This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json) Hash identifier: N83lMNzdydzsDU/IknC4jqS3qfo9OQrgPmt4lQ5J8Mk= Subject key identifier: 13:6E:F8:98:A6:A6:AA:F1:79:FE:C7:4A:75:81:8D:9C:0F:D5:97:65 Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe Certificate serial: 019AF31B8911E33375FD308DE1ED7879BE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=) 2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: +GEZ7qkfjhBENHC6S2gUQRygHs1H+vnOOzzaBPL7U3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:89:11:e3:33:75:fd:30:8d:e1:ed:78:79:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=136ef898a6a6aaf179fec74a75818d9c0fd59765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c7:90:90:7a:cc:63:b5:19:2f:da:b5:7c:37: 3c:97:b6:54:c3:4e:d2:4b:9b:f2:b7:97:b3:d9:e6: 0f:77:07:4e:3e:fd:68:7b:05:bd:15:54:c0:b2:7e: cb:a1:36:2d:80:a4:f2:f1:ac:cd:f2:81:94:34:7b: ff:2f:d5:90:ab:c3:6e:fa:07:4f:16:3e:11:04:6e: 3e:17:1a:2b:de:ad:aa:c3:14:d7:09:cf:d4:7a:7e: f6:4d:d8:ad:ba:0a:2a:37:11:76:83:e7:0d:26:c7: 5b:80:cc:8d:e4:54:49:6b:94:5f:ee:a2:9a:3f:57: 2e:f3:cd:01:8a:64:52:94:32:f0:15:05:72:22:ba: 74:a3:ae:18:26:ea:ad:e1:b2:35:7e:16:a8:5f:56: a8:69:8e:14:83:eb:68:4a:5f:ce:97:7f:8d:e4:7a: 61:a1:f5:4b:87:90:1e:a2:56:d9:7c:44:21:45:8d: 5f:4e:44:b3:2e:ad:c3:5e:99:f4:f8:d4:66:ea:34: 73:d2:e4:11:72:b4:c3:3a:c9:f5:af:09:90:4d:2e: 8b:8b:8a:ce:d9:ba:88:f8:c7:78:92:4a:33:bc:5d: ff:9f:b6:62:c9:34:b5:7f:09:2f:21:51:b2:92:b4: 17:5e:17:f5:b0:b0:ca:8c:48:64:83:57:bf:e8:83: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:F8:98:A6:A6:AA:F1:79:FE:C7:4A:75:81:8D:9C:0F:D5:97:65 X509v3 Authority Key Identifier: keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:37:f7:40:c6:04:97:d7:05:e0:0f:20:43:ec:44:7e:b7:1c: 68:4d:54:aa:00:76:84:58:21:77:65:cd:f6:dc:d5:12:83:3b: 73:cb:0f:90:ba:d7:61:61:7f:aa:b6:86:30:11:7c:49:cf:b3: 02:49:a1:48:97:a7:bc:28:e8:f2:6f:b9:c6:0f:f3:ae:6d:fc: ff:77:bd:a5:0c:e5:6b:49:93:37:5d:92:44:6b:9b:c0:bf:c6: 39:f6:d3:f6:b8:cc:bc:c4:fe:c6:d4:b3:4a:37:60:9c:79:95: e3:6a:63:27:a4:c4:08:b6:04:b2:cd:08:e2:76:a0:76:4d:36: e3:fc:86:f6:ef:89:a8:f3:4b:72:6a:50:37:98:1b:00:55:8b: 21:be:3e:3d:ca:41:c3:dd:d3:46:fd:6c:86:de:66:4c:d1:89: 2a:c8:4d:44:e2:36:ab:8e:f7:ce:c0:6f:da:33:74:8e:5f:76: 56:77:99:08:72:06:6f:1c:44:fd:11:55:cf:90:8b:71:58:50: c2:73:43:ad:1a:6b:50:eb:54:40:b1:e2:76:27:38:96:15:d5: a4:6e:1a:df:d2:8a:51:4f:e3:96:68:df:5c:34:ab:27:d0:e0: e0:29:f1:a2:db:07:cc:69:8b:cd:19:19:70:b7:a8:fb:c0:90: 53:b6:cf:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4kR4zN1/TCN4e14eb4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODlkYjcyNTBmZDg0NzZjODk4YWVlMGE1ZmJmMmE5ODgz NDAxZmUwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygxMzZlZjg5OGE2YTZhYWYxNzlmZWM3NGE3NTgxOGQ5YzBmZDU5NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6seQkHrMY7UZL9q1fDc8l7ZUw07S S5vyt5ez2eYPdwdOPv1oewW9FVTAsn7LoTYtgKTy8azN8oGUNHv/L9WQq8Nu+gdP Fj4RBG4+Fxor3q2qwxTXCc/Uen72TditugoqNxF2g+cNJsdbgMyN5FRJa5Rf7qKa P1cu880BimRSlDLwFQVyIrp0o64YJuqt4bI1fhaoX1aoaY4Ug+toSl/Ol3+N5Hph ofVLh5AeolbZfEQhRY1fTkSzLq3DXpn0+NRm6jRz0uQRcrTDOsn1rwmQTS6Li4rO 2bqI+Md4kkozvF3/n7ZiyTS1fwkvIVGykrQXXhf1sLDKjEhkg1e/6IOFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNu+Jimpqrxef7HSnWBjZwP1ZdlMB8GA1UdIwQY MBaAFKCJ23JQ/YR2yJiu4KX78qmINAH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMt ZDgyNWQwMzY1Nzg5LzEvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMtZDgyNWQwMzY1Nzg5 LzEvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjf3QMYE l9cF4A8gQ+xEfrccaE1UqgB2hFghd2XN9tzVEoM7c8sPkLrXYWF/qraGMBF8Sc+z AkmhSJenvCjo8m+5xg/zrm38/3e9pQzla0mTN12SRGubwL/GOfbT9rjMvMT+xtSz SjdgnHmV42pjJ6TECLYEss0I4nagdk024/yG9u+JqPNLcmpQN5gbAFWLIb4+PcpB w93TRv1sht5mTNGJKshNROI2q473zsBv2jN0jl92VneZCHIGbxxE/RFVz5CLcVhQ wnNDrRprUOtUQLHidic4lhXVpG4a39KKUU/jlmjfXDSrJ9Dg4CnxotsHzGmLzRkZ cLeo+8CQU7bPXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:01 2025 by rpki-client