This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft File: oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json) Hash identifier: Sp1fvbzEXqNlW+4xDyrLcLgYr6xeV5MwgtItZPWT5hY= Subject key identifier: 6D:97:22:2A:7A:DF:1C:D9:C9:25:A5:B4:AE:39:A6:5C:15:27:90:E9 Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 Certificate issuer: /CN=a122d6d21bd04c46224653a49be029e3c024b846 Certificate serial: 019B1BE03F59483F971758A2E8A06BDAFF79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft Manifest number: 037E Signing time: Sun 14 Dec 2025 08:00:39 +0000 Manifest this update: Sun 14 Dec 2025 08:00:39 +0000 Manifest next update: Mon 15 Dec 2025 08:00:39 +0000 Files and hashes: 1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=) 2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=) 3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=) 4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: REw5b1UoCk/eyEB6RYw2/a1Otn2+IP6CGQUgivHDsIY=) 5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:3f:59:48:3f:97:17:58:a2:e8:a0:6b:da:ff:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846 Validity Not Before: Dec 14 08:00:39 2025 GMT Not After : Dec 15 08:00:39 2025 GMT Subject: CN=6d97222a7adf1cd9c925a5b4ae39a65c152790e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:1a:94:38:b7:13:d7:81:75:17:70:41:2d: 58:4a:d3:aa:3b:3c:46:f7:6c:b4:d9:40:88:86:02: ff:d9:94:08:e6:ef:0b:a4:c9:5f:d8:ee:e0:56:3d: 22:7c:3e:5c:48:42:35:f7:c6:b2:b2:49:0c:5f:7f: dd:25:78:c6:53:87:da:7b:51:65:ba:f9:a5:a5:c1: 06:c2:f4:69:77:fb:04:36:a0:87:7f:3d:57:b9:6e: f3:6c:40:b1:63:ce:51:98:45:d5:af:07:b2:43:b8: 3d:77:d5:57:42:ee:ea:a9:f5:26:6a:f7:4a:92:29: db:0d:68:4d:f1:19:a4:e1:aa:03:e7:24:7d:a9:d3: a5:87:19:a1:00:14:34:0e:ff:b1:21:d9:94:64:3f: 4c:57:f1:b0:d0:1c:5f:85:25:49:1a:fb:4e:47:08: d8:55:e6:2e:29:78:57:33:5f:25:19:f9:62:8f:31: ee:5e:12:74:05:54:10:61:24:d9:44:79:99:2c:48: 32:61:34:e8:ce:79:4b:82:20:0a:78:3d:25:0d:b3: 10:2b:4a:4c:cb:8d:3a:f9:52:b7:0f:9d:30:3b:19: 78:88:61:e4:e2:95:0a:f0:89:da:67:c4:27:83:7b: 1c:ec:5e:42:bc:13:04:c2:ba:d1:c2:7d:8f:8f:42: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:22:2A:7A:DF:1C:D9:C9:25:A5:B4:AE:39:A6:5C:15:27:90:E9 X509v3 Authority Key Identifier: keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a5:40:a6:64:e9:d2:33:b5:27:24:fb:6c:17:aa:d8:85:b5: 20:b3:ee:c1:c0:ad:62:cd:9d:db:06:a3:be:15:01:7a:4f:a5: 21:f7:e3:2f:72:9e:ad:09:35:c5:e3:5b:7b:e0:95:27:ab:ca: d3:b0:c1:1d:69:90:8b:34:66:51:3b:8c:7e:0d:85:17:be:f5: 7c:cd:3d:f7:f1:86:5b:1b:d6:96:8a:90:63:9e:a2:26:ec:36: a5:4e:c2:df:2b:fe:7c:ca:18:e4:1e:28:66:fa:f9:b4:e1:a0: 06:d8:98:22:9f:52:e9:dc:a2:2e:e6:af:92:9d:dc:8a:d1:73: bc:bf:20:33:87:2d:3a:58:ff:63:a6:bb:9d:43:0c:ae:f7:1a: da:6c:87:02:8c:54:f0:ee:46:3f:11:81:4e:af:c6:fb:cd:9d: 3d:b6:c5:e1:86:94:3d:bf:3d:f6:1a:ed:2b:7b:8a:0d:10:8c: 41:00:32:cc:7c:95:13:b8:23:f5:0f:16:8e:f2:89:84:9f:db: 12:80:67:5b:e6:c0:27:f9:72:d0:6f:cb:96:0b:cc:c1:f9:eb: 87:6f:49:27:b4:7d:9b:d0:dd:89:08:e1:82:39:a5:fb:54:9e: 9b:a6:ad:6a:ce:24:31:b8:e0:ca:4a:30:ca:14:40:72:5b:9a: a2:01:df:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4D9ZSD+XF1ii6KBr2v95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjJkNmQyMWJkMDRjNDYyMjQ2NTNhNDliZTAyOWUzYzAy NGI4NDYwHhcNMjUxMjE0MDgwMDM5WhcNMjUxMjE1MDgwMDM5WjAzMTEwLwYDVQQD Eyg2ZDk3MjIyYTdhZGYxY2Q5YzkyNWE1YjRhZTM5YTY1YzE1Mjc5MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrwalDi3E9eBdRdwQS1YStOqOzxG 92y02UCIhgL/2ZQI5u8LpMlf2O7gVj0ifD5cSEI198ayskkMX3/dJXjGU4fae1Fl uvmlpcEGwvRpd/sENqCHfz1XuW7zbECxY85RmEXVrweyQ7g9d9VXQu7qqfUmavdK kinbDWhN8Rmk4aoD5yR9qdOlhxmhABQ0Dv+xIdmUZD9MV/Gw0BxfhSVJGvtORwjY VeYuKXhXM18lGflijzHuXhJ0BVQQYSTZRHmZLEgyYTToznlLgiAKeD0lDbMQK0pM y406+VK3D50wOxl4iGHk4pUK8InaZ8Qng3sc7F5CvBMEwrrRwn2Pj0J+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2XIip63xzZySWltK45plwVJ5DpMB8GA1UdIwQY MBaAFKEi1tIb0ExGIkZTpJvgKePAJLhGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDct NWYyNTFhMDNmYTJiLzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDctNWYyNTFhMDNmYTJi LzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6VApmTp 0jO1JyT7bBeq2IW1ILPuwcCtYs2d2wajvhUBek+lIffjL3KerQk1xeNbe+CVJ6vK 07DBHWmQizRmUTuMfg2FF771fM099/GGWxvWloqQY56iJuw2pU7C3yv+fMoY5B4o Zvr5tOGgBtiYIp9S6dyiLuavkp3citFzvL8gM4ctOlj/Y6a7nUMMrvca2myHAoxU 8O5GPxGBTq/G+82dPbbF4YaUPb899hrtK3uKDRCMQQAyzHyVE7gj9Q8WjvKJhJ/b EoBnW+bAJ/ly0G/LlgvMwfnrh29JJ7R9m9DdiQjhgjml+1Sem6atas4kMbjgykow yhRAcluaogHfoQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:09:14 2025 by rpki-client