This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json) Hash identifier: KyZzTigyYqCbldAmOcwUEZuBJFPaIfF0L5GQIQUw0VE= Subject key identifier: 50:41:CF:CA:E8:70:C7:FB:73:32:6D:6B:32:CE:AE:D0:69:1B:AE:1E Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Certificate serial: 019B0DB6E3D64C101E2B3C6AA794E01AD754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft Manifest number: 16C8 Signing time: Thu 11 Dec 2025 14:00:48 +0000 Manifest this update: Thu 11 Dec 2025 14:00:48 +0000 Manifest next update: Fri 12 Dec 2025 14:00:48 +0000 Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=) 2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: 26h18hiQC6DSsQFd9Ruk5GxhbelcjtXHw0fn0Y0+a4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e3:d6:4c:10:1e:2b:3c:6a:a7:94:e0:1a:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Validity Not Before: Dec 11 14:00:48 2025 GMT Not After : Dec 12 14:00:48 2025 GMT Subject: CN=5041cfcae870c7fb73326d6b32ceaed0691bae1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:e1:03:94:83:a0:b1:74:77:ee:e9:70:39: b8:6d:27:5c:91:b5:b8:1d:e8:29:1f:0c:f4:0d:12: ed:2e:11:e4:37:ef:e4:ec:ad:a9:ea:c5:ee:18:ad: e8:fb:45:92:af:f4:31:bf:1f:9e:a7:68:97:f2:f7: db:88:2b:5c:d0:a8:8f:9e:c6:49:d5:01:ce:d9:c6: 1e:c7:88:4e:af:a9:de:f5:f7:a2:84:63:03:07:68: 12:fd:b9:87:27:85:91:75:61:9a:61:0a:e7:b9:35: dc:7c:de:8b:da:52:a2:58:5c:24:1e:28:97:6c:c5: 06:18:5f:6d:6b:f7:ce:5b:01:5a:c4:ea:32:b3:68: e9:3e:e0:1b:a1:e8:43:b1:c4:c2:ba:26:29:3f:ec: ac:29:6a:b2:14:73:4b:12:f0:36:28:a2:f2:79:b3: a2:de:fe:51:14:2c:a8:c7:20:ff:be:34:72:80:de: 3b:e4:78:7d:53:c5:e3:7c:62:bc:04:43:5f:47:b5: 23:bb:c4:de:b4:36:44:77:8b:a9:2d:9d:7b:4d:32: 75:22:07:7b:4e:7e:a3:65:67:9b:1e:01:72:ab:4c: f3:ce:1b:43:9f:77:cd:3c:96:cc:1e:84:47:7f:6a: 68:5e:2e:45:63:cc:3f:e5:cb:3a:b1:d5:31:29:46: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:CF:CA:E8:70:C7:FB:73:32:6D:6B:32:CE:AE:D0:69:1B:AE:1E X509v3 Authority Key Identifier: keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:1a:70:80:43:78:0a:23:e5:b3:12:27:20:73:b0:82:b0: 44:45:91:dc:e7:84:e9:a2:d3:67:8a:70:8c:49:e7:83:04:7d: 43:b5:f3:3e:4a:a6:58:0e:b6:ba:63:fb:98:45:f6:f8:60:7a: 5a:5c:08:9d:9b:aa:0b:0a:46:55:29:f4:ae:c1:42:1f:2c:19: e5:da:6b:1d:c8:7d:8b:33:05:8c:23:15:7b:f6:44:b1:84:53: f6:d3:6a:c2:4f:12:d5:82:b5:17:cb:ed:14:60:45:99:aa:69: 65:21:49:e6:ab:f7:c7:98:c9:a7:2f:ca:68:f6:db:84:d9:b7: 95:8a:f4:d4:18:f4:32:a4:d6:c2:f6:1d:8a:ab:ff:9f:11:87: 93:a9:ae:d3:65:f9:e7:c0:41:65:08:68:02:ec:be:e2:77:0a: e7:8e:2b:31:e3:2e:b2:9d:27:f0:90:9f:99:81:42:2c:4c:a2: 9f:51:58:97:06:39:2e:84:1c:bc:d5:5b:b3:a4:4d:f2:d3:ec: 24:8f:42:13:3b:57:a4:df:2b:f2:5f:b6:d2:ba:10:4d:9f:26: 5b:2c:a3:09:14:d1:60:9b:90:70:f0:83:4c:40:46:9c:8e:09: 43:19:f2:ce:02:76:76:de:2f:20:a1:21:8d:8e:af:64:c8:ab: ed:b8:3d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtuPWTBAeKzxqp5TgGtdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4 YTU1NGIwHhcNMjUxMjExMTQwMDQ4WhcNMjUxMjEyMTQwMDQ4WjAzMTEwLwYDVQQD Eyg1MDQxY2ZjYWU4NzBjN2ZiNzMzMjZkNmIzMmNlYWVkMDY5MWJhZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fbhA5SDoLF0d+7pcDm4bSdckbW4 HegpHwz0DRLtLhHkN+/k7K2p6sXuGK3o+0WSr/Qxvx+ep2iX8vfbiCtc0KiPnsZJ 1QHO2cYex4hOr6ne9feihGMDB2gS/bmHJ4WRdWGaYQrnuTXcfN6L2lKiWFwkHiiX bMUGGF9ta/fOWwFaxOoys2jpPuAboehDscTCuiYpP+ysKWqyFHNLEvA2KKLyebOi 3v5RFCyoxyD/vjRygN475Hh9U8XjfGK8BENfR7Uju8TetDZEd4upLZ17TTJ1Igd7 Tn6jZWebHgFyq0zzzhtDn3fNPJbMHoRHf2poXi5FY8w/5cs6sdUxKUa9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBBz8rocMf7czJtazLOrtBpG64eMB8GA1UdIwQY MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvgacIBD eAoj5bMSJyBzsIKwREWR3OeE6aLTZ4pwjEnngwR9Q7XzPkqmWA62umP7mEX2+GB6 WlwInZuqCwpGVSn0rsFCHywZ5dprHch9izMFjCMVe/ZEsYRT9tNqwk8S1YK1F8vt FGBFmappZSFJ5qv3x5jJpy/KaPbbhNm3lYr01Bj0MqTWwvYdiqv/nxGHk6mu02X5 58BBZQhoAuy+4ncK544rMeMusp0n8JCfmYFCLEyin1FYlwY5LoQcvNVbs6RN8tPs JI9CEztXpN8r8l+20roQTZ8mWyyjCRTRYJuQcPCDTEBGnI4JQxnyzgJ2dt4vIKEh jY6vZMir7bg9Qg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:50 2025 by rpki-client