hN3MmA5X0SdxXKCou6xus0UEatNsOBCLLgudV4Hfj/C1Bbt E3LS3HO5h7ATUmget5mRgTjj54e/X7l+AQqF+6vS5ZXAEq0HEtZYK2RdHkfNcOk3 msApTsMtUbgD8paCCKtAVSAWpkr6cnIpSZg+fNVQvphoF/FmALXTiWyc+aSFi4hZ mFckdPdB/shlTvoidIAkKiZrx7yEY7U9EEcxsh8Ntz065cSt8TZxODU/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0GW7H2e5IGlDHMvK2oztRjIsu8MB8GA1UdIwQY MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWs7EHcg SCaO152gETDCyeRGntSSdxmDInRFwBxKkezBYwJ8YJu5uA4oDNlKLrf8XLh+08YZ hHuGq25LYim0fQS0imWSpJRpmNY5lyaGq7jEhEcLOdrkeuNGSjyYm0TYGbIi7Rf7 rss1dN4U65hHerqifLLqWhGwWj/uF9pe1OVWhFR5tQsI3IshMIsoTdB/Z9sNTdzp 7+v6vItmw7zJvd0rJdDj4iTVF8CpAntQnOh07IRzOEpMlXhBPqVGrTcBxgSVgGPe /+63ubFMV6HemJ2koUREjpwrLl2jsrLzYUN8seXHMIOWWntx2Glh1WETT4dD3zvZ BFv2EY5TKKv19g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:53 2025 by rpki-client