This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json) Hash identifier: Xclg4aqrI8/PowYkwPJdPGzVXlliMXcIVSdYvFzxUrI= Subject key identifier: B0:2B:A6:78:68:3D:27:D0:5D:29:9D:FF:F1:34:A2:E8:C9:70:1B:57 Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019B495E4A99D4C5511A0C586A2E03A41F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft Manifest number: 1296 Signing time: Tue 23 Dec 2025 04:01:14 +0000 Manifest this update: Tue 23 Dec 2025 04:01:14 +0000 Manifest next update: Wed 24 Dec 2025 04:01:14 +0000 Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=) 2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: f1dVcwz78CT1pLVbsgVhHlxLfPD76SpIvA8T1MzB4Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:4a:99:d4:c5:51:1a:0c:58:6a:2e:03:a4:1f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Dec 23 04:01:14 2025 GMT Not After : Dec 24 04:01:14 2025 GMT Subject: CN=b02ba678683d27d05d299dfff134a2e8c9701b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:10:88:d5:ca:70:29:c2:69:b1:d0:8b:cd:dc: 76:1a:48:80:4a:d5:58:c1:ae:eb:43:df:97:0b:23: 1d:3d:be:34:5d:45:88:6e:2f:57:a5:7d:e3:a4:fc: 49:5f:d8:17:c6:13:ad:87:30:dc:9b:2e:2a:63:66: 45:40:5e:16:85:04:3a:3b:b9:21:98:ae:84:51:13: 44:ea:71:84:f6:7c:b6:7e:ed:65:2d:bf:0f:17:eb: 84:f4:58:28:d6:4b:f9:59:7d:1f:6b:2e:2c:d6:84: 86:2c:a2:90:9d:57:5b:75:0e:3b:d4:85:91:5f:11: 78:6f:c1:be:36:f5:fe:1a:89:47:6f:8c:b4:fe:b9: f0:49:6f:c1:ec:63:8d:66:1e:50:26:0c:b0:9a:98: 3d:d9:9e:38:55:c0:45:e4:9a:18:0c:0e:43:2c:77: 61:cc:71:6a:cb:d6:9a:f3:79:42:4f:ec:e3:72:2d: 3c:f9:e3:fe:e6:dd:e0:65:98:ba:7d:6c:b7:f1:11: 80:4a:2d:d0:7a:71:32:8c:46:ab:c0:17:11:2d:f0: b4:5f:af:a8:f8:31:de:8c:22:60:99:62:bc:75:a3: 82:5c:9d:78:ec:fc:96:cf:fd:44:73:8a:9f:f7:e4: f6:b7:86:6e:0e:98:46:4d:23:f5:6d:d2:9b:7a:62: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2B:A6:78:68:3D:27:D0:5D:29:9D:FF:F1:34:A2:E8:C9:70:1B:57 X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e6:a7:10:64:3e:42:32:46:19:be:83:22:c4:2b:f2:bc:5f: e4:3f:15:fd:ba:dd:30:64:90:45:59:d1:71:80:70:85:63:1e: c7:78:3e:c4:71:bb:e4:d7:27:98:84:58:63:a7:d1:af:06:2a: 41:11:56:5e:f3:4b:3b:25:fb:0b:1c:68:6a:06:9e:18:79:11: 7a:ab:d0:df:26:2d:86:f6:2e:44:07:6e:21:26:2d:66:2f:80: 91:cc:1f:19:35:97:82:e9:50:06:36:28:aa:b1:8e:a6:74:04: 7b:11:b8:22:5c:2d:c0:32:4a:ae:7a:35:51:0e:dc:d7:62:6e: a2:0c:99:b2:1f:0a:d6:3b:8e:6e:f4:23:07:cd:5e:93:9e:62: 38:31:2f:8a:39:5a:71:14:86:e2:75:aa:05:6f:b8:2b:4d:c4: 09:14:42:2a:ab:e1:74:bf:0c:52:18:24:9b:0e:1b:7c:bb:0b: ff:76:dd:49:0f:58:58:53:b9:65:6e:04:24:2e:b8:32:56:50: 73:96:cc:16:22:1a:df:b3:a4:7d:41:4c:5e:d5:82:7d:70:d1: 38:af:78:0a:cd:a1:1c:4b:cd:64:97:1b:76:2b:37:3d:14:13: e8:65:cb:88:d4:49:ca:6d:08:c2:2e:1f:ff:61:7d:a0:5c:a7: 17:9b:5a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXkqZ1MVRGgxYai4DpB9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjUxMjIzMDQwMTE0WhcNMjUxMjI0MDQwMTE0WjAzMTEwLwYDVQQD EyhiMDJiYTY3ODY4M2QyN2QwNWQyOTlkZmZmMTM0YTJlOGM5NzAxYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xCI1cpwKcJpsdCLzdx2GkiAStVY wa7rQ9+XCyMdPb40XUWIbi9XpX3jpPxJX9gXxhOthzDcmy4qY2ZFQF4WhQQ6O7kh mK6EURNE6nGE9ny2fu1lLb8PF+uE9Fgo1kv5WX0fay4s1oSGLKKQnVdbdQ471IWR XxF4b8G+NvX+GolHb4y0/rnwSW/B7GONZh5QJgywmpg92Z44VcBF5JoYDA5DLHdh zHFqy9aa83lCT+zjci08+eP+5t3gZZi6fWy38RGASi3QenEyjEarwBcRLfC0X6+o +DHejCJgmWK8daOCXJ147PyWz/1Ec4qf9+T2t4ZuDphGTSP1bdKbemKdqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLArpnhoPSfQXSmd//E0oujJcBtXMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+anEGQ+ QjJGGb6DIsQr8rxf5D8V/brdMGSQRVnRcYBwhWMex3g+xHG75NcnmIRYY6fRrwYq QRFWXvNLOyX7CxxoagaeGHkReqvQ3yYthvYuRAduISYtZi+AkcwfGTWXgulQBjYo qrGOpnQEexG4IlwtwDJKrno1UQ7c12JuogyZsh8K1juObvQjB81ek55iODEvijla cRSG4nWqBW+4K03ECRRCKqvhdL8MUhgkmw4bfLsL/3bdSQ9YWFO5ZW4EJC64MlZQ c5bMFiIa37OkfUFMXtWCfXDROK94Cs2hHEvNZJcbdis3PRQT6GXLiNRJym0Iwi4f /2F9oFynF5ta6A== -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:57 2025 by rpki-client