This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json) Hash identifier: BLDoB0cvHGxai2qEl+HlTTdVaKvPEzRvEij7mDOMkEw= Subject key identifier: 2D:2C:20:F0:33:ED:D0:3A:81:02:6D:C9:A4:4B:99:87:FD:12:82:B6 Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Certificate serial: 019AF0BF1A0B73C0FD398C5D8B59D9C2BE57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft Manifest number: 16B9 Signing time: Fri 05 Dec 2025 23:00:47 +0000 Manifest this update: Fri 05 Dec 2025 23:00:47 +0000 Manifest next update: Sat 06 Dec 2025 23:00:47 +0000 Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=) 2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: vxUaArdpSvxxvSmhQpwsp+vUuKhVkq0NLMGqaCku2RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:1a:0b:73:c0:fd:39:8c:5d:8b:59:d9:c2:be:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Validity Not Before: Dec 5 23:00:47 2025 GMT Not After : Dec 6 23:00:47 2025 GMT Subject: CN=2d2c20f033edd03a81026dc9a44b9987fd1282b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:b8:e8:37:74:86:a8:39:2d:c1:d0:f2:97: a5:4c:61:9b:04:35:2e:12:6c:55:fb:7d:86:6b:ec: 7a:4c:9d:8e:9f:a7:39:cb:22:c6:e7:1b:d7:32:a5: e7:82:e9:ce:04:ca:7a:3d:19:0f:06:c5:2b:1e:d7: 3e:ae:97:42:4b:b7:6a:79:fc:56:6e:c8:e3:e2:81: c7:d3:b7:e6:41:05:38:1a:25:2b:7c:13:91:a6:09: 8b:f6:37:65:24:1e:2f:a1:2c:59:bd:ac:f4:f5:36: 1c:0d:d6:0e:67:be:8b:31:9e:9a:10:53:d5:08:82: a8:2a:7c:ed:b0:57:63:a3:77:d4:3f:37:aa:62:a8: 60:f2:fe:91:0b:3c:46:13:6c:b1:2a:6e:75:4b:e5: 8f:d7:e2:74:7f:f4:19:cc:27:99:43:63:91:c3:87: 96:96:c9:17:9c:43:ba:f0:d8:d0:66:d0:dd:bd:62: 97:f1:69:13:df:5c:df:7e:03:9b:f9:b9:25:79:03: 72:fa:c3:64:c3:f7:f4:28:f1:20:04:f2:86:66:75: b8:b8:28:1f:dd:33:ee:e5:9c:85:dc:dd:4f:37:6b: 04:c6:de:93:fa:89:37:f6:96:26:47:be:07:3d:2e: 40:34:b5:b0:15:94:e8:37:c3:24:af:56:c9:27:c4: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2C:20:F0:33:ED:D0:3A:81:02:6D:C9:A4:4B:99:87:FD:12:82:B6 X509v3 Authority Key Identifier: keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f3:6c:0d:52:0c:7a:03:46:25:2e:b5:3e:2d:d3:a4:1a:65: 95:3c:31:1a:f3:25:d7:fd:61:bf:ef:da:13:91:d2:18:fa:b0: 64:67:28:98:93:ab:1c:6b:25:ac:56:57:07:c0:61:e9:fd:96: f4:d5:03:17:3e:fc:f0:54:94:7f:02:60:76:8b:df:d9:ee:fe: 2f:94:bc:bb:87:dd:f0:2f:85:73:33:7d:8f:86:44:52:d2:02: 7c:17:72:d5:79:40:1e:44:38:a3:81:4e:6f:d7:8d:39:7b:ef: 24:5a:86:c5:ec:90:be:7e:c6:76:54:95:8b:12:5d:48:8d:37: ea:82:99:88:11:61:62:d5:96:8e:d4:5e:79:06:e6:09:06:cc: 63:e0:44:10:51:db:0c:c7:73:00:f8:9f:a6:07:fe:5f:e0:bf: ae:8b:30:3a:95:bb:ae:c3:7d:c1:2c:c3:ed:90:77:9c:34:21: 79:9e:51:9e:42:df:b2:6a:80:5d:18:9a:fe:0c:80:17:e0:4b: d8:69:35:7f:22:64:e4:84:86:d9:37:26:b6:88:2e:c5:4b:19: 0b:bc:e5:af:bd:9a:19:98:2c:33:55:1a:7d:66:45:db:86:31: ae:39:0e:08:bd:04:db:db:0c:d1:67:4e:51:25:fd:1b:fc:ef: 73:79:5e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxoLc8D9OYxdi1nZwr5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4 YTU1NGIwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD EygyZDJjMjBmMDMzZWRkMDNhODEwMjZkYzlhNDRiOTk4N2ZkMTI4MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt246Dd0hqg5LcHQ8pelTGGbBDUu EmxV+32Ga+x6TJ2On6c5yyLG5xvXMqXngunOBMp6PRkPBsUrHtc+rpdCS7dqefxW bsjj4oHH07fmQQU4GiUrfBORpgmL9jdlJB4voSxZvaz09TYcDdYOZ76LMZ6aEFPV CIKoKnztsFdjo3fUPzeqYqhg8v6RCzxGE2yxKm51S+WP1+J0f/QZzCeZQ2ORw4eW lskXnEO68NjQZtDdvWKX8WkT31zffgOb+bkleQNy+sNkw/f0KPEgBPKGZnW4uCgf 3TPu5ZyF3N1PN2sExt6T+ok39pYmR74HPS5ANLWwFZToN8Mkr1bJJ8RBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0sIPAz7dA6gQJtyaRLmYf9EoK2MB8GA1UdIwQY MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfNsDVIM egNGJS61Pi3TpBpllTwxGvMl1/1hv+/aE5HSGPqwZGcomJOrHGslrFZXB8Bh6f2W 9NUDFz788FSUfwJgdovf2e7+L5S8u4fd8C+FczN9j4ZEUtICfBdy1XlAHkQ4o4FO b9eNOXvvJFqGxeyQvn7GdlSVixJdSI036oKZiBFhYtWWjtReeQbmCQbMY+BEEFHb DMdzAPifpgf+X+C/roswOpW7rsN9wSzD7ZB3nDQheZ5RnkLfsmqAXRia/gyAF+BL 2Gk1fyJk5ISG2TcmtoguxUsZC7zlr72aGZgsM1UafWZF24YxrjkOCL0E29sM0WdO USX9G/zvc3lejg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:50 2025 by rpki-client