This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json) Hash identifier: VYBQSZ4ROJ/gDuPSeiffcAsEEAOuYmh+3fC3qtMA1tE= Subject key identifier: 5B:DE:C7:99:90:07:94:60:C0:1C:EA:BB:31:68:FB:31:59:A3:22:87 Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019B0C6D3800527674FC5EE2C15CF28422DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft Manifest number: 07A5 Signing time: Thu 11 Dec 2025 08:00:42 +0000 Manifest this update: Thu 11 Dec 2025 08:00:42 +0000 Manifest next update: Fri 12 Dec 2025 08:00:42 +0000 Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=) 2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: UzNqSOEXu54aFnCTr3godvIyaK+jLOtOx6Hd8O+VcoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:6d:38:00:52:76:74:fc:5e:e2:c1:5c:f2:84:22:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Dec 11 08:00:42 2025 GMT Not After : Dec 12 08:00:42 2025 GMT Subject: CN=5bdec79990079460c01ceabb3168fb3159a32287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:80:d2:07:08:5c:4f:2a:c3:a5:c7:56:73: df:f0:32:14:87:cc:9d:a1:20:d1:9d:cd:14:67:0b: e5:34:51:36:e6:15:48:91:43:a9:fe:cc:f0:3a:40: bf:ca:65:c7:41:db:ef:3e:1c:ec:5d:bc:96:22:cd: 19:d3:1b:30:54:b8:27:45:af:ed:ff:39:13:6e:2b: 37:bd:e2:20:72:a9:ac:fb:2a:ea:b8:81:11:03:53: d0:b2:33:79:07:ba:b4:6c:fd:03:4c:52:86:33:d2: 86:16:26:0a:0c:a0:11:2d:41:93:35:96:af:dd:29: ab:c1:55:2d:89:91:57:53:e5:1a:3f:5d:80:05:24: 7d:27:c7:43:16:1f:e6:4d:93:76:f4:40:e7:8a:d3: c9:b0:e4:5a:bf:e6:a9:68:f4:f9:1e:a9:74:52:66: 13:09:62:b7:7d:c0:c9:11:7e:71:8a:1a:c6:ba:a7: a2:6d:22:bc:6d:0d:6e:5c:78:a0:96:64:76:54:16: 73:7b:f7:a5:e3:d4:c9:7b:a5:3f:df:62:99:ec:74: 3a:64:a3:70:6b:63:a5:5d:75:31:68:26:82:29:21: a7:64:9a:b1:ed:32:d0:b7:f8:42:31:c8:e7:46:9d: 76:52:58:49:ff:3c:26:08:cd:07:db:04:1f:7a:d9: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:C7:99:90:07:94:60:C0:1C:EA:BB:31:68:FB:31:59:A3:22:87 X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:40:24:35:d9:20:c2:af:12:5d:db:80:f9:a7:93:cd:28: d4:c5:e4:52:02:9e:6f:cd:f1:89:32:6b:e9:fd:b1:ce:71:ee: b2:96:7b:1c:8d:df:f2:59:14:2e:fc:2e:4b:aa:9c:36:94:90: 00:f5:28:f2:07:b5:59:e2:62:83:fa:c9:48:15:23:67:e5:2f: 50:d7:50:31:1a:e8:75:5a:89:79:be:a1:cf:73:ff:52:ba:36: 82:35:7e:7e:84:be:e2:b7:99:78:9f:3f:e9:e1:d3:b8:31:b3: 43:55:30:98:6c:a9:a9:23:01:97:23:5d:90:c8:45:26:93:c6: 7f:56:c8:88:58:d0:60:7c:de:c3:04:f1:19:c3:b6:6a:04:50: 66:bd:ca:8e:e4:7f:25:b8:46:11:7e:c8:ac:c1:f8:f8:d0:96: b0:8c:18:6d:91:2c:32:dd:c2:19:42:dd:dd:34:53:2e:26:2e: 94:c2:f0:cd:9b:ec:d0:5c:04:95:55:c3:25:bf:1e:db:ba:31: fe:2b:05:3d:3c:c0:13:4d:66:14:6a:f7:ee:9e:66:77:a6:f1: 11:e7:1f:23:5b:52:8e:e8:4d:aa:93:18:52:91:21:49:f5:52: 04:b4:58:24:b3:42:68:bc:e6:d4:03:fe:80:4a:f5:4d:2a:a1: a3:02:42:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMbTgAUnZ0/F7iwVzyhCLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjUxMjExMDgwMDQyWhcNMjUxMjEyMDgwMDQyWjAzMTEwLwYDVQQD Eyg1YmRlYzc5OTkwMDc5NDYwYzAxY2VhYmIzMTY4ZmIzMTU5YTMyMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SSA0gcIXE8qw6XHVnPf8DIUh8yd oSDRnc0UZwvlNFE25hVIkUOp/szwOkC/ymXHQdvvPhzsXbyWIs0Z0xswVLgnRa/t /zkTbis3veIgcqms+yrquIERA1PQsjN5B7q0bP0DTFKGM9KGFiYKDKARLUGTNZav 3SmrwVUtiZFXU+UaP12ABSR9J8dDFh/mTZN29EDnitPJsORav+apaPT5Hql0UmYT CWK3fcDJEX5xihrGuqeibSK8bQ1uXHiglmR2VBZze/el49TJe6U/32KZ7HQ6ZKNw a2OlXXUxaCaCKSGnZJqx7TLQt/hCMcjnRp12UlhJ/zwmCM0H2wQfetkxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvex5mQB5RgwBzquzFo+zFZoyKHMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5 LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq59AJDXZ IMKvEl3bgPmnk80o1MXkUgKeb83xiTJr6f2xznHuspZ7HI3f8lkULvwuS6qcNpSQ APUo8ge1WeJig/rJSBUjZ+UvUNdQMRrodVqJeb6hz3P/Uro2gjV+foS+4reZeJ8/ 6eHTuDGzQ1UwmGypqSMBlyNdkMhFJpPGf1bIiFjQYHzewwTxGcO2agRQZr3KjuR/ JbhGEX7IrMH4+NCWsIwYbZEsMt3CGULd3TRTLiYulMLwzZvs0FwElVXDJb8e27ox /isFPTzAE01mFGr37p5md6bxEecfI1tSjuhNqpMYUpEhSfVSBLRYJLNCaLzm1AP+ gEr1TSqhowJCZg== -----END CERTIFICATE-----Generated at Thu Dec 11 15:11:16 2025 by rpki-client