This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json) Hash identifier: JNE/qRW5BiiKyMV46tU9TD4p1x38l1zm9YIg/xp9BXQ= Subject key identifier: 2E:BC:02:15:C8:76:61:73:85:A0:DF:3A:53:51:24:78:E4:6E:0C:B7 Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1 Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1 Certificate serial: 019AF20950D217F8BFDD00AD801DCBBED7E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft Manifest number: 0E4E Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: Dt+XPvD8TS5QMFuB7Hcd0wgIiKeM4NjWTtjurTcrKHw=) 2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:50:d2:17:f8:bf:dd:00:ad:80:1d:cb:be:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=2ebc0215c876617385a0df3a53512478e46e0cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:ae:1c:66:6e:d0:32:7f:fb:26:87:bb:75: 8e:d5:54:e6:4c:b4:6d:1b:80:c0:71:76:42:00:df: 6e:66:61:1e:f6:bb:81:b0:34:45:76:f4:74:a4:69: 69:f4:b4:1c:00:92:5b:91:27:fd:eb:f4:30:81:11: 3b:26:7e:37:c7:30:c3:6c:5f:8c:c8:a4:05:1d:be: af:22:8e:d7:80:03:7e:1a:9c:3a:ce:8c:4f:28:ad: 58:56:1d:81:4b:85:1c:97:ee:49:6e:0b:f2:8a:05: f6:1c:32:55:dc:bb:67:0b:31:70:6f:96:1b:41:a0: e9:e0:d1:d2:5e:85:2b:03:fc:a9:58:4a:bd:8f:44: e4:bd:a5:e7:71:a9:a1:34:ab:fa:57:c4:79:4a:65: 4f:1d:61:1f:fa:d2:87:6f:9e:38:4c:f0:4f:96:88: 02:ec:d6:de:00:b5:3a:fb:dd:64:d5:9f:12:f7:18: 05:01:46:5f:17:43:e5:c2:f8:b9:16:f0:24:14:8f: ae:80:37:2a:69:d1:f3:44:1f:1e:83:a9:af:0b:26: 0b:6c:9b:de:92:09:0b:29:c0:16:dd:d4:1d:95:db: c9:38:c3:f6:0d:2a:08:4a:c2:82:82:40:9b:a5:b5: 2f:60:43:ca:8b:ad:ac:08:bd:c9:58:83:fd:d2:ca: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BC:02:15:C8:76:61:73:85:A0:DF:3A:53:51:24:78:E4:6E:0C:B7 X509v3 Authority Key Identifier: keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:c5:97:10:63:a4:d1:5c:10:8b:ef:d7:6e:5f:02:ab:c5: ce:71:a1:db:c0:3f:27:ad:33:a1:b1:05:69:60:fa:54:4c:e3: fd:f6:6a:18:65:b4:a5:d7:51:b7:9d:18:21:62:1f:57:1a:d2: e7:e1:79:42:2d:de:35:73:f2:0e:a7:bb:59:23:6c:bd:58:2d: e6:dc:66:7a:97:dc:4e:02:af:5c:9f:60:8b:49:7e:0e:62:b4: 0e:1c:7d:26:46:62:39:cc:f0:76:e4:ca:8e:eb:9f:85:93:64: 16:44:af:9b:97:a2:c5:8b:d4:22:cc:30:3e:e6:54:30:83:7a: cf:12:b7:ab:55:bb:52:4f:97:3d:c4:a9:e9:47:42:83:56:54: 66:65:d6:78:7f:18:70:ce:42:ed:ca:5d:22:42:68:5d:7a:51: 5e:2f:fa:90:f1:b1:25:5f:9f:5b:1d:12:79:13:ba:27:22:e6: ba:26:3c:09:17:12:a4:bc:42:26:9d:6b:94:ce:76:a5:ab:c9: 43:d5:2d:17:31:ac:2b:81:02:94:f6:f2:7e:5a:0b:fa:dd:80: e4:38:ea:e5:86:e5:f3:95:ab:f1:bf:9e:d8:2a:18:df:e2:f6: 51:5f:99:a1:ef:ec:61:dd:be:d4:dc:ba:6b:f6:44:82:0b:13: 7b:6e:8d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVDSF/i/3QCtgB3LvtfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwN2RjYjZkYjlhNzVjMTAxN2ZlZTY3MmY3M2I5NjE3NzFi NzdjYTEwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EygyZWJjMDIxNWM4NzY2MTczODVhMGRmM2E1MzUxMjQ3OGU0NmUwY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/muHGZu0DJ/+yaHu3WO1VTmTLRt G4DAcXZCAN9uZmEe9ruBsDRFdvR0pGlp9LQcAJJbkSf96/QwgRE7Jn43xzDDbF+M yKQFHb6vIo7XgAN+Gpw6zoxPKK1YVh2BS4Ucl+5JbgvyigX2HDJV3LtnCzFwb5Yb QaDp4NHSXoUrA/ypWEq9j0TkvaXncamhNKv6V8R5SmVPHWEf+tKHb544TPBPlogC 7NbeALU6+91k1Z8S9xgFAUZfF0Plwvi5FvAkFI+ugDcqadHzRB8eg6mvCyYLbJve kgkLKcAW3dQdldvJOMP2DSoISsKCgkCbpbUvYEPKi62sCL3JWIP90sr07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC68AhXIdmFzhaDfOlNRJHjkbgy3MB8GA1UdIwQY MBaAFKB9y225p1wQF/7mcvc7lhdxt3yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEt Y2I0MGVlMDQ4ZGMwLzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEtY2I0MGVlMDQ4ZGMw LzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfDFlxBj pNFcEIvv125fAqvFznGh28A/J60zobEFaWD6VEzj/fZqGGW0pddRt50YIWIfVxrS 5+F5Qi3eNXPyDqe7WSNsvVgt5txmepfcTgKvXJ9gi0l+DmK0Dhx9JkZiOczwduTK juufhZNkFkSvm5eixYvUIswwPuZUMIN6zxK3q1W7Uk+XPcSp6UdCg1ZUZmXWeH8Y cM5C7cpdIkJoXXpRXi/6kPGxJV+fWx0SeRO6JyLmuiY8CRcSpLxCJp1rlM52pavJ Q9UtFzGsK4EClPbyfloL+t2A5Djq5Ybl85Wr8b+e2CoY3+L2UV+Zoe/sYd2+1Ny6 a/ZEggsTe26N3w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:51 2025 by rpki-client