This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json) Hash identifier: C3uUpG9VlyhjaRyJHZ+joHihiAtjFLkcfQWrk9pB4eo= Subject key identifier: 7A:B2:37:AF:C3:8F:DE:0D:4B:37:0C:8B:C4:47:F9:E3:EB:AE:78:91 Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019B4738CDBF5C2EB17472B86B5557CA9834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft Manifest number: 0BA2 Signing time: Mon 22 Dec 2025 18:01:03 +0000 Manifest this update: Mon 22 Dec 2025 18:01:03 +0000 Manifest next update: Tue 23 Dec 2025 18:01:03 +0000 Files and hashes: 1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=) 2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=) 3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=) 4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=) 5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: 6TO6LCD4EF8ol55Q3dJccJrrxLheC4nYD9CCeWT7NiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:cd:bf:5c:2e:b1:74:72:b8:6b:55:57:ca:98:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Dec 22 18:01:03 2025 GMT Not After : Dec 23 18:01:03 2025 GMT Subject: CN=7ab237afc38fde0d4b370c8bc447f9e3ebae7891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:e8:52:bd:10:81:6c:f2:40:be:3a:82:bd: 7e:eb:6a:f7:49:49:f3:18:19:83:88:c1:4b:b4:47: bb:29:0f:60:e5:90:92:a1:41:7e:18:da:57:c6:d8: 72:91:34:cf:76:c7:a9:5f:de:01:96:f9:1e:5e:a1: 6b:7a:42:7b:b6:61:b3:24:a8:e1:f0:39:b6:bb:31: fe:cb:67:60:9c:f8:67:d5:09:8c:72:ac:1d:00:d0: 56:0d:90:15:f0:26:ab:73:85:1d:00:ab:10:c8:7a: e5:9b:54:ea:9e:58:4c:b2:b3:1d:11:61:90:d5:d9: 81:ea:9a:6b:43:53:97:0a:7c:a2:6a:c0:66:2d:e3: a5:ac:8a:2f:35:dc:41:fe:58:36:8b:66:77:1a:4e: 09:1a:ad:67:ea:03:02:68:0b:a9:5f:1e:78:d6:bb: 54:33:a1:74:60:54:d8:80:b8:01:dc:90:11:95:2e: 71:81:32:19:41:17:19:c8:ef:b2:94:60:17:87:ff: 0e:fd:1c:9a:38:4f:d9:cf:79:c8:e8:c0:2a:01:2c: f5:74:1e:73:c4:1d:4e:9c:f1:f0:a6:13:7e:05:cf: 09:81:81:c2:2b:f4:ec:c8:e9:73:9d:01:2b:b9:cf: 3c:2e:15:77:95:e9:6c:8f:5a:e8:78:2e:1e:16:db: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:37:AF:C3:8F:DE:0D:4B:37:0C:8B:C4:47:F9:E3:EB:AE:78:91 X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:61:96:b6:1e:7a:78:02:0b:9d:93:56:76:cc:6d:4f:07:19: fa:28:24:26:bb:51:57:49:28:a1:57:28:40:f0:45:f3:a7:f8: ad:4b:4b:cb:47:04:98:0a:ad:57:dd:c7:07:a1:6c:79:da:f7: ce:b3:fc:d7:a3:f5:2f:e5:99:7d:88:c8:bd:4c:86:e7:5e:0b: f9:4e:3c:4d:78:51:23:75:d6:0f:f0:c6:cb:95:48:5d:06:6b: 45:e5:d1:42:01:d4:a3:5f:ea:ff:87:25:95:94:df:c5:74:ac: 9f:47:17:ef:f8:41:b9:0c:1c:7a:78:6c:e2:59:70:ef:9f:5b: e4:1d:3c:31:c1:14:e0:0d:57:8d:90:fb:a9:55:ee:47:72:42: 7a:af:5b:be:30:99:d4:f2:74:6f:c4:f9:68:44:71:32:f0:ca: 2f:c8:50:7b:63:5e:5f:7e:63:09:26:9d:2c:9d:3e:2f:d8:ed: 06:7b:97:50:14:27:cf:cf:30:0b:cb:fe:d0:53:d0:da:15:4d: 26:c0:2a:08:a0:99:ad:8b:63:f6:e5:25:a5:cd:34:9b:7f:5d: 2d:83:27:14:33:49:d4:0a:f2:f4:29:9d:7d:a7:2a:ff:41:c4: aa:46:27:41:e5:98:12:1b:8c:92:2c:d2:a6:4a:37:5f:ab:8c: c3:ae:42:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOM2/XC6xdHK4a1VXypg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjUxMjIyMTgwMTAzWhcNMjUxMjIzMTgwMTAzWjAzMTEwLwYDVQQD Eyg3YWIyMzdhZmMzOGZkZTBkNGIzNzBjOGJjNDQ3ZjllM2ViYWU3ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTToUr0QgWzyQL46gr1+62r3SUnz GBmDiMFLtEe7KQ9g5ZCSoUF+GNpXxthykTTPdsepX94BlvkeXqFrekJ7tmGzJKjh 8Dm2uzH+y2dgnPhn1QmMcqwdANBWDZAV8Carc4UdAKsQyHrlm1TqnlhMsrMdEWGQ 1dmB6pprQ1OXCnyiasBmLeOlrIovNdxB/lg2i2Z3Gk4JGq1n6gMCaAupXx541rtU M6F0YFTYgLgB3JARlS5xgTIZQRcZyO+ylGAXh/8O/RyaOE/Zz3nI6MAqASz1dB5z xB1OnPHwphN+Bc8JgYHCK/TsyOlznQEruc88LhV3lelsj1roeC4eFtuyKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqyN6/Dj94NSzcMi8RH+ePrrniRMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmGWth56 eAILnZNWdsxtTwcZ+igkJrtRV0kooVcoQPBF86f4rUtLy0cEmAqtV93HB6Fsedr3 zrP816P1L+WZfYjIvUyG514L+U48TXhRI3XWD/DGy5VIXQZrReXRQgHUo1/q/4cl lZTfxXSsn0cX7/hBuQwcenhs4llw759b5B08McEU4A1XjZD7qVXuR3JCeq9bvjCZ 1PJ0b8T5aERxMvDKL8hQe2NeX35jCSadLJ0+L9jtBnuXUBQnz88wC8v+0FPQ2hVN JsAqCKCZrYtj9uUlpc00m39dLYMnFDNJ1Ary9Cmdfacq/0HEqkYnQeWYEhuMkizS pko3X6uMw65C5Q== -----END CERTIFICATE-----Generated at Mon Dec 22 22:37:18 2025 by rpki-client