This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json) Hash identifier: xzGpv3tLoBlKNUYAjV2TR+1/Oaqa+I+LptD4a4aWXwc= Subject key identifier: 39:04:FA:7C:3B:3F:BB:8D:B8:7F:B2:53:16:A5:78:66:B8:9E:5F:36 Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019AF208DE758B2551882E889A52D9592F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft Manifest number: DC Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: CiNflCU4KFn7Aa5TSRjV9Pq0QJI.roa (hash: LgbEtmeOGTEJrLh9qdeICYZRrdXVnu1tQuix4Y2QoGI=) 2: QOeRuiRAx6f12JzbMTw8bg77wX0.roa (hash: L8eA6191FsW9Vnzupg2J6urhYsN5bGDp5k/dBDH9G8c=) 3: Xo_7x8gM362sNUx9u7YODuCsWN0.roa (hash: kMd99CyUtMJl4Cu76HE19siKUa5sAjH27qVIWnJGM5I=) 4: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: Bu+8teaEjmRScCrdRuLsMtRiYEK4wlyFsPSmLt8Nw2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:de:75:8b:25:51:88:2e:88:9a:52:d9:59:2f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=3904fa7c3b3fbb8db87fb25316a57866b89e5f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:0c:f5:33:99:19:1f:fe:83:6f:9b:1c:97: ca:60:e2:45:86:a0:16:b8:e9:27:60:aa:56:f3:1d: 34:0f:be:38:28:fd:be:96:a4:35:4f:92:1b:8a:08: 1c:28:d1:52:6c:5a:72:1d:51:05:ff:ba:76:8b:13: d9:ec:5f:97:64:51:96:ab:3f:02:f3:44:53:9a:e8: 5f:f0:da:72:c4:f5:24:bf:4d:21:1f:8a:a2:2f:55: 5a:7f:56:c6:13:b4:8d:00:a0:46:f4:96:1f:b2:da: 34:a8:9b:9c:78:62:3a:83:d7:58:df:fc:2b:97:39: f9:c8:46:6a:d5:e1:98:ff:1f:25:76:6c:c7:ae:fa: c8:8e:b4:4a:b1:9c:0f:cd:14:a7:ce:a6:22:6f:6a: 76:48:cf:ad:99:6b:65:5a:fe:fc:9c:67:f2:5c:3e: a2:3e:8d:ec:b8:d6:07:52:82:92:6d:d5:17:4a:10: 5e:20:2b:fb:17:a2:56:02:2c:cb:98:b4:08:68:88: d9:35:92:e8:89:54:f9:1f:2f:f1:f8:45:72:6f:85: ce:c2:0a:f0:3f:42:f1:9f:18:0d:81:45:eb:4e:a2: 93:08:1e:90:c6:13:74:69:40:50:4d:c3:f6:cd:f2: 46:f9:82:88:ff:89:12:4f:b2:18:9a:78:c8:ed:73: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:FA:7C:3B:3F:BB:8D:B8:7F:B2:53:16:A5:78:66:B8:9E:5F:36 X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b7:cd:1d:2e:f1:11:d7:85:76:86:91:7e:ac:89:65:cc:1e: 5f:57:0b:a9:2b:a0:3c:db:49:6b:f6:bb:f2:24:58:9f:87:41: 81:a6:76:db:23:53:78:65:f6:f4:93:a9:63:1d:a7:64:ea:50: 39:e3:6b:34:76:5f:e0:81:b9:e7:79:39:67:93:ab:1c:02:68: bf:c5:bb:58:a2:a3:b2:df:eb:bd:bb:0a:4d:c3:05:00:1e:36: 72:a0:12:c7:1b:ee:a9:72:5d:5d:db:8d:56:7e:03:72:91:f9: e3:8e:2f:cc:5d:0c:4e:3a:dd:23:a7:bf:93:30:cf:60:45:71: 99:c2:54:40:31:ec:c7:33:2b:84:62:03:76:f1:44:34:77:49: 74:bb:34:f4:20:e2:75:48:7d:1e:f2:e7:3b:80:ee:8f:25:1e: 35:9a:0c:89:d2:d3:41:d4:ee:c0:a2:14:ac:99:04:07:50:a6: 95:bd:19:ae:56:5d:70:01:18:2f:ac:e7:bb:ee:93:72:e2:5a: f7:94:d6:64:ce:a1:5c:bf:b4:40:c9:67:c8:86:2b:fa:98:17: b2:08:02:54:26:51:9b:b2:78:d8:8d:88:88:bd:32:f2:b7:a6: 33:88:30:a2:92:ce:32:bc:d9:83:fb:25:a4:30:53:16:4e:a8: 62:57:14:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN51iyVRiC6ImlLZWS8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EygzOTA0ZmE3YzNiM2ZiYjhkYjg3ZmIyNTMxNmE1Nzg2NmI4OWU1ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKsM9TOZGR/+g2+bHJfKYOJFhqAW uOknYKpW8x00D744KP2+lqQ1T5IbiggcKNFSbFpyHVEF/7p2ixPZ7F+XZFGWqz8C 80RTmuhf8NpyxPUkv00hH4qiL1Vaf1bGE7SNAKBG9JYfsto0qJuceGI6g9dY3/wr lzn5yEZq1eGY/x8ldmzHrvrIjrRKsZwPzRSnzqYib2p2SM+tmWtlWv78nGfyXD6i Po3suNYHUoKSbdUXShBeICv7F6JWAizLmLQIaIjZNZLoiVT5Hy/x+EVyb4XOwgrw P0LxnxgNgUXrTqKTCB6QxhN0aUBQTcP2zfJG+YKI/4kST7IYmnjI7XPbvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkE+nw7P7uNuH+yUxaleGa4nl82MB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbfNHS7x EdeFdoaRfqyJZcweX1cLqSugPNtJa/a78iRYn4dBgaZ22yNTeGX29JOpYx2nZOpQ OeNrNHZf4IG553k5Z5OrHAJov8W7WKKjst/rvbsKTcMFAB42cqASxxvuqXJdXduN Vn4DcpH5444vzF0MTjrdI6e/kzDPYEVxmcJUQDHsxzMrhGIDdvFENHdJdLs09CDi dUh9HvLnO4DujyUeNZoMidLTQdTuwKIUrJkEB1Cmlb0ZrlZdcAEYL6znu+6TcuJa 95TWZM6hXL+0QMlnyIYr+pgXsggCVCZRm7J42I2IiL0y8remM4gwopLOMrzZg/sl pDBTFk6oYlcUlg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:35 2025 by rpki-client