This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json) Hash identifier: XEjbF9vzBkDaobUdyXWIRcKCNTsTiecB3H4sW8POcXI= Subject key identifier: 07:5D:5B:F7:BB:AD:BB:C9:B0:F7:E2:65:CB:CF:1C:3E:A4:4A:8E:D1 Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Certificate serial: 019B0F3761FB4E0B808711A92F5204B5C6B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft Manifest number: 0249 Signing time: Thu 11 Dec 2025 21:00:46 +0000 Manifest this update: Thu 11 Dec 2025 21:00:46 +0000 Manifest next update: Fri 12 Dec 2025 21:00:46 +0000 Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=) 2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: 77GmNc3l3Qnj7zFd/yjikEYbKXSyaXHmm1ANc82q1Mo=) 3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:61:fb:4e:0b:80:87:11:a9:2f:52:04:b5:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6 Validity Not Before: Dec 11 21:00:46 2025 GMT Not After : Dec 12 21:00:46 2025 GMT Subject: CN=075d5bf7bbadbbc9b0f7e265cbcf1c3ea44a8ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:1f:75:be:e3:95:3e:25:8b:ea:53:f5:7e: f1:9a:6d:ae:3d:6c:92:af:77:63:d8:9b:45:17:05: 01:33:a4:11:ee:41:78:9e:53:0e:5d:fb:11:57:88: 69:ce:ed:4e:04:d2:50:b6:c7:59:86:12:97:aa:89: b6:84:8c:37:c3:93:43:8e:4f:4d:65:bb:3b:cf:7e: b4:fa:03:54:64:20:18:48:db:b3:d2:48:3f:9c:be: e0:08:6d:f9:44:eb:b4:22:a2:7e:6c:d8:66:34:4f: ad:17:82:88:bf:f4:31:a4:8d:90:a8:2f:bd:62:24: c3:d2:df:5a:e9:79:92:8f:44:bb:db:97:61:ab:da: a0:68:79:13:0a:0a:3c:b0:b6:5d:a0:10:15:49:42: 8e:2f:ee:86:be:44:e4:04:88:de:2c:1b:4f:f1:6b: 09:1f:f2:33:70:a4:80:77:10:f7:d2:8a:84:e8:f6: fe:ca:38:2d:1a:a0:d7:58:27:b9:e6:b7:dc:85:a7: 3a:19:2c:85:d1:6d:96:77:0d:28:0d:e8:75:69:e5: da:02:83:13:5a:80:b5:32:23:d3:a3:29:b0:30:a4: 33:4c:30:da:1e:f0:a4:1f:83:86:05:e2:fb:3a:65: 91:46:0c:77:36:f5:4b:93:59:dd:da:87:3d:5d:4c: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5D:5B:F7:BB:AD:BB:C9:B0:F7:E2:65:CB:CF:1C:3E:A4:4A:8E:D1 X509v3 Authority Key Identifier: keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:96:2c:32:98:3b:f6:28:19:2b:c8:a9:39:e7:f6:b6:6a:13: 96:7d:06:da:5f:97:af:b8:20:a3:b8:b8:a9:a3:5d:2b:6b:4d: d1:47:94:e2:3f:81:f1:31:a7:2c:8f:48:40:19:db:7a:68:3a: 42:82:97:71:02:e6:3d:ea:15:f0:72:a6:6c:43:d2:27:25:c2: c1:5e:e0:53:24:44:e7:98:db:16:66:ad:26:c6:27:ff:08:7f: 44:9f:61:ee:45:c1:6e:5f:92:02:01:c4:13:4f:49:1a:95:94: da:a1:da:ee:0f:05:51:1f:74:9a:44:63:cb:65:30:65:c6:eb: 1e:89:cd:e6:4b:aa:08:3f:76:65:eb:90:11:b0:1e:2b:b6:2d: 61:f4:6a:8a:72:08:88:4a:95:ea:55:32:bc:ce:a3:f0:12:fb: 0f:e5:b7:69:49:26:eb:ec:c1:81:bc:c8:fd:45:9f:29:c0:0f: b9:18:b9:e2:eb:16:5a:27:c0:0b:f0:c4:bd:2a:4a:9a:06:a2: c1:1a:7b:83:d6:e9:25:ac:6f:68:0d:e5:aa:26:d4:2f:6b:d5: 41:9a:2c:ea:97:96:1c:6d:af:7e:cc:e0:7c:d4:01:5b:35:b5: a0:ee:04:53:a3:10:b6:95:9b:93:29:ae:1f:53:87:4d:3a:0a: 5d:87:19:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2H7TguAhxGpL1IEtca1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1 NjkzYzYwHhcNMjUxMjExMjEwMDQ2WhcNMjUxMjEyMjEwMDQ2WjAzMTEwLwYDVQQD EygwNzVkNWJmN2JiYWRiYmM5YjBmN2UyNjVjYmNmMWMzZWE0NGE4ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMkfdb7jlT4li+pT9X7xmm2uPWyS r3dj2JtFFwUBM6QR7kF4nlMOXfsRV4hpzu1OBNJQtsdZhhKXqom2hIw3w5NDjk9N Zbs7z360+gNUZCAYSNuz0kg/nL7gCG35ROu0IqJ+bNhmNE+tF4KIv/QxpI2QqC+9 YiTD0t9a6XmSj0S725dhq9qgaHkTCgo8sLZdoBAVSUKOL+6GvkTkBIjeLBtP8WsJ H/IzcKSAdxD30oqE6Pb+yjgtGqDXWCe55rfchac6GSyF0W2Wdw0oDeh1aeXaAoMT WoC1MiPToymwMKQzTDDaHvCkH4OGBeL7OmWRRgx3NvVLk1nd2oc9XUwEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAddW/e7rbvJsPfiZcvPHD6kSo7RMB8GA1UdIwQY MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZYsMpg7 9igZK8ipOef2tmoTln0G2l+Xr7ggo7i4qaNdK2tN0UeU4j+B8TGnLI9IQBnbemg6 QoKXcQLmPeoV8HKmbEPSJyXCwV7gUyRE55jbFmatJsYn/wh/RJ9h7kXBbl+SAgHE E09JGpWU2qHa7g8FUR90mkRjy2UwZcbrHonN5kuqCD92ZeuQEbAeK7YtYfRqinII iEqV6lUyvM6j8BL7D+W3aUkm6+zBgbzI/UWfKcAPuRi54usWWifAC/DEvSpKmgai wRp7g9bpJaxvaA3lqibUL2vVQZos6peWHG2vfszgfNQBWzW1oO4EU6MQtpWbkymu H1OHTToKXYcZDg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:52 2025 by rpki-client