This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json) Hash identifier: xwrOI4jZDbt64vIkJ2pU/NLmttE2hv1Rhj3gmamTt5k= Subject key identifier: 0D:E0:32:78:DC:15:AD:DA:07:05:37:FC:BD:57:32:AA:5E:54:EF:4F Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae Certificate serial: 019B21AC1DF7447702893CC9B9A759E079D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft Manifest number: 0853 Signing time: Mon 15 Dec 2025 11:01:26 +0000 Manifest this update: Mon 15 Dec 2025 11:01:26 +0000 Manifest next update: Tue 16 Dec 2025 11:01:26 +0000 Files and hashes: 1: QZvuA2NHdvCmA1cVCHhsj1Prmc0.asa (hash: /Zv3rmHNuTLRGSfDstJxC4GDyC7D3phMMFsA4VMndXc=) 2: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=) 3: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: nTy3/2gmIrxMTTXJDQXwB74LC3FH43v2aA+8qx+MPg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ac:1d:f7:44:77:02:89:3c:c9:b9:a7:59:e0:79:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae Validity Not Before: Dec 15 11:01:26 2025 GMT Not After : Dec 16 11:01:26 2025 GMT Subject: CN=0de03278dc15adda070537fcbd5732aa5e54ef4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:89:e1:52:fa:31:68:5e:1a:20:5c:4b:d7: ca:b6:d0:79:68:fa:2f:50:1e:da:4d:ea:68:17:67: e6:a4:c0:a2:f7:31:43:a8:0c:be:97:53:d8:39:ef: 75:fa:8c:8f:f6:2c:0a:b1:8c:52:c6:ed:50:10:5a: 00:25:31:cb:47:2d:a2:f5:78:c6:36:34:1d:e0:da: 2b:ab:43:b6:0a:5f:b4:7c:c5:15:2d:b0:03:e4:6f: 35:38:3a:6e:40:13:10:20:ba:ec:0f:8e:f6:75:21: 05:8e:d1:6f:70:07:09:46:21:eb:02:76:f2:e9:2a: 3a:b3:f9:9f:96:01:c6:2e:7f:e0:1f:80:64:a1:50: ca:1e:fc:2b:a5:76:5c:41:bc:ac:e7:dd:2d:16:a6: f6:a9:d2:bd:c5:38:be:30:82:99:83:67:51:5d:bc: 4f:bb:ac:d9:6b:6d:41:db:55:10:7b:75:2e:38:a7: 63:2a:a9:82:da:14:d8:a1:cb:7a:29:b2:ca:e3:6e: 41:05:e2:ff:c5:3b:26:28:14:fc:a1:9b:f6:81:79: 3c:0f:61:56:4e:dc:7f:9b:3a:75:61:23:f9:91:e2: 13:da:0b:ad:7b:f1:f3:1b:d0:fc:8d:4a:1b:f1:0a: 27:bf:a7:40:09:75:e6:9e:af:5b:44:f5:f4:3a:d1: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:32:78:DC:15:AD:DA:07:05:37:FC:BD:57:32:AA:5E:54:EF:4F X509v3 Authority Key Identifier: keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ba:b1:09:ef:6e:c9:9c:56:80:1f:82:97:20:51:05:e9:8c: e2:41:22:2b:b8:ef:9a:25:f7:ed:4b:c0:e0:89:cb:b6:7d:7b: b9:59:93:13:67:ca:b7:ed:8a:d2:eb:57:18:35:c1:d7:f0:9f: d3:41:74:36:33:f1:3b:93:12:87:1d:d9:66:1b:09:ee:dc:3e: da:20:82:10:e7:a9:c2:48:80:a9:ca:e4:2b:71:4c:4e:65:4c: a3:a3:12:4d:ec:9d:40:78:dc:09:44:8d:53:43:10:ab:cc:d1: 1f:27:69:4c:b9:57:57:36:e2:f3:32:fa:99:57:9f:a2:e1:8f: ac:79:e5:b3:48:76:62:b8:f2:c8:15:1a:b8:3e:d8:46:23:bc: 2e:19:05:a7:25:89:00:79:d3:6e:12:ac:22:9e:d5:b9:a5:04: d1:84:ed:04:a5:34:d1:d9:dc:9a:af:f9:c4:f1:ea:24:1b:16: 6f:ce:5b:6b:60:b3:76:bd:1c:40:da:5c:85:da:23:39:cf:66: 51:13:87:1a:6d:37:a2:51:aa:91:9e:6f:59:3d:75:68:f6:26: e1:5d:b0:48:8e:51:8f:a4:9b:07:cd:7b:d0:97:9c:c3:3d:0f: 37:ca:f6:be:6e:dc:15:60:ef:d4:7c:88:b1:0e:ea:38:96:99: 4a:df:c9:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshrB33RHcCiTzJuadZ4HnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI2MGIyOTI1MmNlMTg1YTQxNjM2YTI0N2I0YzAyNzNk Mzc0YWUwHhcNMjUxMjE1MTEwMTI2WhcNMjUxMjE2MTEwMTI2WjAzMTEwLwYDVQQD EygwZGUwMzI3OGRjMTVhZGRhMDcwNTM3ZmNiZDU3MzJhYTVlNTRlZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nCJ4VL6MWheGiBcS9fKttB5aPov UB7aTepoF2fmpMCi9zFDqAy+l1PYOe91+oyP9iwKsYxSxu1QEFoAJTHLRy2i9XjG NjQd4Norq0O2Cl+0fMUVLbAD5G81ODpuQBMQILrsD472dSEFjtFvcAcJRiHrAnby 6So6s/mflgHGLn/gH4BkoVDKHvwrpXZcQbys590tFqb2qdK9xTi+MIKZg2dRXbxP u6zZa21B21UQe3UuOKdjKqmC2hTYoct6KbLK425BBeL/xTsmKBT8oZv2gXk8D2FW Ttx/mzp1YSP5keIT2gute/HzG9D8jUob8Qonv6dACXXmnq9bRPX0OtEc3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3gMnjcFa3aBwU3/L1XMqpeVO9PMB8GA1UdIwQY MBaAFKHrYLKSUs4YWkFjaiR7TAJz03SuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNmIyODYtZDk2Ny00Y2E2LThmMTAt ZDhiMDc1NmQ4MmE1LzEvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNmIyODYtZDk2Ny00Y2E2LThmMTAtZDhiMDc1NmQ4MmE1 LzEvb2V0Z3NwSlN6aGhhUVdOcUpIdE1BblBUZEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7qxCe9u yZxWgB+ClyBRBemM4kEiK7jvmiX37UvA4InLtn17uVmTE2fKt+2K0utXGDXB1/Cf 00F0NjPxO5MShx3ZZhsJ7tw+2iCCEOepwkiAqcrkK3FMTmVMo6MSTeydQHjcCUSN U0MQq8zRHydpTLlXVzbi8zL6mVefouGPrHnls0h2YrjyyBUauD7YRiO8LhkFpyWJ AHnTbhKsIp7VuaUE0YTtBKU00dncmq/5xPHqJBsWb85ba2Czdr0cQNpchdojOc9m UROHGm03olGqkZ5vWT11aPYm4V2wSI5Rj6SbB8170Jecwz0PN8r2vm7cFWDv1HyI sQ7qOJaZSt/JzA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:18:49 2025 by rpki-client