This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json) Hash identifier: we5Z44yjE885gt5+CavLL2PRt2cdVSu2dSAeDeGKT+k= Subject key identifier: 20:CE:14:EF:F5:54:00:43:6A:86:C2:3E:7F:DB:F8:03:99:0A:37:68 Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459 Certificate serial: 019AF49BE27E41719B802D464F6F7F6A0702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:47 +0000 Manifest this update: Sat 06 Dec 2025 17:00:47 +0000 Manifest next update: Sun 07 Dec 2025 17:00:47 +0000 Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=) 2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: x/r482QlVqhSc2/IxsHuz74AKlXpKGM0Bc5/3RPcESA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e2:7e:41:71:9b:80:2d:46:4f:6f:7f:6a:07:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459 Validity Not Before: Dec 6 17:00:47 2025 GMT Not After : Dec 7 17:00:47 2025 GMT Subject: CN=20ce14eff55400436a86c23e7fdbf803990a3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:b1:1a:4e:54:de:4f:26:2c:2a:e1:18:1f: 70:ab:fc:39:79:b0:47:d1:28:1e:66:bd:8f:a0:a6: 10:f6:2a:e3:58:f2:e5:3b:04:bc:3e:08:4e:2a:18: 3d:35:59:b5:62:2a:82:4e:50:a9:a7:f3:98:b3:14: f9:e8:36:f6:38:70:52:02:7f:00:c7:5b:76:16:fd: 1f:dd:7a:bc:e9:a2:ec:cd:4f:d6:65:f6:b7:6c:b3: bc:01:b0:ab:25:60:5f:da:a2:30:96:8c:ab:bb:d0: cd:6c:f6:bd:43:df:a0:39:e8:c8:b2:e0:1c:54:05: 6d:a3:64:fb:86:bc:2f:47:ad:5c:ae:f6:64:16:7b: 8e:40:28:d4:e1:21:41:4e:e6:8a:51:0e:68:a2:61: 4f:09:14:c4:eb:f0:ec:ad:13:18:36:24:ee:79:f6: 37:09:24:63:fc:02:b4:03:4a:a6:96:9b:8c:4d:53: 93:5d:7d:fc:85:5d:34:dc:cf:9d:62:33:e8:d2:7e: 0c:4f:e4:d4:47:6a:d3:dc:ac:bc:f0:90:5c:a1:3c: 62:a8:8c:21:8c:2f:16:9d:4d:40:72:74:ef:a7:bd: e9:d8:8b:2b:34:c6:f7:40:a5:69:95:9c:d7:7e:77: 45:5c:07:65:7f:e7:b9:9a:7a:94:d9:69:af:c6:aa: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:14:EF:F5:54:00:43:6A:86:C2:3E:7F:DB:F8:03:99:0A:37:68 X509v3 Authority Key Identifier: keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:37:bd:7f:04:9d:1f:7e:46:d2:97:03:a6:a0:cf:15:f8:16: 2f:6f:a4:27:b1:9e:11:e7:3f:5b:f9:2d:e8:5d:74:4c:97:0f: 85:e9:a8:b8:16:39:d3:f7:0d:07:ed:85:4c:1c:e7:c2:80:d5: c3:e6:8f:46:5e:29:16:8a:ea:90:d0:e3:b3:f3:0c:00:9c:c9: 1f:64:45:50:55:4d:14:9a:cc:74:20:2b:86:32:ac:ea:64:da: d5:ad:6a:c0:b4:3e:93:11:0a:33:bd:8e:07:d5:32:e0:24:61: 47:7d:f4:73:62:ab:88:95:ab:76:bd:17:ac:b9:8c:41:32:f5: 06:13:99:76:9b:20:0d:64:4b:1b:d8:5f:e0:a7:94:0f:8c:59: d4:3b:46:39:94:27:53:f5:61:48:7d:59:ce:d8:1e:54:71:57: 5d:c7:cf:e9:26:cd:9d:9e:9d:c9:86:58:ab:1d:14:e7:13:ff: 13:52:ec:36:5a:0d:be:34:51:34:30:83:2c:aa:df:2d:14:ea: c6:25:b1:c3:84:bb:9a:aa:e1:db:df:bd:16:99:83:44:87:32: d2:d6:cc:df:aa:74:c4:7f:ee:c3:b1:44:06:86:bf:07:31:b8: 82:36:63:60:1a:38:16:e7:57:c5:21:d0:1a:93:58:b9:3e:fe: bd:fe:bf:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+J+QXGbgC1GT29/agcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMWYyMDU5NzlkMmZiZGU5NTc1NmE0NmEwZjI3MzlkNzgx NmQ0NTkwHhcNMjUxMjA2MTcwMDQ3WhcNMjUxMjA3MTcwMDQ3WjAzMTEwLwYDVQQD EygyMGNlMTRlZmY1NTQwMDQzNmE4NmMyM2U3ZmRiZjgwMzk5MGEzNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PGxGk5U3k8mLCrhGB9wq/w5ebBH 0SgeZr2PoKYQ9irjWPLlOwS8PghOKhg9NVm1YiqCTlCpp/OYsxT56Db2OHBSAn8A x1t2Fv0f3Xq86aLszU/WZfa3bLO8AbCrJWBf2qIwloyru9DNbPa9Q9+gOejIsuAc VAVto2T7hrwvR61crvZkFnuOQCjU4SFBTuaKUQ5oomFPCRTE6/DsrRMYNiTuefY3 CSRj/AK0A0qmlpuMTVOTXX38hV003M+dYjPo0n4MT+TUR2rT3Ky88JBcoTxiqIwh jC8WnU1AcnTvp73p2IsrNMb3QKVplZzXfndFXAdlf+e5mnqU2WmvxqoV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDOFO/1VABDaobCPn/b+AOZCjdoMB8GA1UdIwQY MBaAFKEfIFl50vvelXVqRqDyc514FtRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGIt MTU1MGYyYWM4N2IzLzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGItMTU1MGYyYWM4N2Iz LzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTe9fwSd H35G0pcDpqDPFfgWL2+kJ7GeEec/W/kt6F10TJcPhemouBY50/cNB+2FTBznwoDV w+aPRl4pForqkNDjs/MMAJzJH2RFUFVNFJrMdCArhjKs6mTa1a1qwLQ+kxEKM72O B9Uy4CRhR330c2KriJWrdr0XrLmMQTL1BhOZdpsgDWRLG9hf4KeUD4xZ1DtGOZQn U/VhSH1ZztgeVHFXXcfP6SbNnZ6dyYZYqx0U5xP/E1LsNloNvjRRNDCDLKrfLRTq xiWxw4S7mqrh29+9FpmDRIcy0tbM36p0xH/uw7FEBoa/BzG4gjZjYBo4FudXxSHQ GpNYuT7+vf6/1g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:08 2025 by rpki-client