This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json) Hash identifier: GPn9uOQPeBL7h4gcb3oi6PLGa7EBpLXMwOlB9LYjHeo= Subject key identifier: BB:B0:96:CD:84:6F:BE:B9:CD:98:74:F8:ED:2A:0C:BB:68:C5:D2:46 Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d Certificate serial: 019B3C7E1AFC1B930F6BFEC347B578787230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft Manifest number: 0C19 Signing time: Sat 20 Dec 2025 16:00:55 +0000 Manifest this update: Sat 20 Dec 2025 16:00:55 +0000 Manifest next update: Sun 21 Dec 2025 16:00:55 +0000 Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=) 2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: UoJz+sCzATMrmVGIMndPlLLQyPvjc71hJcLVgWxD33w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1a:fc:1b:93:0f:6b:fe:c3:47:b5:78:78:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d Validity Not Before: Dec 20 16:00:55 2025 GMT Not After : Dec 21 16:00:55 2025 GMT Subject: CN=bbb096cd846fbeb9cd9874f8ed2a0cbb68c5d246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:d7:30:78:24:ca:da:67:0e:ac:08:b4:02: a4:36:39:17:56:ec:05:fe:81:d1:23:eb:c7:f7:a7: 69:98:e4:41:1f:11:0d:7b:f5:7d:d8:49:31:3b:c1: be:6f:e6:70:0c:cc:b3:cf:83:39:b6:47:71:30:f6: 6f:05:b3:78:45:9e:86:1d:61:4e:e1:3b:a3:20:4c: 1e:d8:23:fe:09:7b:20:d5:ce:5d:94:7e:0f:1b:92: ba:c6:df:35:5d:93:9b:eb:75:6d:e5:98:20:75:20: 61:0f:3b:bb:ae:5f:9d:78:5e:8e:ea:0a:5d:93:43: c3:3d:06:9b:d0:56:2c:48:bc:4e:f1:28:0b:fe:5b: 91:95:e7:be:2d:d7:39:7c:3c:c0:d6:9c:ba:9d:af: 1b:82:fa:7f:2a:51:f1:00:2f:73:14:84:46:4e:fb: f9:47:0d:7e:38:f8:ec:d4:be:52:ec:3d:a4:0b:2c: a6:12:eb:b5:de:90:71:f0:89:fb:18:e9:29:df:e6: 3b:d8:71:90:e2:28:82:04:de:de:04:5a:d1:e3:28: bc:4e:24:e4:74:5c:c5:f5:4d:21:9d:46:4f:d3:38: 11:fa:47:93:34:3c:ee:c3:e7:b5:ac:51:e1:23:9b: 8a:e6:86:cd:98:b9:eb:6c:d1:77:c5:3d:1d:2f:78: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:96:CD:84:6F:BE:B9:CD:98:74:F8:ED:2A:0C:BB:68:C5:D2:46 X509v3 Authority Key Identifier: keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e9:75:f0:9b:58:c3:d8:6c:f7:e4:85:5a:58:61:b7:a7:36: 6a:8d:3a:00:fa:7f:ac:1c:39:37:e2:19:ef:2e:60:3f:cc:22: 4a:e8:7d:fe:b3:29:49:d4:c0:8f:0a:57:14:69:77:82:74:07: 76:67:40:28:3d:8c:27:3f:d2:52:02:19:fb:c2:a6:8d:9b:29: e8:1f:0f:40:1b:d8:4e:9f:51:ea:6f:eb:74:62:1f:4e:48:ea: e9:3a:0f:24:84:ed:6b:97:f3:45:3b:fb:42:36:76:42:ae:86: 54:80:10:94:fe:df:00:0b:c6:7a:54:54:be:c7:05:9e:f0:40: 7e:f7:07:c3:67:39:d9:81:56:02:4c:a5:a3:e5:0e:e0:67:bb: 00:b6:c5:0c:ab:de:d9:b6:d3:93:43:1a:41:ee:36:1e:a6:64: b1:17:45:60:f0:b1:7b:ba:6a:d8:c8:c0:d4:8b:98:66:a0:e5: 2a:ae:f7:5b:9d:0d:83:9b:e2:9f:c5:39:d4:12:e2:1d:53:84: ca:c7:03:d4:a5:37:7d:5e:dc:cb:b9:60:6a:be:db:8f:6d:3f: 2e:e5:d2:1b:64:67:2b:7a:87:28:be:14:74:3a:82:ec:32:57: 1b:e9:21:b7:13:42:65:fe:d8:74:fa:6d:2a:77:a1:2e:8e:43: 2a:bf:13:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhr8G5MPa/7DR7V4eHIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5 ZDM2OGQwHhcNMjUxMjIwMTYwMDU1WhcNMjUxMjIxMTYwMDU1WjAzMTEwLwYDVQQD EyhiYmIwOTZjZDg0NmZiZWI5Y2Q5ODc0ZjhlZDJhMGNiYjY4YzVkMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrXMHgkytpnDqwItAKkNjkXVuwF /oHRI+vH96dpmORBHxENe/V92EkxO8G+b+ZwDMyzz4M5tkdxMPZvBbN4RZ6GHWFO 4TujIEwe2CP+CXsg1c5dlH4PG5K6xt81XZOb63Vt5ZggdSBhDzu7rl+deF6O6gpd k0PDPQab0FYsSLxO8SgL/luRlee+Ldc5fDzA1py6na8bgvp/KlHxAC9zFIRGTvv5 Rw1+OPjs1L5S7D2kCyymEuu13pBx8In7GOkp3+Y72HGQ4iiCBN7eBFrR4yi8TiTk dFzF9U0hnUZP0zgR+keTNDzuw+e1rFHhI5uK5obNmLnrbNF3xT0dL3gmrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuwls2Eb765zZh0+O0qDLtoxdJGMB8GA1UdIwQY MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt MzEyZTViNDkxMTQ2LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2 LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdel18JtY w9hs9+SFWlhht6c2ao06APp/rBw5N+IZ7y5gP8wiSuh9/rMpSdTAjwpXFGl3gnQH dmdAKD2MJz/SUgIZ+8KmjZsp6B8PQBvYTp9R6m/rdGIfTkjq6ToPJITta5fzRTv7 QjZ2Qq6GVIAQlP7fAAvGelRUvscFnvBAfvcHw2c52YFWAkylo+UO4Ge7ALbFDKve 2bbTk0MaQe42HqZksRdFYPCxe7pq2MjA1IuYZqDlKq73W50Ng5vin8U51BLiHVOE yscD1KU3fV7cy7lgar7bj20/LuXSG2RnK3qHKL4UdDqC7DJXG+khtxNCZf7YdPpt KnehLo5DKr8Tuw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:46 2025 by rpki-client