This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json) Hash identifier: 6AtanhxXyktviD1uO0IGD2p4FbUWfXYaQdk+SN1mgbU= Subject key identifier: 3A:1D:41:04:C0:B8:70:54:8E:C1:FC:CB:A1:61:80:1B:3E:EA:76:AB Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Certificate serial: 019B5976FD144A9074A885368FDEBCFCA667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft Manifest number: 13BF Signing time: Fri 26 Dec 2025 07:02:08 +0000 Manifest this update: Fri 26 Dec 2025 07:02:08 +0000 Manifest next update: Sat 27 Dec 2025 07:02:08 +0000 Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=) 2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: loPCSWo/Pcia2zGTkp3AAPpEnlr6hXmabaGJ1CnmKkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:fd:14:4a:90:74:a8:85:36:8f:de:bc:fc:a6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Validity Not Before: Dec 26 07:02:08 2025 GMT Not After : Dec 27 07:02:08 2025 GMT Subject: CN=3a1d4104c0b870548ec1fccba161801b3eea76ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:e4:cf:6b:ca:5b:4d:b8:36:bf:77:00:03: 71:b9:42:24:2d:27:78:48:8f:85:17:ff:78:e7:d9: 1a:0d:7b:fe:8f:e9:6d:a7:0f:ff:99:8e:83:c9:1f: 98:f7:7a:7a:a0:19:5b:92:53:f8:10:37:03:e1:50: 12:60:9a:2c:e8:6d:bb:ec:a6:9b:28:d8:2d:33:f7: cd:1e:39:7d:4a:22:a9:6e:02:d3:88:d0:04:5f:09: 1d:69:98:12:85:6f:82:e1:3e:ba:ab:c8:e2:aa:fe: d3:3f:9e:41:09:bc:ea:1a:a9:69:59:13:cc:aa:dd: 47:e7:3c:c2:a8:25:d2:80:eb:09:e0:fe:af:2c:80: 0a:87:d6:43:ea:8b:fb:f5:2d:13:d8:e4:09:ee:57: c6:84:0d:d9:ff:32:ba:b0:c4:b5:1a:2e:2c:69:12: c2:97:b5:42:4a:31:1c:f1:66:98:8c:32:72:70:a8: 07:10:be:b3:c4:89:d1:16:05:ac:9d:0a:a5:6e:3a: 52:33:bb:3e:c2:97:e2:f6:6f:99:8c:61:ca:f4:07: 05:9f:f3:cc:65:45:84:ff:da:5a:81:db:1c:f7:3c: 0e:a6:dd:b8:ff:c7:18:64:88:ce:45:7b:0e:a3:cb: fd:18:5b:cd:6f:b9:d9:eb:1c:45:2e:d0:ae:e6:34: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1D:41:04:C0:B8:70:54:8E:C1:FC:CB:A1:61:80:1B:3E:EA:76:AB X509v3 Authority Key Identifier: keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f9:4c:87:39:6d:e4:c0:4f:36:51:46:ff:93:48:3a:cc:56: 45:b3:ab:83:2f:5b:02:36:27:22:7f:79:95:b9:83:ea:20:96: f6:9e:c9:df:6f:20:64:3e:fd:f6:fa:c5:80:20:92:2f:b2:4f: 47:f1:38:7f:f3:46:d6:be:4d:dd:70:f2:ae:1e:06:3e:4d:df: 07:fb:03:cb:38:47:ea:66:9c:3d:bf:90:cc:ea:89:51:42:50: db:5b:c2:02:ef:39:56:76:72:dd:99:9f:a0:15:5d:d6:92:87: 4b:64:15:3b:f3:fe:a9:cc:af:bc:84:2f:76:70:5b:d6:d3:7d: 8a:6e:ee:1f:c6:d9:e9:1f:3d:9d:5b:b7:6f:32:71:73:bd:b5: b2:96:2d:62:1e:a0:a8:31:67:14:85:9e:91:4c:4f:00:b3:7c: 41:89:e3:83:94:b3:a2:c3:fd:62:d0:f6:57:63:78:c6:84:3b: d2:04:b6:c9:2e:e6:85:43:05:52:34:0f:4c:d8:18:f0:04:45: af:66:4b:65:77:cd:22:9f:ea:e1:a0:c5:f5:ea:0e:8d:7c:e5: 42:ae:79:d9:92:57:43:a1:01:08:e5:f6:6d:3d:af:f1:cc:fd: 94:fa:81:40:ec:59:a1:75:cb:f0:36:64:d9:7d:af:a1:19:59: f4:99:87:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdv0USpB0qIU2j968/KZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk NjdiZTMwHhcNMjUxMjI2MDcwMjA4WhcNMjUxMjI3MDcwMjA4WjAzMTEwLwYDVQQD EygzYTFkNDEwNGMwYjg3MDU0OGVjMWZjY2JhMTYxODAxYjNlZWE3NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbjkz2vKW024Nr93AANxuUIkLSd4 SI+FF/9459kaDXv+j+ltpw//mY6DyR+Y93p6oBlbklP4EDcD4VASYJos6G277Kab KNgtM/fNHjl9SiKpbgLTiNAEXwkdaZgShW+C4T66q8jiqv7TP55BCbzqGqlpWRPM qt1H5zzCqCXSgOsJ4P6vLIAKh9ZD6ov79S0T2OQJ7lfGhA3Z/zK6sMS1Gi4saRLC l7VCSjEc8WaYjDJycKgHEL6zxInRFgWsnQqlbjpSM7s+wpfi9m+ZjGHK9AcFn/PM ZUWE/9pagdsc9zwOpt24/8cYZIjORXsOo8v9GFvNb7nZ6xxFLtCu5jT6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDodQQTAuHBUjsH8y6FhgBs+6narMB8GA1UdIwQY MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPlMhzlt 5MBPNlFG/5NIOsxWRbOrgy9bAjYnIn95lbmD6iCW9p7J328gZD799vrFgCCSL7JP R/E4f/NG1r5N3XDyrh4GPk3fB/sDyzhH6macPb+QzOqJUUJQ21vCAu85VnZy3Zmf oBVd1pKHS2QVO/P+qcyvvIQvdnBb1tN9im7uH8bZ6R89nVu3bzJxc721spYtYh6g qDFnFIWekUxPALN8QYnjg5SzosP9YtD2V2N4xoQ70gS2yS7mhUMFUjQPTNgY8ARF r2ZLZXfNIp/q4aDF9eoOjXzlQq552ZJXQ6EBCOX2bT2v8cz9lPqBQOxZoXXL8DZk 2X2voRlZ9JmHyA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client