This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json) Hash identifier: s5j/N3OO+fqsuQVUYnLsDHunjrgiCIOr3mBIsBKIacg= Subject key identifier: BD:D9:28:8E:AD:F7:B0:44:56:7B:05:07:82:B4:75:8B:96:6E:C6:59 Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25 Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25 Certificate serial: 019AF19B3EFE257C708BE5F6629C160CD597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft Manifest number: 036A Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=) 2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: 6RYgOaloC2QYbICvrpgyKl+Cr67AsNmBCEo2CwWHpbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3e:fe:25:7c:70:8b:e5:f6:62:9c:16:0c:d5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=bdd9288eadf7b044567b050782b4758b966ec659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:85:b9:63:47:db:89:c7:01:90:bd:7e:17: dc:e9:4c:bc:b9:d3:a2:14:02:5e:e6:b2:db:4c:0d: c8:c0:9c:6f:f2:a4:46:2c:31:92:94:9c:3d:62:6b: ef:91:f2:f8:dc:de:bf:57:f1:49:f8:75:f1:84:0b: e5:97:7a:13:c5:3b:ca:5a:7f:42:86:3b:64:f7:1b: 2e:bb:5a:41:fe:87:f2:0b:fd:e6:ce:a5:bb:c4:d6: e1:90:c8:7d:0e:a0:2e:aa:15:a2:9a:64:f2:68:b8: 5d:20:14:04:fb:7e:2e:28:90:be:fe:65:f4:4c:b8: 3d:d2:27:29:2f:c2:6b:65:0e:c1:77:bb:d0:7e:f5: b6:02:89:a5:63:6b:87:e7:ff:69:55:5c:23:24:d9: 1c:8d:c3:5f:a9:b4:bc:57:12:7f:08:77:c3:ee:db: f1:f3:5c:73:94:7d:9a:64:48:90:0e:eb:fc:04:a2: 19:f1:4e:00:96:8f:53:58:37:b5:d4:84:d1:0d:73: 30:2e:a1:94:c4:94:9c:57:ec:50:0c:ed:ab:01:75: 88:5a:a2:d2:92:26:ed:e7:85:6c:7c:22:a7:69:3b: df:d8:c3:53:3b:ab:c6:05:99:6e:3e:14:7f:d9:bb: 2d:6c:94:c6:70:ad:a4:b1:47:b7:d1:11:ee:92:9f: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D9:28:8E:AD:F7:B0:44:56:7B:05:07:82:B4:75:8B:96:6E:C6:59 X509v3 Authority Key Identifier: keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:c5:f0:f2:65:44:ae:8e:49:da:ce:f6:f0:fe:61:39:72: 23:93:ac:89:0f:56:a5:6f:09:b2:17:ef:69:42:eb:31:a8:d6: ef:93:7f:05:1a:de:17:5e:a7:9c:ea:92:a8:5d:ff:b3:80:a2: b4:18:fc:ad:21:80:36:9b:36:e2:d3:0b:0f:68:c4:e8:b2:d5: 09:f3:9f:e7:d8:fb:69:b2:e5:d3:46:21:2f:92:59:fc:36:45: c3:d8:b1:c4:fc:c4:b9:b4:90:26:25:63:77:4a:dd:50:34:5f: 94:0d:8e:0b:64:88:a6:21:07:cf:51:00:02:51:c8:d4:e5:3e: 18:21:57:4d:ca:37:d5:0e:7f:14:9f:86:45:10:37:28:35:c7: 81:78:89:30:5e:44:71:a6:fc:df:51:72:b1:7f:70:70:b0:55: f3:b2:08:21:d2:9b:36:08:9b:39:9e:fd:c4:b5:36:85:6a:5b: de:bb:d6:55:b7:bf:c7:e9:95:82:fc:43:ea:e7:3c:aa:f2:d0: 40:04:94:65:4d:f8:3d:ab:bd:9b:23:61:54:c4:d4:ce:87:1b: 4e:63:e0:96:de:e5:7a:c0:4e:cf:6a:a7:48:69:34:aa:07:ed: 16:bb:36:8b:64:e1:44:bd:1c:7c:37:2c:0a:a9:26:af:26:58: 67:ba:3f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz7+JXxwi+X2YpwWDNWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWZkNjMzYTRkM2QyMTBkZWNmN2RiNTdkMTIyYjY0OGI5 OGVkMjUwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EyhiZGQ5Mjg4ZWFkZjdiMDQ0NTY3YjA1MDc4MmI0NzU4Yjk2NmVjNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzmFuWNH24nHAZC9fhfc6Uy8udOi FAJe5rLbTA3IwJxv8qRGLDGSlJw9YmvvkfL43N6/V/FJ+HXxhAvll3oTxTvKWn9C hjtk9xsuu1pB/ofyC/3mzqW7xNbhkMh9DqAuqhWimmTyaLhdIBQE+34uKJC+/mX0 TLg90icpL8JrZQ7Bd7vQfvW2AomlY2uH5/9pVVwjJNkcjcNfqbS8VxJ/CHfD7tvx 81xzlH2aZEiQDuv8BKIZ8U4Alo9TWDe11ITRDXMwLqGUxJScV+xQDO2rAXWIWqLS kibt54VsfCKnaTvf2MNTO6vGBZluPhR/2bstbJTGcK2ksUe30RHukp/iOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3ZKI6t97BEVnsFB4K0dYuWbsZZMB8GA1UdIwQY MBaAFKGf1jOk09IQ3s99tX0SK2SLmO0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83Y2FiZTAtNmQ4NC00N2E3LWFjZWMt YzdjYWQ1MDIwZWVmLzEvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83Y2FiZTAtNmQ4NC00N2E3LWFjZWMtYzdjYWQ1MDIwZWVm LzEvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ3F8PJl RK6OSdrO9vD+YTlyI5OsiQ9WpW8JshfvaULrMajW75N/BRreF16nnOqSqF3/s4Ci tBj8rSGANps24tMLD2jE6LLVCfOf59j7abLl00YhL5JZ/DZFw9ixxPzEubSQJiVj d0rdUDRflA2OC2SIpiEHz1EAAlHI1OU+GCFXTco31Q5/FJ+GRRA3KDXHgXiJMF5E cab831FysX9wcLBV87IIIdKbNgibOZ79xLU2hWpb3rvWVbe/x+mVgvxD6uc8qvLQ QASUZU34Pau9myNhVMTUzocbTmPglt7lesBOz2qnSGk0qgftFrs2i2ThRL0cfDcs CqkmryZYZ7o/bg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:50 2025 by rpki-client