This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json) Hash identifier: rz+dQeDcUjDeGyicXykn5Br3etOkIgmkaQCk2hzHdQI= Subject key identifier: 71:CF:79:06:75:AA:40:34:77:45:AB:8D:4F:17:69:5F:7A:FD:C4:D4 Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4 Certificate serial: 019AFA672295E6A4B6B3A77676302C75EF38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft Manifest number: 0828 Signing time: Sun 07 Dec 2025 20:00:54 +0000 Manifest this update: Sun 07 Dec 2025 20:00:54 +0000 Manifest next update: Mon 08 Dec 2025 20:00:54 +0000 Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=) 2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: c4OxwCROKi1gCUn0DyhHE8kS+bCJlamQ6+yUgnfgxJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:22:95:e6:a4:b6:b3:a7:76:76:30:2c:75:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4 Validity Not Before: Dec 7 20:00:54 2025 GMT Not After : Dec 8 20:00:54 2025 GMT Subject: CN=71cf790675aa40347745ab8d4f17695f7afdc4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:aa:73:be:c1:82:40:c6:44:1a:f7:a3:45: fe:7f:1d:6e:41:18:0b:82:3d:8a:c3:7c:79:93:ff: d5:9a:d4:c7:6d:cb:e0:05:bc:28:79:d3:91:04:4d: ae:c2:f8:6d:89:55:f1:25:70:37:53:2b:7b:c0:26: 5d:eb:fa:88:b0:7f:d0:b5:09:78:0c:43:30:13:10: 9b:a6:b8:63:d3:c7:36:ed:84:22:7f:1f:ec:91:a8: ff:55:1e:4e:0b:da:e4:b8:89:57:2a:54:be:fa:84: e6:03:55:c0:e5:47:85:9c:89:9c:7c:a2:5d:cd:da: 43:8d:af:0e:ba:d3:65:e1:b0:59:ec:22:a4:03:7d: 39:b1:8a:be:64:d2:d9:c5:58:a7:26:70:80:06:07: fd:73:dd:8b:f9:1a:85:d1:b6:b6:52:65:58:f7:d3: 58:4e:63:5a:f4:84:69:31:4f:75:ac:60:33:70:2a: 20:ac:5c:80:4a:ae:77:7a:99:70:79:86:26:54:84: 1f:a3:25:c3:ac:5c:66:54:93:1c:56:72:cf:db:f5: 23:b3:ce:48:40:ea:1f:4e:52:59:6b:d7:20:bd:c1: 30:35:01:11:a3:1b:04:df:3a:ba:20:61:74:5d:3f: a5:63:5b:66:d9:18:a4:e7:27:68:4e:85:c6:4b:68: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:79:06:75:AA:40:34:77:45:AB:8D:4F:17:69:5F:7A:FD:C4:D4 X509v3 Authority Key Identifier: keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:91:01:10:e8:2f:ff:a5:38:96:d6:c9:5b:c8:44:d8:19:40: 71:27:39:1d:5d:f7:11:23:a2:5a:81:66:44:79:f9:fe:c9:91: 31:54:b3:6f:a5:ac:fb:37:1a:79:3f:c5:62:6d:65:27:d4:89: 4b:6d:66:2c:b1:0d:6e:0d:2b:41:2a:05:92:5d:92:c4:34:f8: c3:93:5b:46:1b:89:e6:ac:34:cd:2f:7d:77:67:a2:7f:fd:89: 76:36:18:98:27:f4:51:f9:79:63:e3:fd:fa:8a:61:02:fe:bd: 5a:c8:95:e7:e9:7c:19:f8:d4:15:7c:cb:10:d4:6f:3c:38:6f: 3e:51:a5:20:50:42:0f:0b:84:41:67:17:36:27:87:b4:f8:7a: 4f:fb:33:81:d6:11:0d:59:6c:38:cd:ec:ae:36:37:e7:ba:22: 97:04:40:76:f0:73:90:d2:5b:bc:dd:24:c5:4a:3d:54:c6:ed: 8e:e9:f5:70:a8:00:b4:27:37:fc:37:3c:ed:fe:bd:67:24:37: ea:17:05:0c:d0:d6:05:d7:0b:9e:24:d7:d2:d2:54:3e:59:31: a8:b0:b5:9f:7b:8f:fb:2b:dc:55:4d:59:e6:02:36:b5:94:cb: 62:6d:8c:96:32:7e:9a:ec:f9:0f:e0:4e:bc:10:db:4d:70:30: 9b:61:2c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6ZyKV5qS2s6d2djAsde84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1 ZjkwZTQwHhcNMjUxMjA3MjAwMDU0WhcNMjUxMjA4MjAwMDU0WjAzMTEwLwYDVQQD Eyg3MWNmNzkwNjc1YWE0MDM0Nzc0NWFiOGQ0ZjE3Njk1ZjdhZmRjNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MKqc77BgkDGRBr3o0X+fx1uQRgL gj2Kw3x5k//VmtTHbcvgBbwoedORBE2uwvhtiVXxJXA3Uyt7wCZd6/qIsH/QtQl4 DEMwExCbprhj08c27YQifx/skaj/VR5OC9rkuIlXKlS++oTmA1XA5UeFnImcfKJd zdpDja8OutNl4bBZ7CKkA305sYq+ZNLZxVinJnCABgf9c92L+RqF0ba2UmVY99NY TmNa9IRpMU91rGAzcCogrFyASq53eplweYYmVIQfoyXDrFxmVJMcVnLP2/Ujs85I QOofTlJZa9cgvcEwNQERoxsE3zq6IGF0XT+lY1tm2Rik5ydoToXGS2iBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHPeQZ1qkA0d0WrjU8XaV96/cTUMB8GA1UdIwQY MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5EBEOgv /6U4ltbJW8hE2BlAcSc5HV33ESOiWoFmRHn5/smRMVSzb6Ws+zcaeT/FYm1lJ9SJ S21mLLENbg0rQSoFkl2SxDT4w5NbRhuJ5qw0zS99d2eif/2JdjYYmCf0Ufl5Y+P9 +ophAv69WsiV5+l8GfjUFXzLENRvPDhvPlGlIFBCDwuEQWcXNieHtPh6T/szgdYR DVlsOM3srjY357oilwRAdvBzkNJbvN0kxUo9VMbtjun1cKgAtCc3/Dc87f69ZyQ3 6hcFDNDWBdcLniTX0tJUPlkxqLC1n3uP+yvcVU1Z5gI2tZTLYm2MljJ+muz5D+BO vBDbTXAwm2EsXg== -----END CERTIFICATE-----Generated at Mon Dec 8 00:03:21 2025 by rpki-client