This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json) Hash identifier: vSvQUwi1kyjwnKA3zNu3HzDYKygDmCg5IuPeknKTW4s= Subject key identifier: 8A:6E:27:43:19:6C:47:E5:0E:0A:9E:82:7C:BF:F8:4F:0B:8C:3F:C4 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B0FA5F65E0736009552B917E7F62C46D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft Manifest number: 177D Signing time: Thu 11 Dec 2025 23:01:33 +0000 Manifest this update: Thu 11 Dec 2025 23:01:33 +0000 Manifest next update: Fri 12 Dec 2025 23:01:33 +0000 Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=) 2: DHT86uq93soXgimlreq7l63TpDc.roa (hash: wHf/DMhPu6ocTE0CoJNwsMGJB1c1KuC84P7yMVgDFoQ=) 3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: zeIfxOx1LwY9RJTK5nTy0tTyg5mnNhHORD5qu72uvN4=) 4: PFZpLIhhyuxMIxoL3doX43uXr_0.roa (hash: vtL2UJAi6kU5TeC3dZFl0hJ0UyS0aR5hnJoB/XiExRo=) 5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=) 6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=) 7: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=) 8: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:f6:5e:07:36:00:95:52:b9:17:e7:f6:2c:46:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Dec 11 23:01:33 2025 GMT Not After : Dec 12 23:01:33 2025 GMT Subject: CN=8a6e2743196c47e50e0a9e827cbff84f0b8c3fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:e5:03:0e:00:74:b2:d4:4d:33:77:9b:74: 0f:0e:55:53:d5:b7:4f:24:30:f1:38:86:a4:9a:21: 26:92:ac:79:25:86:f0:de:d6:26:43:d5:82:6c:b3: d6:a6:48:98:f3:70:71:91:cc:0f:df:87:e0:ce:71: 7c:49:f5:f1:c1:c1:88:08:68:6c:0c:07:80:7c:1c: 82:25:51:73:e3:c1:3f:62:57:52:38:30:35:6e:18: d1:73:ef:f9:e9:fc:fc:88:d8:70:9d:c5:66:20:b9: 11:c1:fd:64:d8:07:5a:64:44:47:a1:da:b8:27:a7: b0:86:8e:29:03:43:13:b3:f8:bc:e5:09:f7:ca:53: 09:72:e0:95:26:16:76:31:33:89:f4:64:d4:ee:1c: e5:6d:83:43:01:61:19:4e:b8:13:d4:42:bd:d5:c0: 52:33:00:d6:bc:d9:03:fa:c9:2c:4b:cc:a0:46:72: 2d:ed:fe:3f:ff:b7:b3:f3:cb:50:ad:d6:35:3a:48: e6:25:88:a5:44:de:da:22:83:25:76:79:67:a0:7c: 53:a0:9d:38:77:60:dc:cf:de:43:96:5b:5f:0c:90: 38:b8:4e:ea:84:fb:38:f6:96:d9:9d:2e:ea:a5:03: 30:1a:e7:12:b0:de:e7:f1:03:0a:d3:6d:ed:08:bd: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:27:43:19:6C:47:E5:0E:0A:9E:82:7C:BF:F8:4F:0B:8C:3F:C4 X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:95:b1:fc:36:b3:f3:7d:9d:26:a9:a2:24:d3:38:8c:b6:f4: 2c:41:ac:a5:54:07:56:c0:33:4a:a4:68:2b:0f:86:4f:67:c6: 67:9d:fa:73:aa:85:10:d9:11:a2:d7:c5:dd:7a:4d:13:a9:a8: 01:69:de:73:53:45:c5:36:00:ef:b4:25:8d:69:82:ef:7e:5e: 2c:ea:ac:9e:8c:9f:72:81:e9:94:c7:e4:82:f3:2d:ae:55:c0: 13:8f:eb:4c:ad:cb:67:f1:5c:2a:9e:bc:56:da:40:a3:3c:83: f4:71:50:a4:a2:30:96:77:f8:5d:b9:1b:6f:fc:ec:74:de:51: 1e:42:6b:dc:1a:99:ba:1e:b8:03:a1:7e:b5:42:81:01:b2:75: c7:30:d3:e6:18:85:d0:e2:67:54:9b:db:2e:ae:87:65:5c:37: a1:f2:5e:a9:53:13:c3:0d:13:bd:98:be:09:2d:71:f1:4d:4f: 12:94:7a:0f:3e:0d:76:a1:37:f7:de:9c:c4:a3:eb:6f:2a:49: ea:76:45:ab:52:23:02:69:f8:66:e1:69:73:af:34:e5:5a:18: 94:e8:bb:af:48:1e:32:6d:54:60:a4:66:67:b8:f3:5e:a5:c8: eb:f0:b1:93:87:83:da:90:33:b2:0b:3f:0d:56:f4:7c:83:01: d7:a8:21:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpfZeBzYAlVK5F+f2LEbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjUxMjExMjMwMTMzWhcNMjUxMjEyMjMwMTMzWjAzMTEwLwYDVQQD Eyg4YTZlMjc0MzE5NmM0N2U1MGUwYTllODI3Y2JmZjg0ZjBiOGMzZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSrlAw4AdLLUTTN3m3QPDlVT1bdP JDDxOIakmiEmkqx5JYbw3tYmQ9WCbLPWpkiY83BxkcwP34fgznF8SfXxwcGICGhs DAeAfByCJVFz48E/YldSODA1bhjRc+/56fz8iNhwncVmILkRwf1k2AdaZERHodq4 J6ewho4pA0MTs/i85Qn3ylMJcuCVJhZ2MTOJ9GTU7hzlbYNDAWEZTrgT1EK91cBS MwDWvNkD+sksS8ygRnIt7f4//7ez88tQrdY1OkjmJYilRN7aIoMldnlnoHxToJ04 d2Dcz95DlltfDJA4uE7qhPs49pbZnS7qpQMwGucSsN7n8QMK023tCL1xnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpuJ0MZbEflDgqegny/+E8LjD/EMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJWx/Daz 832dJqmiJNM4jLb0LEGspVQHVsAzSqRoKw+GT2fGZ536c6qFENkRotfF3XpNE6mo AWnec1NFxTYA77QljWmC735eLOqsnoyfcoHplMfkgvMtrlXAE4/rTK3LZ/FcKp68 VtpAozyD9HFQpKIwlnf4Xbkbb/zsdN5RHkJr3BqZuh64A6F+tUKBAbJ1xzDT5hiF 0OJnVJvbLq6HZVw3ofJeqVMTww0TvZi+CS1x8U1PEpR6Dz4NdqE3996cxKPrbypJ 6nZFq1IjAmn4ZuFpc6805VoYlOi7r0geMm1UYKRmZ7jzXqXI6/Cxk4eD2pAzsgs/ DVb0fIMB16ghDA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:44:44 2025 by rpki-client