This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json) Hash identifier: mp3OOSlSIW/eLjVqxAMBkJRDTXXSIMb439oVT6/Mt5A= Subject key identifier: C4:55:5B:AC:51:92:81:A7:66:BB:1C:78:6A:6D:0E:9D:72:CF:C9:BF Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Certificate serial: 019AF19A9BE2B7ED554C614D13E6BDA86208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=) 2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=) 3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: sC/noqzzGt97dL3NNwkh76i2XMFiSpEss5OXd0KT9lk=) 4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9b:e2:b7:ed:55:4c:61:4d:13:e6:bd:a8:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=c4555bac519281a766bb1c786a6d0e9d72cfc9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:81:21:3c:40:80:fc:20:8c:80:59:5b:62: 53:4d:10:34:46:0a:c4:c4:4b:f2:e1:84:2c:85:fa: c0:d3:56:62:e3:0b:ff:f8:d1:a3:60:8e:07:a0:f7: 8f:f7:ea:43:5a:67:01:8b:ea:a7:66:23:2b:09:30: 5f:3d:ea:44:b0:8e:70:af:0f:df:ed:ba:38:a6:48: 84:ca:25:dd:59:dc:c2:e0:2e:79:80:fd:c9:43:e7: b7:75:50:e8:e1:25:aa:8d:da:83:ca:2d:b8:6f:de: 99:f7:59:05:c5:65:4e:d7:cb:07:22:c4:a0:21:9c: 63:a3:e6:22:bd:13:a1:be:4a:ff:f0:6b:7f:65:3f: 84:96:5e:2e:24:e7:75:ff:16:e0:86:b3:99:79:ac: 9b:4e:b1:5a:07:fd:f3:63:ac:2c:90:68:4f:fe:e5: 2c:b4:24:69:6d:34:4e:8d:fc:1a:62:b0:62:fd:e6: 0f:73:7b:1f:35:5c:da:db:e5:05:3a:e3:b7:3e:a5: fc:e5:4d:9d:0d:13:6a:08:a7:c1:0d:d5:9a:12:ef: 50:89:15:99:c7:f7:26:14:68:08:7b:03:a3:f9:d6: c8:d1:9b:5b:0e:18:7f:8e:16:7c:b9:c8:40:b2:8a: 07:78:d2:8c:de:f2:5d:4d:af:68:76:d1:eb:f6:52: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:5B:AC:51:92:81:A7:66:BB:1C:78:6A:6D:0E:9D:72:CF:C9:BF X509v3 Authority Key Identifier: keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:40:e2:32:41:c5:67:fc:32:e4:92:17:58:23:37:5f:cb:f9: ae:95:45:02:82:fe:10:20:61:1b:fb:78:ba:73:e9:06:04:5e: 04:49:97:d2:d0:6c:26:9e:dc:97:fe:65:c2:18:8d:96:6a:9d: 48:ba:0a:36:54:ea:1e:cf:d3:11:4d:fe:b5:8c:49:31:1a:a6: bf:93:96:cf:3b:7d:ad:17:e9:53:7b:77:19:cb:0b:33:e9:67: 79:fa:05:66:52:c5:36:d7:38:16:94:14:dd:e6:b9:80:4c:55: 49:19:f2:96:5d:ed:f5:f4:07:fe:90:42:f3:f6:d6:48:33:57: c7:ee:cf:68:3c:4c:89:e8:81:d2:9f:16:50:97:57:0d:cd:5d: 4a:2e:24:13:68:82:ee:d9:65:af:9b:2c:38:ee:f7:66:50:79: c8:86:63:fc:69:be:60:75:b6:57:5b:af:7f:7e:c6:67:3d:c7: 34:b8:4f:ac:fa:40:29:31:ab:d0:e0:70:4a:a2:74:d9:22:d6: ce:3b:dd:d9:66:13:a1:90:70:f2:de:9a:d5:be:0f:bf:28:e1: 74:c9:02:56:a0:a0:12:80:65:59:84:5c:fa:00:ab:02:e1:65: 38:b5:06:06:48:88:0b:cf:ed:25:f5:6c:f9:91:01:4f:27:6a: d3:fd:64:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpvit+1VTGFNE+a9qGIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk ZGQyNmEwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhjNDU1NWJhYzUxOTI4MWE3NjZiYjFjNzg2YTZkMGU5ZDcyY2ZjOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6uBITxAgPwgjIBZW2JTTRA0RgrE xEvy4YQshfrA01Zi4wv/+NGjYI4HoPeP9+pDWmcBi+qnZiMrCTBfPepEsI5wrw/f 7bo4pkiEyiXdWdzC4C55gP3JQ+e3dVDo4SWqjdqDyi24b96Z91kFxWVO18sHIsSg IZxjo+YivROhvkr/8Gt/ZT+Ell4uJOd1/xbghrOZeaybTrFaB/3zY6wskGhP/uUs tCRpbTROjfwaYrBi/eYPc3sfNVza2+UFOuO3PqX85U2dDRNqCKfBDdWaEu9QiRWZ x/cmFGgIewOj+dbI0ZtbDhh/jhZ8uchAsooHeNKM3vJdTa9odtHr9lIjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRVW6xRkoGnZrsceGptDp1yz8m/MB8GA1UdIwQY MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0DiMkHF Z/wy5JIXWCM3X8v5rpVFAoL+ECBhG/t4unPpBgReBEmX0tBsJp7cl/5lwhiNlmqd SLoKNlTqHs/TEU3+tYxJMRqmv5OWzzt9rRfpU3t3GcsLM+lnefoFZlLFNtc4FpQU 3ea5gExVSRnyll3t9fQH/pBC8/bWSDNXx+7PaDxMieiB0p8WUJdXDc1dSi4kE2iC 7tllr5ssOO73ZlB5yIZj/Gm+YHW2V1uvf37GZz3HNLhPrPpAKTGr0OBwSqJ02SLW zjvd2WYToZBw8t6a1b4PvyjhdMkCVqCgEoBlWYRc+gCrAuFlOLUGBkiIC8/tJfVs +ZEBTydq0/1k7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:16 2025 by rpki-client