This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json) Hash identifier: G/bXi8JSwmsO6hd8Tqo8rk5b5XL0DNQjp/3d+tOp+nM= Subject key identifier: E0:A2:53:9D:9F:30:45:19:81:B7:C4:74:77:7F:08:08:A6:4E:F4:EC Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Certificate serial: 019B2B1CB2346B643325F979616F63A5E384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 07:00:59 +0000 Manifest this update: Wed 17 Dec 2025 07:00:59 +0000 Manifest next update: Thu 18 Dec 2025 07:00:59 +0000 Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=) 2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: Gz/Z1CW2LSyd1ytK3TZQqp1OssNrzrhAmPc6r2+G8S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:b2:34:6b:64:33:25:f9:79:61:6f:63:a5:e3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Validity Not Before: Dec 17 07:00:59 2025 GMT Not After : Dec 18 07:00:59 2025 GMT Subject: CN=e0a2539d9f30451981b7c474777f0808a64ef4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:cd:ab:60:9b:a8:68:3b:85:00:5c:3c:b5: df:01:4e:fa:15:2d:03:e5:bf:8d:21:43:c1:ad:70: 9a:34:b8:8f:a5:9b:cd:16:8b:7b:f7:16:80:00:54: 3c:54:44:c1:9e:42:79:c8:e7:eb:0a:2e:88:17:f7: 08:14:03:d0:3e:ae:65:83:59:34:c8:cd:4f:e3:20: 19:cd:75:5e:24:41:30:31:72:37:24:2c:ab:87:48: b8:4f:05:28:ad:57:65:2f:2b:68:b8:69:04:2e:ef: 28:c9:e7:14:c7:6a:7a:ab:69:8b:50:2c:d6:2d:eb: 0a:dc:07:b8:36:80:60:22:ac:3f:42:a3:11:e7:47: 26:74:6b:d9:4b:09:ee:f4:ba:c7:44:32:39:36:d1: 29:07:67:3c:c9:8b:6a:e9:57:db:bc:06:c1:96:f1: 1e:0c:33:35:84:bf:57:c0:a6:6f:86:9b:ed:a7:2d: 25:ab:dc:9a:c0:c7:e4:3e:7a:6b:2f:b2:2d:87:a3: 4e:51:ca:54:21:a0:f5:9f:28:ca:a3:50:a0:fa:d1: cf:69:59:52:b6:e9:a7:3e:b4:f7:df:64:ce:aa:1b: bb:c6:89:4a:77:1c:51:68:e0:17:4e:55:d3:c0:fe: ad:71:2b:ea:fb:71:5b:46:47:c6:67:c5:db:55:54: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A2:53:9D:9F:30:45:19:81:B7:C4:74:77:7F:08:08:A6:4E:F4:EC X509v3 Authority Key Identifier: keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:45:b1:dc:06:0c:e2:b2:34:16:52:9c:41:96:71:85:4b:49: a8:bf:bd:3a:22:dc:65:c6:52:ff:6a:ea:a8:ac:9e:55:d1:e1: 7d:54:93:ce:e1:57:30:3b:7c:a9:93:54:3d:3a:0c:71:c8:b8: d1:64:fe:3d:8c:dc:10:e9:db:e8:57:81:d0:bf:d3:7d:27:81: 92:6d:96:ba:46:65:c7:47:bb:a7:09:99:22:40:71:7b:3b:34: 92:cf:33:79:92:3d:02:77:cf:ac:2e:59:2f:f9:c0:8e:49:8a: 64:e6:01:f7:96:d5:d1:64:94:c3:e9:e4:a9:c3:e7:c4:54:b4: b4:e3:51:f6:b0:a9:77:2c:c7:23:8c:a7:c0:1c:0c:2f:81:3e: 4c:ae:fc:9c:a6:13:88:e5:5e:7a:42:2e:72:27:f3:4f:a9:4f: fc:3e:6e:56:14:5c:00:e5:cf:03:3f:10:1d:d3:52:28:5d:e5: 88:fd:99:58:17:39:11:30:f7:b2:85:7d:d2:77:77:46:d2:79: f7:5e:b0:0f:b2:10:5f:72:25:db:dc:d1:d7:7e:1c:86:e9:54: 1d:d6:fb:26:3d:20:a4:cd:58:d9:9a:e2:8b:47:6c:50:d5:1d: e2:14:26:31:a0:e4:16:1a:28:92:55:a8:30:c1:4a:54:43:41: 79:d8:9b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHLI0a2QzJfl5YW9jpeOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4 YTFmODIwHhcNMjUxMjE3MDcwMDU5WhcNMjUxMjE4MDcwMDU5WjAzMTEwLwYDVQQD EyhlMGEyNTM5ZDlmMzA0NTE5ODFiN2M0NzQ3NzdmMDgwOGE2NGVmNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlHNq2CbqGg7hQBcPLXfAU76FS0D 5b+NIUPBrXCaNLiPpZvNFot79xaAAFQ8VETBnkJ5yOfrCi6IF/cIFAPQPq5lg1k0 yM1P4yAZzXVeJEEwMXI3JCyrh0i4TwUorVdlLytouGkELu8oyecUx2p6q2mLUCzW LesK3Ae4NoBgIqw/QqMR50cmdGvZSwnu9LrHRDI5NtEpB2c8yYtq6VfbvAbBlvEe DDM1hL9XwKZvhpvtpy0lq9yawMfkPnprL7Ith6NOUcpUIaD1nyjKo1Cg+tHPaVlS tumnPrT332TOqhu7xolKdxxRaOAXTlXTwP6tcSvq+3FbRkfGZ8XbVVRNJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCiU52fMEUZgbfEdHd/CAimTvTsMB8GA1UdIwQY MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEWx3AYM 4rI0FlKcQZZxhUtJqL+9OiLcZcZS/2rqqKyeVdHhfVSTzuFXMDt8qZNUPToMcci4 0WT+PYzcEOnb6FeB0L/TfSeBkm2WukZlx0e7pwmZIkBxezs0ks8zeZI9AnfPrC5Z L/nAjkmKZOYB95bV0WSUw+nkqcPnxFS0tONR9rCpdyzHI4ynwBwML4E+TK78nKYT iOVeekIucifzT6lP/D5uVhRcAOXPAz8QHdNSKF3liP2ZWBc5ETD3soV90nd3RtJ5 916wD7IQX3Il29zR134chulUHdb7Jj0gpM1Y2Zrii0dsUNUd4hQmMaDkFhooklWo MMFKVENBedibHA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:24 2025 by rpki-client