This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json) Hash identifier: vqsiPQGuQpScyUae+Cf4jf3oCA7v7XSC4Vw+Jk1Htdk= Subject key identifier: 17:1E:84:E7:09:DB:AF:01:AF:49:58:20:45:81:AC:15:EF:C2:14:C0 Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Certificate serial: 019B23642DE08ABDDF445355BF1D9F2AFCF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft Manifest number: 12D0 Signing time: Mon 15 Dec 2025 19:02:06 +0000 Manifest this update: Mon 15 Dec 2025 19:02:06 +0000 Manifest next update: Tue 16 Dec 2025 19:02:06 +0000 Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: 4qN636FboE00PG6/EJANhh6fXQHV0+Z5YYrIwyhupdg=) 2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=) 3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:2d:e0:8a:bd:df:44:53:55:bf:1d:9f:2a:fc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Validity Not Before: Dec 15 19:02:06 2025 GMT Not After : Dec 16 19:02:06 2025 GMT Subject: CN=171e84e709dbaf01af4958204581ac15efc214c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:29:b8:3d:e0:96:bd:71:80:42:6d:b2:f9: 4c:a9:27:78:62:3b:e0:89:f8:5e:20:80:6c:96:2b: b3:d5:b7:9c:38:c2:7b:ab:a7:24:b3:17:c1:bd:b6: 65:bf:fe:c8:22:d4:07:f3:cc:92:e8:6a:ed:da:1b: 00:b4:53:05:24:4d:d1:24:a0:70:02:5b:f5:f8:2d: 63:97:06:7e:9a:33:15:77:63:82:62:4b:f6:f4:d2: 77:75:37:64:16:ae:a3:c9:56:23:76:70:c1:55:04: 32:94:c3:2f:da:24:99:43:b6:c9:97:16:16:a7:15: b1:1b:80:13:f9:b0:8f:5e:c6:3c:8c:12:03:66:6d: d8:a9:0a:45:29:4b:bd:10:c8:81:4b:64:a9:8f:98: aa:91:b8:63:c5:98:74:ab:1c:94:27:3e:bd:8c:ec: 91:da:97:9e:b0:e2:30:c8:98:12:4c:cb:18:c6:73: 75:69:a6:8c:63:cd:0d:05:f6:55:af:34:39:ec:55: 69:77:ee:cb:12:ef:a7:21:74:f5:e9:b1:1d:5c:8f: 15:18:26:33:d6:c7:b9:6d:7c:af:9d:7e:e5:36:b2: 35:61:14:3d:f9:38:56:2e:81:3b:ba:a4:29:12:27: 8e:fa:54:21:94:c2:4b:9c:66:f0:23:6d:c9:5e:b0: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1E:84:E7:09:DB:AF:01:AF:49:58:20:45:81:AC:15:EF:C2:14:C0 X509v3 Authority Key Identifier: keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fe:c7:13:aa:db:2d:3b:47:5f:89:29:c7:fd:90:3b:bf:44: 47:a4:e3:dd:c6:e6:78:ac:03:62:63:ac:4e:04:19:05:0b:d3: de:bb:79:b3:03:1f:99:b0:a5:a0:4f:9e:5b:b7:29:8c:75:52: 14:c2:7f:56:d6:e9:20:9f:7c:91:9b:ac:eb:38:cf:b6:c6:ec: d5:b1:23:ab:db:c8:fa:b4:1c:03:ec:87:89:c7:5c:2c:a7:70: fa:47:18:77:8a:51:e1:7d:e6:66:46:16:e4:7a:fa:af:16:33: fa:9c:05:59:24:bd:29:58:01:8f:d9:20:2b:c6:f9:b2:db:64: c2:55:c6:c7:8a:cc:a2:4a:2f:e4:98:e8:bd:f0:00:b1:9f:ce: 0f:f9:78:a0:23:d9:df:79:ab:3a:0c:76:7a:ae:67:cb:7b:35: 69:9f:6c:af:47:2a:3a:64:b6:90:91:25:87:aa:0c:6a:d6:36: 29:ae:0f:45:6d:77:76:22:db:0a:00:d0:47:69:8d:20:c1:18: 7f:f9:de:01:eb:38:50:c8:b1:4f:d2:89:8f:c0:12:0e:69:d2: 25:ba:4f:c8:7f:dd:40:37:36:7c:87:ed:75:ac:82:93:ff:c8: 3a:7b:99:e7:f1:46:8f:2d:4c:2e:dc:93:f9:4a:da:fb:c7:0d: aa:bc:8d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZC3gir3fRFNVvx2fKvz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1 NjNjMGQwHhcNMjUxMjE1MTkwMjA2WhcNMjUxMjE2MTkwMjA2WjAzMTEwLwYDVQQD EygxNzFlODRlNzA5ZGJhZjAxYWY0OTU4MjA0NTgxYWMxNWVmYzIxNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LEpuD3glr1xgEJtsvlMqSd4Yjvg ifheIIBsliuz1becOMJ7q6cksxfBvbZlv/7IItQH88yS6Grt2hsAtFMFJE3RJKBw Alv1+C1jlwZ+mjMVd2OCYkv29NJ3dTdkFq6jyVYjdnDBVQQylMMv2iSZQ7bJlxYW pxWxG4AT+bCPXsY8jBIDZm3YqQpFKUu9EMiBS2Spj5iqkbhjxZh0qxyUJz69jOyR 2peesOIwyJgSTMsYxnN1aaaMY80NBfZVrzQ57FVpd+7LEu+nIXT16bEdXI8VGCYz 1se5bXyvnX7lNrI1YRQ9+ThWLoE7uqQpEieO+lQhlMJLnGbwI23JXrBMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcehOcJ268Br0lYIEWBrBXvwhTAMB8GA1UdIwQY MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct NTlhNWVlM2FkOWE4LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4 LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf7HE6rb LTtHX4kpx/2QO79ER6Tj3cbmeKwDYmOsTgQZBQvT3rt5swMfmbCloE+eW7cpjHVS FMJ/VtbpIJ98kZus6zjPtsbs1bEjq9vI+rQcA+yHicdcLKdw+kcYd4pR4X3mZkYW 5Hr6rxYz+pwFWSS9KVgBj9kgK8b5sttkwlXGx4rMokov5JjovfAAsZ/OD/l4oCPZ 33mrOgx2eq5ny3s1aZ9sr0cqOmS2kJElh6oMatY2Ka4PRW13diLbCgDQR2mNIMEY f/neAes4UMixT9KJj8ASDmnSJbpPyH/dQDc2fIftdayCk//IOnuZ5/FGjy1MLtyT +Ura+8cNqryNMQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:04:53 2025 by rpki-client