This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json) Hash identifier: 8R+jPgcBLIKg8/MC2XHWrsozGKvCvoTABOslaTJtPLo= Subject key identifier: 24:66:84:F8:00:06:21:39:4C:FB:4A:45:40:F7:EA:88:89:11:30:10 Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019AF8AF69C41665A3409720FB3921965C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft Manifest number: 177D Signing time: Sun 07 Dec 2025 12:00:36 +0000 Manifest this update: Sun 07 Dec 2025 12:00:36 +0000 Manifest next update: Mon 08 Dec 2025 12:00:36 +0000 Files and hashes: 1: 9i_Fy4mZRlfNURa4hayKcHdiMEY.roa (hash: PDPb352f2JPLuJHrhYLanZ+7oePAn4VxO33SNBFdxI0=) 2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: tPOraUNiJawuPYH7J7H7/lXJQAq20NHb4ygbz/olJRA=) 3: sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa (hash: /IXlZY/hi3esdJuWdO3U7HevNnK2FSj61hj5YPxercA=) 4: vZVAzO1comLh9rD--AKOhaNfFxQ.roa (hash: H/PssdlCji8ajNbZih50zN0dew5cG4Cssgd64RB/Rhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:af:69:c4:16:65:a3:40:97:20:fb:39:21:96:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Dec 7 12:00:36 2025 GMT Not After : Dec 8 12:00:36 2025 GMT Subject: CN=246684f8000621394cfb4a4540f7ea8889113010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:10:b5:a1:f3:2b:00:82:59:50:58:98:b3: 0c:3f:9a:d1:24:c9:02:02:65:30:45:2c:35:4c:68: 34:c9:54:eb:8b:96:be:2e:45:57:7c:14:a4:e2:4b: 23:bd:4a:ac:db:36:fc:fb:75:a1:3e:c6:36:59:02: 23:5f:58:86:90:ef:3c:d3:15:91:3a:41:12:5c:11: 34:ff:35:f7:fb:ec:23:cd:b4:80:a8:55:17:3a:1a: a6:8e:f7:71:e9:71:21:68:4c:48:19:b0:f0:b5:b7: 3a:4d:6c:85:8b:95:28:0c:bd:92:53:f0:48:ce:44: 54:2e:e5:13:e6:0f:69:3b:8d:8a:26:9c:db:2c:c2: cd:bc:f5:5d:4f:20:5d:99:20:54:0c:f9:aa:3a:c0: fc:a0:d2:2e:1b:3b:e8:b4:12:3e:49:44:6d:91:ec: 16:e8:92:34:f9:5f:31:f3:70:d2:4c:d1:d6:5e:68: 75:1f:52:7f:4a:cf:c2:93:54:62:ea:75:66:3b:59: e0:60:b5:91:b6:fe:8b:74:07:e6:66:42:7e:88:67: 4e:6d:ac:54:0d:f2:a4:20:15:f0:b1:57:f6:98:55: 08:5c:80:03:66:5c:d7:f2:05:f5:61:a6:b1:04:4f: bc:e0:c2:1a:c9:dd:20:1f:e4:ba:ce:80:23:5a:bd: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:66:84:F8:00:06:21:39:4C:FB:4A:45:40:F7:EA:88:89:11:30:10 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1f:90:29:a3:00:3e:39:3f:42:72:df:cd:5f:cc:30:23:ae: 97:f8:03:bb:c6:48:93:89:56:c9:80:2d:27:02:70:87:16:d4: 87:76:bc:4c:9f:12:26:51:85:aa:87:ff:fb:4b:ad:30:3e:b8: bf:56:6e:16:81:cb:9c:8c:54:de:da:36:8d:0a:16:ec:8c:68: 6a:a5:d9:6d:13:4d:1c:c0:72:a3:cd:c2:d0:86:5f:6c:5d:59: 1d:3b:32:09:18:41:74:b4:42:62:1a:59:b4:67:7d:e8:99:9f: 2c:6e:71:e9:8d:33:86:58:43:f9:8f:3a:7a:29:2a:70:57:69: c8:1b:6a:c3:62:e9:a3:8f:66:47:aa:03:f3:46:70:ea:c1:cf: 75:f7:e6:4e:6a:83:d6:04:22:73:8f:f7:15:2f:b4:ef:92:2d: ca:dd:38:62:96:da:29:ac:ef:67:7e:1b:b8:45:74:88:29:f4: 07:a7:a6:1b:6e:98:67:fb:cf:15:1c:3c:8e:d9:6a:f4:0d:6d: c9:06:36:f4:49:29:88:3f:10:5d:d1:f5:bd:74:2d:de:05:e2: 11:8a:ca:af:6e:d1:55:d5:52:89:84:45:d5:a2:48:58:be:ac: 53:40:0a:7b:ab:76:e8:f1:d1:01:1e:8f:e1:6c:d4:f1:10:9a: 05:67:85:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4r2nEFmWjQJcg+zkhllwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMjA3MTIwMDM2WhcNMjUxMjA4MTIwMDM2WjAzMTEwLwYDVQQD EygyNDY2ODRmODAwMDYyMTM5NGNmYjRhNDU0MGY3ZWE4ODg5MTEzMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiYQtaHzKwCCWVBYmLMMP5rRJMkC AmUwRSw1TGg0yVTri5a+LkVXfBSk4ksjvUqs2zb8+3WhPsY2WQIjX1iGkO880xWR OkESXBE0/zX3++wjzbSAqFUXOhqmjvdx6XEhaExIGbDwtbc6TWyFi5UoDL2SU/BI zkRULuUT5g9pO42KJpzbLMLNvPVdTyBdmSBUDPmqOsD8oNIuGzvotBI+SURtkewW 6JI0+V8x83DSTNHWXmh1H1J/Ss/Ck1Ri6nVmO1ngYLWRtv6LdAfmZkJ+iGdObaxU DfKkIBXwsVf2mFUIXIADZlzX8gX1YaaxBE+84MIayd0gH+S6zoAjWr1VhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRmhPgABiE5TPtKRUD36oiJETAQMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh+QKaMA Pjk/QnLfzV/MMCOul/gDu8ZIk4lWyYAtJwJwhxbUh3a8TJ8SJlGFqof/+0utMD64 v1ZuFoHLnIxU3to2jQoW7IxoaqXZbRNNHMByo83C0IZfbF1ZHTsyCRhBdLRCYhpZ tGd96JmfLG5x6Y0zhlhD+Y86eikqcFdpyBtqw2Lpo49mR6oD80Zw6sHPdffmTmqD 1gQic4/3FS+075Ityt04YpbaKazvZ34buEV0iCn0B6emG26YZ/vPFRw8jtlq9A1t yQY29EkpiD8QXdH1vXQt3gXiEYrKr27RVdVSiYRF1aJIWL6sU0AKe6t26PHRAR6P 4WzU8RCaBWeFQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 21:53:53 2025 by rpki-client