This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json) Hash identifier: 7CBfjAMYegPtGV3psjQDTBa5OBfZJXJieB2X9VfJ5IY= Subject key identifier: E8:59:75:8B:5A:7F:E6:83:79:63:E1:16:1D:C3:26:CC:1C:6C:53:F7 Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Certificate serial: 019B05FD14CB352D2221ED3F1D92A0AB1533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft Manifest number: 093F Signing time: Wed 10 Dec 2025 02:00:30 +0000 Manifest this update: Wed 10 Dec 2025 02:00:30 +0000 Manifest next update: Thu 11 Dec 2025 02:00:30 +0000 Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: qiU3Ra2npBGTGQ/WxJlJL8jGUPqIelgDy3WNrG7neRA=) 2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:fd:14:cb:35:2d:22:21:ed:3f:1d:92:a0:ab:15:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Validity Not Before: Dec 10 02:00:30 2025 GMT Not After : Dec 11 02:00:30 2025 GMT Subject: CN=e859758b5a7fe6837963e1161dc326cc1c6c53f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:20:2b:e8:14:f4:b7:93:f4:a3:db:b4:98: 12:57:c3:17:b4:f0:81:12:96:58:1f:93:96:29:9a: e9:fb:ce:2a:a3:6d:dd:08:61:18:d2:bc:e3:6d:7b: 2e:28:91:f3:f5:c8:88:04:c6:27:b3:e8:50:67:03: af:9a:5d:69:9f:39:af:b8:fd:85:0a:c0:81:21:9d: 3e:06:0b:a6:62:d4:7f:29:24:12:8e:0d:25:80:cf: c9:06:fc:7e:35:4c:b8:bb:b0:0f:b2:a9:5b:11:12: ed:f8:e4:1b:33:eb:8f:61:ee:ab:d3:2c:27:7b:76: d6:4e:56:6a:22:01:66:3b:8e:ea:89:54:eb:de:dd: 8a:ad:6f:28:5c:60:da:35:c0:ca:55:47:8b:ed:1e: 5b:4f:77:4a:5c:0a:be:1e:f7:69:e1:79:93:10:3e: 6a:99:9b:11:82:46:00:ae:39:a4:ad:9c:fc:b4:c4: 55:e9:a8:4f:3d:8d:85:2c:d7:a8:dc:95:29:07:59: b1:3a:1e:de:4c:a6:e7:36:19:0d:84:63:f1:66:7d: 47:11:47:fc:cd:42:2d:96:1f:dd:d9:a0:10:15:d5: fa:a4:f4:f3:11:0e:a4:de:0c:f7:9b:4b:82:17:05: cd:10:5e:a2:d7:45:b4:f5:d0:f3:41:e0:8f:0b:f7: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:75:8B:5A:7F:E6:83:79:63:E1:16:1D:C3:26:CC:1C:6C:53:F7 X509v3 Authority Key Identifier: keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2f:2e:b2:a0:a3:c9:29:90:af:2b:41:70:10:de:88:26:94: 7b:30:88:81:b8:73:dc:c5:df:c3:38:cd:22:c3:a5:12:a3:00: dc:1a:4e:50:e7:02:8d:3e:87:46:4d:96:22:b2:a5:db:3e:ea: 38:2d:89:8c:82:63:d7:f4:c2:ad:8f:6d:a3:70:f4:2c:90:c4: fb:ed:0a:79:4c:1a:1c:79:c2:18:9a:d6:4d:a2:dd:d0:1f:31: fa:fb:20:fa:02:48:3f:ea:fe:8b:7d:a4:12:fd:b3:45:9d:62: fa:eb:04:9d:1d:8a:08:18:c9:0c:3e:5c:59:78:b1:55:c5:1a: 7e:55:4b:3b:44:ed:5e:19:59:2f:10:1c:98:f9:58:71:10:0c: 00:cb:c1:27:54:ca:88:f4:e3:6c:03:49:a5:f6:5f:b0:1c:bd: 4e:c6:3a:32:d0:b0:b5:40:23:54:5c:65:ca:83:30:96:ed:08: de:cc:15:58:8d:2d:98:29:65:c8:23:90:8b:f9:91:e9:4a:27: 24:45:fc:04:34:34:5d:ac:f1:2a:11:61:78:dd:82:8c:87:92: e1:fa:ec:f9:9b:61:4d:b2:69:a0:9a:b9:09:4c:e9:ba:08:dc: 3c:23:59:d7:ff:09:55:13:3d:8e:4c:bf:98:7a:b9:e9:a6:ea: a1:5e:90:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsF/RTLNS0iIe0/HZKgqxUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0 NGJmNDQwHhcNMjUxMjEwMDIwMDMwWhcNMjUxMjExMDIwMDMwWjAzMTEwLwYDVQQD EyhlODU5NzU4YjVhN2ZlNjgzNzk2M2UxMTYxZGMzMjZjYzFjNmM1M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOIgK+gU9LeT9KPbtJgSV8MXtPCB EpZYH5OWKZrp+84qo23dCGEY0rzjbXsuKJHz9ciIBMYns+hQZwOvml1pnzmvuP2F CsCBIZ0+BgumYtR/KSQSjg0lgM/JBvx+NUy4u7APsqlbERLt+OQbM+uPYe6r0ywn e3bWTlZqIgFmO47qiVTr3t2KrW8oXGDaNcDKVUeL7R5bT3dKXAq+Hvdp4XmTED5q mZsRgkYArjmkrZz8tMRV6ahPPY2FLNeo3JUpB1mxOh7eTKbnNhkNhGPxZn1HEUf8 zUItlh/d2aAQFdX6pPTzEQ6k3gz3m0uCFwXNEF6i10W09dDzQeCPC/cDgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhZdYtaf+aDeWPhFh3DJswcbFP3MB8GA1UdIwQY MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2 LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy8usqCj ySmQrytBcBDeiCaUezCIgbhz3MXfwzjNIsOlEqMA3BpOUOcCjT6HRk2WIrKl2z7q OC2JjIJj1/TCrY9to3D0LJDE++0KeUwaHHnCGJrWTaLd0B8x+vsg+gJIP+r+i32k Ev2zRZ1i+usEnR2KCBjJDD5cWXixVcUaflVLO0TtXhlZLxAcmPlYcRAMAMvBJ1TK iPTjbANJpfZfsBy9TsY6MtCwtUAjVFxlyoMwlu0I3swVWI0tmCllyCOQi/mR6Uon JEX8BDQ0XazxKhFheN2CjIeS4frs+ZthTbJpoJq5CUzpugjcPCNZ1/8JVRM9jky/ mHq56abqoV6Q6Q== -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:41 2025 by rpki-client