This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json) Hash identifier: fQP8NFhGwVPpk9r0p7d9KzUZ4WXYYazfv+TWsvXjQxs= Subject key identifier: BD:94:28:C3:67:04:E2:AB:DE:51:17:AA:21:84:6D:12:CD:C6:0D:08 Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Certificate serial: 019AF0BED986141E7C0C248DC8BF37D4F439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft Manifest number: 0934 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: h3AUjk82TDF4ATvMdipYFjOgpWVNuKtFqcLrQsTP738=) 2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d9:86:14:1e:7c:0c:24:8d:c8:bf:37:d4:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=bd9428c36704e2abde5117aa21846d12cdc60d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:ac:d5:68:2a:ab:fe:3e:8b:2f:c7:d0:c5: ab:6f:91:8e:d7:15:3c:ef:9f:59:83:99:a4:5c:25: 00:66:6a:33:14:7d:ad:0f:f8:61:04:fb:53:a5:6a: 38:a4:b3:49:d1:ea:7e:46:6e:58:9a:9d:49:bb:41: d9:e9:85:d0:1a:95:08:a4:0f:29:94:67:be:fe:9e: 53:8b:b5:e2:45:4c:2a:36:2f:63:ea:e9:4b:34:ad: fe:ea:5d:77:df:0b:f0:26:00:a9:c1:96:0e:e5:10: d3:8d:a2:fb:a7:e8:63:22:76:49:ef:d4:24:74:48: 05:e0:54:8a:d2:62:7b:f4:9e:b0:7e:8c:eb:c1:b8: b3:98:d6:29:27:08:cf:17:7b:4a:34:d5:9b:d5:40: 4d:e9:3c:b5:47:81:6b:c1:68:62:f6:d9:f2:cb:05: 00:70:10:58:80:19:98:cd:bd:ad:b7:bd:ec:71:02: 66:a5:63:15:0f:68:e4:16:28:33:55:9a:bc:6d:a0: 7d:1e:68:14:31:cc:9f:bd:3f:3e:bc:05:81:ec:81: f9:4d:86:4a:ca:55:a7:40:6f:c2:89:8f:4c:28:e1: 09:3b:80:1b:a7:9f:cc:6a:b1:4c:19:21:61:0b:68: 0b:e3:6e:64:78:99:5b:5d:6e:54:04:eb:43:40:7f: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:28:C3:67:04:E2:AB:DE:51:17:AA:21:84:6D:12:CD:C6:0D:08 X509v3 Authority Key Identifier: keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:8c:e8:1f:0a:e6:fe:a9:c7:46:24:f8:c3:88:d6:6c:a3: 05:1a:5e:21:3e:fb:18:00:df:1c:1d:77:63:15:3c:29:90:7b: 99:c4:92:00:16:23:a3:46:44:2d:64:54:94:ed:f8:5c:6c:dd: f4:c3:f3:bd:4c:4f:5f:3d:7f:cb:7c:9e:bf:50:66:e0:83:df: 15:4d:08:dd:27:38:64:d4:68:b3:b3:05:7b:e3:73:2b:80:11: 98:f1:82:b8:12:13:8a:46:c5:92:55:80:86:77:75:ce:fe:e8: 92:eb:eb:88:62:c1:f5:6c:ce:d3:55:82:4f:3d:20:76:fc:0d: 86:d0:57:25:e5:d5:79:52:4e:33:a7:df:b5:a0:aa:ec:bd:da: 59:33:44:b6:50:52:ae:24:8c:56:d6:76:bc:5d:61:e5:c4:f3: a3:bf:99:5d:39:c2:4d:c4:4a:e7:25:f7:ad:29:05:0c:f7:90: 07:15:9b:25:67:79:36:2a:b8:50:3d:60:5a:0f:94:e0:8f:c6: 63:b7:46:b3:d8:f5:69:8c:a1:4e:7e:45:1c:ea:6c:99:b6:d2: 8c:65:9a:ce:32:61:80:4b:21:68:26:2c:d2:a2:8c:e0:b2:ea: 95:d7:a9:d8:b1:d9:90:b7:7d:ac:d6:17:64:3f:cd:b8:a3:aa: b0:4f:ae:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtmGFB58DCSNyL831PQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0 NGJmNDQwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD EyhiZDk0MjhjMzY3MDRlMmFiZGU1MTE3YWEyMTg0NmQxMmNkYzYwZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26is1Wgqq/4+iy/H0MWrb5GO1xU8 759Zg5mkXCUAZmozFH2tD/hhBPtTpWo4pLNJ0ep+Rm5Ymp1Ju0HZ6YXQGpUIpA8p lGe+/p5Ti7XiRUwqNi9j6ulLNK3+6l133wvwJgCpwZYO5RDTjaL7p+hjInZJ79Qk dEgF4FSK0mJ79J6wfozrwbizmNYpJwjPF3tKNNWb1UBN6Ty1R4FrwWhi9tnyywUA cBBYgBmYzb2tt73scQJmpWMVD2jkFigzVZq8baB9HmgUMcyfvT8+vAWB7IH5TYZK ylWnQG/CiY9MKOEJO4Abp5/MarFMGSFhC2gL425keJlbXW5UBOtDQH+HrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2UKMNnBOKr3lEXqiGEbRLNxg0IMB8GA1UdIwQY MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2 LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuiM6B8K 5v6px0Yk+MOI1myjBRpeIT77GADfHB13YxU8KZB7mcSSABYjo0ZELWRUlO34XGzd 9MPzvUxPXz1/y3yev1Bm4IPfFU0I3Sc4ZNRos7MFe+NzK4ARmPGCuBITikbFklWA hnd1zv7okuvriGLB9WzO01WCTz0gdvwNhtBXJeXVeVJOM6fftaCq7L3aWTNEtlBS riSMVtZ2vF1h5cTzo7+ZXTnCTcRK5yX3rSkFDPeQBxWbJWd5Niq4UD1gWg+U4I/G Y7dGs9j1aYyhTn5FHOpsmbbSjGWazjJhgEshaCYs0qKM4LLqldep2LHZkLd9rNYX ZD/NuKOqsE+ugQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:24 2025 by rpki-client