This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json) Hash identifier: /xQBR8zI4BwBdEI7lp7U8BZcWT+0ezrywqrRoLSq/80= Subject key identifier: 93:1C:61:05:BE:0A:55:0D:1D:E2:D2:69:B7:F0:21:BC:34:FE:7C:AA Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Certificate serial: 019AF57850DC69D24639BD7787CB53A80F24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft Manifest number: 0C23 Signing time: Sat 06 Dec 2025 21:01:34 +0000 Manifest this update: Sat 06 Dec 2025 21:01:34 +0000 Manifest next update: Sun 07 Dec 2025 21:01:34 +0000 Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: Nyif/Fr8mU+QDZXzYFHG5EyAgrAPe8nVhoGnTZng4Yw=) 2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:50:dc:69:d2:46:39:bd:77:87:cb:53:a8:0f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Validity Not Before: Dec 6 21:01:34 2025 GMT Not After : Dec 7 21:01:34 2025 GMT Subject: CN=931c6105be0a550d1de2d269b7f021bc34fe7caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:f9:b5:24:c5:42:43:51:f5:4c:f7:e9:0f: 8b:d8:a7:1d:c6:79:d1:e1:be:59:4a:c1:cc:74:9e: 12:db:b1:03:d8:6a:1b:88:b0:05:a9:92:26:a6:bf: b7:1c:1c:39:ad:94:9e:7c:b7:75:d1:11:69:a6:8e: 82:15:a7:04:aa:51:b3:7a:4c:dc:3e:b7:18:32:e3: 4e:66:51:31:f2:2c:ab:72:76:c5:d8:3b:61:d6:b4: 3e:b3:2f:7f:a7:05:de:bb:ee:a1:c9:30:fd:06:74: 6e:f8:95:9c:57:1a:db:88:06:03:b1:07:34:d6:80: a9:88:35:f2:20:41:2e:a6:63:6f:49:82:74:de:e0: 1e:12:03:ef:db:ea:53:43:b2:d2:21:f2:65:6e:d7: 80:b4:91:6e:61:17:37:39:3b:79:90:87:4d:8e:97: a0:c9:9c:47:ea:a8:42:4d:a0:b5:4f:bf:a9:0f:ed: 39:5c:84:1a:06:af:ed:97:84:27:5e:49:6b:be:a3: 78:8c:26:17:bb:36:86:90:6f:d0:57:fb:8e:56:76: e8:0e:83:c8:21:07:86:b1:dd:fb:8d:f3:5b:ef:09: 39:fd:d7:9b:c8:59:71:87:64:df:28:10:fa:36:6e: a5:4c:f3:4b:5c:70:ac:03:3a:61:23:d6:45:2b:d5: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1C:61:05:BE:0A:55:0D:1D:E2:D2:69:B7:F0:21:BC:34:FE:7C:AA X509v3 Authority Key Identifier: keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:87:46:6e:91:6b:f3:ce:e7:a9:ea:8f:df:84:4c:6f:a6:c6: 6a:5b:55:d1:b6:73:ad:54:4b:cb:ca:9a:4b:b2:fd:8b:95:df: db:6d:2c:84:1b:50:4e:92:40:21:c6:d9:7f:ce:9e:73:f7:e4: 52:75:49:a3:31:74:31:0a:e9:d3:0b:3d:8c:98:34:81:c4:f5: fe:3c:b9:9c:b1:dc:f3:61:ad:c6:4f:07:ac:89:4e:a3:5a:5f: 96:8c:48:bf:82:4b:7d:63:9c:ff:b8:ab:e0:29:f7:60:df:2b: b1:e0:e3:e0:c0:ef:5b:53:3b:c9:84:24:51:b2:8b:84:8f:90: 3a:eb:78:b0:b2:73:e9:17:4d:1f:25:e1:e9:98:93:d8:12:97: d0:f2:2f:3d:99:5b:cb:2a:fa:28:1d:2f:07:94:b7:cd:6b:82: 62:a3:0e:4c:e1:ef:83:a2:55:ff:60:8c:35:a2:dc:e8:3a:be: 35:1f:81:17:3d:ac:06:b4:40:90:fc:47:57:73:65:a9:9c:0a: 71:16:7e:24:50:ca:c4:ac:81:e6:fc:5b:85:ae:1b:0c:a0:7d: a2:03:50:2d:31:c3:a4:83:3c:4d:89:6c:4d:c7:ea:a2:ff:72: 99:49:0c:60:73:c0:70:f4:73:65:c4:89:21:a2:16:3b:54:97: 4f:2c:26:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFDcadJGOb13h8tTqA8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3 NmNkODUwHhcNMjUxMjA2MjEwMTM0WhcNMjUxMjA3MjEwMTM0WjAzMTEwLwYDVQQD Eyg5MzFjNjEwNWJlMGE1NTBkMWRlMmQyNjliN2YwMjFiYzM0ZmU3Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3j5tSTFQkNR9Uz36Q+L2KcdxnnR 4b5ZSsHMdJ4S27ED2GobiLAFqZImpr+3HBw5rZSefLd10RFppo6CFacEqlGzekzc PrcYMuNOZlEx8iyrcnbF2Dth1rQ+sy9/pwXeu+6hyTD9BnRu+JWcVxrbiAYDsQc0 1oCpiDXyIEEupmNvSYJ03uAeEgPv2+pTQ7LSIfJlbteAtJFuYRc3OTt5kIdNjpeg yZxH6qhCTaC1T7+pD+05XIQaBq/tl4QnXklrvqN4jCYXuzaGkG/QV/uOVnboDoPI IQeGsd37jfNb7wk5/debyFlxh2TfKBD6Nm6lTPNLXHCsAzphI9ZFK9WpywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMcYQW+ClUNHeLSabfwIbw0/nyqMB8GA1UdIwQY MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4 LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYdGbpFr 887nqeqP34RMb6bGaltV0bZzrVRLy8qaS7L9i5Xf220shBtQTpJAIcbZf86ec/fk UnVJozF0MQrp0ws9jJg0gcT1/jy5nLHc82Gtxk8HrIlOo1pfloxIv4JLfWOc/7ir 4Cn3YN8rseDj4MDvW1M7yYQkUbKLhI+QOut4sLJz6RdNHyXh6ZiT2BKX0PIvPZlb yyr6KB0vB5S3zWuCYqMOTOHvg6JV/2CMNaLc6Dq+NR+BFz2sBrRAkPxHV3NlqZwK cRZ+JFDKxKyB5vxbha4bDKB9ogNQLTHDpIM8TYlsTcfqov9ymUkMYHPAcPRzZcSJ IaIWO1SXTywmEQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:14 2025 by rpki-client