This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json) Hash identifier: 25QOPkqqqz3xEHJSHIlzNTgahuw1fYXaL69d4xBpsYs= Subject key identifier: E0:8D:97:AA:E0:64:D8:C5:85:5C:86:F2:85:DE:20:97:A3:96:4B:27 Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Certificate serial: 019B0E930577B1FC66AF6B74738D74494474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft Manifest number: 13BC Signing time: Thu 11 Dec 2025 18:01:14 +0000 Manifest this update: Thu 11 Dec 2025 18:01:14 +0000 Manifest next update: Fri 12 Dec 2025 18:01:14 +0000 Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=) 2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: mBPuGSVQi/tbHXV0KA5d+4+9aKimbisDWPkOwcInkPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:05:77:b1:fc:66:af:6b:74:73:8d:74:49:44:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Validity Not Before: Dec 11 18:01:14 2025 GMT Not After : Dec 12 18:01:14 2025 GMT Subject: CN=e08d97aae064d8c5855c86f285de2097a3964b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:63:40:80:fc:25:60:3a:e3:9a:37:b6:39: c5:e0:df:0b:f7:a8:c0:0e:27:84:8a:db:a8:dc:78: 2c:9b:9b:88:c4:77:0c:23:97:f5:79:7d:2e:fe:f3: c5:28:cf:a4:d8:95:e7:21:4d:eb:55:e1:c1:c8:cb: 9c:d3:0e:3b:c3:e1:02:08:f3:ef:96:94:3c:33:cb: 34:6b:79:6a:7b:d4:05:fd:fb:fe:1f:19:ff:51:61: b2:58:97:a7:28:cf:5c:ab:26:ff:06:b0:89:dc:1a: 5c:d6:ca:a3:3a:73:c2:44:d1:ea:cd:70:e8:85:85: 25:e3:8a:c3:d0:63:83:96:f3:d1:22:88:76:71:b1: a4:1c:4f:f6:05:89:e9:ac:db:b3:5c:64:49:20:6c: e7:ad:4b:3d:f4:5f:96:a5:63:e2:be:67:29:82:b7: e8:43:6d:70:ee:00:47:e5:a8:4f:9f:1b:06:7c:28: 07:b3:58:15:58:8e:52:f5:bd:82:41:f2:8b:bc:40: 0c:19:d0:f8:e3:fe:e0:89:80:7e:16:d4:0f:3f:8a: 7b:88:15:80:61:fb:e2:f3:2c:b1:d7:88:c0:36:5e: 8b:d8:f5:a4:9a:42:16:88:fa:19:21:e6:8b:29:c8: cf:22:87:8a:11:ac:20:f6:6a:44:fc:46:48:85:ef: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8D:97:AA:E0:64:D8:C5:85:5C:86:F2:85:DE:20:97:A3:96:4B:27 X509v3 Authority Key Identifier: keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7a:53:f5:17:b6:78:35:a9:cb:b2:52:fd:84:62:70:e0:b7: 7d:db:80:bb:56:b9:29:bd:dd:04:7a:59:a1:32:10:6e:fa:75: cb:09:16:fd:c1:ca:6d:10:8a:75:06:ea:b1:5c:d3:15:1c:d2: 33:a5:54:82:98:2c:6e:a7:25:5c:0b:af:7c:16:e4:90:53:65: 0b:5f:00:53:1b:75:c0:89:e5:0b:21:d2:dd:ec:bf:c8:a8:06: c0:f1:b8:3b:19:36:20:6e:b4:53:01:e3:a1:29:aa:e1:19:3b: 26:4c:47:3b:91:f9:a7:36:0e:c6:47:80:b3:0b:3b:bb:8b:85: a0:7d:d0:8c:5e:bc:83:87:e2:7c:31:01:6f:4e:97:48:31:25: ee:2a:6a:22:f5:98:50:3c:2e:f4:41:36:c3:53:3d:c0:be:66: ab:47:95:99:bb:dd:7b:c4:8a:c4:d7:1f:71:e2:0c:88:b3:9d: e8:2d:f8:eb:8d:eb:b2:ab:ae:b6:77:d2:74:c6:8b:44:2c:24: 63:01:5c:3e:f8:51:0f:9b:4b:bd:3f:28:bd:da:bb:04:7e:b2: 1f:e9:64:28:cf:32:9f:13:72:1f:33:a7:d0:a5:e7:39:1a:7c: 9c:68:d5:67:28:e0:32:02:74:99:47:76:37:ff:f7:af:76:f1: 44:0a:20:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwV3sfxmr2t0c410SUR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1 N2NiZTgwHhcNMjUxMjExMTgwMTE0WhcNMjUxMjEyMTgwMTE0WjAzMTEwLwYDVQQD EyhlMDhkOTdhYWUwNjRkOGM1ODU1Yzg2ZjI4NWRlMjA5N2EzOTY0YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCVjQID8JWA645o3tjnF4N8L96jA DieEituo3Hgsm5uIxHcMI5f1eX0u/vPFKM+k2JXnIU3rVeHByMuc0w47w+ECCPPv lpQ8M8s0a3lqe9QF/fv+Hxn/UWGyWJenKM9cqyb/BrCJ3Bpc1sqjOnPCRNHqzXDo hYUl44rD0GODlvPRIoh2cbGkHE/2BYnprNuzXGRJIGznrUs99F+WpWPivmcpgrfo Q21w7gBH5ahPnxsGfCgHs1gVWI5S9b2CQfKLvEAMGdD44/7giYB+FtQPP4p7iBWA Yfvi8yyx14jANl6L2PWkmkIWiPoZIeaLKcjPIoeKEawg9mpE/EZIhe81AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCNl6rgZNjFhVyG8oXeIJejlksnMB8GA1UdIwQY MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt NmUwMmFmMGE0OTk0LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0 LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXpT9Re2 eDWpy7JS/YRicOC3fduAu1a5Kb3dBHpZoTIQbvp1ywkW/cHKbRCKdQbqsVzTFRzS M6VUgpgsbqclXAuvfBbkkFNlC18AUxt1wInlCyHS3ey/yKgGwPG4Oxk2IG60UwHj oSmq4Rk7JkxHO5H5pzYOxkeAsws7u4uFoH3QjF68g4fifDEBb06XSDEl7ipqIvWY UDwu9EE2w1M9wL5mq0eVmbvde8SKxNcfceIMiLOd6C34643rsquutnfSdMaLRCwk YwFcPvhRD5tLvT8ovdq7BH6yH+lkKM8ynxNyHzOn0KXnORp8nGjVZyjgMgJ0mUd2 N//3r3bxRAogcQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:42 2025 by rpki-client