This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json) Hash identifier: 5UUP+jm7zLPPC6zkMyOOD05LZutPQoP0KoJouVuvWQg= Subject key identifier: D5:36:86:ED:6E:CE:74:43:58:46:9F:76:28:CB:19:A6:26:EC:44:36 Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88 Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188 Certificate serial: 019B59ACE3CF1E9D084C4F0E28BC6037D0C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 08:01:01 +0000 Manifest this update: Fri 26 Dec 2025 08:01:01 +0000 Manifest next update: Sat 27 Dec 2025 08:01:01 +0000 Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=) 2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: h/EBbad8N4UK6C1G2V4Nj+hHlaGGyuW/vZmbiFbdLoE=) 3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e3:cf:1e:9d:08:4c:4f:0e:28:bc:60:37:d0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188 Validity Not Before: Dec 26 08:01:01 2025 GMT Not After : Dec 27 08:01:01 2025 GMT Subject: CN=d53686ed6ece744358469f7628cb19a626ec4436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:01:91:ce:6a:bf:db:36:8b:d3:bf:4f:b0: f9:0d:33:aa:08:7b:a4:c1:bf:b9:57:40:80:67:17: 2c:b3:58:4b:ba:d7:b1:87:cb:07:0a:bc:d8:15:9a: 88:80:50:0c:14:10:97:19:b0:f5:4b:85:ea:54:49: 70:c1:af:5f:f2:c0:54:c6:a0:51:e7:58:68:39:9f: 59:b2:ed:f9:02:87:f2:c2:8c:e4:ca:7d:30:3b:a3: 16:ee:c2:a8:c8:ff:d5:21:20:72:74:1a:08:d6:51: 0a:4d:b8:0d:8b:e2:04:71:c6:f8:ec:1e:f2:24:5e: 9d:90:18:94:39:1c:33:b0:4f:ef:58:b3:55:72:d4: 88:a1:70:47:32:5d:76:08:b9:18:1a:93:56:fc:c6: b5:1d:19:b9:8a:9b:61:1d:8a:95:35:b3:76:28:3d: 28:32:0b:89:8a:a5:af:01:fd:90:e9:f7:4a:0d:d4: f4:3d:d2:8f:8e:f2:13:b0:5d:23:87:0e:51:5f:44: f3:a8:6a:6f:ef:e5:9c:fb:c8:17:97:4e:81:0d:63: 03:aa:9f:cc:c1:ea:18:9d:35:c2:01:6b:26:ee:7e: a9:aa:26:81:2d:ce:0a:00:d7:bc:f7:4a:2d:77:d3: 4d:cb:01:7e:f1:d6:ca:26:df:d7:87:28:19:c3:a4: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:36:86:ED:6E:CE:74:43:58:46:9F:76:28:CB:19:A6:26:EC:44:36 X509v3 Authority Key Identifier: keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c2:09:0e:19:eb:92:24:06:32:63:12:47:22:65:57:b1:d6: cb:d4:bf:39:4b:ef:89:49:74:ce:26:e6:42:12:53:03:39:2b: ca:2f:d7:71:55:fc:47:5d:65:6b:fe:18:7e:41:39:8a:0b:89: 4c:e1:f1:c2:48:71:de:e3:45:bf:4d:d3:f5:d5:f9:90:02:f0: b2:7e:95:ee:5e:36:2d:16:e4:1a:ae:87:a8:0e:a4:49:0a:cd: 32:ae:2f:4b:34:3e:35:5c:57:fe:9a:e1:0e:5e:8f:51:ef:cd: 60:30:15:74:5a:f3:74:f7:de:42:5a:9c:9e:62:77:2a:95:34: aa:6b:fb:2e:37:c2:03:49:11:48:a0:07:78:80:3f:24:51:98: 90:bd:9f:0b:f6:f7:87:0b:e5:0f:d7:42:da:96:7b:a5:d4:72: ee:3e:ba:8e:0c:5b:84:7c:e8:ad:10:44:b4:a5:12:2f:f3:51: a1:25:ee:35:03:df:86:1e:8d:3a:89:43:bb:30:a9:c2:14:bf: d0:dc:d6:1d:a7:95:0d:3c:20:6a:6b:88:9c:3e:e1:2e:6b:27: 71:9f:a6:15:36:ca:3e:f2:a7:f7:49:02:01:42:52:76:cc:60: b8:80:ea:21:72:a9:13:25:aa:bd:7a:fe:1d:e3:9f:6f:39:05: 6d:33:1d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOPPHp0ITE8OKLxgN9DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODY0ZWRmYTQxMmQ3N2EwM2NiZjU5MTMxZTNmY2MwM2E2 MGUxODgwHhcNMjUxMjI2MDgwMTAxWhcNMjUxMjI3MDgwMTAxWjAzMTEwLwYDVQQD EyhkNTM2ODZlZDZlY2U3NDQzNTg0NjlmNzYyOGNiMTlhNjI2ZWM0NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNsBkc5qv9s2i9O/T7D5DTOqCHuk wb+5V0CAZxcss1hLutexh8sHCrzYFZqIgFAMFBCXGbD1S4XqVElwwa9f8sBUxqBR 51hoOZ9Zsu35Aofywozkyn0wO6MW7sKoyP/VISBydBoI1lEKTbgNi+IEccb47B7y JF6dkBiUORwzsE/vWLNVctSIoXBHMl12CLkYGpNW/Ma1HRm5ipthHYqVNbN2KD0o MguJiqWvAf2Q6fdKDdT0PdKPjvITsF0jhw5RX0TzqGpv7+Wc+8gXl06BDWMDqp/M weoYnTXCAWsm7n6pqiaBLc4KANe890otd9NNywF+8dbKJt/XhygZw6S/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNU2hu1uznRDWEafdijLGaYm7EQ2MB8GA1UdIwQY MBaAFKGGTt+kEtd6A8v1kTHj/MA6YOGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTkt MWE1NTc5ZThjNmMwLzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTktMWE1NTc5ZThjNmMw LzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8IJDhnr kiQGMmMSRyJlV7HWy9S/OUvviUl0zibmQhJTAzkryi/XcVX8R11la/4YfkE5iguJ TOHxwkhx3uNFv03T9dX5kALwsn6V7l42LRbkGq6HqA6kSQrNMq4vSzQ+NVxX/prh Dl6PUe/NYDAVdFrzdPfeQlqcnmJ3KpU0qmv7LjfCA0kRSKAHeIA/JFGYkL2fC/b3 hwvlD9dC2pZ7pdRy7j66jgxbhHzorRBEtKUSL/NRoSXuNQPfhh6NOolDuzCpwhS/ 0NzWHaeVDTwgamuInD7hLmsncZ+mFTbKPvKn90kCAUJSdsxguIDqIXKpEyWqvXr+ HeOfbzkFbTMdgw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:39 2025 by rpki-client