This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: PbhVsYg8r6kTjpu82aWnGx02le9Eebhgj64ZLlnjXRg= Subject key identifier: C1:A4:61:6F:6A:C2:56:81:21:47:B7:E5:AB:B4:FD:3B:ED:78:43:CF Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019B0E264C8E526B198D197FB3D91B00E514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 070E Signing time: Thu 11 Dec 2025 16:02:29 +0000 Manifest this update: Thu 11 Dec 2025 16:02:29 +0000 Manifest next update: Fri 12 Dec 2025 16:02:29 +0000 Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 0ODYvPUalUP9guHeRGeTBWv7/q/Y8l4dGzLz4UJEQy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:4c:8e:52:6b:19:8d:19:7f:b3:d9:1b:00:e5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Dec 11 16:02:29 2025 GMT Not After : Dec 12 16:02:29 2025 GMT Subject: CN=c1a4616f6ac256812147b7e5abb4fd3bed7843cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:03:31:bd:ca:88:46:22:fd:5b:c1:4b:43: d0:6d:07:95:1f:4b:01:ee:7b:0a:22:f9:31:36:e6: 28:c0:95:be:bb:25:b3:f6:f4:85:00:a1:a6:0a:dd: f4:5d:70:f4:e3:e7:2c:1b:89:7d:22:75:52:69:87: 19:93:e1:bd:2c:65:c7:9f:ef:d6:c7:51:64:33:f0: c5:f7:3c:15:0d:b4:17:8b:1c:d3:b5:cf:60:83:be: 66:f0:a2:e0:bb:16:91:f6:81:b2:4d:b7:33:7f:b2: dc:5d:2c:79:3d:eb:25:d5:70:e2:cf:b0:7a:8b:04: 66:85:aa:2e:3a:21:76:1b:95:b3:04:d5:f9:95:69: 09:36:de:9d:59:ba:45:20:e6:7a:58:21:e2:94:9e: a9:e0:8f:bc:1b:ef:63:4b:fd:d9:87:3c:9b:0e:cf: e2:4e:b1:7b:05:35:18:45:54:f0:c3:39:11:62:07: fe:7a:d4:72:ae:37:9c:d2:79:70:ea:4e:6d:17:e6: 4c:9f:d9:69:7f:ea:cd:6d:6f:83:0e:d3:03:f7:f3: 85:82:5a:25:d3:25:33:0b:58:e3:43:33:90:09:49: b4:87:41:f1:7b:7d:75:e0:eb:f2:44:4f:c4:85:56: 9b:18:b3:b6:38:bb:42:47:a1:84:3b:cc:99:d9:57: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:61:6F:6A:C2:56:81:21:47:B7:E5:AB:B4:FD:3B:ED:78:43:CF X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:31:f8:15:72:87:d2:a0:e6:18:7d:a3:73:83:6b:f4:2b:f1: 94:a6:0a:a8:21:56:0d:4c:f7:65:20:c0:83:82:99:4e:ac:89: 9e:02:c1:d5:fb:d0:2c:b2:99:57:3e:01:e0:ab:d9:c9:c7:eb: a6:ea:ad:c5:fc:a7:fa:b2:bb:e8:fb:2a:0b:7b:fa:a3:1c:17: 1b:db:e3:bb:e8:dc:47:23:a1:cc:78:b8:eb:ec:a1:35:a3:d4: 17:17:98:ea:05:df:f6:aa:f7:43:60:a6:f6:61:f4:57:a9:b7: 3e:61:2b:26:99:64:0f:31:85:ec:a3:90:f5:29:d1:ef:7c:59: 91:58:56:c2:00:15:e5:74:a0:5f:8c:fc:72:d2:27:c8:76:42: 73:80:1e:b3:df:dd:6a:76:01:00:01:45:08:80:4b:ee:20:86: c9:c9:aa:c9:83:25:44:40:8f:58:7f:6f:9c:f2:36:be:8b:19: 4a:c1:52:5d:ee:33:b9:73:d9:a0:8f:9c:58:f8:89:9b:7b:d6: da:97:f8:47:3d:ce:57:33:f1:0c:5c:93:42:29:4a:3d:94:5c: 02:0a:8f:ca:b3:33:51:f9:5d:2e:35:d1:ba:73:b9:ba:5b:0e: 23:1d:95:6b:18:1d:3b:5a:5a:20:70:87:ac:a1:c6:51:52:84: e2:8e:b1:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJkyOUmsZjRl/s9kbAOUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjUxMjExMTYwMjI5WhcNMjUxMjEyMTYwMjI5WjAzMTEwLwYDVQQD EyhjMWE0NjE2ZjZhYzI1NjgxMjE0N2I3ZTVhYmI0ZmQzYmVkNzg0M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZIDMb3KiEYi/VvBS0PQbQeVH0sB 7nsKIvkxNuYowJW+uyWz9vSFAKGmCt30XXD04+csG4l9InVSaYcZk+G9LGXHn+/W x1FkM/DF9zwVDbQXixzTtc9gg75m8KLguxaR9oGyTbczf7LcXSx5Pesl1XDiz7B6 iwRmhaouOiF2G5WzBNX5lWkJNt6dWbpFIOZ6WCHilJ6p4I+8G+9jS/3ZhzybDs/i TrF7BTUYRVTwwzkRYgf+etRyrjec0nlw6k5tF+ZMn9lpf+rNbW+DDtMD9/OFglol 0yUzC1jjQzOQCUm0h0Hxe3114OvyRE/EhVabGLO2OLtCR6GEO8yZ2VfLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGkYW9qwlaBIUe35au0/TvteEPPMB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTH4FXKH 0qDmGH2jc4Nr9CvxlKYKqCFWDUz3ZSDAg4KZTqyJngLB1fvQLLKZVz4B4KvZycfr puqtxfyn+rK76PsqC3v6oxwXG9vju+jcRyOhzHi46+yhNaPUFxeY6gXf9qr3Q2Cm 9mH0V6m3PmErJplkDzGF7KOQ9SnR73xZkVhWwgAV5XSgX4z8ctInyHZCc4Aes9/d anYBAAFFCIBL7iCGycmqyYMlRECPWH9vnPI2vosZSsFSXe4zuXPZoI+cWPiJm3vW 2pf4Rz3OVzPxDFyTQilKPZRcAgqPyrMzUfldLjXRunO5ulsOIx2VaxgdO1paIHCH rKHGUVKE4o6x2A== -----END CERTIFICATE-----Generated at Thu Dec 11 20:35:42 2025 by rpki-client