This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json) Hash identifier: IKt5v3P1vSU++5nwYHuKMCQs0GL6UMK9yfS4L1K3oz4= Subject key identifier: E4:E1:EB:C8:42:7B:A8:61:74:DD:FE:F6:3B:CB:A5:67:EC:93:60:9A Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de Certificate serial: 019B5B6445C7BA28B00DB8068E6CDC13E3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft Manifest number: 10C6 Signing time: Fri 26 Dec 2025 16:00:56 +0000 Manifest this update: Fri 26 Dec 2025 16:00:56 +0000 Manifest next update: Sat 27 Dec 2025 16:00:56 +0000 Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: 8mF2b6h7dOFWDraGi3r9hVdbBWPhza0k6wSXQw9wtyU=) 2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:45:c7:ba:28:b0:0d:b8:06:8e:6c:dc:13:e3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de Validity Not Before: Dec 26 16:00:56 2025 GMT Not After : Dec 27 16:00:56 2025 GMT Subject: CN=e4e1ebc8427ba86174ddfef63bcba567ec93609a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:17:6b:3f:e3:10:6b:28:0f:50:98:ed:1b: e7:9d:2c:59:cc:fd:11:ac:c4:e3:e2:a8:f4:4f:4f: a0:51:89:11:d9:ca:44:25:91:fc:d8:1a:b4:a5:72: 23:3a:86:44:d4:16:36:03:57:30:8c:3b:87:dd:b1: 07:8f:69:a4:5a:4c:c7:9c:8b:b1:5d:70:ea:31:6b: 65:b9:4e:79:d9:a9:85:49:52:94:38:86:72:7d:51: 7f:5c:24:55:9e:5a:3a:31:f2:1b:97:11:9b:5c:64: f4:bf:08:93:ff:1d:0e:45:8e:e0:3d:55:93:ec:97: ea:32:62:cb:ce:7e:95:95:97:a4:60:74:5f:dd:11: f7:ad:c2:85:4c:a6:f0:ee:f6:81:00:f2:69:a1:f3: 6b:5a:19:0c:71:2a:09:f3:ec:99:73:eb:53:ce:cb: b4:d1:fa:d9:b4:88:36:09:0a:61:3a:03:db:6e:a5: a5:9d:9e:c0:26:fb:00:f4:36:79:cb:20:58:c1:b1: f2:13:b5:14:4d:88:98:ac:47:1f:88:cb:5b:c8:83: 4e:e8:67:5d:e5:10:51:b9:e3:12:2d:83:88:e9:a1: a6:39:f0:9f:db:32:f8:3b:b4:24:da:95:0f:f6:17: 53:63:d3:7f:c9:fa:b0:9f:e9:9a:56:d1:78:db:cf: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:EB:C8:42:7B:A8:61:74:DD:FE:F6:3B:CB:A5:67:EC:93:60:9A X509v3 Authority Key Identifier: keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dc:4e:55:a8:c9:72:f4:1d:d5:d3:b9:b7:66:a2:9a:c2:70: 83:3b:33:a7:49:b8:aa:06:d0:d8:21:3b:a6:78:28:3d:a3:b7: 62:e1:36:81:86:14:4e:13:3d:91:a6:a2:ba:be:6e:34:96:d7: 13:2c:8d:92:92:86:c5:ee:05:a8:6f:f1:91:1e:c5:6d:b9:fc: 61:4c:b3:91:19:ef:78:34:d4:b2:34:99:90:30:2d:7b:92:bd: 5b:1d:53:f5:b8:c9:78:d2:9f:35:59:d0:e7:63:0b:d7:9d:a2: 26:ad:55:9f:b2:76:26:41:4f:c0:62:cf:19:7e:74:30:dc:b6: 4a:b9:34:ab:d2:8a:eb:9b:82:68:1e:98:93:41:f5:4b:3a:96: ca:1f:a2:2e:2d:c6:4a:1e:90:88:28:1c:2f:d1:12:79:30:99: 13:ef:6d:8a:a8:ef:88:18:dd:3a:93:6b:81:97:0a:91:32:57: 6e:82:a4:56:91:a1:41:ce:04:85:66:fa:6e:29:2e:97:d6:36: 59:a7:d7:88:ce:c2:a4:27:d8:a3:85:0e:5e:86:8d:26:e2:f2: 11:3c:5f:d4:e2:aa:8d:a9:73:a5:51:35:5e:0d:75:51:a7:71: 70:9e:50:cd:95:08:b2:bd:9d:11:24:05:7e:e8:c9:68:50:b5: 43:56:80:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZEXHuiiwDbgGjmzcE+PWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh YWE0ZGUwHhcNMjUxMjI2MTYwMDU2WhcNMjUxMjI3MTYwMDU2WjAzMTEwLwYDVQQD EyhlNGUxZWJjODQyN2JhODYxNzRkZGZlZjYzYmNiYTU2N2VjOTM2MDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s4Xaz/jEGsoD1CY7RvnnSxZzP0R rMTj4qj0T0+gUYkR2cpEJZH82Bq0pXIjOoZE1BY2A1cwjDuH3bEHj2mkWkzHnIux XXDqMWtluU552amFSVKUOIZyfVF/XCRVnlo6MfIblxGbXGT0vwiT/x0ORY7gPVWT 7JfqMmLLzn6VlZekYHRf3RH3rcKFTKbw7vaBAPJpofNrWhkMcSoJ8+yZc+tTzsu0 0frZtIg2CQphOgPbbqWlnZ7AJvsA9DZ5yyBYwbHyE7UUTYiYrEcfiMtbyINO6Gdd 5RBRueMSLYOI6aGmOfCf2zL4O7Qk2pUP9hdTY9N/yfqwn+maVtF42893qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTh68hCe6hhdN3+9jvLpWfsk2CaMB8GA1UdIwQY MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdxOVajJ cvQd1dO5t2aimsJwgzszp0m4qgbQ2CE7pngoPaO3YuE2gYYUThM9kaaiur5uNJbX EyyNkpKGxe4FqG/xkR7Fbbn8YUyzkRnveDTUsjSZkDAte5K9Wx1T9bjJeNKfNVnQ 52ML152iJq1Vn7J2JkFPwGLPGX50MNy2Srk0q9KK65uCaB6Yk0H1SzqWyh+iLi3G Sh6QiCgcL9ESeTCZE+9tiqjviBjdOpNrgZcKkTJXboKkVpGhQc4EhWb6bikul9Y2 WafXiM7CpCfYo4UOXoaNJuLyETxf1OKqjalzpVE1Xg11UadxcJ5QzZUIsr2dESQF fujJaFC1Q1aABQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:24 2025 by rpki-client