This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json) Hash identifier: /IKRp9U4gHh+fYDd3ZTg5mkPXUvK/W7TVRLHsj1zxQA= Subject key identifier: EF:44:F9:E2:6A:A5:A3:18:AB:BB:14:6F:AE:CB:A5:4D:E5:F5:B2:C5 Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Certificate serial: 019AF23FA1E9088EFA8DBD95BABFF7AEFBC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft Manifest number: 023A Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=) 2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: +WxqHG/L4ZM1a55eruTKwsrCJ+txqUWI8lYzrh96fIc=) 3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a1:e9:08:8e:fa:8d:bd:95:ba:bf:f7:ae:fb:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=ef44f9e26aa5a318abbb146faecba54de5f5b2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:7c:33:bc:34:2c:42:10:40:2b:f3:32:9e: bd:2f:85:13:dc:54:e2:6e:2b:8e:e4:1f:6f:87:ea: 4d:56:30:1f:e3:00:a5:a0:bc:eb:ae:e1:cc:e4:c8: 4d:63:bf:5e:34:cd:34:bf:3d:de:c6:11:c6:3c:d4: f1:2d:fe:48:80:a1:6d:5e:e0:3b:aa:70:ef:45:90: e6:3f:d0:b8:45:8d:ee:f3:fa:c8:22:6b:4f:0e:91: c0:39:99:99:e1:53:c6:7f:23:28:5c:ca:b8:94:87: 93:f2:75:a4:1f:fc:9f:2a:23:b8:33:39:7f:68:d9: 64:3f:29:d2:da:80:e3:86:6f:8c:a4:ba:77:8d:6d: 2d:ac:fe:30:7a:fa:c1:4c:27:98:8e:07:d9:ff:e5: d3:ed:f5:d9:2e:e7:8a:09:cc:47:b1:1c:ec:70:c7: 9f:79:c5:c4:10:7d:da:35:69:54:38:90:70:8d:ee: cb:b3:78:05:43:5e:da:ba:78:c9:52:42:83:f4:b5: 88:48:fa:80:5a:2f:98:9e:32:46:0e:6a:ce:e5:2b: 7e:1a:f5:5c:d1:22:13:76:4e:55:17:d3:fe:71:ed: 6d:2c:6b:7d:f5:3e:7e:0b:7c:65:d0:b4:23:9a:37: d1:c4:74:be:6f:04:e4:23:24:c2:7f:76:f7:5d:1a: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:F9:E2:6A:A5:A3:18:AB:BB:14:6F:AE:CB:A5:4D:E5:F5:B2:C5 X509v3 Authority Key Identifier: keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c6:41:ae:e4:ad:c9:1d:31:f5:68:d4:84:fc:31:07:3e:47: bd:b2:86:d1:93:f4:a2:43:66:ad:19:e2:42:55:96:94:fa:db: ec:75:d1:4b:2c:0f:d1:0a:f6:b8:77:7b:f2:df:0a:b9:0a:34: 42:50:1e:c4:0c:e8:c1:c9:d4:43:04:e6:00:16:e7:1e:68:93: 36:9a:f0:1a:a5:f8:d8:4d:46:37:46:ca:0c:ca:68:46:c1:5e: d5:b6:2f:59:9f:6d:08:f9:fe:fa:1d:5f:ad:85:0d:04:b1:48: 44:06:cd:de:a2:12:d8:22:5e:3e:5c:16:83:03:ac:18:aa:d3: 9f:71:67:97:19:14:9f:fe:78:ea:4b:69:86:11:5d:1e:21:83: 6c:79:2d:61:f5:ab:7c:ae:81:01:b0:8a:dd:6b:fe:c3:47:6d: 14:67:70:e3:70:40:07:4a:a0:4b:cd:ab:b2:f5:78:c7:26:dc: 1a:76:22:56:db:1b:63:ea:f2:35:53:2a:1d:84:a9:96:44:8d: 40:67:37:ce:3b:d8:75:97:8a:f3:e1:1f:98:4d:61:87:72:ce: cf:03:d6:d9:9b:55:be:07:13:88:11:f6:6f:8e:f7:93:93:78: 27:ad:86:a1:27:9f:2a:08:15:a3:47:7c:4b:11:b7:83:61:43: 4c:ed:a3:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6HpCI76jb2Vur/3rvvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1 NjkzYzYwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhlZjQ0ZjllMjZhYTVhMzE4YWJiYjE0NmZhZWNiYTU0ZGU1ZjViMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJ8M7w0LEIQQCvzMp69L4UT3FTi biuO5B9vh+pNVjAf4wCloLzrruHM5MhNY79eNM00vz3exhHGPNTxLf5IgKFtXuA7 qnDvRZDmP9C4RY3u8/rIImtPDpHAOZmZ4VPGfyMoXMq4lIeT8nWkH/yfKiO4Mzl/ aNlkPynS2oDjhm+MpLp3jW0trP4wevrBTCeYjgfZ/+XT7fXZLueKCcxHsRzscMef ecXEEH3aNWlUOJBwje7Ls3gFQ17aunjJUkKD9LWISPqAWi+YnjJGDmrO5St+GvVc 0SITdk5VF9P+ce1tLGt99T5+C3xl0LQjmjfRxHS+bwTkIyTCf3b3XRodQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9E+eJqpaMYq7sUb67LpU3l9bLFMB8GA1UdIwQY MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8ZBruSt yR0x9WjUhPwxBz5HvbKG0ZP0okNmrRniQlWWlPrb7HXRSywP0Qr2uHd78t8KuQo0 QlAexAzowcnUQwTmABbnHmiTNprwGqX42E1GN0bKDMpoRsFe1bYvWZ9tCPn++h1f rYUNBLFIRAbN3qIS2CJePlwWgwOsGKrTn3FnlxkUn/546ktphhFdHiGDbHktYfWr fK6BAbCK3Wv+w0dtFGdw43BAB0qgS82rsvV4xybcGnYiVtsbY+ryNVMqHYSplkSN QGc3zjvYdZeK8+EfmE1hh3LOzwPW2ZtVvgcTiBH2b473k5N4J62GoSefKggVo0d8 SxG3g2FDTO2jfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:26:30 2025 by rpki-client