This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json) Hash identifier: b6GDqzGntdnXe0oRQFbynZ6+MAP80lFQbVLWbPkdis8= Subject key identifier: DD:4C:6F:52:F4:22:21:FE:98:5C:BB:0A:3A:71:4C:E2:1D:A5:21:05 Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Certificate serial: 019AF765FE453D0F17168BD0A4B4D567168E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft Manifest number: 0CAA Signing time: Sun 07 Dec 2025 06:00:47 +0000 Manifest this update: Sun 07 Dec 2025 06:00:47 +0000 Manifest next update: Mon 08 Dec 2025 06:00:47 +0000 Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=) 2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: JowBw5/kxAIVxdfW8G03WK7nvORcdotmMDW7SMufwoY=) 3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:65:fe:45:3d:0f:17:16:8b:d0:a4:b4:d5:67:16:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Validity Not Before: Dec 7 06:00:47 2025 GMT Not After : Dec 8 06:00:47 2025 GMT Subject: CN=dd4c6f52f42221fe985cbb0a3a714ce21da52105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:55:34:b4:9c:b2:10:f5:8b:fd:33:b3:0e: 02:bd:93:5f:15:e1:5c:cf:b2:91:9c:14:e7:4c:20: ef:3d:09:5b:6c:81:ce:0b:e0:30:57:d6:14:0f:01: 09:68:84:a9:7f:a3:28:92:87:df:cf:13:4e:ce:73: e1:92:2b:e8:2b:5b:3d:b7:c8:9d:f5:3c:99:0e:4a: 6e:ba:3b:6f:89:41:47:53:cb:53:b2:2f:91:72:bf: d4:e6:b0:fc:d5:53:ad:91:91:60:3a:1f:41:ea:ba: d7:c2:bc:28:66:86:b8:f2:43:b4:18:94:11:d7:3b: c7:31:d2:74:b9:8b:27:34:b5:d9:50:3b:78:0c:4e: 05:05:8c:0c:29:d5:e1:77:5d:ee:57:d2:60:c3:93: 38:47:30:2e:bb:1c:6b:d1:5b:c3:86:a8:ae:ee:9a: 9b:e1:be:6f:c2:d7:a3:d9:8a:5b:b1:9b:0b:8a:61: 28:c1:26:3c:e6:03:96:54:c1:a3:d1:c1:b3:75:2e: 47:77:18:fe:54:4a:5c:54:f7:db:16:9f:38:8b:77: 61:75:08:20:e4:4c:e3:ba:97:d5:ab:12:25:7c:2d: 12:a3:0a:1a:a7:80:24:20:9c:fe:70:08:73:d6:c9: 15:88:9d:ce:df:f3:c9:8d:ba:97:47:05:fd:99:9a: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4C:6F:52:F4:22:21:FE:98:5C:BB:0A:3A:71:4C:E2:1D:A5:21:05 X509v3 Authority Key Identifier: keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:d2:c6:d6:b0:f8:9a:69:4d:bf:cd:94:61:cf:c7:0a:56: 4c:25:0d:0d:70:ff:05:b5:30:1d:29:e8:fc:a6:0a:c9:ac:72: 9f:b3:6c:bf:40:1b:d2:2b:fe:35:48:38:3b:f7:c6:1f:20:c1: 91:3d:16:21:ef:30:0a:bd:b6:e4:cf:58:c9:ec:19:95:b5:b4: a2:9e:69:a9:6a:25:5d:02:86:c2:b6:fd:41:78:81:9a:9f:ef: cf:34:97:f0:a2:b9:ba:96:b7:5c:79:36:94:f1:53:b3:33:ec: b0:e4:f8:c1:36:11:ef:2b:9e:64:07:1b:71:f8:1f:30:c6:2f: 2c:d4:f0:32:2b:94:12:86:12:b9:8f:67:03:a7:95:b6:31:24: 81:92:7a:69:4d:99:d6:af:34:15:fb:d2:84:a0:ea:6f:79:37: 93:62:8e:ab:a6:b9:72:ed:ce:62:7b:2a:eb:9b:b4:54:e6:49: b4:f1:f2:9c:a8:22:21:c0:26:66:70:10:dd:e5:0b:f9:c7:10: 6f:2b:fc:f0:41:59:65:19:e4:ac:c5:d0:37:c0:0b:76:38:d7: 15:83:86:97:a6:5b:42:37:e7:4c:1e:a3:64:19:80:85:34:34: c7:23:50:40:fa:bf:87:59:c1:e0:14:71:86:9e:72:77:f6:18: 74:e8:84:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Zf5FPQ8XFovQpLTVZxaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi ZGY5ODAwHhcNMjUxMjA3MDYwMDQ3WhcNMjUxMjA4MDYwMDQ3WjAzMTEwLwYDVQQD EyhkZDRjNmY1MmY0MjIyMWZlOTg1Y2JiMGEzYTcxNGNlMjFkYTUyMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNVNLScshD1i/0zsw4CvZNfFeFc z7KRnBTnTCDvPQlbbIHOC+AwV9YUDwEJaISpf6MokoffzxNOznPhkivoK1s9t8id 9TyZDkpuujtviUFHU8tTsi+Rcr/U5rD81VOtkZFgOh9B6rrXwrwoZoa48kO0GJQR 1zvHMdJ0uYsnNLXZUDt4DE4FBYwMKdXhd13uV9Jgw5M4RzAuuxxr0VvDhqiu7pqb 4b5vwtej2YpbsZsLimEowSY85gOWVMGj0cGzdS5Hdxj+VEpcVPfbFp84i3dhdQgg 5EzjupfVqxIlfC0Sowoap4AkIJz+cAhz1skViJ3O3/PJjbqXRwX9mZoscQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1Mb1L0IiH+mFy7CjpxTOIdpSEFMB8GA1UdIwQY MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqPSxtaw +JppTb/NlGHPxwpWTCUNDXD/BbUwHSno/KYKyaxyn7Nsv0Ab0iv+NUg4O/fGHyDB kT0WIe8wCr225M9YyewZlbW0op5pqWolXQKGwrb9QXiBmp/vzzSX8KK5upa3XHk2 lPFTszPssOT4wTYR7yueZAcbcfgfMMYvLNTwMiuUEoYSuY9nA6eVtjEkgZJ6aU2Z 1q80FfvShKDqb3k3k2KOq6a5cu3OYnsq65u0VOZJtPHynKgiIcAmZnAQ3eUL+ccQ byv88EFZZRnkrMXQN8ALdjjXFYOGl6ZbQjfnTB6jZBmAhTQ0xyNQQPq/h1nB4BRx hp5yd/YYdOiEuA== -----END CERTIFICATE-----Generated at Sun Dec 7 10:12:54 2025 by rpki-client