This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json) Hash identifier: aDq1P/e+u2UYjpewPDt3g/6X8ExJDkE9A/WitvZZmAI= Subject key identifier: C7:22:95:3F:BE:83:CB:89:21:B2:E2:31:C1:4E:B9:E2:78:CE:A5:39 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019B28BFFE1E60C9FBC063EE314BF043F16E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft Manifest number: 0B5C Signing time: Tue 16 Dec 2025 20:00:29 +0000 Manifest this update: Tue 16 Dec 2025 20:00:29 +0000 Manifest next update: Wed 17 Dec 2025 20:00:29 +0000 Files and hashes: 1: 5zZrYH8O7nis-dqO-PSgPArwkbc.roa (hash: NdSLJTn0jtPND2RXMSjaEnJSSngo79NubRaezRYDprc=) 2: bREOai8G8_NHNyW5egygHYlKbVo.roa (hash: izOgPPSjI/SOnSj8uGxO2DGjcElibyhDV4NBvODzxHc=) 3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=) 4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: g6lw2hrL/arvwvkMm2Gz5VuXRWpai9Cc6uFT8MKBxLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:bf:fe:1e:60:c9:fb:c0:63:ee:31:4b:f0:43:f1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Dec 16 20:00:29 2025 GMT Not After : Dec 17 20:00:29 2025 GMT Subject: CN=c722953fbe83cb8921b2e231c14eb9e278cea539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:32:b1:4e:83:e5:59:f5:49:18:29:47:12: 54:c2:47:9e:a4:b1:d8:e4:ce:49:7a:90:00:97:e9: 33:72:04:eb:54:6b:c5:be:87:69:bb:bc:b5:60:8f: b4:74:74:da:7c:11:b1:de:56:b4:bb:b8:8b:78:05: 69:5d:0b:d1:ba:b2:c9:ec:54:61:22:e3:0f:c8:df: 13:48:82:c5:41:f0:d3:ba:55:a0:69:64:65:a3:7c: fe:e6:a3:d6:18:9e:5d:66:24:51:64:4c:a9:06:a3: 26:f5:8f:e2:b6:0a:29:01:4e:7d:01:0d:d6:74:51: e6:01:32:eb:93:11:1a:8e:a4:22:6c:ac:4e:c1:62: 9c:82:14:0a:0c:5f:88:75:28:23:ea:9a:45:03:bd: 8e:0e:8e:3e:8c:57:82:74:48:8e:dd:86:f4:a6:ea: de:7c:6b:c5:aa:91:e3:39:d7:84:87:e2:8d:69:a0: be:04:d3:85:22:ae:8e:2a:28:b6:df:47:f4:48:e5: 19:50:38:5d:c5:51:09:1a:3d:4e:0b:1d:86:3a:31: 7e:16:4b:1d:a9:48:7a:3a:92:ca:af:0e:5c:db:88: 57:20:e7:84:d0:09:f4:c0:d7:0f:89:bc:b1:1d:f1: 37:9f:ce:a9:5a:09:a5:ba:ef:76:fb:83:e0:90:59: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:95:3F:BE:83:CB:89:21:B2:E2:31:C1:4E:B9:E2:78:CE:A5:39 X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fc:fc:05:24:9e:ec:bd:f9:80:39:58:81:cc:c7:e4:02:4f: 59:c3:c4:25:1a:bc:4f:36:1f:7a:c6:4e:c7:3a:0a:31:b1:27: 2a:e5:66:b5:10:77:d2:87:84:d0:28:af:25:e0:d9:7c:ee:93: 10:18:3a:b0:b1:ed:84:f5:4d:32:a6:40:91:0a:22:ad:84:a7: 3d:ff:2d:5f:fc:7a:0d:c1:04:32:3b:f5:db:98:eb:b7:90:8d: b7:65:2b:56:e1:a9:27:a4:e1:4a:8f:55:a4:12:29:ca:7f:0e: 93:cb:15:0e:11:5a:c9:ae:22:d2:f6:b9:46:d2:1c:a3:55:69: 01:79:98:1c:22:6d:6f:01:db:2e:07:8a:55:40:ac:51:d0:97: 6e:f8:b4:70:a3:91:0a:c4:69:51:6b:39:86:b3:f5:b8:21:41: ef:4b:0f:b1:b2:ea:59:db:a1:25:73:7a:ca:47:d8:ce:f2:f7: 0e:bd:ae:c6:ab:56:da:78:f3:c2:89:76:09:5d:bd:2b:a7:9d: f0:8a:59:e9:dd:02:ee:85:90:bc:17:9f:b7:80:2e:c0:96:9d: aa:d8:3e:83:a2:60:22:7e:db:44:8e:f4:22:d5:76:88:4d:33: 57:0a:6f:df:be:28:f5:a4:42:15:e3:38:18:34:f3:9e:60:73: 2a:b8:29:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsov/4eYMn7wGPuMUvwQ/FuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjUxMjE2MjAwMDI5WhcNMjUxMjE3MjAwMDI5WjAzMTEwLwYDVQQD EyhjNzIyOTUzZmJlODNjYjg5MjFiMmUyMzFjMTRlYjllMjc4Y2VhNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiYysU6D5Vn1SRgpRxJUwkeepLHY 5M5JepAAl+kzcgTrVGvFvodpu7y1YI+0dHTafBGx3la0u7iLeAVpXQvRurLJ7FRh IuMPyN8TSILFQfDTulWgaWRlo3z+5qPWGJ5dZiRRZEypBqMm9Y/itgopAU59AQ3W dFHmATLrkxEajqQibKxOwWKcghQKDF+IdSgj6ppFA72ODo4+jFeCdEiO3Yb0pure fGvFqpHjOdeEh+KNaaC+BNOFIq6OKii230f0SOUZUDhdxVEJGj1OCx2GOjF+Fksd qUh6OpLKrw5c24hXIOeE0An0wNcPibyxHfE3n86pWgmluu92+4PgkFlgVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcilT++g8uJIbLiMcFOueJ4zqU5MB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfz8BSSe 7L35gDlYgczH5AJPWcPEJRq8TzYfesZOxzoKMbEnKuVmtRB30oeE0CivJeDZfO6T EBg6sLHthPVNMqZAkQoirYSnPf8tX/x6DcEEMjv125jrt5CNt2UrVuGpJ6ThSo9V pBIpyn8Ok8sVDhFaya4i0va5RtIco1VpAXmYHCJtbwHbLgeKVUCsUdCXbvi0cKOR CsRpUWs5hrP1uCFB70sPsbLqWduhJXN6ykfYzvL3Dr2uxqtW2njzwol2CV29K6ed 8IpZ6d0C7oWQvBeft4AuwJadqtg+g6JgIn7bRI70ItV2iE0zVwpv374o9aRCFeM4 GDTznmBzKrgpPw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:33:42 2025 by rpki-client