This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json) Hash identifier: r/xJ1+emUIxADPJJ69XuY74TRo0tUaVVULr2mBZCGmo= Subject key identifier: 50:B7:E5:CB:A4:DD:2E:14:E1:2C:ED:0C:B0:2D:D6:11:C3:F7:4B:3E Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019B0D49310D7C214D9FB8E0C7FC762C928C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft Manifest number: 0B84 Signing time: Thu 11 Dec 2025 12:00:59 +0000 Manifest this update: Thu 11 Dec 2025 12:00:59 +0000 Manifest next update: Fri 12 Dec 2025 12:00:59 +0000 Files and hashes: 1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=) 2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=) 3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=) 4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=) 5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: b0BcfajTOQf07V095ax5vfSmEUeoCdR3WbHUmSIirro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:31:0d:7c:21:4d:9f:b8:e0:c7:fc:76:2c:92:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Dec 11 12:00:59 2025 GMT Not After : Dec 12 12:00:59 2025 GMT Subject: CN=50b7e5cba4dd2e14e12ced0cb02dd611c3f74b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:58:65:96:68:50:6f:84:55:69:a9:71:2a: 7d:32:b8:a5:ed:0e:fa:d0:31:1c:a5:bd:02:bc:f6: 54:8e:4a:d4:44:fb:97:aa:7f:0d:80:37:a0:a3:64: ff:c0:c1:0e:ed:45:87:15:b1:27:70:60:4f:ea:af: 89:80:ee:85:f8:c0:f4:4b:11:c6:12:ad:1d:2b:11: 58:1d:e0:74:49:0b:4b:18:6d:ce:68:e3:50:67:4f: db:50:21:7d:cc:b6:d1:eb:7a:e3:f0:ee:32:8c:34: 7f:c1:05:c0:e1:1f:8c:9d:58:a4:78:19:76:0b:c1: b7:88:9f:80:9f:42:d7:7f:ef:ce:11:d8:fe:7d:37: a2:22:37:e6:74:68:69:a4:36:ee:23:58:58:d0:36: d4:4a:2a:cc:b3:6f:24:e8:6e:b0:3f:a6:97:4a:3e: 60:71:70:8a:19:c0:81:51:bb:33:dc:79:66:52:d1: a4:8b:28:e7:09:71:38:b6:5e:ff:0a:ab:08:20:ff: 06:c1:05:66:78:f4:38:17:04:75:25:a8:d8:d9:c1: 47:14:58:e2:a1:f1:e0:9d:ad:41:9e:48:f9:3e:8f: 36:00:e6:90:3f:f4:e7:d1:67:b9:0d:b6:91:5e:a2: d6:18:d6:cf:91:65:d0:a0:9b:97:24:22:1e:88:47: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:E5:CB:A4:DD:2E:14:E1:2C:ED:0C:B0:2D:D6:11:C3:F7:4B:3E X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1f:07:d7:c7:e4:c9:5c:08:7a:af:99:17:79:35:72:78:32: 07:92:ae:ec:70:d1:4c:ba:c9:5e:9e:fb:5e:48:42:a9:42:13: a6:38:50:84:96:da:ba:b5:11:cb:12:09:b7:91:79:f2:fb:e3: 8e:6b:c7:4e:54:e5:d0:71:14:5f:08:a4:06:37:65:49:a9:47: 93:e3:7e:27:1e:8b:27:ab:8b:2a:b5:dd:0e:bd:db:ed:1d:b8: 64:25:11:73:59:66:7c:73:3a:56:e5:e7:4e:c0:ef:6d:a4:87: 79:a4:25:38:73:b6:3d:76:00:4f:4b:15:e2:01:49:f9:b0:06: 6d:29:ef:98:e5:0b:df:35:06:07:2b:1d:1b:77:42:77:a2:de: b0:8d:cc:fe:1e:a1:d3:d5:a7:ab:c9:53:94:c3:36:87:6e:21: 9e:a9:0b:e7:f5:42:8b:5c:60:99:01:3f:ba:89:6c:79:ed:03: 9f:db:0a:66:fe:3a:f2:68:dd:9c:27:23:df:d6:d9:34:58:5d: da:e1:13:99:de:07:d2:d2:4d:c6:91:cb:ba:5d:31:dc:d2:94: bd:2d:76:c9:d0:ad:cc:b0:a7:86:4d:5d:c9:47:9f:fa:94:a0: 2a:01:25:99:4b:17:70:7e:8a:4d:79:a9:de:ff:5b:44:45:b2: 2e:44:79:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSTENfCFNn7jgx/x2LJKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjUxMjExMTIwMDU5WhcNMjUxMjEyMTIwMDU5WjAzMTEwLwYDVQQD Eyg1MGI3ZTVjYmE0ZGQyZTE0ZTEyY2VkMGNiMDJkZDYxMWMzZjc0YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUFYZZZoUG+EVWmpcSp9Mril7Q76 0DEcpb0CvPZUjkrURPuXqn8NgDego2T/wMEO7UWHFbEncGBP6q+JgO6F+MD0SxHG Eq0dKxFYHeB0SQtLGG3OaONQZ0/bUCF9zLbR63rj8O4yjDR/wQXA4R+MnVikeBl2 C8G3iJ+An0LXf+/OEdj+fTeiIjfmdGhppDbuI1hY0DbUSirMs28k6G6wP6aXSj5g cXCKGcCBUbsz3HlmUtGkiyjnCXE4tl7/CqsIIP8GwQVmePQ4FwR1JajY2cFHFFji ofHgna1Bnkj5Po82AOaQP/Tn0We5DbaRXqLWGNbPkWXQoJuXJCIeiEcvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC35cuk3S4U4SztDLAt1hHD90s+MB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB8H18fk yVwIeq+ZF3k1cngyB5Ku7HDRTLrJXp77XkhCqUITpjhQhJbaurURyxIJt5F58vvj jmvHTlTl0HEUXwikBjdlSalHk+N+Jx6LJ6uLKrXdDr3b7R24ZCURc1lmfHM6VuXn TsDvbaSHeaQlOHO2PXYAT0sV4gFJ+bAGbSnvmOUL3zUGBysdG3dCd6LesI3M/h6h 09Wnq8lTlMM2h24hnqkL5/VCi1xgmQE/uolsee0Dn9sKZv468mjdnCcj39bZNFhd 2uETmd4H0tJNxpHLul0x3NKUvS12ydCtzLCnhk1dyUef+pSgKgElmUsXcH6KTXmp 3v9bREWyLkR5Gg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:41:44 2025 by rpki-client