This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json) Hash identifier: Nrq5ansxj4xLKd8VX4x6RSNvB+wJg9tKJA4A28OOGg4= Subject key identifier: E1:F3:B3:BC:76:F2:22:D5:91:F6:56:6C:32:AF:3D:89:88:85:AB:08 Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Certificate serial: 019B5A1AD6E8F595A3AA3BF3EB1BDA338CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft Manifest number: 079A Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: WEYbQOexwhK2R5FdPsKVkoGciLs.asa (hash: ayn/GAW27PYPeNMdAvkXgJDPQwOtHPGncDveGGykbgw=) 2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: AWjDJqYHvlVFTcDogpzktOYm8tbvOb6jClDochsWEOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d6:e8:f5:95:a3:aa:3b:f3:eb:1b:da:33:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=e1f3b3bc76f222d591f6566c32af3d898885ab08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:76:12:02:11:7a:29:d8:7c:84:2c:54:05: 60:40:7b:dd:17:f2:a0:f8:7c:a0:8c:2f:40:9e:df: ca:28:43:0b:cc:50:25:b9:a9:3b:35:3b:88:aa:2e: ae:e3:f8:2c:03:1e:36:b9:a6:4c:7b:cb:d3:11:f5: 47:36:d2:8b:ba:59:ab:ca:47:3c:f0:88:49:fb:b1: 78:86:7e:5a:7b:e5:91:9b:ce:de:b6:c1:36:89:7e: 07:84:a4:d9:11:47:d7:d7:5b:c2:47:f8:73:be:6a: 7c:24:54:de:6d:07:33:e2:c8:30:15:53:5b:eb:37: 8a:60:ba:cf:c3:79:c7:e6:7d:ef:28:0d:9d:a5:66: e5:9a:2e:26:31:f4:2d:1e:12:d1:fa:ba:a3:f5:fc: 26:b2:bf:98:2a:5f:1f:e3:22:64:8f:0e:c5:89:2f: 4b:3c:82:d0:d3:3d:e1:c5:d5:6d:19:42:55:4a:75: 1a:d5:5d:20:92:5c:09:b6:df:78:48:d7:64:95:7b: b5:c5:32:0e:9a:e7:81:13:ca:8c:2c:fa:2f:3d:3b: 2d:92:55:59:69:b1:03:bc:39:b0:37:35:20:fe:6b: 57:b2:74:56:cf:8c:08:18:ac:26:1b:ec:c9:b8:d1: 3f:51:77:ee:c7:72:f8:08:64:bb:6f:11:2e:bc:e6: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:B3:BC:76:F2:22:D5:91:F6:56:6C:32:AF:3D:89:88:85:AB:08 X509v3 Authority Key Identifier: keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:19:21:14:66:5f:11:3c:df:b6:7b:d1:a4:96:ca:b5:47:9c: 7c:af:7f:58:1e:07:cf:ad:33:3a:fc:fd:20:83:ee:f6:ff:af: 70:3c:26:68:10:96:16:55:aa:96:8d:ff:a7:1b:ea:7f:46:4e: 44:72:29:f5:a9:0f:84:f3:f8:b9:54:1d:3c:46:7d:a0:55:26: 4f:75:da:da:72:52:47:08:06:e0:85:bf:d3:3a:fa:c1:ed:19: 0f:ff:f6:1e:69:1a:bc:aa:f3:e7:68:82:51:62:e8:c8:fb:d8: 62:d7:46:7c:98:5a:66:9b:c2:37:df:f6:b8:1a:f6:63:2f:d3: 0a:61:86:4b:74:a0:c5:a7:20:66:e0:fe:99:66:d6:f6:bc:20: a9:f2:88:bd:92:be:7e:10:07:8d:c1:db:db:f7:14:d3:15:80: e3:3a:ba:11:aa:0c:46:9f:86:07:bf:e0:1f:0d:ce:01:b2:4e: 31:2c:23:07:5c:85:09:c3:05:87:8a:e6:2c:6c:a6:67:5b:06: 27:ba:b2:62:fb:38:a5:f7:a1:79:8a:61:1c:af:d3:2c:c3:95: 56:f9:31:7c:98:82:3e:9c:3f:bb:49:75:bf:18:2b:b6:9d:5d: 9c:a1:9d:a5:fe:1e:72:44:11:50:a8:8b:06:b3:84:7a:60:4c: 56:b9:19:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtbo9ZWjqjvz6xvaM4zcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5 MmM4YjcwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EyhlMWYzYjNiYzc2ZjIyMmQ1OTFmNjU2NmMzMmFmM2Q4OTg4ODVhYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDJ2EgIReinYfIQsVAVgQHvdF/Kg +HygjC9Ant/KKEMLzFAluak7NTuIqi6u4/gsAx42uaZMe8vTEfVHNtKLulmrykc8 8IhJ+7F4hn5ae+WRm87etsE2iX4HhKTZEUfX11vCR/hzvmp8JFTebQcz4sgwFVNb 6zeKYLrPw3nH5n3vKA2dpWblmi4mMfQtHhLR+rqj9fwmsr+YKl8f4yJkjw7FiS9L PILQ0z3hxdVtGUJVSnUa1V0gklwJtt94SNdklXu1xTIOmueBE8qMLPovPTstklVZ abEDvDmwNzUg/mtXsnRWz4wIGKwmG+zJuNE/UXfux3L4CGS7bxEuvOZTwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHzs7x28iLVkfZWbDKvPYmIhasIMB8GA1UdIwQY MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBkhFGZf ETzftnvRpJbKtUecfK9/WB4Hz60zOvz9IIPu9v+vcDwmaBCWFlWqlo3/pxvqf0ZO RHIp9akPhPP4uVQdPEZ9oFUmT3Xa2nJSRwgG4IW/0zr6we0ZD//2HmkavKrz52iC UWLoyPvYYtdGfJhaZpvCN9/2uBr2Yy/TCmGGS3SgxacgZuD+mWbW9rwgqfKIvZK+ fhAHjcHb2/cU0xWA4zq6EaoMRp+GB7/gHw3OAbJOMSwjB1yFCcMFh4rmLGymZ1sG J7qyYvs4pfeheYphHK/TLMOVVvkxfJiCPpw/u0l1vxgrtp1dnKGdpf4eckQRUKiL BrOEemBMVrkZcQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:07 2025 by rpki-client