This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json) Hash identifier: Xxm7loeR3PrQD0ahBysQXVbR8bEztI4b8E71VA687YY= Subject key identifier: D5:31:07:E9:FF:9D:A7:09:A7:4B:EC:0B:0D:C4:1E:4F:71:09:DB:4E Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019AF0F5CF3D9A26CB1F1DBD2493A12E927C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft Manifest number: 113E Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=) 2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=) 3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=) 4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=) 5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=) 6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: cWg5RF9t7TGTqRbPDFp+ZM9d8AwUHKCy6ev+dBMEoCg=) 7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cf:3d:9a:26:cb:1f:1d:bd:24:93:a1:2e:92:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=d53107e9ff9da709a74bec0b0dc41e4f7109db4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:2c:91:e2:00:64:4f:b8:c1:28:5c:a9:3b: 4d:95:be:de:30:2a:4d:54:5e:2a:fb:09:10:04:46: b9:7e:9c:0e:00:d6:0e:61:47:41:b0:7e:00:34:f1: 2f:43:27:bc:98:2b:83:9e:aa:c9:2e:78:bb:7c:5f: 7d:b6:59:c0:fb:33:c0:37:e8:fb:87:fa:09:a4:fa: 91:9d:7a:74:cf:28:9d:bc:97:fd:b9:ae:48:13:0a: 6d:5e:8a:c6:4e:57:77:90:13:59:53:ae:a1:55:5a: 0c:27:cf:ea:d2:76:36:33:99:a2:41:fa:1d:4d:8f: 3f:b7:49:4e:eb:95:f9:2f:37:e3:f6:9c:b7:de:c1: 2b:fa:d4:10:e9:d5:a6:86:86:51:6a:8e:9e:39:d1: 11:fa:28:90:06:6b:0c:cd:50:8c:f7:2c:45:cf:4f: 2d:f4:fa:43:56:95:d6:82:28:f6:a1:d2:87:0a:c0: b0:60:cb:38:56:c4:0b:85:cd:bd:a5:bc:21:c8:19: 25:c2:eb:f8:27:bf:ed:69:3d:d5:ea:3b:8b:76:7e: 1b:56:de:38:63:43:47:23:8a:8a:96:4a:16:bc:e4: 50:61:d6:97:e0:69:13:3b:a9:7a:94:38:90:0f:8a: 0a:54:05:8e:41:a9:17:4f:a9:30:44:c4:7c:89:30: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:31:07:E9:FF:9D:A7:09:A7:4B:EC:0B:0D:C4:1E:4F:71:09:DB:4E X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:8a:cd:92:2a:55:63:75:14:9d:cc:dd:d3:2c:47:7e:fd: e0:61:75:bc:6f:b4:87:4b:3f:e8:b7:f5:20:e7:26:84:38:47: e3:d7:72:dd:77:89:c4:11:bb:d5:9a:9b:81:71:8f:df:42:29: e0:4c:d8:b0:47:5e:26:8d:f5:65:dd:5c:e3:43:aa:d3:e8:b8: c1:fe:71:11:82:1c:d0:e3:fe:1d:ec:29:76:59:30:f1:59:3a: 48:d1:d3:e5:e3:d4:17:f5:40:45:5a:aa:0c:b0:d7:8f:12:20: a8:58:20:59:ef:a1:4b:80:7b:40:89:fa:d5:a9:d6:1f:fc:e1: 30:8d:71:6c:32:fb:f6:46:57:54:8e:3a:0d:71:6a:9f:c4:6a: 95:72:ff:09:47:aa:70:ca:3e:8a:b3:8c:e9:eb:38:09:de:e5: 73:05:ff:a8:11:93:5c:69:a0:89:0c:1d:ae:8b:87:be:ad:8e: d2:3d:94:88:74:4a:9b:26:9d:2c:6c:4e:09:53:49:63:f6:63: e2:7b:5e:20:e0:c7:31:a4:de:85:3c:08:3b:37:a9:fd:22:3c: 2e:c2:34:30:eb:76:60:28:ef:1d:98:64:1b:1a:4d:3f:99:69: 27:39:9a:87:4b:04:f2:8b:ae:2e:6b:17:21:37:86:0b:d0:be: ab:72:44:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c89mibLHx29JJOhLpJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD EyhkNTMxMDdlOWZmOWRhNzA5YTc0YmVjMGIwZGM0MWU0ZjcxMDlkYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UQskeIAZE+4wShcqTtNlb7eMCpN VF4q+wkQBEa5fpwOANYOYUdBsH4ANPEvQye8mCuDnqrJLni7fF99tlnA+zPAN+j7 h/oJpPqRnXp0zyidvJf9ua5IEwptXorGTld3kBNZU66hVVoMJ8/q0nY2M5miQfod TY8/t0lO65X5Lzfj9py33sEr+tQQ6dWmhoZRao6eOdER+iiQBmsMzVCM9yxFz08t 9PpDVpXWgij2odKHCsCwYMs4VsQLhc29pbwhyBklwuv4J7/taT3V6juLdn4bVt44 Y0NHI4qKlkoWvORQYdaX4GkTO6l6lDiQD4oKVAWOQakXT6kwRMR8iTAPPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUxB+n/nacJp0vsCw3EHk9xCdtOMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzCKzZIq VWN1FJ3M3dMsR3794GF1vG+0h0s/6Lf1IOcmhDhH49dy3XeJxBG71ZqbgXGP30Ip 4EzYsEdeJo31Zd1c40Oq0+i4wf5xEYIc0OP+Hewpdlkw8Vk6SNHT5ePUF/VARVqq DLDXjxIgqFggWe+hS4B7QIn61anWH/zhMI1xbDL79kZXVI46DXFqn8RqlXL/CUeq cMo+irOM6es4Cd7lcwX/qBGTXGmgiQwdrouHvq2O0j2UiHRKmyadLGxOCVNJY/Zj 4nteIODHMaTehTwIOzep/SI8LsI0MOt2YCjvHZhkGxpNP5lpJzmah0sE8ouuLmsX ITeGC9C+q3JEGw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:33 2025 by rpki-client