This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json) Hash identifier: gfRGTvvLwSWLHgyi0n/DuTDTksYfOpn1pl9fqD/cTNM= Subject key identifier: 60:23:9D:0F:E6:96:19:9C:4F:5F:3C:AA:6B:7A:22:16:81:95:8E:A1 Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Certificate serial: 019B40C8C438D3F75DA546119E435B2C7AB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 12:00:57 +0000 Manifest this update: Sun 21 Dec 2025 12:00:57 +0000 Manifest next update: Mon 22 Dec 2025 12:00:57 +0000 Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=) 2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=) 3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: cDeCgjYpArX87jU8cc6RPDzOpDU/6Eyj6h4cSUo95mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:c4:38:d3:f7:5d:a5:46:11:9e:43:5b:2c:7a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Validity Not Before: Dec 21 12:00:57 2025 GMT Not After : Dec 22 12:00:57 2025 GMT Subject: CN=60239d0fe696199c4f5f3caa6b7a221681958ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:0e:89:20:dd:21:a2:e6:4c:68:05:fc:14: 57:b9:53:4f:1e:79:42:b1:32:cc:1a:5d:09:b3:90: c1:de:8e:e2:7f:d1:9f:dc:5f:52:04:37:ef:49:04: 33:00:09:ff:0d:fa:d7:a6:4f:70:fa:d5:85:fb:dc: 19:04:42:a3:f3:27:47:9b:cc:15:22:c8:7d:10:69: 60:04:89:91:53:52:2d:53:f0:ca:e0:bd:e5:c4:b0: 66:35:4e:b2:2b:2e:a1:05:18:0f:62:d1:63:9b:00: e8:54:74:06:dd:9b:24:e5:80:88:79:b3:30:87:42: 8f:30:02:28:03:ea:49:6d:0b:87:6a:e5:a6:08:dc: 5d:3a:4b:b5:18:40:e9:0b:27:6e:c7:fb:58:18:bd: a5:a1:f8:08:24:5d:72:65:00:68:d9:56:49:9b:36: 5b:d2:db:83:f2:fb:4a:5b:5c:c4:85:20:d6:cc:ce: f8:93:6f:41:82:0e:06:7c:b4:fc:71:bf:13:bd:a4: f9:24:bd:2b:9a:11:1a:4a:74:3c:42:e4:e4:51:82: 62:33:a1:4f:ec:09:fa:8f:77:87:f3:2a:7a:20:84: ba:d0:35:34:96:01:39:c7:78:04:e8:c2:80:2f:fa: 4b:64:de:5d:10:9d:f6:55:46:ac:db:4a:c9:e9:11: e9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:23:9D:0F:E6:96:19:9C:4F:5F:3C:AA:6B:7A:22:16:81:95:8E:A1 X509v3 Authority Key Identifier: keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f6:57:49:24:76:eb:72:68:54:ae:b9:52:8b:3c:34:9b:ef: 81:b6:1e:71:98:fc:eb:39:ef:d4:86:0e:8c:ab:6b:15:b4:08: 0a:8b:91:30:29:d1:75:80:20:c9:6e:c3:27:38:dd:11:89:03: 69:46:c3:c8:61:39:2e:5b:83:c5:21:0a:f4:3a:b8:3e:1c:d0: d6:68:8e:2f:56:c8:2d:db:44:56:84:cc:f6:40:48:0e:0d:f7: b6:56:6b:dc:cb:9c:41:01:63:4a:9b:0e:b5:31:10:3d:1a:a2: 60:95:23:96:a9:7a:f3:ed:2f:cc:c1:a3:ae:bc:56:8a:f1:a0: 89:45:d9:46:b6:ce:3c:5b:52:a6:28:3f:57:df:5c:98:7d:1c: 2f:f8:b3:9c:1a:a7:d9:05:96:6d:d3:a5:00:88:27:25:ff:70: 20:c5:ea:17:66:0c:44:2b:f3:3d:6f:80:e2:65:be:72:ea:de: 32:1e:f3:bd:e6:5c:5e:5f:14:0b:ef:cb:4e:3d:ea:17:4d:82: 12:e0:2b:b9:f2:11:72:73:7b:70:10:5e:2f:a1:86:27:ed:47: cd:8f:e7:3d:08:e9:50:4f:52:6f:10:ba:19:19:3c:bf:94:d5: 3f:60:9b:fc:8a:32:1c:a1:e4:ae:53:de:50:3d:36:96:99:c8: 2c:b3:bd:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyMQ40/ddpUYRnkNbLHq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh NWU2ZmMwHhcNMjUxMjIxMTIwMDU3WhcNMjUxMjIyMTIwMDU3WjAzMTEwLwYDVQQD Eyg2MDIzOWQwZmU2OTYxOTljNGY1ZjNjYWE2YjdhMjIxNjgxOTU4ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaIOiSDdIaLmTGgF/BRXuVNPHnlC sTLMGl0Js5DB3o7if9Gf3F9SBDfvSQQzAAn/DfrXpk9w+tWF+9wZBEKj8ydHm8wV Ish9EGlgBImRU1ItU/DK4L3lxLBmNU6yKy6hBRgPYtFjmwDoVHQG3Zsk5YCIebMw h0KPMAIoA+pJbQuHauWmCNxdOku1GEDpCydux/tYGL2lofgIJF1yZQBo2VZJmzZb 0tuD8vtKW1zEhSDWzM74k29Bgg4GfLT8cb8TvaT5JL0rmhEaSnQ8QuTkUYJiM6FP 7An6j3eH8yp6IIS60DU0lgE5x3gE6MKAL/pLZN5dEJ32VUas20rJ6RHpEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAjnQ/mlhmcT188qmt6IhaBlY6hMB8GA1UdIwQY MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPZXSSR2 63JoVK65Uos8NJvvgbYecZj86znv1IYOjKtrFbQICouRMCnRdYAgyW7DJzjdEYkD aUbDyGE5LluDxSEK9Dq4PhzQ1miOL1bILdtEVoTM9kBIDg33tlZr3MucQQFjSpsO tTEQPRqiYJUjlql68+0vzMGjrrxWivGgiUXZRrbOPFtSpig/V99cmH0cL/iznBqn 2QWWbdOlAIgnJf9wIMXqF2YMRCvzPW+A4mW+cureMh7zveZcXl8UC+/LTj3qF02C EuArufIRcnN7cBBeL6GGJ+1HzY/nPQjpUE9SbxC6GRk8v5TVP2Cb/IoyHKHkrlPe UD02lpnILLO94w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:53 2025 by rpki-client