This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json) Hash identifier: CQRzw7baY1oCiEm32dO84s6h1ly17L0ZDmacEm4KkYc= Subject key identifier: 6C:24:94:9D:92:D3:6B:E9:05:7B:8C:A9:8B:94:A2:E8:3C:68:30:B5 Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Certificate serial: 019B405B1CF381DF4EBFD0A32FC7515EEEB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 10:01:11 +0000 Manifest this update: Sun 21 Dec 2025 10:01:11 +0000 Manifest next update: Mon 22 Dec 2025 10:01:11 +0000 Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: Fs7mH0n6OsYjnvbxVdn7Tz8crSmpaPBPIs1RpbdecU8=) 2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=) 3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1c:f3:81:df:4e:bf:d0:a3:2f:c7:51:5e:ee:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Validity Not Before: Dec 21 10:01:11 2025 GMT Not After : Dec 22 10:01:11 2025 GMT Subject: CN=6c24949d92d36be9057b8ca98b94a2e83c6830b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:cd:df:ee:e6:f5:7b:65:46:f2:44:55:ef: ff:70:bc:96:47:67:88:68:08:b6:3c:53:62:02:1a: b1:bd:c4:09:74:d8:86:2f:90:ca:75:b7:91:d6:6e: 40:37:3e:cf:07:91:65:92:bd:46:d3:c0:e4:7f:2a: 86:53:ba:40:5a:7b:ad:3e:8a:4e:3c:41:48:a8:49: 08:52:65:66:fa:f0:c9:33:20:f5:5b:fd:07:cd:97: 10:91:93:61:76:99:27:e5:63:6d:ce:17:e7:21:80: b3:39:8d:dd:63:c5:b5:2c:2a:be:57:07:fe:54:89: 74:57:ab:19:02:f5:f3:8d:a3:22:ab:44:77:7a:f6: be:02:ea:46:83:32:ae:6d:1d:c6:f0:18:3a:fa:46: 93:04:88:66:82:b6:92:c9:39:39:2c:66:bc:17:63: 6d:c8:8e:d2:2a:4b:cb:1b:0c:66:75:64:0f:83:97: 7a:3c:23:9f:91:d0:ad:d7:6c:7f:ab:88:ee:cc:19: ab:9d:87:e4:9b:99:02:73:05:a3:0e:c2:ae:a4:76: a9:ae:7b:17:b8:64:dc:a1:22:6c:e4:f3:38:9f:b2: fa:90:a4:d8:e0:69:26:d6:05:7e:de:ae:f0:da:fb: df:25:de:bd:97:f4:da:c1:ae:a0:cc:22:b3:4e:7f: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:24:94:9D:92:D3:6B:E9:05:7B:8C:A9:8B:94:A2:E8:3C:68:30:B5 X509v3 Authority Key Identifier: keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:38:03:2d:89:70:5f:41:8e:0d:cb:72:15:60:15:d9:bc: da:a5:73:f3:9a:3e:69:4d:6b:b8:d4:8c:9f:21:6b:fe:dd:38: 7e:05:97:70:d5:4c:1b:77:54:ba:1b:98:32:bb:a0:51:8b:90: 64:e6:86:10:9f:a3:17:93:fb:4d:33:3b:96:72:a1:86:5f:3f: 6e:30:69:d1:38:e0:e9:90:97:c5:9d:62:5d:66:54:e4:b9:55: 56:5a:e6:1e:c6:58:54:3e:6d:6a:92:1e:86:b6:cf:a9:a9:2b: f3:b5:5a:65:b7:68:61:d1:3b:6a:3e:b7:93:85:76:fc:e5:0e: 50:6a:46:d9:fd:ec:29:51:62:65:ee:01:54:55:e2:f9:26:0d: f5:39:b8:b1:80:a5:db:22:40:f0:d4:a2:37:02:e1:8f:36:82: a5:f7:bf:92:2b:1c:b1:1c:6c:a8:c1:9e:5c:06:ea:65:38:fe: c1:87:34:8c:12:41:91:9c:1b:61:76:f2:02:19:dd:b4:d1:77: ff:b9:77:15:77:48:1e:43:d6:00:2b:50:73:7d:03:69:6d:3e: ad:44:1a:a3:8f:70:57:4b:41:b2:de:5a:ae:2c:ce:fa:36:a5: 30:4f:73:99:1e:2a:8b:9c:cd:bc:62:c9:53:5a:b4:98:90:5e: 81:e1:60:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxzzgd9Ov9CjL8dRXu6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw MDgyZTMwHhcNMjUxMjIxMTAwMTExWhcNMjUxMjIyMTAwMTExWjAzMTEwLwYDVQQD Eyg2YzI0OTQ5ZDkyZDM2YmU5MDU3YjhjYTk4Yjk0YTJlODNjNjgzMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdLN3+7m9XtlRvJEVe//cLyWR2eI aAi2PFNiAhqxvcQJdNiGL5DKdbeR1m5ANz7PB5Flkr1G08DkfyqGU7pAWnutPopO PEFIqEkIUmVm+vDJMyD1W/0HzZcQkZNhdpkn5WNtzhfnIYCzOY3dY8W1LCq+Vwf+ VIl0V6sZAvXzjaMiq0R3eva+AupGgzKubR3G8Bg6+kaTBIhmgraSyTk5LGa8F2Nt yI7SKkvLGwxmdWQPg5d6PCOfkdCt12x/q4juzBmrnYfkm5kCcwWjDsKupHaprnsX uGTcoSJs5PM4n7L6kKTY4Gkm1gV+3q7w2vvfJd69l/Tawa6gzCKzTn/6dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwklJ2S02vpBXuMqYuUoug8aDC1MB8GA1UdIwQY MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt MGNhZGQ4NDc0NDhiLzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf44Ay2J cF9Bjg3LchVgFdm82qVz85o+aU1ruNSMnyFr/t04fgWXcNVMG3dUuhuYMrugUYuQ ZOaGEJ+jF5P7TTM7lnKhhl8/bjBp0Tjg6ZCXxZ1iXWZU5LlVVlrmHsZYVD5tapIe hrbPqakr87VaZbdoYdE7aj63k4V2/OUOUGpG2f3sKVFiZe4BVFXi+SYN9Tm4sYCl 2yJA8NSiNwLhjzaCpfe/kiscsRxsqMGeXAbqZTj+wYc0jBJBkZwbYXbyAhndtNF3 /7l3FXdIHkPWACtQc30DaW0+rUQao49wV0tBst5arizO+jalME9zmR4qi5zNvGLJ U1q0mJBegeFgyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:25:06 2025 by rpki-client