This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json) Hash identifier: yPju3lL21nr9voFGAJkJ8MhwKhebKe5Pg9fKhp9VajU= Subject key identifier: 08:42:75:78:65:E6:23:B4:18:F1:82:AB:43:19:49:2D:DD:4E:09:56 Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Certificate serial: 019AF19A9E1A6D35100BDAB43ED768755943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft Manifest number: 1250 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=) 2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: hsCJPLKXC9p47FyVPtjH3OQB3ZnwPnWJVSoorV1oUW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9e:1a:6d:35:10:0b:da:b4:3e:d7:68:75:59:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=0842757865e623b418f182ab4319492ddd4e0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:49:b8:7f:f9:05:72:71:da:d6:b1:61:00: 09:61:e0:39:32:30:33:73:d0:20:2b:82:2c:6a:ac: 49:73:eb:25:83:a8:78:fa:ce:38:7c:3a:09:97:f0: 74:6f:68:e5:f3:12:46:f0:57:c0:6a:4c:45:f7:9d: a1:99:88:4d:8b:86:25:b8:74:a8:3f:b2:a4:72:59: 25:04:7f:61:5d:91:68:20:17:e5:24:ec:b4:01:a1: 72:49:68:aa:06:55:37:dc:8e:f4:35:01:cd:00:f6: 62:dc:2f:51:87:fa:68:e2:5c:6a:a9:ed:5a:28:f4: 4d:d6:3d:d4:aa:d7:26:c5:17:9f:d9:95:2d:a9:97: 8f:3a:03:0c:b6:91:b3:1e:0e:80:21:05:0e:3d:c2: eb:a1:b0:8d:c3:f3:ca:ef:a7:11:86:65:82:26:52: 5d:9b:56:2a:55:9d:5f:e6:ac:b3:a6:a8:1b:ad:a2: 6c:4d:ec:77:58:4c:4d:3c:45:03:7b:fa:96:2c:5d: ec:51:68:1d:01:0e:bd:1b:b6:55:62:ee:0a:f3:87: 9a:0d:d3:3e:ba:3d:e7:cf:82:a0:88:4c:26:4b:24: 6b:c6:ad:73:d4:1f:52:cb:89:0d:04:f3:e0:38:c4: 67:9d:ef:0e:b5:29:9d:e6:5f:5d:c0:f2:db:6f:03: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:75:78:65:E6:23:B4:18:F1:82:AB:43:19:49:2D:DD:4E:09:56 X509v3 Authority Key Identifier: keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:dd:f0:f0:82:6b:79:95:80:24:65:1f:09:a5:85:40:ff:f2: ce:0f:b2:38:5e:b7:98:44:02:7b:94:1d:10:46:87:b3:0d:2f: 07:45:99:e8:95:e6:bb:f3:fd:55:d9:5f:85:69:9b:d6:38:9d: 95:e2:f0:81:0e:91:45:b1:9e:52:a4:9c:b0:5b:a3:cd:ba:10: 72:bd:21:55:43:7a:b3:95:66:48:e1:69:1a:cd:2c:10:82:37: 69:dd:4a:f7:b7:df:3e:3c:68:3d:14:e1:ae:cb:8d:f3:bd:41: f0:d1:e4:23:a0:bb:99:0b:b3:b8:73:28:d2:82:ed:32:be:2f: 6e:f9:86:d7:fb:93:33:87:90:e2:ab:d7:14:d1:1e:8e:70:fd: 78:19:3e:27:b7:4c:1f:60:49:cf:be:5c:c0:a3:03:ee:73:79: 18:41:bd:cf:32:47:81:5f:a8:26:d2:ee:71:35:2d:fb:a5:35: 30:84:bf:e0:33:ef:46:0e:73:bc:af:93:0d:86:a1:7c:2c:78: 55:39:f2:b7:5d:4b:26:ff:35:4d:7e:5f:ba:d7:26:d6:01:53: c0:71:d2:5d:b7:af:d9:36:65:66:82:49:57:97:a6:96:3b:b7: e3:cc:7d:a0:14:3d:22:7c:37:c8:04:66:73:00:b9:87:53:ad: 44:76:af:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp4abTUQC9q0PtdodVlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh YzhhZDMwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EygwODQyNzU3ODY1ZTYyM2I0MThmMTgyYWI0MzE5NDkyZGRkNGUwOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ1JuH/5BXJx2taxYQAJYeA5MjAz c9AgK4IsaqxJc+slg6h4+s44fDoJl/B0b2jl8xJG8FfAakxF952hmYhNi4YluHSo P7KkclklBH9hXZFoIBflJOy0AaFySWiqBlU33I70NQHNAPZi3C9Rh/po4lxqqe1a KPRN1j3UqtcmxRef2ZUtqZePOgMMtpGzHg6AIQUOPcLrobCNw/PK76cRhmWCJlJd m1YqVZ1f5qyzpqgbraJsTex3WExNPEUDe/qWLF3sUWgdAQ69G7ZVYu4K84eaDdM+ uj3nz4KgiEwmSyRrxq1z1B9Sy4kNBPPgOMRnne8OtSmd5l9dwPLbbwNkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhCdXhl5iO0GPGCq0MZSS3dTglWMB8GA1UdIwQY MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt NDgwOTNmYjZjNjdmLzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArt3w8IJr eZWAJGUfCaWFQP/yzg+yOF63mEQCe5QdEEaHsw0vB0WZ6JXmu/P9VdlfhWmb1jid leLwgQ6RRbGeUqScsFujzboQcr0hVUN6s5VmSOFpGs0sEII3ad1K97ffPjxoPRTh rsuN871B8NHkI6C7mQuzuHMo0oLtMr4vbvmG1/uTM4eQ4qvXFNEejnD9eBk+J7dM H2BJz75cwKMD7nN5GEG9zzJHgV+oJtLucTUt+6U1MIS/4DPvRg5zvK+TDYahfCx4 VTnyt11LJv81TX5futcm1gFTwHHSXbev2TZlZoJJV5emlju348x9oBQ9Inw3yARm cwC5h1OtRHav8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:53 2025 by rpki-client