This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json) Hash identifier: jAT7NYaZ2tPQ4G85gpRaJR95K4jfKOZTRcYfI+D2mIc= Subject key identifier: 6A:BE:89:B6:01:F5:CA:42:F2:A0:B0:F7:9B:E5:6A:6A:20:AC:CE:D4 Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8 Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8 Certificate serial: 019AF12D2562D8DDB4914888FB66578ADD97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=) 2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: Fc6iFyFXMc8Q9Adg7M0DbBQIOStOgY3c0COytBfJBKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:25:62:d8:dd:b4:91:48:88:fb:66:57:8a:dd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=6abe89b601f5ca42f2a0b0f79be56a6a20acced4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:b5:bd:61:73:07:df:78:fa:3a:f1:4e:72: 06:bc:d3:1e:8d:56:79:db:c6:6e:26:c6:f8:95:86: d2:f6:af:46:2a:97:37:24:ac:fb:59:18:4e:28:48: e6:7c:7f:5c:51:64:df:58:92:fd:88:ab:21:81:0f: 2b:44:3d:10:a1:89:27:68:19:51:64:f5:c5:3a:d9: 2c:f9:f5:75:19:20:02:0b:90:60:b4:db:34:03:1e: 07:af:ab:27:63:d9:73:e6:13:75:76:5b:57:c4:df: af:bb:0d:bc:4c:85:7c:85:14:ed:8f:c3:c6:23:f2: 96:91:14:fb:7e:9d:f8:90:2e:32:1f:7e:34:20:70: 39:3c:a7:63:5d:db:cb:e9:67:aa:6e:72:1b:42:ae: 8a:fe:dc:6a:e6:79:14:79:54:65:c3:04:27:24:d7: 97:92:55:72:14:04:31:da:a2:c8:d9:ed:f3:3c:fd: 24:32:45:ec:24:be:93:03:0f:6d:5e:c0:f7:79:e6: 9e:82:67:a4:dc:3b:9e:60:be:7e:a1:74:5b:7d:51: a4:58:55:cb:20:93:9e:d6:1e:55:83:3a:66:8e:5c: 52:09:02:93:38:7e:3e:bb:1a:a9:58:82:a4:2a:37: 54:f3:66:2a:c0:fd:15:90:52:08:7a:15:a5:18:90: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BE:89:B6:01:F5:CA:42:F2:A0:B0:F7:9B:E5:6A:6A:20:AC:CE:D4 X509v3 Authority Key Identifier: keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a1:7e:58:35:8d:3c:0a:48:2a:80:02:32:92:3e:63:ce:84: 06:4e:d5:02:03:fe:24:ed:c6:6d:dc:e6:1f:50:18:a6:70:56: 17:b1:e0:14:cc:50:c6:d1:0d:39:df:4a:5a:64:7c:d7:e6:ad: 4f:aa:0d:9f:59:e1:7a:37:4a:1e:e6:0c:aa:c1:7d:7a:43:86: 6b:78:8a:9f:d8:3e:6f:e1:d5:a3:b4:5b:e1:ea:b8:94:6b:18: 16:63:c6:63:f4:04:0a:28:bf:ef:77:a9:83:47:df:f2:bc:e5: b7:45:4c:bd:a0:06:2d:d0:af:24:fc:90:42:ec:8b:d6:1a:6b: b7:5d:4d:fd:5d:c3:af:18:0d:49:7d:e5:fa:f5:a9:fe:60:c3: af:a7:fa:9d:d0:bb:c3:9c:cf:7a:37:74:7c:6a:b4:ec:73:89: 44:95:d9:26:58:9b:5a:55:36:48:0b:ce:99:31:df:3e:7c:b7: bd:c3:c2:a8:ee:6e:1c:b5:82:bc:ee:27:8a:73:1f:90:9d:80: 37:92:e8:bb:d6:cd:ec:18:77:dd:04:93:3c:45:6f:12:aa:49: 41:f1:94:7a:56:65:3c:de:f1:de:4f:fd:b3:27:ee:d8:e0:88: f1:79:28:3e:52:bc:14:e9:79:39:24:f7:b8:da:5d:04:21:4b: 6d:fe:b1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSVi2N20kUiI+2ZXit2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGY4ZTI5ZTA0MjBlNzIzZGQxZGM0MThlODcxM2M4ZTk2 MDQzZDgwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg2YWJlODliNjAxZjVjYTQyZjJhMGIwZjc5YmU1NmE2YTIwYWNjZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBm1vWFzB994+jrxTnIGvNMejVZ5 28ZuJsb4lYbS9q9GKpc3JKz7WRhOKEjmfH9cUWTfWJL9iKshgQ8rRD0QoYknaBlR ZPXFOtks+fV1GSACC5BgtNs0Ax4Hr6snY9lz5hN1dltXxN+vuw28TIV8hRTtj8PG I/KWkRT7fp34kC4yH340IHA5PKdjXdvL6WeqbnIbQq6K/txq5nkUeVRlwwQnJNeX klVyFAQx2qLI2e3zPP0kMkXsJL6TAw9tXsD3eeaegmek3DueYL5+oXRbfVGkWFXL IJOe1h5VgzpmjlxSCQKTOH4+uxqpWIKkKjdU82YqwP0VkFIIehWlGJCoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq+ibYB9cpC8qCw95vlamogrM7UMB8GA1UdIwQY MBaAFKCPjingQg5yPdHcQY6HE8jpYEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYt YThhYjVkNTczN2RmLzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYtYThhYjVkNTczN2Rm LzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6F+WDWN PApIKoACMpI+Y86EBk7VAgP+JO3GbdzmH1AYpnBWF7HgFMxQxtENOd9KWmR81+at T6oNn1nhejdKHuYMqsF9ekOGa3iKn9g+b+HVo7Rb4eq4lGsYFmPGY/QECii/73ep g0ff8rzlt0VMvaAGLdCvJPyQQuyL1hprt11N/V3DrxgNSX3l+vWp/mDDr6f6ndC7 w5zPejd0fGq07HOJRJXZJlibWlU2SAvOmTHfPny3vcPCqO5uHLWCvO4ninMfkJ2A N5Lou9bN7Bh33QSTPEVvEqpJQfGUelZlPN7x3k/9syfu2OCI8XkoPlK8FOl5OST3 uNpdBCFLbf6xDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:06 2025 by rpki-client