This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json) Hash identifier: y8+R1ccmIYIHrJnZcGqA5MJioW1TsBwaI2GMHPv+HKA= Subject key identifier: 3A:42:E9:6C:28:78:3E:FB:EC:CC:73:F7:EE:46:9B:DA:E9:BC:1A:3E Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Certificate serial: 019AF16494EFA75A6B1E5247163EFF2FF1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft Manifest number: 0603 Signing time: Sat 06 Dec 2025 02:01:32 +0000 Manifest this update: Sat 06 Dec 2025 02:01:32 +0000 Manifest next update: Sun 07 Dec 2025 02:01:32 +0000 Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=) 2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=) 3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=) 4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: Ie8FBaO/MhmV+Z6Q1tcQ5cJodlqjsS0/m/ydQcrXmR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:94:ef:a7:5a:6b:1e:52:47:16:3e:ff:2f:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Validity Not Before: Dec 6 02:01:32 2025 GMT Not After : Dec 7 02:01:32 2025 GMT Subject: CN=3a42e96c28783efbeccc73f7ee469bdae9bc1a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:9f:54:98:a1:0a:b7:1c:53:7c:50:ce:ee: 10:42:3c:f1:2e:2d:bc:1e:7e:50:8f:d6:1a:3e:ef: 68:0f:28:2f:f4:ce:76:b7:01:e1:1d:f6:e6:4c:6e: b6:10:61:fa:3d:fd:9e:03:7f:da:e5:9f:86:00:fe: 7e:45:38:e6:ea:b6:e5:22:d5:fc:0f:67:24:6b:a1: 30:cc:1d:fd:7a:ca:90:93:78:7d:a3:c5:bf:a2:8c: fd:8b:ae:7a:e5:11:b0:7d:fc:60:73:85:45:02:47: c8:2e:96:90:c3:fc:1e:a8:1c:40:4f:e8:41:17:ec: 3a:b6:ce:41:82:de:19:ea:38:04:ab:80:83:f4:c2: 3d:2d:74:ea:c6:75:3e:1d:f2:8f:f5:0f:aa:44:e8: 4d:6a:75:e0:18:ec:73:4d:ef:3d:fd:53:06:3f:1d: a7:a7:83:73:a2:e1:65:48:30:c3:c9:e9:b6:a9:ec: 20:d4:2e:ec:f5:de:1a:dd:ec:45:df:b4:e3:12:a9: 9b:b1:d8:e7:19:53:75:2c:95:1d:53:b0:ce:a4:47: 3d:77:d5:8e:de:b1:f2:a7:5f:bb:3b:ae:70:a6:39: 4a:b3:22:ea:56:0c:44:0b:da:2c:ce:4b:86:20:e3: 83:49:6d:86:b9:2c:61:e8:c6:30:3e:55:69:79:61: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:E9:6C:28:78:3E:FB:EC:CC:73:F7:EE:46:9B:DA:E9:BC:1A:3E X509v3 Authority Key Identifier: keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ab:d3:6e:3d:63:1f:d4:78:ba:97:b3:51:a2:9d:bf:2a:04: 00:38:bd:aa:31:cf:f3:89:71:0d:a7:3e:1b:fe:ab:bb:64:be: 07:4a:35:93:37:65:d4:d1:a9:4f:08:30:c0:66:0c:1d:2a:3a: 3b:61:77:50:4d:23:65:57:6e:3f:13:b0:3e:37:00:55:a7:9b: 8b:26:68:fc:98:e9:2e:b1:fd:73:7c:29:2b:69:d4:ce:b8:d8: cf:24:1a:80:8c:de:c5:44:33:fc:5b:55:e1:70:da:d4:07:b8: 64:c5:01:90:c5:51:ce:43:8f:b4:16:a5:c2:8f:e3:e9:dd:c8: d8:a2:48:30:38:0c:78:b3:cc:32:7d:95:01:68:69:a9:03:c2: 46:c4:4f:01:14:c9:1c:a3:a8:86:f7:75:e9:29:f9:a1:50:a5: a5:55:6a:d0:99:3d:40:1a:c9:e8:44:34:45:f2:ee:df:44:2b: a6:84:c4:1a:bd:bf:77:09:fc:bd:35:05:16:21:ed:3d:59:61: a6:5f:19:c6:ae:8c:2e:23:ed:ed:af:9f:b0:f2:cb:95:fc:98: 8e:08:9b:a7:ea:cc:b7:61:86:51:63:7e:36:3c:75:e4:8c:1d: 89:b4:08:80:f3:2b:90:ac:73:14:fe:d2:2a:58:96:6f:57:ac: 91:39:71:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJTvp1prHlJHFj7/L/G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi NmE1YWUwHhcNMjUxMjA2MDIwMTMyWhcNMjUxMjA3MDIwMTMyWjAzMTEwLwYDVQQD EygzYTQyZTk2YzI4NzgzZWZiZWNjYzczZjdlZTQ2OWJkYWU5YmMxYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf+fVJihCrccU3xQzu4QQjzxLi28 Hn5Qj9YaPu9oDygv9M52twHhHfbmTG62EGH6Pf2eA3/a5Z+GAP5+RTjm6rblItX8 D2cka6EwzB39esqQk3h9o8W/ooz9i6565RGwffxgc4VFAkfILpaQw/weqBxAT+hB F+w6ts5Bgt4Z6jgEq4CD9MI9LXTqxnU+HfKP9Q+qROhNanXgGOxzTe89/VMGPx2n p4NzouFlSDDDyem2qewg1C7s9d4a3exF37TjEqmbsdjnGVN1LJUdU7DOpEc9d9WO 3rHyp1+7O65wpjlKsyLqVgxEC9oszkuGIOODSW2GuSxh6MYwPlVpeWHtAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpC6WwoeD777Mxz9+5Gm9rpvBo+MB8GA1UdIwQY MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1 LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqvTbj1j H9R4upezUaKdvyoEADi9qjHP84lxDac+G/6ru2S+B0o1kzdl1NGpTwgwwGYMHSo6 O2F3UE0jZVduPxOwPjcAVaebiyZo/JjpLrH9c3wpK2nUzrjYzyQagIzexUQz/FtV 4XDa1Ae4ZMUBkMVRzkOPtBalwo/j6d3I2KJIMDgMeLPMMn2VAWhpqQPCRsRPARTJ HKOohvd16Sn5oVClpVVq0Jk9QBrJ6EQ0RfLu30QrpoTEGr2/dwn8vTUFFiHtPVlh pl8Zxq6MLiPt7a+fsPLLlfyYjgibp+rMt2GGUWN+Njx15IwdibQIgPMrkKxzFP7S KliWb1eskTlxOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:02 2025 by rpki-client