This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json) Hash identifier: I4ZHD/5w3ajwNCKAdvMFD+6V9th+DT5XfPd55ZcnRg0= Subject key identifier: 95:F3:86:31:34:E0:28:A0:51:AC:B3:92:95:B9:69:C2:7C:0C:AE:F0 Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08 Certificate serial: 019AF12E4C6C07297E87E0FD4DFE086057DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=) 2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: L8SUah0botHM3CiAwT+wqT+uuZtZD/ODkCXUSeyR1B4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4c:6c:07:29:7e:87:e0:fd:4d:fe:08:60:57:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=95f3863134e028a051acb39295b969c27c0caef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:3c:be:29:c6:32:30:ab:15:d1:ba:6e:ea: 2b:ef:cb:e8:c3:cf:8a:b5:a0:13:28:64:57:3e:04: eb:81:20:84:68:eb:5e:bc:4b:c1:01:56:79:e0:95: 8c:c2:4e:fe:3f:9b:11:ce:09:7b:e4:67:16:9b:fd: 70:fb:25:ef:97:01:fe:1c:4c:88:e7:ae:9d:25:8f: f8:92:c9:aa:c6:5c:f7:e1:68:72:71:d0:ce:4a:e6: 80:19:fe:57:d2:7b:97:ec:08:dd:ff:e2:ab:96:ba: c8:f1:31:22:35:15:d5:4a:7f:f3:30:e3:b8:d0:3c: d4:84:7f:77:6f:1b:94:dc:81:84:2a:fc:14:31:23: ac:88:f7:98:8d:7c:7d:b9:ed:91:36:de:52:7d:b4: 29:9a:cc:3b:53:75:e3:c9:17:18:a5:29:62:2d:9f: 1d:17:59:d0:80:d3:d5:c3:e8:d4:15:7c:a8:42:21: d7:39:eb:33:30:3b:3a:9f:92:37:47:77:ce:60:40: 39:56:1c:ea:c5:2e:3c:65:ae:37:87:f1:1d:ed:9e: 5e:a9:9d:06:b4:a0:20:0a:d5:ed:95:d1:54:51:80: 20:19:58:16:cf:90:cc:3a:2b:80:45:04:92:6a:d1: 40:78:04:b3:b9:5c:48:bb:4c:ad:cc:6f:47:dc:80: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:86:31:34:E0:28:A0:51:AC:B3:92:95:B9:69:C2:7C:0C:AE:F0 X509v3 Authority Key Identifier: keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b9:2b:8a:af:b9:dc:79:1f:0f:55:06:24:9d:38:6c:c1:1f: 34:ef:b8:b9:c0:b5:a4:08:dc:10:a1:b7:72:4e:13:8c:99:fe: 06:55:83:c5:49:f7:de:f1:9b:b8:eb:00:d9:c0:56:04:be:6b: 02:69:7e:a7:7a:70:88:92:6c:0e:a7:3d:98:52:e9:23:e4:66: 10:91:e0:2e:37:42:2b:21:fb:b6:3d:53:b8:f6:c8:8c:20:c0: 7b:25:33:8f:ed:8d:d6:f2:5a:5e:c1:6e:7f:37:10:4b:cd:31: d6:3c:de:8f:76:19:c2:20:b1:e3:ac:0e:ab:73:b4:c5:61:ea: 31:e2:80:ca:7f:bd:76:67:39:50:0d:40:aa:4c:06:3e:1f:81: 1c:6d:77:83:cc:55:aa:96:75:08:fb:72:aa:70:6c:9b:49:9d: 51:f5:c5:b0:5a:fb:77:e4:69:8a:21:c7:7e:fd:1c:ef:a3:c6: 8f:6d:04:64:93:c1:ea:4d:e7:6f:00:e2:fa:e7:a4:56:f4:ad: 3c:92:85:71:a1:50:46:fe:8b:19:70:21:06:cc:12:50:9a:f6: fd:5e:8a:66:cb:5f:47:a6:e7:2b:54:ee:5f:c6:79:a5:6c:cb: 21:bb:b8:f4:f5:12:77:4f:60:e6:d4:eb:7d:d3:75:91:4e:7c: 9d:72:4a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkxsByl+h+D9Tf4IYFfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMTc4OGMwOGFhNDM3ZDExNjVjZWNiZDY4ZmRiMTk1YTE1 ZGZhMDgwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD Eyg5NWYzODYzMTM0ZTAyOGEwNTFhY2IzOTI5NWI5NjljMjdjMGNhZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vk8vinGMjCrFdG6buor78vow8+K taATKGRXPgTrgSCEaOtevEvBAVZ54JWMwk7+P5sRzgl75GcWm/1w+yXvlwH+HEyI 566dJY/4ksmqxlz34WhycdDOSuaAGf5X0nuX7Ajd/+KrlrrI8TEiNRXVSn/zMOO4 0DzUhH93bxuU3IGEKvwUMSOsiPeYjXx9ue2RNt5SfbQpmsw7U3XjyRcYpSliLZ8d F1nQgNPVw+jUFXyoQiHXOeszMDs6n5I3R3fOYEA5VhzqxS48Za43h/Ed7Z5eqZ0G tKAgCtXtldFUUYAgGVgWz5DMOiuARQSSatFAeASzuVxIu0ytzG9H3IB8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXzhjE04CigUayzkpW5acJ8DK7wMB8GA1UdIwQY MBaAFKIXiMCKpDfRFlzsvWj9sZWhXfoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUt NzdmNGZkNTM0MjVlLzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUtNzdmNGZkNTM0MjVl LzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbkriq+5 3HkfD1UGJJ04bMEfNO+4ucC1pAjcEKG3ck4TjJn+BlWDxUn33vGbuOsA2cBWBL5r Aml+p3pwiJJsDqc9mFLpI+RmEJHgLjdCKyH7tj1TuPbIjCDAeyUzj+2N1vJaXsFu fzcQS80x1jzej3YZwiCx46wOq3O0xWHqMeKAyn+9dmc5UA1AqkwGPh+BHG13g8xV qpZ1CPtyqnBsm0mdUfXFsFr7d+RpiiHHfv0c76PGj20EZJPB6k3nbwDi+uekVvSt PJKFcaFQRv6LGXAhBswSUJr2/V6KZstfR6bnK1TuX8Z5pWzLIbu49PUSd09g5tTr fdN1kU58nXJKlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:51 2025 by rpki-client