This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json) Hash identifier: yVV75NNtHxWyqPO8PHnvtmPJCH+cWnaQ8RGzGjYxI9g= Subject key identifier: 3D:51:69:0B:07:60:45:1D:99:0E:98:EB:56:EF:22:95:F5:96:A6:D0 Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019AF0BF76FD3D6F9BDBAF0A0ECB87F8E0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa (hash: 2hfPMHbWihqBZrYe5pg+hp4U1d6XfZrolVYNzjr0Hc4=) 2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: ZbHFYYq2kbm7maXG6c0nc5qPZLvb5/EYzW8+C/TLgeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:76:fd:3d:6f:9b:db:af:0a:0e:cb:87:f8:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=3d51690b0760451d990e98eb56ef2295f596a6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:73:a7:fb:94:31:a0:6f:22:d1:c7:3f:46: 84:a9:fb:48:85:0c:b8:db:2c:63:1a:5e:7f:55:a1: 82:cf:19:2e:c6:08:fd:45:52:ea:a4:4f:d4:71:e1: 81:ec:4d:a9:89:36:33:10:a5:94:a8:65:fd:df:06: 47:7e:45:0b:3a:ff:39:fe:2f:05:ef:de:88:3f:46: 76:96:5c:68:76:8c:28:87:4b:2e:a1:7a:16:cc:1b: ba:b9:da:95:46:35:34:f8:c0:c5:03:7e:66:e3:8a: b9:5b:f4:81:1d:f0:9f:83:d7:da:33:38:b7:cf:3b: 9a:0f:ba:1e:94:ba:be:fa:e5:59:ea:3a:02:6e:8c: 2c:bc:f4:de:70:c6:82:3d:6d:10:da:5f:fc:4f:3b: c7:0e:49:12:53:ca:98:ce:10:23:26:2b:ad:fd:0d: 59:61:d4:03:1f:c3:b5:ac:4e:32:0e:6f:68:89:53: 47:a5:cb:54:28:ea:83:9b:10:70:4a:c7:d3:68:6d: fb:84:d4:81:ae:21:6a:3f:2b:85:1b:57:b6:4d:53: 0d:b5:86:a0:04:de:b9:1b:72:3f:4e:1f:8f:3b:02: c5:34:85:5d:a5:91:bc:d9:18:ee:19:e1:f5:39:4a: 5c:66:71:90:54:74:26:33:af:af:ee:d5:bd:c8:7d: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:69:0B:07:60:45:1D:99:0E:98:EB:56:EF:22:95:F5:96:A6:D0 X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:92:40:53:dc:f7:34:7d:20:f3:06:35:28:4a:e3:56:71:52: 91:00:f8:1c:26:e7:27:fa:1e:94:27:5c:2c:b0:2c:d5:74:4b: 13:e6:c8:2d:d9:50:6b:ae:00:bb:4b:2c:20:86:9b:24:48:cc: 5f:29:dd:d9:66:8f:65:14:49:6e:dc:98:c8:49:8b:45:86:10: 6c:fd:60:a2:24:90:3a:39:53:2b:de:7a:11:a9:b9:e5:f4:18: d7:80:bf:59:af:c7:71:cd:51:cb:bd:c3:28:e5:f5:58:76:76: 5d:d8:4c:ba:8d:f4:4d:d3:70:c5:6b:98:d9:e2:6a:a9:8a:06: 80:df:81:86:c9:fe:16:0b:9a:a5:21:1c:30:1d:ca:40:a6:6b: a6:36:a3:7e:d5:84:83:3b:7e:8b:b1:88:7c:b7:56:fc:2f:21: 34:36:b1:f3:cb:1a:94:ca:b3:a8:87:a6:f6:97:28:49:67:b9: b2:0a:d9:30:33:40:6b:96:c6:5f:69:7b:bb:6f:3b:0d:c1:95: 3c:2c:a6:09:5e:ee:c5:19:c7:02:c4:88:e5:a9:ea:5a:5c:b5: 69:93:09:29:bd:2e:56:f5:c2:1b:ff:5a:6c:45:7b:5e:a1:b1: 15:d4:63:08:8b:8f:33:89:1f:e1:ea:83:61:8c:9e:29:f2:7d: 80:f1:73:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3b9PW+b268KDsuH+ODNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EygzZDUxNjkwYjA3NjA0NTFkOTkwZTk4ZWI1NmVmMjI5NWY1OTZhNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7tzp/uUMaBvItHHP0aEqftIhQy4 2yxjGl5/VaGCzxkuxgj9RVLqpE/UceGB7E2piTYzEKWUqGX93wZHfkULOv85/i8F 796IP0Z2llxodowoh0suoXoWzBu6udqVRjU0+MDFA35m44q5W/SBHfCfg9faMzi3 zzuaD7oelLq++uVZ6joCbowsvPTecMaCPW0Q2l/8TzvHDkkSU8qYzhAjJiut/Q1Z YdQDH8O1rE4yDm9oiVNHpctUKOqDmxBwSsfTaG37hNSBriFqPyuFG1e2TVMNtYag BN65G3I/Th+POwLFNIVdpZG82RjuGeH1OUpcZnGQVHQmM6+v7tW9yH3ySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1RaQsHYEUdmQ6Y61bvIpX1lqbQMB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJJAU9z3 NH0g8wY1KErjVnFSkQD4HCbnJ/oelCdcLLAs1XRLE+bILdlQa64Au0ssIIabJEjM Xynd2WaPZRRJbtyYyEmLRYYQbP1goiSQOjlTK956Eam55fQY14C/Wa/Hcc1Ry73D KOX1WHZ2XdhMuo30TdNwxWuY2eJqqYoGgN+Bhsn+FguapSEcMB3KQKZrpjajftWE gzt+i7GIfLdW/C8hNDax88salMqzqIem9pcoSWe5sgrZMDNAa5bGX2l7u287DcGV PCymCV7uxRnHAsSI5anqWly1aZMJKb0uVvXCG/9abEV7XqGxFdRjCIuPM4kf4eqD YYyeKfJ9gPFzgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:38 2025 by rpki-client