This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json) Hash identifier: WPqPH4fS1E1r+LdZffkdZO5ZwstnWqPL7tENrietoYo= Subject key identifier: 10:2A:7A:BE:EF:98:A9:56:7D:C4:FE:B8:D9:7D:F6:DA:9E:D9:D4:FC Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d Certificate serial: 019AF23F72FE839989A8ED817EF74ED37EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=) 2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: H5I/PPi7EUC8gkESQaBYd24WRRBn9R4FoLOG3A8gGHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:72:fe:83:99:89:a8:ed:81:7e:f7:4e:d3:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=102a7abeef98a9567dc4feb8d97df6da9ed9d4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:50:2b:9a:f8:b2:98:e4:ac:a2:ff:33:44: 0a:a6:cf:ea:d2:8d:e9:02:75:17:d0:9d:c6:de:cd: f5:5d:96:30:73:b0:f8:c4:55:0d:c4:e6:89:e0:27: 55:0e:f6:9f:da:4f:72:5c:8b:65:82:21:f3:81:e4: 29:fa:55:3f:97:3e:ca:46:4c:aa:92:38:ac:fa:15: a8:ce:57:b3:14:8f:ad:38:7f:b8:66:7c:e4:27:6b: e2:2c:2b:88:32:7e:d0:7e:af:1d:55:9a:69:d1:4a: 06:8a:5c:e0:c6:f4:12:af:35:64:88:c7:db:8b:8f: 61:09:8c:1c:a8:fe:4f:6b:b1:d2:a4:7f:66:e4:ae: 67:ca:75:a4:12:45:c5:a7:ec:03:9b:18:ec:78:cc: 04:9c:df:dd:cd:f0:07:65:fe:fc:70:d4:e5:d2:7a: a8:ca:bd:a2:f6:51:3f:e8:92:6f:13:e3:a4:b0:23: 2f:4c:70:ca:9a:95:04:79:e9:4e:74:b0:9c:57:47: 4f:04:00:85:3f:82:d4:13:c6:3f:0a:bb:77:05:4a: 51:30:89:cf:dc:56:93:12:0b:84:13:2f:eb:fa:07: 1a:0d:17:76:c3:71:2c:db:fc:92:7a:49:34:a6:87: e5:8c:be:8c:c8:67:00:67:90:15:3e:1f:df:e7:2d: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:7A:BE:EF:98:A9:56:7D:C4:FE:B8:D9:7D:F6:DA:9E:D9:D4:FC X509v3 Authority Key Identifier: keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9c:b1:3f:18:1b:df:29:0a:2f:bb:de:ca:a8:37:5a:ae:b7: 14:2b:05:9f:7e:11:ed:ce:90:df:18:52:9d:87:8c:29:bb:2a: 49:5f:2d:82:c5:41:ca:ca:66:0e:0d:9e:30:2f:a9:26:7d:85: ca:f2:28:1b:ee:8e:af:80:6f:dc:c3:63:3e:81:a9:66:ca:f3: ac:54:34:7f:8b:9b:55:ae:b3:51:7a:d2:d8:d0:f0:23:9c:78: fc:bd:97:3e:94:8e:6e:b6:79:7b:2a:5c:26:79:6d:38:37:50: 42:17:31:12:9d:77:cf:87:3f:33:39:49:c9:45:0e:ec:3d:a0: 38:1f:72:cc:65:fe:63:b1:18:be:d4:57:44:d9:61:ed:36:2a: fc:89:a6:93:b1:1e:80:fd:e8:b8:39:09:64:8f:57:00:e0:d5: 76:b7:29:37:6f:71:2c:1e:eb:ae:63:00:2a:a2:6d:7d:d8:a9: d1:69:78:a2:e7:53:32:5f:e8:40:21:6a:08:2b:6a:ca:59:18: 25:83:48:d7:5e:0a:57:c8:7b:c6:ee:07:d8:b6:03:55:14:00: ac:55:47:a8:da:37:dc:9f:ba:8d:65:f4:08:3c:a5:ce:da:35: 72:77:98:1d:55:7e:df:da:d9:da:6a:9d:eb:90:ed:53:fb:28: b9:33:af:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3L+g5mJqO2BfvdO037fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjU1MjgyYmU0MTlkMjEyMjJiNTA2ZmI3YTM2OGMzZmU1 ZGIyM2QwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EygxMDJhN2FiZWVmOThhOTU2N2RjNGZlYjhkOTdkZjZkYTllZDlkNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonZQK5r4spjkrKL/M0QKps/q0o3p AnUX0J3G3s31XZYwc7D4xFUNxOaJ4CdVDvaf2k9yXItlgiHzgeQp+lU/lz7KRkyq kjis+hWozlezFI+tOH+4ZnzkJ2viLCuIMn7Qfq8dVZpp0UoGilzgxvQSrzVkiMfb i49hCYwcqP5Pa7HSpH9m5K5nynWkEkXFp+wDmxjseMwEnN/dzfAHZf78cNTl0nqo yr2i9lE/6JJvE+OksCMvTHDKmpUEeelOdLCcV0dPBACFP4LUE8Y/Crt3BUpRMInP 3FaTEguEEy/r+gcaDRd2w3Es2/ySekk0pofljL6MyGcAZ5AVPh/f5y2E6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAqer7vmKlWfcT+uNl99tqe2dT8MB8GA1UdIwQY MBaAFKFlUoK+QZ0hIitQb7ejaMP+XbI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjct OTFkYmM5ZjBlOGRiLzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjctOTFkYmM5ZjBlOGRi LzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpyxPxgb 3ykKL7veyqg3Wq63FCsFn34R7c6Q3xhSnYeMKbsqSV8tgsVByspmDg2eMC+pJn2F yvIoG+6Or4Bv3MNjPoGpZsrzrFQ0f4ubVa6zUXrS2NDwI5x4/L2XPpSObrZ5eypc JnltODdQQhcxEp13z4c/MzlJyUUO7D2gOB9yzGX+Y7EYvtRXRNlh7TYq/Immk7Ee gP3ouDkJZI9XAODVdrcpN29xLB7rrmMAKqJtfdip0Wl4oudTMl/oQCFqCCtqylkY JYNI114KV8h7xu4H2LYDVRQArFVHqNo33J+6jWX0CDylzto1cneYHVV+39rZ2mqd 65DtU/souTOvEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:34 2025 by rpki-client