This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json) Hash identifier: 5g496xjd7UfUarvm7MZzYRr4Tm+d0WU5WR+h57FzhaY= Subject key identifier: 8E:55:18:31:DA:54:A4:67:00:C8:16:61:BB:73:E5:3D:11:63:73:F1 Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019AF42E6EDAA9CA90B38EAC7FBFAE300D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft Manifest number: 0B77 Signing time: Sat 06 Dec 2025 15:01:14 +0000 Manifest this update: Sat 06 Dec 2025 15:01:14 +0000 Manifest next update: Sun 07 Dec 2025 15:01:14 +0000 Files and hashes: 1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=) 2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=) 3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=) 4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=) 5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: 8BWyzgIFBynvgkPBnnREOtxk1FRLCx+FgVGJaR9Jflw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6e:da:a9:ca:90:b3:8e:ac:7f:bf:ae:30:0d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Dec 6 15:01:14 2025 GMT Not After : Dec 7 15:01:14 2025 GMT Subject: CN=8e551831da54a46700c81661bb73e53d116373f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:6e:73:d7:cd:40:99:11:1d:7c:b7:78:b1: c5:95:f5:1f:3d:bd:b4:79:6e:70:a1:db:2d:44:c4: 1f:90:27:54:e4:8c:df:57:a7:27:88:1d:ce:cd:5d: 78:70:ec:84:47:0a:ff:9e:81:1b:e1:d1:29:d0:6c: b9:70:12:88:41:09:43:b4:8f:ce:2c:f1:d3:03:5c: 9b:7c:83:ce:16:95:a2:5d:b3:3b:25:35:45:2f:f5: e5:78:c1:16:36:9b:23:75:b7:96:32:ef:bf:75:a1: 34:c5:5b:f7:77:c2:05:f0:df:f3:ec:45:f3:9c:46: 31:4e:03:2b:3f:3b:7e:56:b4:82:dd:17:18:19:55: d4:80:c5:bc:51:21:ba:06:d4:cf:92:d6:83:89:46: 31:07:73:a3:e4:e0:47:fb:a8:82:31:f9:b8:a6:68: 4d:48:4a:f9:1f:65:c4:51:ae:58:84:4a:60:1f:3f: 65:a4:9d:e9:bb:34:25:27:88:de:7c:30:7a:06:76: 31:9b:90:81:d4:20:95:8a:e6:02:9d:05:95:01:ac: 59:25:0c:cd:cf:c7:72:1e:74:a7:ef:a3:b2:30:5c: 37:74:1a:55:4c:81:a5:60:d0:8e:f6:b6:0d:91:e0: 26:9e:8e:63:f9:55:69:71:69:51:8b:06:06:71:f6: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:18:31:DA:54:A4:67:00:C8:16:61:BB:73:E5:3D:11:63:73:F1 X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:18:1a:30:9b:f4:e7:c1:13:13:14:5f:a3:0a:ce:46:a8:75: 2b:fb:ef:ae:48:4a:55:5d:74:57:ba:46:09:dc:62:60:a1:17: d5:89:fa:98:45:1f:f8:85:5f:3c:54:7d:92:43:8b:b2:7b:0a: 92:21:d5:ff:67:93:92:1d:c6:1b:77:c9:7c:69:3d:78:e3:28: e4:33:61:0c:61:06:ad:7c:fb:71:77:e0:a6:e4:9b:37:f3:f0: f7:18:d1:bb:4c:23:2b:04:c8:4e:df:ef:bb:d6:03:6d:ad:29: e4:4c:db:e7:31:80:83:39:55:a1:43:2c:33:a9:81:8d:8c:90: 22:c8:a1:f7:e4:16:91:c9:95:40:0d:88:13:90:71:c7:ea:04: 23:a8:dd:10:5d:84:23:76:8d:71:79:4f:06:42:60:83:5a:7b: 73:9d:49:01:c9:e4:54:80:5d:ed:ba:3f:86:72:fa:a5:0b:05: 33:c1:ee:d9:40:95:93:0c:3b:28:42:5a:f9:f7:68:2c:d1:97: 2a:46:aa:c2:52:7e:7a:ec:7e:6d:85:ea:4e:29:5b:25:4c:20: c2:7b:03:b8:ee:db:96:67:07:52:7b:b3:5b:d0:6e:1d:ad:56: 60:83:fe:e1:dd:45:61:a3:78:aa:79:9d:53:52:b3:f9:82:b8: 08:50:43:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lm7aqcqQs46sf7+uMA1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjUxMjA2MTUwMTE0WhcNMjUxMjA3MTUwMTE0WjAzMTEwLwYDVQQD Eyg4ZTU1MTgzMWRhNTRhNDY3MDBjODE2NjFiYjczZTUzZDExNjM3M2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaluc9fNQJkRHXy3eLHFlfUfPb20 eW5wodstRMQfkCdU5IzfV6cniB3OzV14cOyERwr/noEb4dEp0Gy5cBKIQQlDtI/O LPHTA1ybfIPOFpWiXbM7JTVFL/XleMEWNpsjdbeWMu+/daE0xVv3d8IF8N/z7EXz nEYxTgMrPzt+VrSC3RcYGVXUgMW8USG6BtTPktaDiUYxB3Oj5OBH+6iCMfm4pmhN SEr5H2XEUa5YhEpgHz9lpJ3puzQlJ4jefDB6BnYxm5CB1CCViuYCnQWVAaxZJQzN z8dyHnSn76OyMFw3dBpVTIGlYNCO9rYNkeAmno5j+VVpcWlRiwYGcfadrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5VGDHaVKRnAMgWYbtz5T0RY3PxMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRgaMJv0 58ETExRfowrORqh1K/vvrkhKVV10V7pGCdxiYKEX1Yn6mEUf+IVfPFR9kkOLsnsK kiHV/2eTkh3GG3fJfGk9eOMo5DNhDGEGrXz7cXfgpuSbN/Pw9xjRu0wjKwTITt/v u9YDba0p5Ezb5zGAgzlVoUMsM6mBjYyQIsih9+QWkcmVQA2IE5Bxx+oEI6jdEF2E I3aNcXlPBkJgg1p7c51JAcnkVIBd7bo/hnL6pQsFM8Hu2UCVkww7KEJa+fdoLNGX KkaqwlJ+eux+bYXqTilbJUwgwnsDuO7blmcHUnuzW9BuHa1WYIP+4d1FYaN4qnmd U1Kz+YK4CFBDfA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:17 2025 by rpki-client