This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json) Hash identifier: u1/V0iKQsc7ZIah18fjkGI1RAMsAmyt4IhiDSY1+8Ks= Subject key identifier: 82:BE:94:DB:48:D2:99:65:C4:92:AE:F1:04:3B:00:1C:FB:D3:D7:A5 Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Certificate serial: 019AFD9FF31B8D93D66A5E09D4AF5910FC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft Manifest number: 176B Signing time: Mon 08 Dec 2025 11:01:49 +0000 Manifest this update: Mon 08 Dec 2025 11:01:49 +0000 Manifest next update: Tue 09 Dec 2025 11:01:49 +0000 Files and hashes: 1: YZGMIvadW2xPxhoSXpNJb8SDWu8.roa (hash: jQfGmlQO1sTVXZe+wmgboQPBpNBgVW+6jbuLSLsW9ZU=) 2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: SB87unScNFJvtyFrRX2AinkhR4ZjuWF9buDaKoto7RE=) 3: rtetBP97DUA2lCqt3_qex3wy1cw.roa (hash: wIFAeHjq7EkgeOiBpciajSkZ9QKt8Kq/92+zr7+OjbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:f3:1b:8d:93:d6:6a:5e:09:d4:af:59:10:fc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Validity Not Before: Dec 8 11:01:49 2025 GMT Not After : Dec 9 11:01:49 2025 GMT Subject: CN=82be94db48d29965c492aef1043b001cfbd3d7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:dc:3a:6d:48:db:6a:55:42:8a:9b:0e:55: 44:f8:a3:4e:78:1c:3e:5e:d4:4a:01:bb:44:36:4e: b4:6a:5f:53:ce:92:f4:13:32:8b:38:ae:6d:6a:aa: 87:5b:b7:11:94:55:94:81:12:d5:a0:6a:65:fe:7a: b8:be:3a:1e:8c:59:0a:1d:ec:c5:8d:5c:2f:f9:5b: 46:64:05:fc:34:79:e8:c9:33:1f:3c:8a:8f:41:33: 66:d6:38:6c:ee:06:8f:9a:c0:02:6e:36:f3:23:30: 5f:78:e5:27:ef:49:9e:88:91:0d:32:18:55:53:25: 66:da:bd:af:2f:8b:1f:3d:e0:b6:8f:32:4f:f7:89: 00:e6:14:f4:86:a8:11:11:a7:76:50:cf:20:35:ba: 17:01:3e:83:e9:96:25:1e:7b:ba:1a:da:70:8e:ff: a8:82:e2:7d:5f:f6:ce:ca:9c:e3:7b:5f:6f:d7:72: 86:0e:0d:92:af:83:94:05:1b:22:0d:c8:c2:d3:42: 5d:be:f4:9b:5a:22:63:89:b9:3e:26:0f:59:16:50: 5a:a9:a3:1d:bd:92:a5:fa:24:2d:48:89:89:a9:e8: e2:e1:f1:dc:99:c8:3c:3d:0a:e2:36:9f:ba:29:ae: ac:44:7d:b1:6a:1b:f5:ff:9b:e0:e8:ba:5d:c0:c2: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:94:DB:48:D2:99:65:C4:92:AE:F1:04:3B:00:1C:FB:D3:D7:A5 X509v3 Authority Key Identifier: keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:42:49:f3:ce:0b:12:08:21:6d:bf:a6:6b:b8:9a:a2:77:8f: 33:c8:ea:e8:24:a5:c4:46:c4:a4:d9:17:0b:24:4b:cb:4c:94: a7:30:a7:31:e4:28:dc:d0:95:e6:ff:70:4c:fa:14:11:88:be: 81:1d:4d:cf:54:c1:51:d4:e3:9c:38:12:ca:84:0d:9c:27:d9: 0c:04:41:b3:22:c0:72:9e:20:83:86:f0:e9:12:69:77:4c:b1: 1a:c2:74:0a:bf:3a:b7:f9:8a:18:98:18:6d:1b:d7:00:d2:00: c9:4c:80:54:b1:22:2e:db:70:ba:46:ac:ec:43:7b:4f:00:b2: 53:db:d9:9f:59:83:bb:f8:50:48:12:48:d4:30:09:38:85:4b: 83:57:8f:10:55:61:5b:34:55:8c:b2:62:8a:8c:4b:63:b4:1a: b8:30:e8:86:af:8d:19:14:51:a9:23:0c:a3:e5:1f:d3:34:70: 6f:b8:db:f5:3e:79:2a:ff:b9:1f:c3:6b:ea:10:03:1a:f5:63: 5a:b1:20:1d:0d:a6:9a:b7:c9:e3:b9:e7:2f:fe:fb:44:70:85: b0:c4:7f:55:de:96:01:07:e0:a9:4a:3e:e4:df:77:f3:a1:f2: 79:de:b2:00:77:18:77:56:1f:14:63:5b:19:a0:3a:08:79:cf: e1:3c:25:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9n/MbjZPWal4J1K9ZEPwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj ZDM5MzIwHhcNMjUxMjA4MTEwMTQ5WhcNMjUxMjA5MTEwMTQ5WjAzMTEwLwYDVQQD Eyg4MmJlOTRkYjQ4ZDI5OTY1YzQ5MmFlZjEwNDNiMDAxY2ZiZDNkN2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuancOm1I22pVQoqbDlVE+KNOeBw+ XtRKAbtENk60al9TzpL0EzKLOK5taqqHW7cRlFWUgRLVoGpl/nq4vjoejFkKHezF jVwv+VtGZAX8NHnoyTMfPIqPQTNm1jhs7gaPmsACbjbzIzBfeOUn70meiJENMhhV UyVm2r2vL4sfPeC2jzJP94kA5hT0hqgREad2UM8gNboXAT6D6ZYlHnu6Gtpwjv+o guJ9X/bOypzje19v13KGDg2Sr4OUBRsiDcjC00JdvvSbWiJjibk+Jg9ZFlBaqaMd vZKl+iQtSImJqeji4fHcmcg8PQriNp+6Ka6sRH2xahv1/5vg6LpdwMKA1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK+lNtI0pllxJKu8QQ7ABz709elMB8GA1UdIwQY MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut NjcxODM5MjAwNjA0LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0 LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEJJ884L Egghbb+ma7iaonePM8jq6CSlxEbEpNkXCyRLy0yUpzCnMeQo3NCV5v9wTPoUEYi+ gR1Nz1TBUdTjnDgSyoQNnCfZDARBsyLAcp4gg4bw6RJpd0yxGsJ0Cr86t/mKGJgY bRvXANIAyUyAVLEiLttwukas7EN7TwCyU9vZn1mDu/hQSBJI1DAJOIVLg1ePEFVh WzRVjLJiioxLY7QauDDohq+NGRRRqSMMo+Uf0zRwb7jb9T55Kv+5H8Nr6hADGvVj WrEgHQ2mmrfJ47nnL/77RHCFsMR/Vd6WAQfgqUo+5N9386Hyed6yAHcYd1YfFGNb GaA6CHnP4TwlBw== -----END CERTIFICATE-----Generated at Mon Dec 8 20:25:33 2025 by rpki-client