This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json) Hash identifier: MEvFgsqfpkGDxa0B7AMTTHSNNrvzIk+S6akZgS67g34= Subject key identifier: F6:B8:79:32:C5:1D:D4:2B:02:8C:43:85:E2:F2:3B:D6:15:E8:09:FD Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Certificate serial: 019B3DC753E653D932C6FD3505F60E94FB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: RW4un6mRBfPzHloV5RnOReMxV4M.roa (hash: 6KtCB53EZaTt4rkvk3WW5xLU60zG4n/pYxl9BtxsfPs=) 2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: 0Hu7XDJwMuzu4QXfdcBPMAhtSsjWeK8d4PzTQidElp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:53:e6:53:d9:32:c6:fd:35:05:f6:0e:94:fb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=f6b87932c51dd42b028c4385e2f23bd615e809fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:7f:ef:14:57:46:78:63:a6:7c:b8:69:48: 00:b1:c3:ae:bb:81:11:0b:1b:eb:23:db:8f:04:7a: 94:1d:4a:78:32:6d:4f:7b:97:1f:67:00:bf:2b:fe: 7a:a5:e7:05:b6:3c:a6:5e:7e:25:ad:d9:ce:ca:f5: f6:a1:42:fb:29:31:af:a1:69:59:d6:18:b4:07:3c: 91:82:da:3a:98:ae:d3:27:32:2c:ae:af:8e:9b:c1: e2:26:84:16:9d:a6:96:8e:9c:c6:ea:f2:42:38:8c: 6d:d5:03:34:b5:39:7f:f7:8b:b2:ec:a1:f9:f4:45: 65:a4:fe:d4:ec:72:79:39:23:7f:2b:3e:19:ea:a9: 12:12:96:b8:da:30:6e:6d:8a:ec:07:aa:84:25:e8: 3d:f1:43:0c:d5:d2:83:a4:05:03:9a:23:ed:24:40: 55:8b:35:98:bc:69:f2:25:74:46:81:bb:5b:6a:61: 2c:60:9d:7e:87:bd:f1:34:aa:27:98:ae:11:a1:bd: dc:f3:ca:84:9a:e0:bf:f0:33:5b:b2:d3:b2:f9:7b: 50:3e:4c:5c:28:01:5e:c2:76:0f:f4:e8:a7:8c:6b: a9:bf:8f:11:45:df:e5:05:fb:d9:a7:4a:f0:8f:8a: d6:68:b6:68:e1:a7:c0:5b:23:04:22:0b:a8:b6:86: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:79:32:C5:1D:D4:2B:02:8C:43:85:E2:F2:3B:D6:15:E8:09:FD X509v3 Authority Key Identifier: keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:c8:26:f9:52:a8:e1:e6:51:b7:08:f1:64:35:4a:2f:c5: 90:4c:37:49:9d:7d:78:8e:32:f6:dd:76:c4:39:c6:2b:40:52: b6:59:87:09:9f:98:04:53:eb:2a:4f:95:57:93:fe:41:e0:67: 6b:3e:0d:d8:90:fb:70:87:f2:c5:a8:51:14:73:db:dc:c3:75: 35:54:d0:7f:d0:db:fa:a2:4b:79:4f:aa:12:07:38:80:d9:00: a1:3e:c5:d7:64:67:ab:0d:cc:d4:63:e7:21:ee:e6:41:5f:e0: bb:4c:a4:c2:95:cc:0b:c6:a7:de:3b:06:91:35:ab:fe:a4:3d: 04:10:3a:af:65:e7:08:fe:4d:13:62:9f:0f:de:56:91:4e:d7: 63:78:bb:e8:80:ac:19:4e:37:c7:c6:f7:f3:b4:48:b5:4a:79: 00:dc:b1:22:8a:3a:09:f9:58:f0:75:79:23:b8:ff:f1:5f:fa: ac:f3:88:57:db:e9:d5:84:e1:ed:0f:fa:6e:26:ad:b0:20:34: 1e:42:7b:4e:d1:86:45:d2:a1:ba:c5:74:81:78:1b:2e:81:8f: 28:9f:8e:69:16:c4:37:e8:39:b4:76:5f:2f:5a:a3:c8:5d:7f: 10:ba:c5:f3:de:96:47:a8:6e:83:41:18:dc:b7:00:15:69:1f: f1:0f:c0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1PmU9kyxv01BfYOlPtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYzhjZGE4MTRlNzc3ZDlmZTE1NGI5MmU5OTU5Y2UxMjBi MGFkNTgwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD EyhmNmI4NzkzMmM1MWRkNDJiMDI4YzQzODVlMmYyM2JkNjE1ZTgwOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzN/7xRXRnhjpny4aUgAscOuu4ER CxvrI9uPBHqUHUp4Mm1Pe5cfZwC/K/56pecFtjymXn4lrdnOyvX2oUL7KTGvoWlZ 1hi0BzyRgto6mK7TJzIsrq+Om8HiJoQWnaaWjpzG6vJCOIxt1QM0tTl/94uy7KH5 9EVlpP7U7HJ5OSN/Kz4Z6qkSEpa42jBubYrsB6qEJeg98UMM1dKDpAUDmiPtJEBV izWYvGnyJXRGgbtbamEsYJ1+h73xNKonmK4Rob3c88qEmuC/8DNbstOy+XtQPkxc KAFewnYP9OinjGupv48RRd/lBfvZp0rwj4rWaLZo4afAWyMEIguotoao5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa4eTLFHdQrAoxDheLyO9YV6An9MB8GA1UdIwQY MBaAFKDIzagU53fZ/hVLkumVnOEgsK1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt YjczNjJlZGJkOGFjLzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj LzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyXIJvlS qOHmUbcI8WQ1Si/FkEw3SZ19eI4y9t12xDnGK0BStlmHCZ+YBFPrKk+VV5P+QeBn az4N2JD7cIfyxahRFHPb3MN1NVTQf9Db+qJLeU+qEgc4gNkAoT7F12Rnqw3M1GPn Ie7mQV/gu0ykwpXMC8an3jsGkTWr/qQ9BBA6r2XnCP5NE2KfD95WkU7XY3i76ICs GU43x8b387RItUp5ANyxIoo6CflY8HV5I7j/8V/6rPOIV9vp1YTh7Q/6biatsCA0 HkJ7TtGGRdKhusV0gXgbLoGPKJ+OaRbEN+g5tHZfL1qjyF1/ELrF896WR6hug0EY 3LcAFWkf8Q/A7g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:10 2025 by rpki-client