This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json) Hash identifier: FW6zRe3ONhm0dMyaRH2JJblra2r0vAIyefTGiWWzA8I= Subject key identifier: 09:81:67:9E:F4:7E:A4:34:EA:7D:4F:A9:C1:BE:B4:15:F7:1C:B4:A5 Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63 Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163 Certificate serial: 019AF31B96533C649A943A7F063F0353C22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=) 2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: 2amJpcErcUm9VuT20r074Cqj1q4cE/eeXJeMRfOZa+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:96:53:3c:64:9a:94:3a:7f:06:3f:03:53:c2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=0981679ef47ea434ea7d4fa9c1beb415f71cb4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:67:66:11:39:3e:80:be:f5:ea:59:70:c1: 94:87:01:1f:b7:7e:b9:8c:cc:2d:c8:c1:57:d8:fd: ef:21:9d:92:6c:49:51:e9:22:3f:60:66:4b:35:97: 0a:2f:07:2a:18:d5:a7:5c:cf:0b:55:32:2c:bd:43: c1:37:69:b7:7f:5b:99:14:9c:4b:11:14:ea:a8:81: ae:7f:bf:5e:88:3a:54:97:16:a5:e6:a5:9e:af:94: c4:b7:22:ed:c8:18:d2:6b:79:de:2f:be:ca:03:77: 16:90:96:5e:88:c5:55:c4:1e:2c:b3:d2:ca:9f:1a: 2e:61:3d:59:33:d0:b9:11:56:a5:a7:e2:8d:f6:4c: 82:c9:da:92:52:1a:18:2f:18:ca:66:71:42:50:b2: be:a2:53:17:d2:d6:b0:76:60:93:99:4d:e8:bb:de: 13:1c:1d:cb:be:6c:41:24:17:e2:d4:57:9c:4b:2e: a5:ed:fa:79:2a:b1:8b:3c:b1:22:cf:c9:28:04:84: a7:af:2b:e9:32:5c:c6:57:fe:f0:3f:37:bc:f5:ff: 3c:51:02:55:62:98:be:e3:37:bc:3c:26:5a:4c:59: bf:30:fc:51:26:11:15:b2:5c:16:78:fd:52:4e:20: 46:73:bd:f5:61:1b:84:27:a1:3f:ee:86:d3:a3:40: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:67:9E:F4:7E:A4:34:EA:7D:4F:A9:C1:BE:B4:15:F7:1C:B4:A5 X509v3 Authority Key Identifier: keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:18:0a:4c:27:28:91:c9:d0:da:c7:cf:de:fc:77:05:22:88: 7a:e7:1c:ea:05:54:23:f9:34:48:4a:4a:e4:63:45:55:29:ef: d7:11:19:2a:79:85:f9:94:11:8b:39:f4:19:5d:b0:b8:57:35: cd:29:9a:c5:dc:e0:02:12:a4:89:f2:fa:a1:52:2c:c5:50:bb: f4:96:23:5c:af:90:62:56:15:9c:4c:47:f0:ea:70:dc:3d:82: 72:75:c1:ae:d7:0c:4e:eb:b5:11:2a:5b:d3:10:35:ba:73:38: 6a:40:93:54:8b:e4:d6:88:c8:22:ed:35:93:6f:2c:5b:70:4f: 1a:06:e1:50:ba:35:af:b7:b5:7c:ef:76:73:5b:b3:34:00:78: 22:ae:1d:03:81:c1:aa:5a:cc:b8:f5:6e:b4:33:08:a9:13:12: 28:95:a4:75:a9:c7:2f:0b:e6:6f:a2:7c:8f:97:e9:d5:82:91: 30:a2:9d:25:c5:cd:6b:23:51:63:86:7e:e8:c6:fc:62:45:f8: d0:c9:96:37:8d:0a:38:28:26:93:db:cd:17:be:35:5e:69:6b: ab:85:5b:59:eb:33:d1:b8:5b:8d:7e:97:a7:8a:b1:e9:5a:b4: 45:60:a6:ab:a2:28:e7:e3:a1:71:c0:ca:89:43:ec:c8:0b:4c: 09:6a:e8:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5ZTPGSalDp/Bj8DU8IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZjI3ZDRmMDY3NjE0YmNiYzI3MDM0NmZhMGQ0NGIxNWY4 MDUxNjMwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EygwOTgxNjc5ZWY0N2VhNDM0ZWE3ZDRmYTljMWJlYjQxNWY3MWNiNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIFnZhE5PoC+9epZcMGUhwEft365 jMwtyMFX2P3vIZ2SbElR6SI/YGZLNZcKLwcqGNWnXM8LVTIsvUPBN2m3f1uZFJxL ERTqqIGuf79eiDpUlxal5qWer5TEtyLtyBjSa3neL77KA3cWkJZeiMVVxB4ss9LK nxouYT1ZM9C5EValp+KN9kyCydqSUhoYLxjKZnFCULK+olMX0tawdmCTmU3ou94T HB3LvmxBJBfi1FecSy6l7fp5KrGLPLEiz8koBISnryvpMlzGV/7wPze89f88UQJV Ypi+4ze8PCZaTFm/MPxRJhEVslwWeP1STiBGc731YRuEJ6E/7obTo0AZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmBZ570fqQ06n1PqcG+tBX3HLSlMB8GA1UdIwQY MBaAFKDyfU8GdhS8vCcDRvoNRLFfgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTIt OTM2NTk4ZTAwY2ZlLzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTItOTM2NTk4ZTAwY2Zl LzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhgKTCco kcnQ2sfP3vx3BSKIeucc6gVUI/k0SEpK5GNFVSnv1xEZKnmF+ZQRizn0GV2wuFc1 zSmaxdzgAhKkifL6oVIsxVC79JYjXK+QYlYVnExH8Opw3D2CcnXBrtcMTuu1ESpb 0xA1unM4akCTVIvk1ojIIu01k28sW3BPGgbhULo1r7e1fO92c1uzNAB4Iq4dA4HB qlrMuPVutDMIqRMSKJWkdanHLwvmb6J8j5fp1YKRMKKdJcXNayNRY4Z+6Mb8YkX4 0MmWN40KOCgmk9vNF741Xmlrq4VbWesz0bhbjX6Xp4qx6Vq0RWCmq6Io5+OhccDK iUPsyAtMCWroug== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:13 2025 by rpki-client