This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json) Hash identifier: stCIhRL/UbK5Osx5NZJxnRu/BGqjs2oGFi8pPsXUymQ= Subject key identifier: 85:B4:72:FF:1F:16:08:C5:D3:ED:A0:54:CF:02:DB:98:14:B9:33:5C Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae Certificate serial: 019B5A1AD1B9FAD32F6832DEB3CEE10CF267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 10:01:05 +0000 Manifest this update: Fri 26 Dec 2025 10:01:05 +0000 Manifest next update: Sat 27 Dec 2025 10:01:05 +0000 Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: v89aJjVGm40z5aPy3eUtIc/6Dxv2EWCKo5zJdk+qWyQ=) 2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d1:b9:fa:d3:2f:68:32:de:b3:ce:e1:0c:f2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae Validity Not Before: Dec 26 10:01:05 2025 GMT Not After : Dec 27 10:01:05 2025 GMT Subject: CN=85b472ff1f1608c5d3eda054cf02db9814b9335c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:b3:00:4a:bf:aa:e7:4c:a6:fc:bb:a9:1e: de:86:f9:ff:76:8d:84:f9:8f:e8:fa:51:da:87:ca: ff:e6:e1:93:21:84:8c:14:95:00:98:d3:40:8e:bc: fc:f6:6a:b1:44:56:de:d3:d4:2c:24:5e:e1:b1:b9: cb:8b:ff:58:90:36:f0:82:85:69:64:b4:08:1f:c9: c8:47:36:1c:61:05:74:0c:c6:61:5c:6d:67:bd:ed: 5e:77:b1:79:6a:98:f5:e5:b1:e1:6c:83:2b:61:6e: 03:e2:c2:e9:59:99:99:6b:a1:ca:70:af:64:a6:af: 89:21:c7:dc:12:7e:95:08:6f:7d:0c:05:7a:19:b6: 37:d9:17:78:c6:3c:84:ef:be:50:b2:1e:27:1f:fd: 4d:b3:66:60:9b:b3:a7:39:59:05:42:85:45:bc:89: 50:ca:82:a5:e0:d5:0e:6e:c5:b0:b3:78:1a:74:99: 3f:1e:5e:fc:bb:89:c6:37:a2:c9:d2:fe:3a:d2:2a: 87:c9:0b:76:bc:1d:b7:6a:a8:6a:96:a1:06:87:88: 6e:97:bc:d0:77:b9:b5:30:37:f1:f0:00:30:ac:68: d1:0d:4c:32:c8:26:b4:22:60:2f:7e:16:f1:02:6b: d6:1f:32:90:bc:04:b1:6d:7a:28:45:ef:6e:88:6e: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B4:72:FF:1F:16:08:C5:D3:ED:A0:54:CF:02:DB:98:14:B9:33:5C X509v3 Authority Key Identifier: keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:04:8c:b3:38:4f:d4:68:50:2f:17:83:e5:4d:f3:05:82:8d: 03:a1:e7:4b:2f:fc:d0:fe:85:5b:65:fe:21:e9:c1:e3:8d:71: 13:02:dd:ed:73:9a:ac:7a:78:d7:0b:99:ee:fa:13:cb:02:18: fd:6d:ce:1d:b2:2d:e9:ea:92:f8:73:a8:aa:1d:11:49:4a:d2: b3:1f:97:b6:54:48:73:c2:0c:3c:50:47:16:92:4a:11:2b:84: 4a:34:c2:8b:91:15:bd:41:9f:2b:c8:6e:3d:61:4d:27:0d:31: 92:f9:dc:3b:38:c7:b5:a9:48:ab:8f:09:41:4d:fd:16:e2:41: 30:28:23:a5:8a:97:9e:4b:69:76:1e:ef:78:cd:d7:ae:30:1f: 97:2b:c5:24:01:e3:45:b2:0b:d2:1b:7d:99:b3:a5:1b:77:e4: 2b:c4:52:d6:f0:13:19:67:5e:54:33:61:9c:f2:f7:b3:3b:b7: 4c:d2:07:44:9e:d3:a5:28:1b:98:52:e9:bd:a5:80:a2:a3:e5: c0:b3:94:c2:09:09:ea:1c:8f:3c:64:95:89:12:4f:65:5d:e7: 05:50:12:f4:16:3a:f8:0f:d5:f1:bf:77:ac:5e:1b:d9:ac:16: e0:d1:e8:5b:ed:9d:23:c1:01:62:dc:30:96:4e:02:98:ff:54: d0:86:b8:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtG5+tMvaDLes87hDPJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1 ZjYzYWUwHhcNMjUxMjI2MTAwMTA1WhcNMjUxMjI3MTAwMTA1WjAzMTEwLwYDVQQD Eyg4NWI0NzJmZjFmMTYwOGM1ZDNlZGEwNTRjZjAyZGI5ODE0YjkzMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmzAEq/qudMpvy7qR7ehvn/do2E +Y/o+lHah8r/5uGTIYSMFJUAmNNAjrz89mqxRFbe09QsJF7hsbnLi/9YkDbwgoVp ZLQIH8nIRzYcYQV0DMZhXG1nve1ed7F5apj15bHhbIMrYW4D4sLpWZmZa6HKcK9k pq+JIcfcEn6VCG99DAV6GbY32Rd4xjyE775Qsh4nH/1Ns2Zgm7OnOVkFQoVFvIlQ yoKl4NUObsWws3gadJk/Hl78u4nGN6LJ0v460iqHyQt2vB23aqhqlqEGh4hul7zQ d7m1MDfx8AAwrGjRDUwyyCa0ImAvfhbxAmvWHzKQvASxbXooRe9uiG4cKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW0cv8fFgjF0+2gVM8C25gUuTNcMB8GA1UdIwQY MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3 LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASASMszhP 1GhQLxeD5U3zBYKNA6HnSy/80P6FW2X+IenB441xEwLd7XOarHp41wuZ7voTywIY /W3OHbIt6eqS+HOoqh0RSUrSsx+XtlRIc8IMPFBHFpJKESuESjTCi5EVvUGfK8hu PWFNJw0xkvncOzjHtalIq48JQU39FuJBMCgjpYqXnktpdh7veM3XrjAflyvFJAHj RbIL0ht9mbOlG3fkK8RS1vATGWdeVDNhnPL3szu3TNIHRJ7TpSgbmFLpvaWAoqPl wLOUwgkJ6hyPPGSViRJPZV3nBVAS9BY6+A/V8b93rF4b2awW4NHoW+2dI8EBYtww lk4CmP9U0Ia46A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:17 2025 by rpki-client