This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json) Hash identifier: IekMIOewL8N768uB8xWlf7BXxxKSLedIh7wGJNJoucM= Subject key identifier: 05:99:7E:61:71:7F:95:8A:49:7E:CA:97:06:D8:A9:5E:08:53:3E:4F Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Certificate serial: 019AF163D47C10261EF110539C4B6F533F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft Manifest number: 0974 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: 4XG6DuE-VOpXPlm1OM2r12JgRic.roa (hash: A9cZGvYN3HxFKk3EJisSEe/6Tu/3YVMhQqYAsXSqvsk=) 2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=) 3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: GGtBido+XzitXZinwv9NZOne3Dg0dh8EGojSB3HA5xE=) 4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d4:7c:10:26:1e:f1:10:53:9c:4b:6f:53:3f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=05997e61717f958a497eca9706d8a95e08533e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:e2:9f:0a:8c:7b:fb:fd:75:69:95:ab:71: c7:e4:e3:c8:12:37:df:34:db:51:85:b1:54:1f:14: 38:e8:1e:27:92:f7:87:b7:20:3d:af:83:cf:3a:58: b5:fd:fc:3e:ca:33:36:71:da:44:92:fc:fa:0a:a8: 41:df:91:cd:75:cd:c1:fc:18:08:9b:b4:01:49:f3: 0c:9f:11:82:ca:8d:86:c2:29:d0:f9:1e:12:ba:20: e5:57:11:45:02:13:b8:ed:d8:9b:c1:6e:45:01:0a: 1d:e0:34:fc:ad:90:36:4b:89:c8:f0:9d:5b:57:a0: 72:b7:85:16:3d:75:cc:e8:ab:ca:5a:4b:14:f8:bc: 09:3d:e8:82:0a:2f:52:e5:83:4b:c9:d3:2e:30:df: d3:24:d3:7b:ab:cb:5c:fa:e5:ba:04:28:26:69:0a: 7a:2a:7a:65:2a:3b:0b:a0:ad:80:39:e1:63:5a:01: a1:2d:84:8a:b2:bf:aa:65:5a:1c:f8:7c:e9:64:36: 10:6f:44:76:68:a1:cb:0e:19:67:a1:f8:5f:fc:4b: 07:4f:e8:04:ce:66:04:46:13:13:ac:20:93:9e:95: 97:dc:04:e4:fb:52:d9:d7:28:2c:74:11:f5:4b:3c: f4:90:02:9d:b8:93:bd:c1:14:15:91:bd:2d:1f:9c: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:7E:61:71:7F:95:8A:49:7E:CA:97:06:D8:A9:5E:08:53:3E:4F X509v3 Authority Key Identifier: keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cf:59:d1:6b:44:a1:44:66:e9:9c:bf:fd:40:a2:81:2c:7b: 3f:f0:0b:78:d5:d1:f6:e5:b2:7d:7f:a7:fc:d9:4c:79:40:25: 01:57:16:c8:2a:a4:8d:1b:1a:5d:33:20:a2:be:11:20:d2:1b: 72:4f:fb:4d:be:50:06:6d:02:15:10:64:60:7f:ab:74:52:bc: 79:fd:72:71:17:77:47:cc:28:5c:29:32:dd:ab:d4:02:41:0d: 3e:eb:c5:f1:fd:ec:4a:78:32:00:7a:30:2f:67:f2:09:11:f9: 5c:82:66:6c:05:40:2a:4e:0c:4a:d5:1f:5b:64:42:32:bc:30: 5e:0c:93:b5:3b:b2:b7:af:1d:40:89:0d:99:58:be:17:a9:88: 6b:e8:e1:d8:35:e7:af:74:30:6b:23:d8:79:88:cb:2f:d2:5a: cb:95:78:05:38:ca:e5:ad:b7:96:12:3d:1c:c5:4c:ac:03:de: 61:6b:8b:b7:4f:23:22:38:18:4d:47:0c:23:3a:dc:fa:cf:09: 37:6b:05:7d:1b:1e:b7:6b:97:1a:46:1c:f8:d2:cc:48:f2:1d: 2e:03:22:bf:04:aa:9a:b4:a8:81:57:cc:7a:2b:63:5b:36:e7: d4:03:99:79:fd:89:30:38:dd:e9:67:ba:4e:e3:e2:b0:e0:bb: ff:b5:e5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9R8ECYe8RBTnEtvUz8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi ZDM3NDAwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EygwNTk5N2U2MTcxN2Y5NThhNDk3ZWNhOTcwNmQ4YTk1ZTA4NTMzZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT7inwqMe/v9dWmVq3HH5OPIEjff NNtRhbFUHxQ46B4nkveHtyA9r4PPOli1/fw+yjM2cdpEkvz6CqhB35HNdc3B/BgI m7QBSfMMnxGCyo2GwinQ+R4SuiDlVxFFAhO47dibwW5FAQod4DT8rZA2S4nI8J1b V6Byt4UWPXXM6KvKWksU+LwJPeiCCi9S5YNLydMuMN/TJNN7q8tc+uW6BCgmaQp6 KnplKjsLoK2AOeFjWgGhLYSKsr+qZVoc+HzpZDYQb0R2aKHLDhlnofhf/EsHT+gE zmYERhMTrCCTnpWX3ATk+1LZ1ygsdBH1Szz0kAKduJO9wRQVkb0tH5wjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWZfmFxf5WKSX7KlwbYqV4IUz5PMB8GA1UdIwQY MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS89Z0WtE oURm6Zy//UCigSx7P/ALeNXR9uWyfX+n/NlMeUAlAVcWyCqkjRsaXTMgor4RINIb ck/7Tb5QBm0CFRBkYH+rdFK8ef1ycRd3R8woXCky3avUAkENPuvF8f3sSngyAHow L2fyCRH5XIJmbAVAKk4MStUfW2RCMrwwXgyTtTuyt68dQIkNmVi+F6mIa+jh2DXn r3QwayPYeYjLL9Jay5V4BTjK5a23lhI9HMVMrAPeYWuLt08jIjgYTUcMIzrc+s8J N2sFfRset2uXGkYc+NLMSPIdLgMivwSqmrSogVfMeitjWzbn1AOZef2JMDjd6We6 TuPisOC7/7XlcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:13 2025 by rpki-client