This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json) Hash identifier: /qtokKrPmNDUHWZlVVJboVeQyerFzDXmUI3xIQYehJY= Subject key identifier: 08:5C:7C:91:0E:DE:2A:F3:58:8B:59:0F:B6:48:78:18:27:7C:54:A6 Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Certificate serial: 019B1570B6F0E90338A22342F8252E2DB658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft Manifest number: 0737 Signing time: Sat 13 Dec 2025 02:01:06 +0000 Manifest this update: Sat 13 Dec 2025 02:01:06 +0000 Manifest next update: Sun 14 Dec 2025 02:01:06 +0000 Files and hashes: 1: GgU4V3exF_KMsbXxFhlxd1M5pl8.roa (hash: l8v1ZDd4kP5GR80G/4+UL0QS/Pev1eqpTKkPGhrjSW4=) 2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: FUhmWUx6XTVb5y7AfQXLgAytRn93RQ9OUQLP91+Uw8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:70:b6:f0:e9:03:38:a2:23:42:f8:25:2e:2d:b6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Validity Not Before: Dec 13 02:01:06 2025 GMT Not After : Dec 14 02:01:06 2025 GMT Subject: CN=085c7c910ede2af3588b590fb6487818277c54a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:80:3a:8a:c5:a2:61:71:13:4e:56:16:4b: a8:db:de:0c:f6:33:c4:79:6d:27:ff:9c:3c:e9:7e: 76:a5:a3:aa:75:9c:bb:a2:5c:cb:28:c0:78:fc:23: 7d:e6:bd:93:dd:64:87:d3:a4:93:a6:aa:54:67:e9: 3c:e4:29:a0:dd:04:c1:fb:17:34:33:14:dc:b1:08: 24:be:a0:e6:ae:ce:4d:e6:af:4b:01:e3:ca:a3:70: 6c:8d:67:61:0d:cb:b4:9f:95:f9:53:1c:d4:35:ad: 9a:fd:cd:e4:d0:16:82:b5:84:9b:75:ec:63:71:fd: e2:7d:62:e5:d5:9d:94:15:83:3a:25:f6:b6:95:40: 21:12:5f:0c:30:42:15:a9:5d:4e:0f:fe:a6:ea:d2: a3:10:78:69:6e:22:8f:43:97:f4:62:fa:a9:e0:c3: 8c:59:85:55:fb:9d:26:4b:c4:94:e0:47:bc:45:45: 19:b4:7d:b3:26:46:0f:4e:4b:24:e2:4e:80:39:75: c2:99:2b:42:fc:1e:39:3a:03:14:2a:45:b5:0b:6e: ed:8c:06:f0:67:72:19:6f:c7:36:e0:96:ac:80:4c: 40:bc:83:11:8e:ec:06:80:47:64:68:98:0c:dc:17: 5c:a5:76:ae:cd:1b:d5:be:21:6c:c7:8b:d3:26:04: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:7C:91:0E:DE:2A:F3:58:8B:59:0F:B6:48:78:18:27:7C:54:A6 X509v3 Authority Key Identifier: keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:75:9c:1d:a4:88:97:65:fd:56:65:5c:ab:71:88:b3:a2:99: 8d:71:c2:dd:0a:6d:bb:25:82:a1:74:8a:59:27:45:9b:2a:05: 85:60:33:f3:33:d7:e0:9a:e0:5b:61:8c:28:e0:43:af:b9:a9: ab:3b:a3:d9:86:80:08:ab:ae:17:1c:4b:0f:92:0e:71:da:25: 91:d6:ea:9b:5a:85:0a:9b:c4:5f:f0:a0:b4:24:f0:9f:ca:d5: a5:26:b7:45:94:19:5b:fd:d2:0e:09:ae:42:d5:72:c5:21:84: eb:e5:51:19:11:28:dd:08:b9:7b:30:3d:8b:ad:0e:72:91:f1: f4:20:5f:45:1c:50:77:c1:93:04:da:45:cd:22:6d:09:c8:cd: c8:ac:4d:5c:b1:72:a6:49:8a:02:1e:cf:dd:48:0d:9e:c4:dd: cd:e3:c7:28:2f:6b:52:f8:ff:bc:56:43:42:1b:12:de:56:4d: 6b:f3:c0:7a:ce:8b:1a:4e:9c:14:0f:ad:d1:d3:42:fc:47:d2: 77:b4:c8:6e:ed:84:12:f0:17:68:75:25:de:8d:4a:ce:93:36: a2:e2:50:f1:9f:95:56:93:d2:18:a4:71:54:22:b9:98:e4:2e: a8:07:3e:ff:79:d4:0b:dd:f2:75:a1:8d:86:59:93:b9:74:e8: b2:31:08:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsVcLbw6QM4oiNC+CUuLbZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3 MGRmZTcwHhcNMjUxMjEzMDIwMTA2WhcNMjUxMjE0MDIwMTA2WjAzMTEwLwYDVQQD EygwODVjN2M5MTBlZGUyYWYzNTg4YjU5MGZiNjQ4NzgxODI3N2M1NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZqAOorFomFxE05WFkuo294M9jPE eW0n/5w86X52paOqdZy7olzLKMB4/CN95r2T3WSH06STpqpUZ+k85Cmg3QTB+xc0 MxTcsQgkvqDmrs5N5q9LAePKo3BsjWdhDcu0n5X5UxzUNa2a/c3k0BaCtYSbdexj cf3ifWLl1Z2UFYM6Jfa2lUAhEl8MMEIVqV1OD/6m6tKjEHhpbiKPQ5f0Yvqp4MOM WYVV+50mS8SU4Ee8RUUZtH2zJkYPTksk4k6AOXXCmStC/B45OgMUKkW1C27tjAbw Z3IZb8c24JasgExAvIMRjuwGgEdkaJgM3BdcpXauzRvVviFsx4vTJgRkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhcfJEO3irzWItZD7ZIeBgnfFSmMB8GA1UdIwQY MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0 LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3WcHaSI l2X9VmVcq3GIs6KZjXHC3QptuyWCoXSKWSdFmyoFhWAz8zPX4JrgW2GMKOBDr7mp qzuj2YaACKuuFxxLD5IOcdolkdbqm1qFCpvEX/CgtCTwn8rVpSa3RZQZW/3SDgmu QtVyxSGE6+VRGREo3Qi5ezA9i60OcpHx9CBfRRxQd8GTBNpFzSJtCcjNyKxNXLFy pkmKAh7P3UgNnsTdzePHKC9rUvj/vFZDQhsS3lZNa/PAes6LGk6cFA+t0dNC/EfS d7TIbu2EEvAXaHUl3o1KzpM2ouJQ8Z+VVpPSGKRxVCK5mOQuqAc+/3nUC93ydaGN hlmTuXTosjEIuA== -----END CERTIFICATE-----Generated at Sat Dec 13 10:45:42 2025 by rpki-client