This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json) Hash identifier: fOWzOlotfE5uLxTqwRwUPwgnuBFzbHKqMEPXDpQUTag= Subject key identifier: E6:27:4F:A8:58:F8:F5:1D:5F:29:C1:D2:67:5A:08:38:26:DD:20:77 Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b Certificate serial: 019B37FC87ECEDCE72A116C95045D8A01AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft Manifest number: 16ED Signing time: Fri 19 Dec 2025 19:00:55 +0000 Manifest this update: Fri 19 Dec 2025 19:00:55 +0000 Manifest next update: Sat 20 Dec 2025 19:00:55 +0000 Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=) 2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: nfPecl0BJ90khzKktTe6YQd9CLe9HBfZIu8tTgJQ/FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:87:ec:ed:ce:72:a1:16:c9:50:45:d8:a0:1a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b Validity Not Before: Dec 19 19:00:55 2025 GMT Not After : Dec 20 19:00:55 2025 GMT Subject: CN=e6274fa858f8f51d5f29c1d2675a083826dd2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:65:b3:9e:77:02:18:ea:bd:2d:2d:bc:97: 27:73:e1:e3:96:bb:98:7a:b8:44:c5:b6:9e:2a:83: 30:3f:3e:3c:cf:28:15:65:a1:d3:5d:b2:b7:8f:ee: 93:15:61:25:57:fc:b5:d0:68:9d:10:fc:d3:e1:64: 4d:e0:9b:b7:fb:69:39:8e:e6:39:66:5d:50:73:ce: 5f:48:03:fa:22:93:81:98:89:8d:a0:31:aa:57:b4: a6:60:18:ca:98:53:d4:ca:26:e4:3c:4d:84:a6:24: 30:e9:63:78:6e:b2:5c:9a:4c:a4:25:83:de:56:71: ff:60:9e:68:e3:91:59:af:82:11:a3:63:b7:89:2f: 93:6c:46:fe:f1:50:ad:b5:58:7d:92:ef:a2:bd:0e: 8c:57:e6:c7:f5:ea:54:84:b2:57:01:90:ed:0e:a0: 8a:68:78:54:c0:2b:9f:b9:39:f5:a3:43:90:de:54: 7e:36:c8:a6:6a:6a:d9:ae:8e:fe:a3:c9:52:d7:74: 30:74:a5:f4:db:6a:a3:e6:40:74:a5:b8:0e:a8:ce: c4:8a:d1:49:24:c7:ec:0b:db:c6:f0:75:34:23:d3: 1e:06:a7:eb:ae:1f:90:e5:45:a9:35:6e:b7:7c:66: a8:c6:a0:07:ea:f7:ba:7b:58:bf:df:e2:2d:f4:e1: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:4F:A8:58:F8:F5:1D:5F:29:C1:D2:67:5A:08:38:26:DD:20:77 X509v3 Authority Key Identifier: keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fc:19:7e:d8:35:39:8c:8c:fe:d1:79:b5:f8:98:7a:68:51: 84:0b:0f:60:36:96:89:60:48:b0:c0:49:6a:0a:1f:d8:49:18: 3e:2e:38:09:93:28:13:a4:9f:55:8f:f6:26:d6:7d:76:9f:9b: a2:e6:86:be:01:55:92:58:00:5d:be:10:df:fe:73:5e:bc:bf: 83:93:f5:da:d7:29:d6:7d:c4:25:5a:a6:0f:7e:5d:24:61:48: d7:2b:c2:89:b6:85:32:c8:43:d4:3a:1f:92:d7:69:9e:0b:70: 88:71:22:46:7e:6e:45:d5:ba:69:0a:2f:8e:65:e9:4d:a8:d4: 6c:18:01:94:7c:36:8e:42:73:ca:e0:e1:6c:fa:30:9e:bb:90: 8d:3b:dd:11:e3:ad:f5:f2:d5:e8:19:fc:5f:85:2e:d0:76:d0: 6c:fc:0e:c7:d7:97:fb:dd:f7:4b:81:6a:4d:c6:9a:c3:98:70: 0b:24:46:4a:d5:89:a6:f6:79:e1:77:2a:de:3d:7f:71:6f:d0: 75:9f:b6:e9:f9:3e:78:e5:82:87:a0:d8:c5:4a:48:75:87:79: 93:6f:8d:f6:b7:37:cd:8c:ea:db:fa:cb:f8:a4:f1:7c:ea:de: b6:a7:1a:9f:30:b7:64:fa:7a:c5:58:3b:99:1d:44:4c:4e:a7: 65:f4:27:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Ifs7c5yoRbJUEXYoBqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWM2NDM5NDZhMDU5Mzk3MzU1NDIwZDczYmM0NWYxNGRh MmE3NmIwHhcNMjUxMjE5MTkwMDU1WhcNMjUxMjIwMTkwMDU1WjAzMTEwLwYDVQQD EyhlNjI3NGZhODU4ZjhmNTFkNWYyOWMxZDI2NzVhMDgzODI2ZGQyMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bpls553AhjqvS0tvJcnc+HjlruY erhExbaeKoMwPz48zygVZaHTXbK3j+6TFWElV/y10GidEPzT4WRN4Ju3+2k5juY5 Zl1Qc85fSAP6IpOBmImNoDGqV7SmYBjKmFPUyibkPE2EpiQw6WN4brJcmkykJYPe VnH/YJ5o45FZr4IRo2O3iS+TbEb+8VCttVh9ku+ivQ6MV+bH9epUhLJXAZDtDqCK aHhUwCufuTn1o0OQ3lR+NsimamrZro7+o8lS13QwdKX022qj5kB0pbgOqM7EitFJ JMfsC9vG8HU0I9MeBqfrrh+Q5UWpNW63fGaoxqAH6ve6e1i/3+It9OEdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYnT6hY+PUdXynB0mdaCDgm3SB3MB8GA1UdIwQY MBaAFKGcZDlGoFk5c1VCDXO8RfFNoqdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYt YWMzYjZhNDU2N2JhLzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYtYWMzYjZhNDU2N2Jh LzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfwZftg1 OYyM/tF5tfiYemhRhAsPYDaWiWBIsMBJagof2EkYPi44CZMoE6SfVY/2JtZ9dp+b ouaGvgFVklgAXb4Q3/5zXry/g5P12tcp1n3EJVqmD35dJGFI1yvCibaFMshD1Dof ktdpngtwiHEiRn5uRdW6aQovjmXpTajUbBgBlHw2jkJzyuDhbPownruQjTvdEeOt 9fLV6Bn8X4Uu0HbQbPwOx9eX+933S4FqTcaaw5hwCyRGStWJpvZ54Xcq3j1/cW/Q dZ+26fk+eOWCh6DYxUpIdYd5k2+N9rc3zYzq2/rL+KTxfOretqcanzC3ZPp6xVg7 mR1ETE6nZfQnRA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:53 2025 by rpki-client