This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json) Hash identifier: X0vcFwbz1JyFbnKnuFzLERDi0arqgmN3hqwlX6mTubI= Subject key identifier: F9:6B:E8:45:83:6C:9A:DA:B1:E6:74:D6:BB:94:83:F7:4D:29:46:FF Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Certificate serial: 019B32D5EF9C49BFB1897CC9A525578C14BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft Manifest number: 1541 Signing time: Thu 18 Dec 2025 19:00:39 +0000 Manifest this update: Thu 18 Dec 2025 19:00:39 +0000 Manifest next update: Fri 19 Dec 2025 19:00:39 +0000 Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=) 2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=) 3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: L6s9A7EDRmfuz9eCJNLEnGER6XdV5km2jS6xpxks5ME=) 4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:ef:9c:49:bf:b1:89:7c:c9:a5:25:57:8c:14:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Validity Not Before: Dec 18 19:00:39 2025 GMT Not After : Dec 19 19:00:39 2025 GMT Subject: CN=f96be845836c9adab1e674d6bb9483f74d2946ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:ce:27:a2:e4:63:e1:03:f3:53:85:d3:10: fc:8d:50:a5:5c:ed:14:6f:aa:e6:ac:18:87:26:d1: ca:62:76:8d:c4:51:5f:cc:ad:15:14:60:3e:c0:b0: 20:03:31:63:85:22:39:d1:4f:11:aa:b7:ce:8a:2a: 30:d1:f5:fe:04:4d:1e:ed:88:b9:58:76:e9:6b:48: c9:3d:46:6c:4c:72:9e:ba:9c:9f:9b:0f:e6:81:81: 3b:f2:85:33:4e:15:89:12:6f:47:9b:56:94:16:92: 53:b3:b4:37:f9:ed:e4:d8:1b:f6:b0:56:b0:f5:3e: 21:6b:31:4e:0d:6f:08:14:cc:55:10:5e:11:f5:48: a8:fa:ba:40:a1:b6:c4:40:31:8b:d9:2f:40:c5:d2: 27:c5:7c:6a:9d:54:54:2d:4e:61:b2:64:29:f3:06: f1:10:4e:23:c2:ef:c4:24:c5:7b:17:9d:88:e9:7a: e1:e4:86:fd:0d:0e:4a:f0:44:eb:a9:63:6e:43:73: f7:2e:27:a7:d3:b5:74:2a:e1:0b:8c:ad:cc:bb:05: fe:c0:07:a2:16:dd:b1:fa:45:98:b6:a5:14:cb:c2: e2:98:4c:eb:25:22:7f:eb:d3:fa:1d:5b:36:9c:41: 62:53:22:24:8f:3e:25:2f:72:a1:d8:7e:f3:6d:37: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6B:E8:45:83:6C:9A:DA:B1:E6:74:D6:BB:94:83:F7:4D:29:46:FF X509v3 Authority Key Identifier: keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:6a:a9:8e:f4:8b:c5:79:57:d8:c5:a5:1b:d5:40:12:78: 4f:d8:3c:4b:e9:b0:d5:a5:f0:05:47:35:6f:51:61:5d:d6:c8: 9f:fd:bc:91:95:11:33:bf:90:9d:e7:ab:6b:e8:d5:05:af:e9: c8:3a:58:66:76:61:69:31:23:11:bd:b2:3f:33:8e:ac:c9:61: bb:1a:71:2c:78:ff:96:a1:30:ec:0a:a2:d1:71:3a:ef:73:1c: c7:d8:14:b9:cd:52:35:be:82:b1:7a:98:93:e4:29:bf:9a:9a: 38:45:51:fd:32:2e:63:6b:83:02:78:22:0e:3c:1e:5e:3c:79: 2b:99:98:0d:cf:16:bc:5d:26:47:a4:ae:74:b2:6c:f3:b7:2f: 1b:83:32:54:4c:49:bb:bb:07:6e:db:cd:6e:41:1f:80:d4:1c: c1:c0:cc:3a:a3:8d:03:8d:9a:0b:8d:5d:fa:65:22:8e:7a:48: ff:93:02:5e:56:09:32:fe:1a:2d:2a:56:7b:0e:7e:37:e9:ff: be:a7:ed:e3:e7:34:37:3d:52:0d:41:ab:8f:88:cc:36:6b:eb: 31:3b:95:fb:e1:18:2e:4a:6c:a8:f8:c3:62:73:62:33:a1:e5: 46:94:cd:6e:9b:93:ef:4e:83:5a:28:e6:a7:43:06:27:5e:06: 1d:5e:3a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1e+cSb+xiXzJpSVXjBS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm MmNjMDcwHhcNMjUxMjE4MTkwMDM5WhcNMjUxMjE5MTkwMDM5WjAzMTEwLwYDVQQD EyhmOTZiZTg0NTgzNmM5YWRhYjFlNjc0ZDZiYjk0ODNmNzRkMjk0NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxbOJ6LkY+ED81OF0xD8jVClXO0U b6rmrBiHJtHKYnaNxFFfzK0VFGA+wLAgAzFjhSI50U8RqrfOiiow0fX+BE0e7Yi5 WHbpa0jJPUZsTHKeupyfmw/mgYE78oUzThWJEm9Hm1aUFpJTs7Q3+e3k2Bv2sFaw 9T4hazFODW8IFMxVEF4R9Uio+rpAobbEQDGL2S9AxdInxXxqnVRULU5hsmQp8wbx EE4jwu/EJMV7F52I6Xrh5Ib9DQ5K8ETrqWNuQ3P3Lien07V0KuELjK3MuwX+wAei Ft2x+kWYtqUUy8LimEzrJSJ/69P6HVs2nEFiUyIkjz4lL3Kh2H7zbTe11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlr6EWDbJraseZ01ruUg/dNKUb/MB8GA1UdIwQY MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5 LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI1qqY70 i8V5V9jFpRvVQBJ4T9g8S+mw1aXwBUc1b1FhXdbIn/28kZURM7+Qneera+jVBa/p yDpYZnZhaTEjEb2yPzOOrMlhuxpxLHj/lqEw7Aqi0XE673Mcx9gUuc1SNb6CsXqY k+Qpv5qaOEVR/TIuY2uDAngiDjweXjx5K5mYDc8WvF0mR6SudLJs87cvG4MyVExJ u7sHbtvNbkEfgNQcwcDMOqONA42aC41d+mUijnpI/5MCXlYJMv4aLSpWew5+N+n/ vqft4+c0Nz1SDUGrj4jMNmvrMTuV++EYLkpsqPjDYnNiM6HlRpTNbpuT706DWijm p0MGJ14GHV46Bw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:00 2025 by rpki-client