This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json) Hash identifier: 1OlB35o8XfLWUBFDUiohZ5K5e3Qsgfnax4Tw7RHqDOw= Subject key identifier: 7C:FB:51:0A:AC:81:7F:46:39:26:23:BA:00:17:9F:50:D2:8B:39:9D Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Certificate serial: 019B1238875D2ADF7CED00120A5CE25107EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft Manifest number: 0614 Signing time: Fri 12 Dec 2025 11:00:53 +0000 Manifest this update: Fri 12 Dec 2025 11:00:53 +0000 Manifest next update: Sat 13 Dec 2025 11:00:53 +0000 Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=) 2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=) 3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=) 4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: MhGQ5n+HGQGvs6Z9eg0LvjK0q/fmS8OQJG2v/7UnYZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:87:5d:2a:df:7c:ed:00:12:0a:5c:e2:51:07:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Validity Not Before: Dec 12 11:00:53 2025 GMT Not After : Dec 13 11:00:53 2025 GMT Subject: CN=7cfb510aac817f46392623ba00179f50d28b399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:bd:f4:f1:f9:8a:37:d9:36:77:50:0e:59: 3e:1d:3b:60:a8:f3:cf:40:73:ca:15:ec:97:14:9e: e6:5a:c3:26:14:ca:1e:4d:ec:04:f5:57:0f:3f:a9: 27:f1:15:97:5e:3c:4e:9e:10:c4:27:14:78:e4:ba: 34:24:a3:fb:95:1b:a0:6c:19:c5:3a:8e:d8:b4:0e: c4:5a:4c:38:45:5a:11:7e:ff:34:cf:31:af:97:fc: 52:43:8e:59:ff:8d:f2:c3:26:b8:a6:0d:22:e6:33: ba:16:70:47:73:85:98:65:6f:9c:01:ca:16:46:5f: df:c2:c4:d1:ee:89:77:4a:50:33:20:9a:04:fd:9a: 9c:e1:1c:6b:fa:5e:0b:71:a6:bf:35:a2:b0:ce:b7: 3b:13:da:99:60:d1:c1:61:23:93:fe:dd:c9:a1:e3: 8f:c0:09:6b:80:b1:94:3e:9b:31:e3:cc:f1:00:8f: e9:a1:35:48:29:8d:90:ed:29:02:cd:e9:44:f8:f6: 16:ec:6a:61:d0:ed:53:03:bd:fa:d7:c8:f7:34:5d: 6c:68:5c:f8:db:6b:66:85:58:fa:49:d6:4f:8a:c0: dd:78:9e:e4:7e:6a:94:2c:61:52:b8:21:c0:ea:46: fe:d2:d3:f4:e1:2c:42:3d:24:d2:ed:13:12:92:0b: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:51:0A:AC:81:7F:46:39:26:23:BA:00:17:9F:50:D2:8B:39:9D X509v3 Authority Key Identifier: keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3e:ea:7f:55:95:03:03:32:58:f1:38:35:83:28:e5:d1:d3: 37:f5:0b:29:b9:8d:28:74:96:71:f8:37:ee:43:33:46:ab:87: 3f:8d:f4:e1:54:58:c3:f9:27:12:1a:62:71:5a:68:13:b6:f8: 31:6b:95:0d:bb:b9:e2:d4:f5:32:f1:c6:34:d1:51:79:ad:4c: b5:32:8a:e6:52:b1:f2:f5:17:cd:fb:13:1c:27:bb:35:b8:5e: 63:12:5c:67:2d:fb:90:d4:e2:49:6f:ee:e0:f9:4a:53:e5:54: 30:97:06:f7:b8:b2:e3:2a:f8:84:3f:83:b2:37:b6:9a:ce:26: 9e:45:d1:ea:c4:3d:d2:c9:db:b2:93:f2:15:91:c8:b2:c7:d6: 68:f1:0b:6b:01:e7:12:87:a6:4a:89:85:22:d1:b9:b5:6d:b8: 06:17:fe:3d:ed:e0:db:27:fd:a2:a5:6c:e4:78:1b:78:3f:14: b7:70:1b:cd:c0:3c:d9:e3:f2:5d:1d:63:48:17:ba:63:7d:46: 53:cd:8d:d2:3b:35:b3:1a:ed:34:fc:11:84:4d:a9:26:10:f4: d5:cb:c7:2b:6c:1f:c0:d9:98:4e:dc:90:64:65:1b:4d:13:c5: 8e:76:14:e3:f1:5f:13:01:1d:d8:73:9a:db:04:0e:77:4e:73: fd:0c:92:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOIddKt987QASClziUQfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi NmE1YWUwHhcNMjUxMjEyMTEwMDUzWhcNMjUxMjEzMTEwMDUzWjAzMTEwLwYDVQQD Eyg3Y2ZiNTEwYWFjODE3ZjQ2MzkyNjIzYmEwMDE3OWY1MGQyOGIzOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh299PH5ijfZNndQDlk+HTtgqPPP QHPKFeyXFJ7mWsMmFMoeTewE9VcPP6kn8RWXXjxOnhDEJxR45Lo0JKP7lRugbBnF Oo7YtA7EWkw4RVoRfv80zzGvl/xSQ45Z/43ywya4pg0i5jO6FnBHc4WYZW+cAcoW Rl/fwsTR7ol3SlAzIJoE/Zqc4Rxr+l4Lcaa/NaKwzrc7E9qZYNHBYSOT/t3JoeOP wAlrgLGUPpsx48zxAI/poTVIKY2Q7SkCzelE+PYW7Gph0O1TA73618j3NF1saFz4 22tmhVj6SdZPisDdeJ7kfmqULGFSuCHA6kb+0tP04SxCPSTS7RMSkgvTtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz7UQqsgX9GOSYjugAXn1DSizmdMB8GA1UdIwQY MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1 LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj7qf1WV AwMyWPE4NYMo5dHTN/ULKbmNKHSWcfg37kMzRquHP4304VRYw/knEhpicVpoE7b4 MWuVDbu54tT1MvHGNNFRea1MtTKK5lKx8vUXzfsTHCe7NbheYxJcZy37kNTiSW/u 4PlKU+VUMJcG97iy4yr4hD+Dsje2ms4mnkXR6sQ90snbspPyFZHIssfWaPELawHn EoemSomFItG5tW24Bhf+Pe3g2yf9oqVs5HgbeD8Ut3AbzcA82ePyXR1jSBe6Y31G U82N0js1sxrtNPwRhE2pJhD01cvHK2wfwNmYTtyQZGUbTRPFjnYU4/FfEwEd2HOa 2wQOd05z/QySbQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:55 2025 by rpki-client