This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json) Hash identifier: MWda+ZTGHwfEG4iZQ90pxgobIaBhjxUu3YuMK0f4wSY= Subject key identifier: B9:4F:BF:1D:B4:7F:AD:90:1A:2E:5F:51:E2:06:D7:82:E9:06:0E:86 Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Certificate serial: 019AF68A9CACA225B834EACBAD3BFCB68C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft Manifest number: 1769 Signing time: Sun 07 Dec 2025 02:01:10 +0000 Manifest this update: Sun 07 Dec 2025 02:01:10 +0000 Manifest next update: Mon 08 Dec 2025 02:01:10 +0000 Files and hashes: 1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=) 2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: pseXMHtXqY4GXJN+AX7aI1SHSie/XC5YEGlL0Rik3Ss=) 3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:9c:ac:a2:25:b8:34:ea:cb:ad:3b:fc:b6:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Validity Not Before: Dec 7 02:01:10 2025 GMT Not After : Dec 8 02:01:10 2025 GMT Subject: CN=b94fbf1db47fad901a2e5f51e206d782e9060e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:83:bb:0f:f3:43:71:6d:00:a9:34:1a:84: 3a:ae:d5:b7:1f:37:c8:de:36:a8:53:8c:ef:27:71: f6:69:c3:03:a6:03:7f:de:54:b5:0d:12:82:3a:07: 71:18:e9:05:84:9b:32:1f:b5:ed:ba:5f:50:df:7f: 65:16:7a:5a:f8:3e:31:5b:b4:27:fb:2e:02:ff:a3: ab:c5:bf:ed:0a:0e:5a:c6:b7:9e:a8:2b:db:7e:3c: 50:94:1f:7a:b9:84:f0:60:a5:ab:c9:90:7b:f5:7c: ae:86:76:64:9b:28:15:ea:64:33:46:27:07:77:af: ff:08:36:04:b7:40:0b:f4:15:45:fb:29:ba:64:06: a5:4f:53:fd:7a:27:78:ea:1b:92:1a:ce:6b:4d:42: 78:9d:44:7a:e2:87:c8:77:f1:ea:e4:ad:79:91:df: fa:01:15:e2:82:11:8e:0d:ad:50:51:8b:4a:5c:13: a6:f5:97:6a:c0:a2:5b:27:0c:4b:d2:60:66:a6:04: 2f:55:84:be:f7:e5:af:a3:a6:0f:6a:76:e9:56:f9: e3:2f:af:17:c0:d3:d4:b4:d9:6d:04:e0:e8:df:67: 0b:77:24:5a:13:a1:14:fd:61:79:a1:72:8e:ae:14: 7c:2d:b7:0a:84:40:a3:d9:b0:0b:dd:56:3b:9e:86: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4F:BF:1D:B4:7F:AD:90:1A:2E:5F:51:E2:06:D7:82:E9:06:0E:86 X509v3 Authority Key Identifier: keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7c:db:e9:1c:cb:6b:c2:77:1f:84:05:fc:45:f2:3d:c4:37: b7:aa:e8:8b:cc:3e:13:f2:48:18:b4:a7:4e:3e:97:3f:e6:c7: cf:ed:2f:f5:a4:2b:dd:03:ad:06:8c:22:42:35:3a:66:a3:b1: 6d:95:90:21:fb:c0:cb:0b:04:66:bd:9d:c6:df:0d:76:ce:d0: 66:88:e5:87:42:a8:2d:9e:76:f4:b1:4b:09:36:ae:7f:17:18: 62:02:93:7a:e3:ca:14:bf:ea:7c:93:da:47:24:e6:7f:3b:28: 3e:1c:7e:42:e6:b6:78:31:3b:dc:95:7a:15:9a:c7:73:dd:3d: 75:ad:e1:d3:be:35:2c:48:0b:ae:00:bf:bc:ac:ea:00:32:ea: c9:9e:8b:ff:16:f6:1e:35:e0:80:2c:68:b6:bf:1e:fb:f2:04: a6:d2:4b:c2:dc:35:a8:f7:d4:ee:a0:bb:63:84:85:e4:15:22: c9:bb:b2:33:78:93:c9:b5:c7:55:b2:12:67:ba:29:5b:69:b7: b3:bb:2f:98:54:23:5e:a0:ed:87:51:2e:1c:47:9d:da:e0:ab: 0a:5b:04:75:68:e0:0f:73:c0:a6:3c:53:ae:4f:4d:45:61:2e: 7d:e0:0c:e4:0e:0c:60:12:ca:3e:fa:d5:b7:2a:26:ab:65:1e: 7e:ad:94:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipysoiW4NOrLrTv8toxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5 MDk2ZDQwHhcNMjUxMjA3MDIwMTEwWhcNMjUxMjA4MDIwMTEwWjAzMTEwLwYDVQQD EyhiOTRmYmYxZGI0N2ZhZDkwMWEyZTVmNTFlMjA2ZDc4MmU5MDYwZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCWDuw/zQ3FtAKk0GoQ6rtW3HzfI 3jaoU4zvJ3H2acMDpgN/3lS1DRKCOgdxGOkFhJsyH7Xtul9Q339lFnpa+D4xW7Qn +y4C/6Orxb/tCg5axreeqCvbfjxQlB96uYTwYKWryZB79XyuhnZkmygV6mQzRicH d6//CDYEt0AL9BVF+ym6ZAalT1P9eid46huSGs5rTUJ4nUR64ofId/Hq5K15kd/6 ARXighGODa1QUYtKXBOm9ZdqwKJbJwxL0mBmpgQvVYS+9+Wvo6YPanbpVvnjL68X wNPUtNltBODo32cLdyRaE6EU/WF5oXKOrhR8LbcKhECj2bAL3VY7noY4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlPvx20f62QGi5fUeIG14LpBg6GMB8GA1UdIwQY MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXzb6RzL a8J3H4QF/EXyPcQ3t6roi8w+E/JIGLSnTj6XP+bHz+0v9aQr3QOtBowiQjU6ZqOx bZWQIfvAywsEZr2dxt8Nds7QZojlh0KoLZ529LFLCTaufxcYYgKTeuPKFL/qfJPa RyTmfzsoPhx+Qua2eDE73JV6FZrHc909da3h0741LEgLrgC/vKzqADLqyZ6L/xb2 HjXggCxotr8e+/IEptJLwtw1qPfU7qC7Y4SF5BUiybuyM3iTybXHVbISZ7opW2m3 s7svmFQjXqDth1EuHEed2uCrClsEdWjgD3PApjxTrk9NRWEufeAM5A4MYBLKPvrV tyomq2Uefq2UVg== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:57 2025 by rpki-client