This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json) Hash identifier: zy/pMUDEPlrirx0j4SXlFi8NGRTlLGSeDnkNoMv47ss= Subject key identifier: F1:36:8F:5A:35:59:9B:FD:3C:93:4C:61:5E:D1:A0:56:C2:4F:99:DF Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae Certificate serial: 019AF49BDA0BA9CCED5304E13B8D28BD4B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft Manifest number: 083B Signing time: Sat 06 Dec 2025 17:00:45 +0000 Manifest this update: Sat 06 Dec 2025 17:00:45 +0000 Manifest next update: Sun 07 Dec 2025 17:00:45 +0000 Files and hashes: 1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=) 2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: K5fBOYOUZHLqQgfCBjLw0LsKMPDMFJ+N8gtZUzKD06E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:da:0b:a9:cc:ed:53:04:e1:3b:8d:28:bd:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae Validity Not Before: Dec 6 17:00:45 2025 GMT Not After : Dec 7 17:00:45 2025 GMT Subject: CN=f1368f5a35599bfd3c934c615ed1a056c24f99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:17:cc:10:f2:db:46:3b:c9:2d:aa:c4:11: 65:19:25:47:8c:5a:b4:a7:30:6a:18:05:ee:18:50: 04:ee:03:d9:29:13:0c:43:a1:79:88:a6:02:0d:49: d6:08:a8:30:62:55:4a:44:1e:4d:4c:b4:30:34:bc: f4:a2:67:82:d2:34:b8:08:e3:c2:7f:51:64:ba:ae: 85:87:4f:97:24:21:61:17:f2:4f:65:3d:67:b2:e5: d4:b6:92:ba:76:3a:ea:08:14:c4:71:0d:0e:da:e8: 22:6c:1b:c3:d8:16:98:b6:ad:61:a4:67:71:43:80: 71:d9:bf:ed:3a:b5:b0:a0:83:8d:6a:a0:8b:f8:91: 8c:30:1a:88:4d:6f:1c:6f:0f:e4:be:62:ea:34:e8: de:6b:88:69:60:d9:ad:0e:3d:1a:3d:ca:35:ef:2f: b2:13:69:26:7a:df:f4:39:f9:ce:f1:47:28:83:37: c3:a4:ab:4d:3d:7a:96:52:e0:32:29:45:31:9e:0c: 98:6f:2f:ea:89:ea:39:8e:f8:ad:27:de:21:ca:35: 15:9b:82:5d:25:2d:57:bf:6a:2d:d9:f5:5a:3c:13: 6e:0d:e9:09:d8:c7:87:c7:c9:95:a6:01:d6:11:76: ed:b0:4d:f0:d6:6f:b5:48:42:1f:b3:86:f9:35:f3: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:8F:5A:35:59:9B:FD:3C:93:4C:61:5E:D1:A0:56:C2:4F:99:DF X509v3 Authority Key Identifier: keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e6:2e:97:ac:77:6b:08:93:4e:a7:fd:4e:99:15:6f:9b:ba: e6:df:85:9f:8a:1e:00:0e:c2:34:9b:0a:b1:4e:24:49:e1:16: 60:bb:a9:1c:7c:e8:ac:14:d8:e7:0c:20:28:a4:73:32:14:df: 58:8e:20:c9:39:4f:da:be:b3:4d:83:0b:56:37:eb:7a:70:89: 76:e5:e2:5c:84:29:31:ae:76:b8:d7:c6:53:89:8e:a3:47:b7: 19:3a:7b:0d:8f:6e:31:31:43:56:0e:dd:cd:55:e6:a3:54:86: 96:5e:ce:73:b1:da:3b:2e:97:cd:f3:6b:ba:a6:8f:15:29:97: 3e:af:ed:df:8c:1f:d1:42:fa:b8:c7:26:32:67:99:4c:67:8d: 02:12:05:09:6e:ab:f8:03:9b:e3:ce:a4:35:66:37:50:d2:61: 8d:30:f5:1b:ba:70:c2:5f:a5:5c:02:3e:21:be:bf:1b:c9:eb: c6:9b:71:c9:39:e1:03:8c:08:2d:26:f4:03:7b:ba:4a:b2:70: ea:08:18:fb:df:72:4d:84:50:66:2a:5a:8f:78:4f:61:ac:2c: 58:bd:3d:14:85:a9:c1:5a:0f:f1:1d:4b:0f:c2:54:dd:52:87: 2d:7d:2b:ad:3f:99:3d:0c:64:0b:10:06:ce:e6:ff:d2:ff:a5: c3:4a:0d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9oLqcztUwThO40ovUtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI2MGIyOTI1MmNlMTg1YTQxNjM2YTI0N2I0YzAyNzNk Mzc0YWUwHhcNMjUxMjA2MTcwMDQ1WhcNMjUxMjA3MTcwMDQ1WjAzMTEwLwYDVQQD EyhmMTM2OGY1YTM1NTk5YmZkM2M5MzRjNjE1ZWQxYTA1NmMyNGY5OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3kXzBDy20Y7yS2qxBFlGSVHjFq0 pzBqGAXuGFAE7gPZKRMMQ6F5iKYCDUnWCKgwYlVKRB5NTLQwNLz0omeC0jS4COPC f1Fkuq6Fh0+XJCFhF/JPZT1nsuXUtpK6djrqCBTEcQ0O2ugibBvD2BaYtq1hpGdx Q4Bx2b/tOrWwoIONaqCL+JGMMBqITW8cbw/kvmLqNOjea4hpYNmtDj0aPco17y+y E2kmet/0OfnO8UcogzfDpKtNPXqWUuAyKUUxngyYby/qieo5jvitJ94hyjUVm4Jd JS1Xv2ot2fVaPBNuDekJ2MeHx8mVpgHWEXbtsE3w1m+1SEIfs4b5NfNTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE2j1o1WZv9PJNMYV7RoFbCT5nfMB8GA1UdIwQY MBaAFKHrYLKSUs4YWkFjaiR7TAJz03SuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNmIyODYtZDk2Ny00Y2E2LThmMTAt ZDhiMDc1NmQ4MmE1LzEvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNmIyODYtZDk2Ny00Y2E2LThmMTAtZDhiMDc1NmQ4MmE1 LzEvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeYul6x3 awiTTqf9TpkVb5u65t+Fn4oeAA7CNJsKsU4kSeEWYLupHHzorBTY5wwgKKRzMhTf WI4gyTlP2r6zTYMLVjfrenCJduXiXIQpMa52uNfGU4mOo0e3GTp7DY9uMTFDVg7d zVXmo1SGll7Oc7HaOy6XzfNruqaPFSmXPq/t34wf0UL6uMcmMmeZTGeNAhIFCW6r +AOb486kNWY3UNJhjTD1G7pwwl+lXAI+Ib6/G8nrxptxyTnhA4wILSb0A3u6SrJw 6ggY+99yTYRQZipaj3hPYawsWL09FIWpwVoP8R1LD8JU3VKHLX0rrT+ZPQxkCxAG zub/0v+lw0oNMg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:27:39 2025 by rpki-client