This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json) Hash identifier: +okG3VtkhnPBX1gkJrwtsQ3Uh5cOnrOmM3Lh0GUmTkQ= Subject key identifier: E8:D2:D4:7B:4C:20:A3:18:DA:BB:F0:2C:E7:77:D5:3E:EE:22:D5:B3 Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Certificate serial: 019B1BA94A20D6985DC042DDD3C9485F0CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft Manifest number: 1535 Signing time: Sun 14 Dec 2025 07:00:37 +0000 Manifest this update: Sun 14 Dec 2025 07:00:37 +0000 Manifest next update: Mon 15 Dec 2025 07:00:37 +0000 Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=) 2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=) 3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: OiB8Y1wDfwU6bfnk7ud9p45cWAU7/NdTTwN+EJb9+xs=) 4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:4a:20:d6:98:5d:c0:42:dd:d3:c9:48:5f:0c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Validity Not Before: Dec 14 07:00:37 2025 GMT Not After : Dec 15 07:00:37 2025 GMT Subject: CN=e8d2d47b4c20a318dabbf02ce777d53eee22d5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:92:16:b9:ad:9e:49:43:89:e2:9f:9f:d8:ff: 3c:6d:32:d2:e1:a5:e7:81:4d:fc:9c:b7:55:3d:4d: cb:69:d9:2f:f5:b9:88:a2:7a:29:fd:9e:e6:5c:5a: 4c:36:e3:2a:91:bd:b7:b6:9a:c8:90:ad:78:c4:5c: 84:18:53:61:38:27:07:65:82:dd:7a:89:7f:60:da: 54:18:6c:7f:7a:37:f0:8a:62:83:b4:24:4a:9e:e1: 7e:4a:6e:56:b7:d7:1b:99:50:fb:9c:35:48:c9:fd: 46:10:79:40:9e:ea:31:f6:63:f2:60:5e:c7:2c:c2: c9:3e:20:39:b3:51:b0:78:69:60:e4:11:13:74:9a: 46:03:f6:83:c6:06:27:79:c8:dd:e5:a5:f7:73:4f: 4c:df:d0:7a:04:a6:ab:bd:f2:17:64:82:55:63:79: 8c:b8:aa:70:c3:41:52:d8:d0:08:0c:a3:36:9e:72: 2f:f5:e9:6a:46:e9:2b:b7:29:1b:c6:39:58:52:fa: 04:ac:71:0c:eb:81:63:eb:2e:c1:e6:e5:4c:04:7b: 76:ee:c9:05:21:9e:4b:c2:42:04:19:ac:1e:6a:f0: ed:d7:50:d8:8c:23:36:bc:43:a7:d9:7e:fd:38:d4: 5d:4b:85:47:62:17:f8:a0:01:9f:db:66:b1:10:43: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:D4:7B:4C:20:A3:18:DA:BB:F0:2C:E7:77:D5:3E:EE:22:D5:B3 X509v3 Authority Key Identifier: keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3d:b6:1f:dd:df:e7:b3:30:2d:96:e1:b3:31:11:b9:68:de: 86:9e:47:ac:f7:d2:e5:2b:97:a6:f4:6f:b5:44:fb:91:15:e7: 9b:4f:34:a8:7e:8d:ab:05:1a:13:34:79:64:db:70:b6:84:0e: 87:60:60:c4:7b:1d:ba:ee:c7:45:4e:42:3a:04:5f:c5:c8:d9: 4d:19:de:6e:f9:09:bc:ec:6e:78:6a:22:4e:b2:e8:74:d4:05: 42:69:d6:ba:66:90:3e:39:60:0b:d4:d9:f8:29:a1:0a:90:05: 93:bc:f7:2b:68:e1:d3:86:79:ad:ee:f4:80:58:bc:38:9c:fb: 91:e2:49:8f:2f:5d:2e:37:18:a1:a7:36:9c:37:07:4f:bd:27: 56:25:97:e2:30:78:c9:06:a8:95:9b:5d:b5:01:ce:2d:89:1a: e4:87:b9:46:37:53:5e:e3:ff:55:61:67:5f:8a:0e:7c:95:6b: cc:7a:ed:4c:2c:38:9b:44:b3:db:57:ef:69:5b:6c:d6:93:d4: 6e:48:60:3b:39:30:b8:a6:96:b1:20:0b:07:75:37:76:09:8f: 5e:14:aa:c1:bc:1d:f0:2e:7b:81:9b:d0:d1:b4:3d:7b:be:d9: 8d:c4:af:82:3b:64:3e:c2:db:93:4a:30:5e:6e:ae:7f:28:69: 8c:2d:d0:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqUog1phdwELd08lIXwzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm MmNjMDcwHhcNMjUxMjE0MDcwMDM3WhcNMjUxMjE1MDcwMDM3WjAzMTEwLwYDVQQD EyhlOGQyZDQ3YjRjMjBhMzE4ZGFiYmYwMmNlNzc3ZDUzZWVlMjJkNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JIWua2eSUOJ4p+f2P88bTLS4aXn gU38nLdVPU3Ladkv9bmIonop/Z7mXFpMNuMqkb23tprIkK14xFyEGFNhOCcHZYLd eol/YNpUGGx/ejfwimKDtCRKnuF+Sm5Wt9cbmVD7nDVIyf1GEHlAnuox9mPyYF7H LMLJPiA5s1GweGlg5BETdJpGA/aDxgYnecjd5aX3c09M39B6BKarvfIXZIJVY3mM uKpww0FS2NAIDKM2nnIv9elqRukrtykbxjlYUvoErHEM64Fj6y7B5uVMBHt27skF IZ5LwkIEGaweavDt11DYjCM2vEOn2X79ONRdS4VHYhf4oAGf22axEEMdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjS1HtMIKMY2rvwLOd31T7uItWzMB8GA1UdIwQY MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5 LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD22H93f 57MwLZbhszERuWjehp5HrPfS5SuXpvRvtUT7kRXnm080qH6NqwUaEzR5ZNtwtoQO h2BgxHsduu7HRU5COgRfxcjZTRnebvkJvOxueGoiTrLodNQFQmnWumaQPjlgC9TZ +CmhCpAFk7z3K2jh04Z5re70gFi8OJz7keJJjy9dLjcYoac2nDcHT70nViWX4jB4 yQaolZtdtQHOLYka5Ie5RjdTXuP/VWFnX4oOfJVrzHrtTCw4m0Sz21fvaVts1pPU bkhgOzkwuKaWsSALB3U3dgmPXhSqwbwd8C57gZvQ0bQ9e77ZjcSvgjtkPsLbk0ow Xm6ufyhpjC3QdA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:42:52 2025 by rpki-client