This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json) Hash identifier: tzpnUc4VmCFCQ4c3tlQ/Di4mvyHjj3UoWfikHkA9Xbg= Subject key identifier: 5C:AF:A9:7F:53:B7:E8:AA:84:2E:BA:94:DF:67:A2:B1:97:CF:F9:86 Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a Certificate serial: 019B1D2A06D20AF5F21ACAECF3D1345A4D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft Manifest number: 1011 Signing time: Sun 14 Dec 2025 14:00:52 +0000 Manifest this update: Sun 14 Dec 2025 14:00:52 +0000 Manifest next update: Mon 15 Dec 2025 14:00:52 +0000 Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=) 2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=) 3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: zdbB2gkZvnsaLuJmrnoEzsntkw3/GQ8WwPRECXqekEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:06:d2:0a:f5:f2:1a:ca:ec:f3:d1:34:5a:4d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a Validity Not Before: Dec 14 14:00:52 2025 GMT Not After : Dec 15 14:00:52 2025 GMT Subject: CN=5cafa97f53b7e8aa842eba94df67a2b197cff986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:1a:17:97:ed:69:52:8c:e9:af:66:5b:9f: cc:71:25:db:3d:96:61:fb:1e:94:18:8f:a3:e0:d6: 3f:56:40:92:22:fe:df:3b:94:df:e8:ba:60:2b:f7: 65:f8:d4:6c:36:28:e8:64:01:98:20:be:4a:e6:bf: 75:fe:48:1d:b0:81:75:2c:61:0a:13:49:71:03:ce: 19:4a:f7:86:49:56:34:9a:e2:2e:55:60:36:f1:79: 21:99:56:4b:82:8d:a8:1a:df:9e:84:84:3f:16:6f: c6:93:11:47:fe:b6:79:1e:fd:3b:5e:9e:cf:0f:7e: f3:b4:37:d0:5b:97:8d:20:dd:49:52:7a:58:de:d4: e5:40:e9:40:bc:fc:d4:e9:a7:c9:fb:91:b9:a4:28: e2:20:0c:05:c2:0a:c7:31:92:6c:7a:54:2c:f5:ab: 19:8c:92:f8:83:d8:42:06:ca:ee:30:7c:91:da:75: 59:e1:82:a8:86:21:e7:1b:e2:b3:c2:12:db:20:b7: 57:4c:e2:26:48:9b:66:a5:a3:03:d4:a3:64:0e:9d: 6a:dc:7b:ca:ba:ea:63:14:3b:24:a9:d5:48:23:d7: 71:68:5c:94:aa:59:94:64:ce:6e:bf:59:0b:82:7a: 24:db:a4:41:4d:83:1d:ef:fd:28:af:6c:29:9f:11: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AF:A9:7F:53:B7:E8:AA:84:2E:BA:94:DF:67:A2:B1:97:CF:F9:86 X509v3 Authority Key Identifier: keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:26:25:6f:de:0b:02:7e:64:3b:40:16:d7:79:19:5d:73:31: 29:66:7d:c0:cb:27:28:7b:57:f1:f1:5f:ca:13:f1:f5:bc:74: 9d:9a:7c:97:01:30:49:67:27:fd:ff:82:53:a4:1e:37:b3:bf: 23:99:99:5e:b3:b8:9f:b2:fb:91:3f:50:8c:eb:c7:96:22:a9: 0c:a5:f5:49:0d:0a:57:c8:f7:f5:4f:9b:b9:b1:a1:b8:69:38: 6f:83:74:f5:98:1b:c9:7f:98:29:07:97:9b:b1:fb:c7:72:31: ee:85:af:61:94:78:56:82:91:d9:87:6c:c1:07:31:99:09:96: 17:cc:ac:06:4e:73:bb:fb:52:32:2c:ae:96:86:8c:d4:82:c5: 76:1b:ca:80:c3:18:cd:a1:09:47:fe:8e:99:d1:e1:ad:45:3d: 75:23:95:9e:58:b2:57:5e:53:01:68:29:cf:4d:5e:62:d5:6b: 13:43:06:5d:2f:be:f9:07:c7:58:19:a5:4c:70:0d:1c:49:e1: a2:72:9d:4e:76:63:90:24:1b:51:32:bc:f9:00:29:5c:7f:3c: b2:07:b8:1a:1b:a6:49:59:8f:f5:fc:76:07:2b:5b:0f:ea:fa: 4d:3c:52:4e:8b:6b:95:8a:25:2d:a4:49:08:f7:14:a9:1b:27: ec:ff:54:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKgbSCvXyGsrs89E0Wk1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi NjM2NmEwHhcNMjUxMjE0MTQwMDUyWhcNMjUxMjE1MTQwMDUyWjAzMTEwLwYDVQQD Eyg1Y2FmYTk3ZjUzYjdlOGFhODQyZWJhOTRkZjY3YTJiMTk3Y2ZmOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTMaF5ftaVKM6a9mW5/McSXbPZZh +x6UGI+j4NY/VkCSIv7fO5Tf6LpgK/dl+NRsNijoZAGYIL5K5r91/kgdsIF1LGEK E0lxA84ZSveGSVY0muIuVWA28XkhmVZLgo2oGt+ehIQ/Fm/GkxFH/rZ5Hv07Xp7P D37ztDfQW5eNIN1JUnpY3tTlQOlAvPzU6afJ+5G5pCjiIAwFwgrHMZJselQs9asZ jJL4g9hCBsruMHyR2nVZ4YKohiHnG+KzwhLbILdXTOImSJtmpaMD1KNkDp1q3HvK uupjFDskqdVII9dxaFyUqlmUZM5uv1kLgnok26RBTYMd7/0or2wpnxEGUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyvqX9Tt+iqhC66lN9norGXz/mGMB8GA1UdIwQY MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCYlb94L An5kO0AW13kZXXMxKWZ9wMsnKHtX8fFfyhPx9bx0nZp8lwEwSWcn/f+CU6QeN7O/ I5mZXrO4n7L7kT9QjOvHliKpDKX1SQ0KV8j39U+bubGhuGk4b4N09ZgbyX+YKQeX m7H7x3Ix7oWvYZR4VoKR2YdswQcxmQmWF8ysBk5zu/tSMiyuloaM1ILFdhvKgMMY zaEJR/6OmdHhrUU9dSOVnliyV15TAWgpz01eYtVrE0MGXS+++QfHWBmlTHANHEnh onKdTnZjkCQbUTK8+QApXH88sge4GhumSVmP9fx2BytbD+r6TTxSTotrlYolLaRJ CPcUqRsn7P9Udg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:16:09 2025 by rpki-client