This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft File: txOOSEDKo6G9UYUnFKE1-w6DfEU.mft (raw, json) Hash identifier: +uDW+9ki29rgtrzX7ONy33fxjkoC9EtWowWbmNjnV74= Subject key identifier: 92:7B:81:E9:9B:55:28:FC:81:7F:7C:A0:37:A2:C7:05:AD:3A:80:BB Authority key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45 Certificate issuer: /CN=b7138e4840caa3a1bd51852714a135fb0e837c45 Certificate serial: 019B5A88D68481DD8F800F55A7E34C7E1E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft Manifest number: 18 Signing time: Fri 26 Dec 2025 12:01:15 +0000 Manifest this update: Fri 26 Dec 2025 12:01:15 +0000 Manifest next update: Sat 27 Dec 2025 12:01:15 +0000 Files and hashes: 1: lROKdm6UM4M0MJ6vLxc2VKf73CI.roa (hash: p9GWewT9kC2oXFjDBOMGkwHQcDAAzHvbBy1Lpy2DuDs=) 2: txOOSEDKo6G9UYUnFKE1-w6DfEU.crl (hash: mlLVWtdPlhVy3Tm77lkUqwLz+UKYOcbRBWquvg0sBpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d6:84:81:dd:8f:80:0f:55:a7:e3:4c:7e:1e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7138e4840caa3a1bd51852714a135fb0e837c45 Validity Not Before: Dec 26 12:01:15 2025 GMT Not After : Dec 27 12:01:15 2025 GMT Subject: CN=927b81e99b5528fc817f7ca037a2c705ad3a80bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:64:9f:29:b0:c9:c2:16:2f:31:f3:b4:3d: f5:39:96:9d:51:f8:5a:bb:ae:f5:a7:51:34:63:76: 9f:5d:bf:73:9c:13:32:58:53:ac:1d:9f:61:04:bc: 92:75:97:25:28:73:11:82:67:81:82:9c:23:48:0d: 81:15:ab:28:46:29:25:6c:bf:24:f7:02:7f:fd:de: 07:06:e1:fc:0e:54:2f:21:03:7a:e6:7d:78:b3:07: f7:35:6b:72:1a:ad:ff:78:f8:d0:68:c2:6c:49:f4: d2:eb:71:8c:8d:c4:7e:6a:55:c2:c8:6b:75:33:8c: f4:84:aa:27:10:cc:98:23:72:bd:94:a5:0c:de:7d: 21:a1:6a:9c:09:93:c1:40:4c:f8:51:47:f9:cc:22: 95:c6:6c:fc:0b:bb:5c:6d:4e:62:01:a5:60:63:cd: 9b:94:2d:a9:d7:67:d3:67:90:eb:bc:18:c0:37:c0: 17:3d:05:e3:06:2c:5c:5e:d2:a6:85:db:9b:13:7a: 1a:ec:ac:c6:d0:0d:b9:33:23:0a:c3:b4:d9:3b:e2: 9a:06:57:63:00:00:cc:a3:1a:72:7e:71:cb:02:0c: 30:4f:93:ba:9b:38:14:d3:9b:48:70:5c:1f:2d:1e: 23:e1:85:ae:2b:14:ff:b2:61:4e:3e:0f:bd:0b:1b: a7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7B:81:E9:9B:55:28:FC:81:7F:7C:A0:37:A2:C7:05:AD:3A:80:BB X509v3 Authority Key Identifier: keyid:B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9a:04:9b:bf:c2:e0:85:a0:cc:8e:be:17:1e:63:ec:15:ee: 3c:23:0d:e2:20:a6:5b:91:5f:26:30:7b:87:91:b8:93:1f:5d: b4:e3:d0:82:41:67:1e:67:07:a1:f0:ed:61:5f:30:02:16:8d: 0f:a2:26:0e:fa:90:30:f1:4a:f6:75:bb:17:4c:8c:75:15:61: 7f:27:1c:24:5b:3d:4c:9c:39:3b:51:fb:93:01:d3:91:21:58: 8e:67:27:4f:7f:ca:e4:ba:ea:b1:d0:28:91:16:3e:72:77:1f: aa:e2:cc:5f:c8:3b:47:bb:98:1a:bb:11:a0:e2:ea:dc:fd:3a: e5:25:b5:f3:6d:db:42:cb:7e:26:4a:ac:19:8a:06:09:a7:c6: d0:8b:21:dd:f6:a2:de:ed:db:12:5b:3b:88:d6:b6:4e:41:da: 9c:97:ad:5f:4e:c8:ac:78:d6:01:05:7f:ff:13:60:f5:e9:7d: e0:0a:b0:bf:65:d8:42:a0:3a:b9:05:67:0b:57:12:35:f4:ab: 8b:3e:f6:b7:2d:20:43:38:31:94:6d:d2:81:97:6c:e1:70:2c: 41:f0:23:43:71:99:26:8e:7e:6d:5a:fa:8b:19:c4:c9:e1:52: d2:29:f9:c7:cf:c8:11:00:6a:6e:4d:64:e0:9a:38:a3:57:81: ce:a6:3d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNaEgd2PgA9Vp+NMfh5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTM4ZTQ4NDBjYWEzYTFiZDUxODUyNzE0YTEzNWZiMGU4 MzdjNDUwHhcNMjUxMjI2MTIwMTE1WhcNMjUxMjI3MTIwMTE1WjAzMTEwLwYDVQQD Eyg5MjdiODFlOTliNTUyOGZjODE3ZjdjYTAzN2EyYzcwNWFkM2E4MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPpknymwycIWLzHztD31OZadUfha u671p1E0Y3afXb9znBMyWFOsHZ9hBLySdZclKHMRgmeBgpwjSA2BFasoRiklbL8k 9wJ//d4HBuH8DlQvIQN65n14swf3NWtyGq3/ePjQaMJsSfTS63GMjcR+alXCyGt1 M4z0hKonEMyYI3K9lKUM3n0hoWqcCZPBQEz4UUf5zCKVxmz8C7tcbU5iAaVgY82b lC2p12fTZ5DrvBjAN8AXPQXjBixcXtKmhdubE3oa7KzG0A25MyMKw7TZO+KaBldj AADMoxpyfnHLAgwwT5O6mzgU05tIcFwfLR4j4YWuKxT/smFOPg+9CxunmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ7gembVSj8gX98oDeixwWtOoC7MB8GA1UdIwQY MBaAFLcTjkhAyqOhvVGFJxShNfsOg3xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTct NDNmZTRhNTFiNTRiLzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTctNDNmZTRhNTFiNTRi LzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpoEm7/C 4IWgzI6+Fx5j7BXuPCMN4iCmW5FfJjB7h5G4kx9dtOPQgkFnHmcHofDtYV8wAhaN D6ImDvqQMPFK9nW7F0yMdRVhfyccJFs9TJw5O1H7kwHTkSFYjmcnT3/K5LrqsdAo kRY+cncfquLMX8g7R7uYGrsRoOLq3P065SW1823bQst+JkqsGYoGCafG0Ish3fai 3u3bEls7iNa2TkHanJetX07IrHjWAQV//xNg9el94Aqwv2XYQqA6uQVnC1cSNfSr iz72ty0gQzgxlG3SgZds4XAsQfAjQ3GZJo5+bVr6ixnEyeFS0in5x8/IEQBqbk1k 4Jo4o1eBzqY9gA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:23 2025 by rpki-client