This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json) Hash identifier: SLxxXAYj2pXgtA+hrt4i8XLr9EELZmFnT5pSnJLETYk= Subject key identifier: 0B:DA:11:7F:DF:C5:D9:A2:A4:A2:D4:1F:8E:FE:A5:E8:16:91:E4:50 Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019AF0F5CD7F5A53DE1215DD62FEABA637F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft Manifest number: 32 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: ZYsoBGMwVduC-15rPBuElury6Nw.roa (hash: JY9tVJYutXSfQPNipmAaG+iP3ktsBCWu487gcbubKLw=) 2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: mUikgVBdXQfHGa8zirdXSc/0QEDryPHpP31MxzeDGLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cd:7f:5a:53:de:12:15:dd:62:fe:ab:a6:37:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=0bda117fdfc5d9a2a4a2d41f8efea5e81691e450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:30:71:e6:e0:70:52:19:15:45:d0:0e:c4: 29:5b:ee:71:0d:24:7d:07:34:d1:54:02:b0:7b:69: 60:a0:8e:38:cb:d3:20:2e:a2:19:48:fd:1c:d6:15: 38:cb:5b:10:96:4d:f0:74:78:a5:03:be:e4:4b:03: 35:d0:df:8b:9c:1b:93:b9:42:6d:fc:28:e3:3f:d5: 8c:83:34:9c:1a:de:a6:53:ec:f8:a5:66:69:82:1a: 1c:f8:de:b8:4e:ad:1f:ca:22:3b:be:0d:78:df:4d: 88:16:18:37:7f:ce:bf:d9:96:e6:17:f2:1e:9f:f6: bb:b2:2b:ac:90:81:d9:6c:92:11:55:91:f1:39:5c: 6d:11:07:63:26:d7:af:5f:4d:e5:45:16:87:f6:1a: f5:21:47:42:57:9d:26:3f:d4:20:2b:2a:9f:32:ed: 09:91:94:4e:c4:3f:a1:2a:8f:6f:70:7e:10:d6:9e: b5:80:52:8c:89:69:1a:b1:a8:6c:f4:fd:48:7c:1c: fc:3f:99:a8:fb:f9:1f:c0:91:46:ef:b2:be:3a:35: 43:e9:b4:9e:1c:bf:a7:20:86:9f:4c:7a:8f:32:47: 5b:b5:bf:6d:81:37:aa:76:1d:3b:32:73:24:2a:96: 9b:aa:3c:ce:64:8c:d7:85:68:be:46:2f:b7:d1:13: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:11:7F:DF:C5:D9:A2:A4:A2:D4:1F:8E:FE:A5:E8:16:91:E4:50 X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:aa:f6:ab:19:b1:33:2b:76:8f:06:43:a1:b2:d8:ec:b0:e6: 1d:4c:b6:59:20:aa:b2:55:c1:88:e3:aa:84:e3:0e:35:86:18: c7:47:fb:f4:3d:f7:83:3f:f0:72:1d:72:fb:90:bb:0c:38:c7: 70:18:5c:e9:95:b1:7e:9d:55:26:eb:6d:84:1f:d4:49:ad:45: e7:68:8c:fc:37:f5:de:42:7e:c3:30:5a:c1:89:c3:d6:96:cc: 68:8e:a1:2c:f9:85:1a:c9:ec:3b:2a:89:c0:17:a4:6c:0d:a1: 43:4b:5e:8b:bd:97:aa:9f:0a:df:d1:c2:65:78:eb:2d:9a:60: 15:bc:ac:9b:11:80:62:35:1a:ac:af:37:3e:bc:a3:02:ab:f9: 87:dc:72:be:24:16:f1:86:9b:6a:e2:4e:b0:17:f1:92:79:14: 09:35:43:fa:c9:0a:16:d9:f7:80:ae:06:22:c6:8c:75:fe:0e: f5:b6:d5:73:24:1a:bb:cc:b2:b2:8e:25:23:c6:36:d7:ec:45: 83:f8:86:82:ed:e0:60:77:ee:fc:c4:00:ef:4b:0e:7b:90:06: 47:9a:cd:d1:52:d0:fd:74:e0:c5:63:89:3b:be:fc:b8:83:5b: 6d:70:79:a9:e6:00:89:26:69:d9:62:d0:5b:44:75:b4:27:70: 3f:bd:44:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c1/WlPeEhXdYv6rpjfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EygwYmRhMTE3ZmRmYzVkOWEyYTRhMmQ0MWY4ZWZlYTVlODE2OTFlNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEAwcebgcFIZFUXQDsQpW+5xDSR9 BzTRVAKwe2lgoI44y9MgLqIZSP0c1hU4y1sQlk3wdHilA77kSwM10N+LnBuTuUJt /CjjP9WMgzScGt6mU+z4pWZpghoc+N64Tq0fyiI7vg14302IFhg3f86/2ZbmF/Ie n/a7siuskIHZbJIRVZHxOVxtEQdjJtevX03lRRaH9hr1IUdCV50mP9QgKyqfMu0J kZROxD+hKo9vcH4Q1p61gFKMiWkasahs9P1IfBz8P5mo+/kfwJFG77K+OjVD6bSe HL+nIIafTHqPMkdbtb9tgTeqdh07MnMkKpabqjzOZIzXhWi+Ri+30RMnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvaEX/fxdmipKLUH47+pegWkeRQMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiar2qxmx Myt2jwZDobLY7LDmHUy2WSCqslXBiOOqhOMONYYYx0f79D33gz/wch1y+5C7DDjH cBhc6ZWxfp1VJutthB/USa1F52iM/Df13kJ+wzBawYnD1pbMaI6hLPmFGsnsOyqJ wBekbA2hQ0tei72Xqp8K39HCZXjrLZpgFbysmxGAYjUarK83PryjAqv5h9xyviQW 8YabauJOsBfxknkUCTVD+skKFtn3gK4GIsaMdf4O9bbVcyQau8yyso4lI8Y21+xF g/iGgu3gYHfu/MQA70sOe5AGR5rN0VLQ/XTgxWOJO778uINbbXB5qeYAiSZp2WLQ W0R1tCdwP71E1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client