This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json) Hash identifier: e3s0wGJZhagewTcTLzmY0ekvq9jeKy+ezq+1+s6TWOo= Subject key identifier: BB:54:05:BF:05:A0:72:82:5B:82:3D:36:B9:97:C5:89:9D:2A:0C:46 Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019AF61CA093A6F8D1564FEC0ED33D2F7930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft Manifest number: 0B78 Signing time: Sun 07 Dec 2025 00:01:02 +0000 Manifest this update: Sun 07 Dec 2025 00:01:02 +0000 Manifest next update: Mon 08 Dec 2025 00:01:02 +0000 Files and hashes: 1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=) 2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=) 3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=) 4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=) 5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: T6Q1ZmJAK58Rnyt+XYFlPWQhWbLWOMeGozWE5MyG4sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:a0:93:a6:f8:d1:56:4f:ec:0e:d3:3d:2f:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Dec 7 00:01:02 2025 GMT Not After : Dec 8 00:01:02 2025 GMT Subject: CN=bb5405bf05a072825b823d36b997c5899d2a0c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:59:ce:13:1e:93:66:ab:f3:5a:44:e6:5d: 03:1a:11:a2:6e:22:9a:40:c3:36:1c:1f:d8:31:14: 17:16:55:7e:3f:ba:62:1f:25:96:c3:be:99:30:d4: 74:20:93:c8:3e:7a:d9:93:ca:11:4b:4c:95:6d:a3: 23:42:90:12:4f:00:80:e8:dc:01:12:4b:f4:13:a5: 00:aa:bb:6b:9b:a5:ea:fe:20:39:78:25:59:b4:71: a7:19:1f:a4:e3:a2:d3:f0:5b:e4:6d:05:83:7b:25: 77:35:63:0b:55:1d:7c:24:08:c9:05:39:0c:ec:0d: 1d:65:fb:9f:c4:15:09:05:66:52:ac:6f:3b:e2:98: 4e:55:20:1e:a1:16:46:ff:50:58:58:8e:4e:90:45: 8f:c4:75:0a:be:2b:4c:63:1d:60:fa:27:04:5a:07: 93:d7:9a:2a:8c:ca:86:26:c3:f7:7d:79:93:77:00: be:ba:9e:86:9c:e2:7a:22:9e:4b:07:bf:fc:e5:71: 5b:d4:c3:c6:ac:31:3f:d6:c1:c5:6b:3d:c1:df:26: 87:5b:8e:c7:5c:39:18:38:80:81:c7:cb:cd:2b:0d: e8:bb:36:cd:c8:40:4f:2b:41:94:ad:ac:fe:43:40: bb:32:81:98:1b:ce:56:ea:29:78:cf:5e:9e:36:5e: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:05:BF:05:A0:72:82:5B:82:3D:36:B9:97:C5:89:9D:2A:0C:46 X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9b:56:75:0b:c7:42:e1:fb:ed:55:76:1d:eb:0c:44:82:dd: 74:8f:d4:42:dd:9b:2a:18:37:0f:66:76:96:ea:61:ed:22:d1: 57:d2:57:30:56:15:d4:d5:f1:eb:10:48:46:49:bd:06:48:74: 07:bc:7d:b6:ae:52:17:8f:5f:83:bf:41:e0:11:9d:da:61:c6: 74:12:23:fa:34:84:a1:69:a1:82:99:c1:b3:4b:5b:27:de:c5: 26:56:07:1d:28:be:8a:91:f9:ab:26:52:ca:d1:9d:5d:b7:c6: 5a:ad:1d:68:ee:b9:fe:b4:58:88:d8:c8:be:fc:8a:ff:69:9b: f5:5a:2b:bf:8d:14:7b:d9:71:bc:7d:0b:7e:e0:77:fe:5c:e6: 7e:f7:21:ce:eb:2e:75:0c:80:ec:4f:ad:d8:4c:6a:11:78:6f: 77:02:47:44:16:5d:b1:4e:60:7a:ff:64:55:83:1a:2f:ab:71: 80:fd:5f:3a:4b:49:4b:18:76:84:79:55:86:9f:65:f3:32:fa: 96:04:91:36:53:90:29:fa:db:f7:e2:d9:7a:0b:dc:91:af:6e: 80:d8:b7:26:88:37:70:87:ec:be:d3:87:91:c8:dd:41:0d:4a: 6c:af:39:8c:ae:1e:f0:58:c8:0d:4a:ad:4b:85:7e:b2:2f:a2: 26:94:08:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HKCTpvjRVk/sDtM9L3kwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjUxMjA3MDAwMTAyWhcNMjUxMjA4MDAwMTAyWjAzMTEwLwYDVQQD EyhiYjU0MDViZjA1YTA3MjgyNWI4MjNkMzZiOTk3YzU4OTlkMmEwYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFBZzhMek2ar81pE5l0DGhGibiKa QMM2HB/YMRQXFlV+P7piHyWWw76ZMNR0IJPIPnrZk8oRS0yVbaMjQpASTwCA6NwB Ekv0E6UAqrtrm6Xq/iA5eCVZtHGnGR+k46LT8FvkbQWDeyV3NWMLVR18JAjJBTkM 7A0dZfufxBUJBWZSrG874phOVSAeoRZG/1BYWI5OkEWPxHUKvitMYx1g+icEWgeT 15oqjMqGJsP3fXmTdwC+up6GnOJ6Ip5LB7/85XFb1MPGrDE/1sHFaz3B3yaHW47H XDkYOICBx8vNKw3ouzbNyEBPK0GUraz+Q0C7MoGYG85W6il4z16eNl6ehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtUBb8FoHKCW4I9NrmXxYmdKgxGMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5tWdQvH QuH77VV2HesMRILddI/UQt2bKhg3D2Z2luph7SLRV9JXMFYV1NXx6xBIRkm9Bkh0 B7x9tq5SF49fg79B4BGd2mHGdBIj+jSEoWmhgpnBs0tbJ97FJlYHHSi+ipH5qyZS ytGdXbfGWq0daO65/rRYiNjIvvyK/2mb9Vorv40Ue9lxvH0LfuB3/lzmfvchzusu dQyA7E+t2ExqEXhvdwJHRBZdsU5gev9kVYMaL6txgP1fOktJSxh2hHlVhp9l8zL6 lgSRNlOQKfrb9+LZegvcka9ugNi3Jog3cIfsvtOHkcjdQQ1KbK85jK4e8FjIDUqt S4V+si+iJpQI0w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:27 2025 by rpki-client