This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json) Hash identifier: CC6FbM0DgDBXlYbOk45k3mCrzCSwvYNWbrqSFU4hl8c= Subject key identifier: 05:5D:73:B4:00:DE:7F:79:89:A6:CA:61:7F:41:89:FA:6E:51:D7:D7 Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a Certificate serial: 019AF0BF9FC21C24AFF12E9580D836BE5471 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft Manifest number: 0F8F Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=) 2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=) 3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: 9TcwEIRNDQTJfwFUW8hAtRHfLfNDxZ2pkT2AvHgWGAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9f:c2:1c:24:af:f1:2e:95:80:d8:36:be:54:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=055d73b400de7f7989a6ca617f4189fa6e51d7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:f5:b1:fa:f1:27:8c:14:2e:14:80:d5:35: 97:86:cf:8e:c0:13:87:45:a4:7b:99:54:53:d6:99: 01:3b:be:2a:cf:09:af:35:0e:61:5b:3d:d5:ba:50: 12:f4:c1:9b:c3:f0:22:82:39:d0:23:e9:fb:a6:b9: 69:c5:86:6f:28:77:3e:d3:93:fa:e6:a9:70:bf:ea: 68:b2:0d:3b:f6:44:88:f7:f2:62:1a:6c:1a:f9:79: 90:10:d8:3f:b4:1e:90:c2:95:4d:02:77:e3:aa:a1: 33:fa:33:6b:23:15:5f:49:2d:92:ce:fb:f7:59:cc: e1:6d:10:e7:23:e1:bd:fb:9b:1a:11:df:a2:aa:24: d9:b0:bc:ed:b3:f5:6f:98:2e:19:18:91:2f:19:17: 19:b4:0a:70:7c:7e:36:09:91:70:b5:a6:1b:70:19: e7:ea:a9:c7:97:29:72:fa:66:e8:cb:9d:0f:ef:10: 59:14:7c:af:bc:ce:01:c5:90:e3:00:0f:cf:c8:bb: 48:8e:97:84:dd:dc:32:e0:a5:3c:ce:ea:22:b9:cc: fc:e6:b7:b3:52:a9:a8:5d:b3:84:38:96:3e:a2:e9: 3b:db:20:2d:fa:e2:0e:b7:7e:b5:32:c3:91:22:b9: 31:fd:69:05:9e:b2:16:dd:46:36:40:e3:c2:07:ca: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5D:73:B4:00:DE:7F:79:89:A6:CA:61:7F:41:89:FA:6E:51:D7:D7 X509v3 Authority Key Identifier: keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f5:c8:2f:93:96:6d:ec:97:dc:70:cb:c5:17:09:72:f4:32: e4:ef:11:a5:6f:56:82:04:7e:f3:6d:11:d4:9c:d6:27:04:b0: 45:fc:c8:62:0b:4e:f3:db:92:f3:af:9d:6f:2e:cb:bb:45:75: aa:b3:6f:0b:07:7c:f5:69:b0:1c:ff:c6:5b:a6:d7:d3:f5:0e: ef:5a:ca:27:85:30:ae:6b:19:60:06:98:08:ed:1e:e4:65:13: 48:2a:d5:ae:bc:30:99:64:d7:6c:53:90:01:25:f1:62:6a:14: c4:86:d6:c6:57:a5:f7:f7:37:d3:b2:9e:bc:66:96:e5:fc:d7: cb:33:42:c4:4a:ff:1f:36:68:d1:f1:4e:97:76:fb:18:43:97: aa:fe:c3:df:30:b4:81:d4:0f:9e:0e:9e:8a:39:d0:04:76:67: a0:b6:51:ab:17:bd:e6:6d:82:56:02:4e:af:7e:57:cd:40:20: fe:81:76:c3:60:f3:0e:cb:7b:8f:c7:ab:28:b1:13:03:64:fe: 17:c2:4d:75:1a:9f:86:5d:25:01:86:65:75:ad:f9:4d:66:fc: fd:ee:bd:68:5a:8c:21:3b:3f:85:2c:60:a1:c0:45:c7:69:94: c3:15:fd:cb:f6:4f:e7:f1:bd:32:d0:53:be:79:30:23:f1:b8: 32:26:05:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5/CHCSv8S6VgNg2vlRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi NWM1OWEwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EygwNTVkNzNiNDAwZGU3Zjc5ODlhNmNhNjE3ZjQxODlmYTZlNTFkN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmX1sfrxJ4wULhSA1TWXhs+OwBOH RaR7mVRT1pkBO74qzwmvNQ5hWz3VulAS9MGbw/AigjnQI+n7prlpxYZvKHc+05P6 5qlwv+posg079kSI9/JiGmwa+XmQENg/tB6QwpVNAnfjqqEz+jNrIxVfSS2Szvv3 WczhbRDnI+G9+5saEd+iqiTZsLzts/VvmC4ZGJEvGRcZtApwfH42CZFwtaYbcBnn 6qnHlyly+mboy50P7xBZFHyvvM4BxZDjAA/PyLtIjpeE3dwy4KU8zuoiucz85rez UqmoXbOEOJY+ouk72yAt+uIOt361MsORIrkx/WkFnrIW3UY2QOPCB8oBLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVdc7QA3n95iabKYX9BifpuUdfXMB8GA1UdIwQY MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt OWY0NDI5ZjMzODFlLzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfXIL5OW beyX3HDLxRcJcvQy5O8RpW9WggR+820R1JzWJwSwRfzIYgtO89uS86+dby7Lu0V1 qrNvCwd89WmwHP/GW6bX0/UO71rKJ4UwrmsZYAaYCO0e5GUTSCrVrrwwmWTXbFOQ ASXxYmoUxIbWxlel9/c307KevGaW5fzXyzNCxEr/HzZo0fFOl3b7GEOXqv7D3zC0 gdQPng6eijnQBHZnoLZRqxe95m2CVgJOr35XzUAg/oF2w2DzDst7j8erKLETA2T+ F8JNdRqfhl0lAYZlda35TWb8/e69aFqMITs/hSxgocBFx2mUwxX9y/ZP5/G9MtBT vnkwI/G4MiYFeg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:07 2025 by rpki-client