This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json) Hash identifier: J799dxSnK2pCkzoxeE74GZ+M2xP93gVhh2iuSPyb4og= Subject key identifier: 18:2B:DB:3C:A1:73:6B:3C:1F:0A:D5:67:66:B0:E2:80:92:D3:82:FD Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Certificate serial: 019AF23F96ACDC28E87973440835CEA521CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft Manifest number: 062A Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=) 2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: ml3G0Qk8+NVsVtgNCkKdnF+p8D23T/jQWiEI52N3OYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:96:ac:dc:28:e8:79:73:44:08:35:ce:a5:21:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=182bdb3ca1736b3c1f0ad56766b0e28092d382fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:15:50:ba:c6:c5:a2:73:5e:64:37:d8:66:1b: 62:2b:ff:10:e0:8a:0b:f1:88:ed:d4:ea:60:c9:26: 66:50:c6:89:66:2d:33:1b:92:d6:d0:e0:0b:ba:ea: 73:eb:76:0d:b7:66:78:a3:f9:db:7c:53:37:53:fc: ae:78:31:06:bb:ea:ab:44:49:25:d6:94:2d:60:fc: c9:82:74:cc:81:d8:a6:a2:af:e1:d6:b1:89:82:d5: c0:af:71:66:9e:6d:9c:0d:80:c6:12:66:44:b8:3c: 66:bc:81:4d:11:ff:5f:1e:36:73:33:80:91:de:5c: 05:c5:d7:25:8a:72:8f:11:81:7d:60:77:e2:d2:83: e0:2c:9b:ee:45:b6:2b:e6:9c:c4:4a:36:24:70:5b: d8:c3:82:38:7e:1f:b3:fa:7e:a0:99:b6:0b:a2:ea: ad:25:22:55:24:11:d7:7e:f3:80:64:99:6b:93:d5: 24:b1:29:4b:6b:05:c2:55:23:38:ea:b1:ce:6e:6f: b9:b6:1e:3f:42:fb:2a:be:4a:a8:1a:5e:53:56:4b: 71:37:d1:e3:e0:60:b4:c2:37:94:6f:7b:2c:9a:78: ec:58:65:7d:41:73:c3:c1:ac:80:ae:55:06:cd:53: 68:e3:f3:ef:e9:af:6f:5c:eb:a5:fa:68:ca:9e:5d: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2B:DB:3C:A1:73:6B:3C:1F:0A:D5:67:66:B0:E2:80:92:D3:82:FD X509v3 Authority Key Identifier: keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e6:31:bc:ed:f3:84:8f:e5:9d:d9:26:7f:1b:51:b3:e8:03: f5:1b:15:65:3e:ba:0c:8f:da:28:83:d5:86:5e:63:09:41:72: 17:1c:d1:f5:e9:17:e3:61:e1:8a:cf:12:66:ef:a4:b7:4d:92: 50:8e:a0:e5:da:d2:31:85:81:60:3c:f4:c6:4e:bc:5c:f9:03: 89:3b:9f:4f:8a:c2:dc:e6:03:99:26:72:89:8b:de:cc:6f:96: ae:bc:68:9b:7a:6b:b8:8f:5a:98:80:96:0b:71:54:7d:1c:54: 99:20:3f:92:51:57:30:e5:16:75:7f:bb:a2:bf:cf:f5:7f:cc: 18:ef:13:e9:d9:a2:8d:0c:1b:fc:bb:4e:01:0a:0e:87:e2:b5: a5:03:10:b6:f0:f4:ef:d9:f5:b0:7e:bf:9c:e4:ed:63:c3:6d: 9a:e0:30:15:a6:cc:31:f6:69:68:75:a6:37:a3:44:a0:9e:de: 10:67:d9:f3:28:3d:c9:18:07:8a:f0:17:07:27:d0:c2:e0:98: e5:94:57:76:2b:3c:37:ab:46:63:3b:c7:c7:16:cc:40:88:e9: dc:e6:63:fb:05:00:7c:03:e8:d4:af:80:e6:3d:a7:75:20:13: 3f:97:e0:cb:d8:78:9c:d5:ad:21:4d:17:f4:c4:40:90:01:66: 63:1c:46:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5as3CjoeXNECDXOpSHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj OWQ4ZGEwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EygxODJiZGIzY2ExNzM2YjNjMWYwYWQ1Njc2NmIwZTI4MDkyZDM4MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhVQusbFonNeZDfYZhtiK/8Q4IoL 8Yjt1OpgySZmUMaJZi0zG5LW0OALuupz63YNt2Z4o/nbfFM3U/yueDEGu+qrREkl 1pQtYPzJgnTMgdimoq/h1rGJgtXAr3Fmnm2cDYDGEmZEuDxmvIFNEf9fHjZzM4CR 3lwFxdclinKPEYF9YHfi0oPgLJvuRbYr5pzESjYkcFvYw4I4fh+z+n6gmbYLouqt JSJVJBHXfvOAZJlrk9UksSlLawXCVSM46rHObm+5th4/QvsqvkqoGl5TVktxN9Hj 4GC0wjeUb3ssmnjsWGV9QXPDwayArlUGzVNo4/Pv6a9vXOul+mjKnl1SOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgr2zyhc2s8HwrVZ2aw4oCS04L9MB8GA1UdIwQY MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOYxvO3z hI/lndkmfxtRs+gD9RsVZT66DI/aKIPVhl5jCUFyFxzR9ekX42Hhis8SZu+kt02S UI6g5drSMYWBYDz0xk68XPkDiTufT4rC3OYDmSZyiYvezG+Wrrxom3pruI9amICW C3FUfRxUmSA/klFXMOUWdX+7or/P9X/MGO8T6dmijQwb/LtOAQoOh+K1pQMQtvD0 79n1sH6/nOTtY8NtmuAwFabMMfZpaHWmN6NEoJ7eEGfZ8yg9yRgHivAXByfQwuCY 5ZRXdis8N6tGYzvHxxbMQIjp3OZj+wUAfAPo1K+A5j2ndSATP5fgy9h4nNWtIU0X 9MRAkAFmYxxG5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:46 2025 by rpki-client