This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json) Hash identifier: UAoniRbvNaDjovbHRu5BS5kiPSUCMs+OMZM648BvKiM= Subject key identifier: B2:28:01:B3:08:D8:4C:0A:3F:47:18:F2:1E:87:33:40:AB:2F:D0:CE Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019AFCC43B44B1693249FA90480C5BEFAAB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft Manifest number: 0F44 Signing time: Mon 08 Dec 2025 07:01:49 +0000 Manifest this update: Mon 08 Dec 2025 07:01:49 +0000 Manifest next update: Tue 09 Dec 2025 07:01:49 +0000 Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=) 2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: VjwYHcdMmv6g1y1NVNqWKYWiqEA8JQVGljT8pPmDI+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:3b:44:b1:69:32:49:fa:90:48:0c:5b:ef:aa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Dec 8 07:01:49 2025 GMT Not After : Dec 9 07:01:49 2025 GMT Subject: CN=b22801b308d84c0a3f4718f21e873340ab2fd0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:dd:73:ab:f0:07:53:d9:76:49:bf:27:56: 23:6e:e6:10:46:25:63:4d:0a:5e:67:0a:29:2f:69: d9:73:26:49:77:81:ae:e5:6f:f7:47:18:93:ee:ba: cd:4a:4c:0e:f7:36:9d:3f:8d:fd:0a:05:60:56:11: 6e:51:eb:13:65:18:be:3a:d0:50:44:6e:d6:27:a1: dc:d9:48:a1:7d:e0:10:7b:53:89:7e:79:a1:69:a7: 8a:ab:51:9c:97:c8:91:32:04:22:e3:96:6d:4e:9b: 39:7f:9f:4f:f6:62:17:58:b0:ad:08:5e:54:51:0e: af:83:da:b3:2e:4d:e7:b3:7f:55:79:f1:3f:3d:7d: d4:c7:b9:32:70:b8:65:b6:1c:c9:42:c8:d5:a1:0e: 0c:63:13:79:06:62:2c:3d:a8:a6:1d:12:e7:93:3a: 54:c7:95:44:fd:28:a2:d6:d7:b7:98:0f:e2:90:3a: 99:3a:07:28:fa:64:8a:5e:51:3a:b3:3b:46:f5:c1: 92:a9:e3:d0:c7:ef:e0:e7:c6:5e:d8:ed:c1:7b:67: 92:ec:b4:13:c5:df:1b:bf:32:21:f0:9d:82:e2:2f: 8a:e7:f2:17:7b:5e:bd:84:59:b7:b4:4b:88:4a:38: 68:35:1a:fb:5e:f1:a5:b8:42:71:88:dc:ff:37:2c: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:01:B3:08:D8:4C:0A:3F:47:18:F2:1E:87:33:40:AB:2F:D0:CE X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:fc:3a:cc:be:34:04:be:8c:4a:7a:3f:9a:53:e2:15:e5:c2: 85:b9:08:85:bd:b2:13:ed:b3:88:39:e8:9f:e0:5d:62:ee:ea: 6f:d8:c6:da:ff:46:54:af:2e:b1:51:9d:09:9c:58:76:2b:12: ae:89:66:cd:31:07:cd:c9:4f:6b:e8:e3:d9:29:60:f7:ac:39: 75:00:90:06:30:6d:91:b2:33:b8:a7:23:84:fc:a6:95:0c:cd: d1:2b:59:3b:88:1d:51:c7:82:5d:11:6e:5a:9a:cd:02:bc:7a: da:f2:8a:87:db:c8:ba:4e:7e:54:bf:e7:71:11:e3:38:00:77: b2:89:2f:04:ce:63:1a:b2:4b:8d:a3:3a:3c:b6:dc:97:ed:3d: 54:3c:8b:d4:59:82:ca:1b:ec:42:16:ee:3e:b5:ca:a8:51:74: ac:49:9b:5c:e5:20:82:3d:30:fd:b0:7f:65:45:f5:7a:2f:9e: 4b:18:6c:ea:db:19:d4:dd:e3:2e:4e:ec:77:f1:b7:a4:86:9a: f3:15:e6:e6:4d:cc:bb:5e:28:ec:b3:a8:24:d9:d3:3e:cc:9c: 82:8b:b7:f2:da:7e:b9:d1:8e:ec:f0:30:45:e9:f4:89:61:60: 10:37:5c:22:aa:4a:dd:ce:ab:d4:7c:b1:21:4d:b3:36:7a:b2: 6d:ac:b2:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xDtEsWkySfqQSAxb76qwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjUxMjA4MDcwMTQ5WhcNMjUxMjA5MDcwMTQ5WjAzMTEwLwYDVQQD EyhiMjI4MDFiMzA4ZDg0YzBhM2Y0NzE4ZjIxZTg3MzM0MGFiMmZkMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmvdc6vwB1PZdkm/J1YjbuYQRiVj TQpeZwopL2nZcyZJd4Gu5W/3RxiT7rrNSkwO9zadP439CgVgVhFuUesTZRi+OtBQ RG7WJ6Hc2UihfeAQe1OJfnmhaaeKq1Gcl8iRMgQi45ZtTps5f59P9mIXWLCtCF5U UQ6vg9qzLk3ns39VefE/PX3Ux7kycLhlthzJQsjVoQ4MYxN5BmIsPaimHRLnkzpU x5VE/Sii1te3mA/ikDqZOgco+mSKXlE6sztG9cGSqePQx+/g58Ze2O3Be2eS7LQT xd8bvzIh8J2C4i+K5/IXe169hFm3tEuISjhoNRr7XvGluEJxiNz/Nyw7uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIoAbMI2EwKP0cY8h6HM0CrL9DOMB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0/w6zL40 BL6MSno/mlPiFeXChbkIhb2yE+2ziDnon+BdYu7qb9jG2v9GVK8usVGdCZxYdisS rolmzTEHzclPa+jj2Slg96w5dQCQBjBtkbIzuKcjhPymlQzN0StZO4gdUceCXRFu WprNArx62vKKh9vIuk5+VL/ncRHjOAB3sokvBM5jGrJLjaM6PLbcl+09VDyL1FmC yhvsQhbuPrXKqFF0rEmbXOUggj0w/bB/ZUX1ei+eSxhs6tsZ1N3jLk7sd/G3pIaa 8xXm5k3Mu14o7LOoJNnTPsycgou38tp+udGO7PAwRen0iWFgEDdcIqpK3c6r1Hyx IU2zNnqybayy1w== -----END CERTIFICATE-----Generated at Mon Dec 8 08:40:23 2025 by rpki-client