This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json) Hash identifier: X/s5oJjtYWjMQMYgCegx86ApnEsPvaoKKR4nYJnXzNk= Subject key identifier: 0C:E1:00:70:68:E5:67:14:00:9A:E7:C0:03:E8:70:50:F7:B8:59:C5 Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb Certificate serial: 019B48F06C81C6B25B1582D96542ABA6F24C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft Manifest number: 1371 Signing time: Tue 23 Dec 2025 02:01:14 +0000 Manifest this update: Tue 23 Dec 2025 02:01:14 +0000 Manifest next update: Wed 24 Dec 2025 02:01:14 +0000 Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=) 2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 2IKcWPjzxJ2QGx8+AF6Pczm2li+vYM7jd7ZPb0Tmmpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:6c:81:c6:b2:5b:15:82:d9:65:42:ab:a6:f2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb Validity Not Before: Dec 23 02:01:14 2025 GMT Not After : Dec 24 02:01:14 2025 GMT Subject: CN=0ce1007068e56714009ae7c003e87050f7b859c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:08:78:04:0e:db:63:a1:85:aa:14:46:59: 2f:89:f5:5d:a4:d4:b1:9d:1c:3f:70:30:fc:c0:4b: 2c:4d:4d:ef:1d:1f:5c:87:19:14:e2:95:00:e7:51: e9:6d:54:f8:a0:c1:d8:39:e3:6b:bc:86:c9:a8:71: f3:1d:3e:73:27:89:d9:ad:e3:b9:56:3f:b5:cc:6b: e2:3f:3d:81:f8:fb:25:bb:6f:84:21:c8:4f:1c:83: ae:06:82:3c:0b:88:49:16:fd:7f:e3:99:2a:90:ca: 93:38:66:9d:1d:bd:2a:26:b1:a1:72:44:1c:c1:95: 3e:3b:20:ac:fb:a9:c7:ce:2b:48:87:55:bc:d1:2a: a4:f9:e4:99:43:1b:fa:b2:ca:99:f8:eb:72:c0:b6: fe:ca:f6:f6:7a:e0:a6:93:bb:9b:76:59:61:87:56: a5:0a:01:6a:d2:47:d7:fb:70:c8:ff:40:42:5e:93: 88:e7:31:37:63:89:a5:d5:58:81:18:0c:e5:53:b4: 63:2e:5e:ce:e1:4d:b8:61:ca:76:69:db:72:6e:05: aa:c3:dc:15:66:2c:03:fe:4b:9a:0f:47:d7:35:13: 89:d2:0e:f3:72:49:26:7c:0f:f8:30:b3:a6:d9:92: 9f:8c:fa:2e:41:f6:ee:f2:fc:9c:3d:bc:45:2f:61: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E1:00:70:68:E5:67:14:00:9A:E7:C0:03:E8:70:50:F7:B8:59:C5 X509v3 Authority Key Identifier: keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6e:89:4c:2c:53:0b:ac:30:9e:5a:3f:66:71:65:53:ac:ac: 62:8d:18:3a:20:4f:b7:05:c8:70:83:b3:72:39:1b:93:75:ee: d4:1e:21:c9:a6:14:e3:1b:53:e0:1b:03:6d:0e:e9:b0:d7:da: 6c:82:7f:34:06:54:72:80:30:72:d3:ab:a1:c3:5b:16:9d:08: 3e:0e:08:b6:ec:44:9c:8c:1d:c7:57:67:a8:f6:2c:88:db:6c: 06:13:81:33:75:15:0c:d1:5e:93:ab:52:3e:4e:bb:76:be:72: 52:e2:56:c6:d6:35:e3:24:84:b9:d3:03:25:c5:7a:0d:35:90: b2:38:26:b6:dc:07:6d:e0:06:ec:3e:3c:3d:2a:3d:c0:fd:a5: 27:ab:77:da:a9:0b:2b:ac:af:9b:b6:e5:39:ea:17:45:a1:e8: c9:53:39:25:9d:55:c8:af:4f:2c:94:09:82:95:59:70:86:de: 74:df:9b:49:c4:b5:56:d2:40:12:1f:aa:17:8c:71:70:42:d9: 3c:be:45:04:d9:52:b8:9a:d4:d7:35:e2:b4:7a:4e:3c:d9:f8: 3a:da:4d:4a:13:cb:53:76:16:ba:d1:89:36:81:4b:ac:0b:84: 39:6c:f9:74:2b:a4:1c:31:ce:10:47:a8:c6:4f:9e:11:e9:bb: ab:ef:01:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8GyBxrJbFYLZZUKrpvJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0 M2I0Y2IwHhcNMjUxMjIzMDIwMTE0WhcNMjUxMjI0MDIwMTE0WjAzMTEwLwYDVQQD EygwY2UxMDA3MDY4ZTU2NzE0MDA5YWU3YzAwM2U4NzA1MGY3Yjg1OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHAIeAQO22OhhaoURlkvifVdpNSx nRw/cDD8wEssTU3vHR9chxkU4pUA51HpbVT4oMHYOeNrvIbJqHHzHT5zJ4nZreO5 Vj+1zGviPz2B+Pslu2+EIchPHIOuBoI8C4hJFv1/45kqkMqTOGadHb0qJrGhckQc wZU+OyCs+6nHzitIh1W80Sqk+eSZQxv6ssqZ+OtywLb+yvb2euCmk7ubdllhh1al CgFq0kfX+3DI/0BCXpOI5zE3Y4ml1ViBGAzlU7RjLl7O4U24Ycp2adtybgWqw9wV ZiwD/kuaD0fXNROJ0g7zckkmfA/4MLOm2ZKfjPouQfbu8vycPbxFL2EBsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzhAHBo5WcUAJrnwAPocFD3uFnFMB8GA1UdIwQY MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm6JTCxT C6wwnlo/ZnFlU6ysYo0YOiBPtwXIcIOzcjkbk3Xu1B4hyaYU4xtT4BsDbQ7psNfa bIJ/NAZUcoAwctOrocNbFp0IPg4ItuxEnIwdx1dnqPYsiNtsBhOBM3UVDNFek6tS Pk67dr5yUuJWxtY14ySEudMDJcV6DTWQsjgmttwHbeAG7D48PSo9wP2lJ6t32qkL K6yvm7blOeoXRaHoyVM5JZ1VyK9PLJQJgpVZcIbedN+bScS1VtJAEh+qF4xxcELZ PL5FBNlSuJrU1zXitHpOPNn4OtpNShPLU3YWutGJNoFLrAuEOWz5dCukHDHOEEeo xk+eEem7q+8BdA== -----END CERTIFICATE-----Generated at Tue Dec 23 08:23:25 2025 by rpki-client