This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json) Hash identifier: 6PhQQE1h9mYcXbBJ7GeND/8spyY2+nUzC1lD76J0EeQ= Subject key identifier: 8A:C2:A0:3A:F3:26:E4:16:62:E6:E9:3D:93:EE:6F:21:7D:B7:09:5B Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb Certificate serial: 019B3D599551072A4EE6A08A952534DEEE6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft Manifest number: 136B Signing time: Sat 20 Dec 2025 20:00:39 +0000 Manifest this update: Sat 20 Dec 2025 20:00:39 +0000 Manifest next update: Sun 21 Dec 2025 20:00:39 +0000 Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=) 2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 4vhbx2fEMy3Yc/meOgYYl5DKh7v6DF7cYEXtDoCSoIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:95:51:07:2a:4e:e6:a0:8a:95:25:34:de:ee:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb Validity Not Before: Dec 20 20:00:39 2025 GMT Not After : Dec 21 20:00:39 2025 GMT Subject: CN=8ac2a03af326e41662e6e93d93ee6f217db7095b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:7e:c9:4b:79:3c:2c:2f:6a:46:d9:f5:00: 4e:0c:87:41:4e:a0:52:a7:39:2d:19:a5:51:b2:61: b4:61:50:4e:35:78:68:58:b9:76:08:aa:69:2f:fe: c2:0f:f5:fd:50:02:50:91:a1:58:88:e4:d0:42:c9: 3c:2e:69:0f:b5:0c:c3:a5:7d:2e:25:b0:bf:9c:ea: 67:f9:b0:86:d4:04:0f:3d:da:e6:25:ed:c9:c2:ef: c8:68:a8:42:82:9a:9a:36:8c:a5:b6:d7:25:76:8f: 83:7b:80:c5:78:5e:eb:77:cb:5a:28:ad:e7:db:8a: c4:ca:41:bf:e6:5b:0b:d1:d3:5c:cb:09:d6:3d:c6: aa:23:26:30:5b:15:0e:a1:80:04:09:72:07:c6:be: 0b:8c:07:f9:b6:71:86:f3:72:ad:52:5e:6b:4e:3f: 4e:1d:d5:48:4d:76:bd:33:ac:40:e0:da:f1:20:db: ec:d4:5b:d2:6b:1a:9e:8f:04:fb:69:b8:81:22:5e: e8:f8:dc:d1:59:5d:9c:1c:ee:c1:b4:a1:19:eb:50: d9:b0:fc:07:71:b2:a4:81:de:9c:58:fa:57:78:d8: ca:00:07:c0:ba:94:ea:b2:8f:7c:c9:02:62:d5:6d: d8:bf:1e:94:7b:dc:d4:e0:1f:4e:f4:fe:74:b2:74: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:A0:3A:F3:26:E4:16:62:E6:E9:3D:93:EE:6F:21:7D:B7:09:5B X509v3 Authority Key Identifier: keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a7:f6:13:df:34:80:21:f8:a1:1d:8a:7d:b8:1b:43:84:0f: 17:45:9a:e5:c4:28:1c:e5:5c:1c:67:03:fd:f1:1f:ac:07:19: f4:b7:db:43:8b:39:9a:c5:c5:07:c4:ba:74:21:f9:1e:11:56: 20:64:e1:9a:f3:b3:2e:1d:4c:85:60:91:a6:24:a1:1b:96:39: c3:18:6f:4b:9e:08:08:31:66:1a:e6:84:98:7e:dc:df:9d:71: 0a:eb:bc:ea:07:b3:7c:0d:ca:7b:27:38:ce:aa:ff:36:56:f7: dd:0f:fe:48:95:72:56:cd:c1:6b:a0:5a:96:8b:8c:c2:09:c2: 76:e2:04:05:b8:4c:b4:eb:f5:7a:b2:be:8e:8b:50:1e:c4:96: 01:39:1b:5b:75:9a:51:6e:9d:f3:ef:e5:1b:ab:0f:ff:97:36: 31:c7:02:0e:55:64:4b:e3:dc:31:d8:e7:5d:66:02:75:f9:81: b2:53:ca:80:e0:18:9c:50:93:23:a8:78:bb:ba:e0:99:eb:c7: 3b:a7:51:41:83:67:e0:75:85:21:f7:11:de:66:b9:12:08:04: 32:b7:3f:76:12:39:de:25:ec:8f:1b:12:68:6e:c0:24:2b:6c: 18:b5:56:93:4d:88:2c:b5:3a:56:0e:b7:8b:76:51:26:c7:d8: 74:7f:39:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZVRBypO5qCKlSU03u5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0 M2I0Y2IwHhcNMjUxMjIwMjAwMDM5WhcNMjUxMjIxMjAwMDM5WjAzMTEwLwYDVQQD Eyg4YWMyYTAzYWYzMjZlNDE2NjJlNmU5M2Q5M2VlNmYyMTdkYjcwOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkt+yUt5PCwvakbZ9QBODIdBTqBS pzktGaVRsmG0YVBONXhoWLl2CKppL/7CD/X9UAJQkaFYiOTQQsk8LmkPtQzDpX0u JbC/nOpn+bCG1AQPPdrmJe3Jwu/IaKhCgpqaNoylttcldo+De4DFeF7rd8taKK3n 24rEykG/5lsL0dNcywnWPcaqIyYwWxUOoYAECXIHxr4LjAf5tnGG83KtUl5rTj9O HdVITXa9M6xA4NrxINvs1FvSaxqejwT7abiBIl7o+NzRWV2cHO7BtKEZ61DZsPwH cbKkgd6cWPpXeNjKAAfAupTqso98yQJi1W3Yvx6Ue9zU4B9O9P50snQt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrCoDrzJuQWYubpPZPubyF9twlbMB8GA1UdIwQY MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaf2E980 gCH4oR2KfbgbQ4QPF0Wa5cQoHOVcHGcD/fEfrAcZ9LfbQ4s5msXFB8S6dCH5HhFW IGThmvOzLh1MhWCRpiShG5Y5wxhvS54ICDFmGuaEmH7c351xCuu86gezfA3Keyc4 zqr/Nlb33Q/+SJVyVs3Ba6BalouMwgnCduIEBbhMtOv1erK+jotQHsSWATkbW3Wa UW6d8+/lG6sP/5c2MccCDlVkS+PcMdjnXWYCdfmBslPKgOAYnFCTI6h4u7rgmevH O6dRQYNn4HWFIfcR3ma5EggEMrc/dhI53iXsjxsSaG7AJCtsGLVWk02ILLU6Vg63 i3ZRJsfYdH85kw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:31 2025 by rpki-client