This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json) Hash identifier: z+np10CPuDxR40eStkgoZ5/1CGhIeGIS5qACDk+GWzM= Subject key identifier: 70:C6:C2:61:D3:7F:E9:CA:3C:FD:E2:1B:E3:2E:2A:B6:89:14:E9:3D Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Certificate serial: 019B4B8341C356889E6678B33A59E09BF986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft Manifest number: 122A Signing time: Tue 23 Dec 2025 14:00:51 +0000 Manifest this update: Tue 23 Dec 2025 14:00:51 +0000 Manifest next update: Wed 24 Dec 2025 14:00:51 +0000 Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=) 2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: jeyC5dn9aQ0aSipejjI3+tRKTX3V4Il3DGwGYTm8QnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:41:c3:56:88:9e:66:78:b3:3a:59:e0:9b:f9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Validity Not Before: Dec 23 14:00:51 2025 GMT Not After : Dec 24 14:00:51 2025 GMT Subject: CN=70c6c261d37fe9ca3cfde21be32e2ab68914e93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:ba:2d:7e:b1:66:ff:74:0f:27:21:bd:64: 24:16:83:ac:aa:9c:6d:f0:8d:80:c4:f0:5d:ce:95: fa:e3:63:f2:41:46:5a:a1:39:cf:26:ed:71:87:cf: 47:c8:c4:6f:92:20:90:8e:11:7c:b0:bb:56:c9:90: 26:20:f5:e5:7f:05:e0:e9:7d:d3:4a:04:8b:bd:2d: ba:a4:1d:11:39:9c:37:e9:4a:45:6c:4e:58:e3:a9: d8:75:94:7b:77:05:7d:6e:f9:82:b4:17:9e:67:d3: 46:7d:e9:4b:69:dd:3b:45:e4:40:20:e6:c3:73:ae: df:79:8d:83:9c:6f:22:f1:9b:1c:76:b4:ca:f9:64: 0c:fb:b2:97:e2:55:dd:9b:fa:00:59:9b:68:ec:ef: 0a:f8:f5:39:7d:75:cc:92:b9:99:ef:27:d1:bc:b4: 0a:b0:a1:31:9b:28:87:89:f8:66:09:9f:f3:ce:99: 81:f4:8f:d1:d2:4f:95:a4:fc:b9:59:40:d2:32:ac: f9:13:4b:17:54:90:3c:e1:b4:57:0f:a7:93:44:e8: 87:1b:43:ac:2b:1d:37:61:cd:74:44:44:31:bb:df: bf:23:f1:79:1d:64:11:78:a3:fc:26:2a:c6:c5:97: 0d:bf:73:6a:ad:66:5e:ab:ec:15:85:b4:84:91:04: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:C2:61:D3:7F:E9:CA:3C:FD:E2:1B:E3:2E:2A:B6:89:14:E9:3D X509v3 Authority Key Identifier: keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:af:70:cb:3c:78:83:28:a5:27:dc:c6:18:e8:30:1f:5c: 58:44:67:e8:67:f4:b6:a9:44:a9:f9:3a:8a:d1:f6:dd:45:1e: 2a:23:07:12:c5:d0:67:ae:47:89:3a:d0:87:3c:0a:35:4e:e5: 10:78:1c:c4:6a:46:42:6a:89:eb:36:a7:5b:7d:c3:52:ca:e8: ae:d0:15:ff:1e:19:22:3a:66:37:45:86:62:5c:ed:c9:3d:ca: 03:8d:b5:ae:1e:7b:9c:ca:08:62:7e:98:76:0a:66:04:95:a1: f3:4d:f1:bd:d2:9c:93:65:41:32:1f:fc:60:9c:e4:ee:8d:59: df:ac:64:b6:83:4f:73:d1:f1:57:a0:25:fb:c4:25:fa:9f:dd: 88:e8:f5:53:e5:e5:34:85:bd:2d:70:75:4e:7e:4a:dd:0a:8a: 44:9c:09:0d:67:f3:9b:df:b7:1b:48:58:dd:04:5c:39:0e:6f: 93:ba:0f:90:69:7c:d7:06:73:07:2b:d0:c6:82:eb:c3:c6:64: fd:50:d6:8c:7f:c1:01:a2:dd:05:3c:0c:07:ad:8e:8c:7e:82: 2d:3b:1d:91:14:43:6a:3a:85:e3:8d:f8:c0:0b:4a:d1:69:8a: 9d:36:a8:46:fe:ff:10:28:1d:3d:a6:d4:b8:89:90:f5:c8:2d: 87:f6:be:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg0HDVoieZnizOlngm/mGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl MmU2MjgwHhcNMjUxMjIzMTQwMDUxWhcNMjUxMjI0MTQwMDUxWjAzMTEwLwYDVQQD Eyg3MGM2YzI2MWQzN2ZlOWNhM2NmZGUyMWJlMzJlMmFiNjg5MTRlOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCy6LX6xZv90DychvWQkFoOsqpxt 8I2AxPBdzpX642PyQUZaoTnPJu1xh89HyMRvkiCQjhF8sLtWyZAmIPXlfwXg6X3T SgSLvS26pB0ROZw36UpFbE5Y46nYdZR7dwV9bvmCtBeeZ9NGfelLad07ReRAIObD c67feY2DnG8i8ZscdrTK+WQM+7KX4lXdm/oAWZto7O8K+PU5fXXMkrmZ7yfRvLQK sKExmyiHifhmCZ/zzpmB9I/R0k+VpPy5WUDSMqz5E0sXVJA84bRXD6eTROiHG0Os Kx03Yc10REQxu9+/I/F5HWQReKP8JirGxZcNv3NqrWZeq+wVhbSEkQSP9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDGwmHTf+nKPP3iG+MuKraJFOk9MB8GA1UdIwQY MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt ODZkMTk0YWU4YTcxLzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakuvcMs8 eIMopSfcxhjoMB9cWERn6Gf0tqlEqfk6itH23UUeKiMHEsXQZ65HiTrQhzwKNU7l EHgcxGpGQmqJ6zanW33DUsrortAV/x4ZIjpmN0WGYlztyT3KA421rh57nMoIYn6Y dgpmBJWh803xvdKck2VBMh/8YJzk7o1Z36xktoNPc9HxV6Al+8Ql+p/diOj1U+Xl NIW9LXB1Tn5K3QqKRJwJDWfzm9+3G0hY3QRcOQ5vk7oPkGl81wZzByvQxoLrw8Zk /VDWjH/BAaLdBTwMB62OjH6CLTsdkRRDajqF4434wAtK0WmKnTaoRv7/ECgdPabU uImQ9cgth/a+1A== -----END CERTIFICATE-----Generated at Tue Dec 23 16:31:56 2025 by rpki-client