This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json) Hash identifier: Q9wMY2u51D3fO5YBOUaiAiTWF6uACBux/FDCwAYHMek= Subject key identifier: 19:AC:F4:70:76:75:19:15:A8:51:53:05:A3:B9:A8:EC:5C:05:E9:6A Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019B2A785D10B320A3D72A99E07CB1E0983A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft Manifest number: 1286 Signing time: Wed 17 Dec 2025 04:01:29 +0000 Manifest this update: Wed 17 Dec 2025 04:01:29 +0000 Manifest next update: Thu 18 Dec 2025 04:01:29 +0000 Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=) 2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: 4QTxPy3GRsBxiwP7W7jXeBpIoT8rDjDCFOB4enUN3ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:5d:10:b3:20:a3:d7:2a:99:e0:7c:b1:e0:98:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Dec 17 04:01:29 2025 GMT Not After : Dec 18 04:01:29 2025 GMT Subject: CN=19acf47076751915a8515305a3b9a8ec5c05e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:c9:7a:46:9d:e3:c3:95:f1:fb:f9:7e:a8: a7:28:7d:f4:ed:12:3b:34:7b:15:11:1c:b4:43:ac: 55:a8:bb:07:8e:ae:d6:f1:54:26:ba:25:16:25:db: b0:17:5d:b7:e3:49:91:4a:1a:67:55:1e:dd:2b:c3: ca:f2:4a:65:83:fe:b3:78:6c:2a:db:29:13:bc:3b: e4:fc:a4:1e:b2:62:d1:15:eb:c8:ee:50:62:1f:1e: 6b:2b:28:87:1a:33:f2:15:32:fb:28:24:f9:01:dd: 35:11:b8:ff:34:a2:c5:87:18:2a:e1:f4:91:ad:a1: 23:30:47:6a:24:bd:8f:89:ec:f1:70:ee:5d:12:1e: ee:8d:86:10:5f:8e:ce:27:82:ea:c9:c7:bf:59:18: 86:5e:73:ca:14:6b:65:bc:62:bb:57:7e:db:32:59: 34:99:92:b9:2b:5a:17:88:2a:dc:f3:0d:2f:10:82: 40:80:d5:00:7b:7c:f1:01:73:3c:ad:89:28:d9:a1: c0:8e:ab:ad:a6:9c:29:4f:5d:f0:de:51:80:50:c7: 14:79:15:48:c1:50:24:d9:d4:27:39:63:65:cd:85: 7e:fd:b2:b8:2e:89:d9:f9:33:79:38:09:f1:8c:56: 36:21:d1:a6:a6:15:13:4d:6f:90:3c:e1:39:b2:2b: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:F4:70:76:75:19:15:A8:51:53:05:A3:B9:A8:EC:5C:05:E9:6A X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c4:eb:28:5b:60:0a:f3:a0:fb:a3:ea:21:f1:50:72:14:07: d1:01:36:fe:85:3d:e3:e1:77:7f:93:02:af:b4:d9:de:6d:96: 87:35:76:85:28:ce:3f:7f:70:b3:6c:58:fd:8d:4f:09:ca:3e: 5f:ab:bd:66:c2:9a:5b:13:0f:5a:27:e7:a0:28:67:3b:bc:6c: 75:88:11:f3:51:a0:8e:2f:dd:64:c2:d5:86:07:92:19:a4:62: bd:73:eb:a7:bd:df:83:39:05:80:49:37:8c:9a:ba:4d:2e:17: 2f:1f:b7:3a:60:ce:a6:88:ed:3a:0d:64:eb:12:d9:2a:c6:e6: a1:89:3c:9c:60:26:70:19:37:e9:ca:fc:3f:4e:af:5b:61:dc: a3:fd:e3:b6:39:62:d4:45:fe:f4:25:39:05:ea:38:fb:0d:23: e4:42:72:19:d9:d0:cd:5b:7d:87:cf:ce:06:60:c1:38:89:16: 08:1c:58:67:79:23:eb:f1:b2:32:22:65:50:9a:3d:31:d3:8c: 7c:ed:52:de:c5:5f:c4:5c:45:1a:ac:a1:eb:f3:50:13:6f:79: ce:e7:f6:2f:0e:d6:d5:d8:c6:97:9b:f7:93:0f:17:f4:2f:7e: 91:f0:af:6d:3c:02:cc:b9:e7:f1:73:88:4f:0f:ad:df:0c:99: d8:eb:42:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeF0QsyCj1yqZ4Hyx4Jg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjUxMjE3MDQwMTI5WhcNMjUxMjE4MDQwMTI5WjAzMTEwLwYDVQQD EygxOWFjZjQ3MDc2NzUxOTE1YTg1MTUzMDVhM2I5YThlYzVjMDVlOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSzJekad48OV8fv5fqinKH307RI7 NHsVERy0Q6xVqLsHjq7W8VQmuiUWJduwF12340mRShpnVR7dK8PK8kplg/6zeGwq 2ykTvDvk/KQesmLRFevI7lBiHx5rKyiHGjPyFTL7KCT5Ad01Ebj/NKLFhxgq4fSR raEjMEdqJL2PiezxcO5dEh7ujYYQX47OJ4Lqyce/WRiGXnPKFGtlvGK7V37bMlk0 mZK5K1oXiCrc8w0vEIJAgNUAe3zxAXM8rYko2aHAjqutppwpT13w3lGAUMcUeRVI wVAk2dQnOWNlzYV+/bK4LonZ+TN5OAnxjFY2IdGmphUTTW+QPOE5sis4JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBms9HB2dRkVqFFTBaO5qOxcBelqMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisTrKFtg CvOg+6PqIfFQchQH0QE2/oU94+F3f5MCr7TZ3m2WhzV2hSjOP39ws2xY/Y1PCco+ X6u9ZsKaWxMPWifnoChnO7xsdYgR81Ggji/dZMLVhgeSGaRivXPrp73fgzkFgEk3 jJq6TS4XLx+3OmDOpojtOg1k6xLZKsbmoYk8nGAmcBk36cr8P06vW2Hco/3jtjli 1EX+9CU5Beo4+w0j5EJyGdnQzVt9h8/OBmDBOIkWCBxYZ3kj6/GyMiJlUJo9MdOM fO1S3sVfxFxFGqyh6/NQE295zuf2Lw7W1djGl5v3kw8X9C9+kfCvbTwCzLnn8XOI Tw+t3wyZ2OtCUw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:09:42 2025 by rpki-client