This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json) Hash identifier: 3WlVxdztN23mCSiUkePhjp0c2mwbVs+49y/AtvXMkuw= Subject key identifier: A3:3B:CD:81:AD:19:1C:C9:0B:74:63:A6:BF:E3:40:05:EB:F0:09:4F Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4 Certificate serial: 019B2C9DB5E427976F47787C8181DEC8F717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft Manifest number: 0842 Signing time: Wed 17 Dec 2025 14:01:31 +0000 Manifest this update: Wed 17 Dec 2025 14:01:31 +0000 Manifest next update: Thu 18 Dec 2025 14:01:31 +0000 Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=) 2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: sUVo3WSpoEi3iwmK97xbnzRpHo1wiOAKFAJUBMFwzMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:b5:e4:27:97:6f:47:78:7c:81:81:de:c8:f7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4 Validity Not Before: Dec 17 14:01:31 2025 GMT Not After : Dec 18 14:01:31 2025 GMT Subject: CN=a33bcd81ad191cc90b7463a6bfe34005ebf0094f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:60:e7:8f:6e:41:f3:e4:78:a3:38:84:67: dc:0d:60:d2:c4:78:be:37:21:fc:96:29:50:f9:6f: c6:e5:57:2c:26:7e:33:37:22:08:ab:d1:8a:36:8b: 3a:81:d1:e3:96:c5:2d:4a:09:d3:55:e1:6c:16:1d: 6c:14:c2:e5:2d:69:2e:59:c2:09:2a:29:bc:3a:5e: bd:4a:87:6a:5d:79:41:7b:5c:db:fd:0e:e6:b5:5e: d2:68:02:01:76:85:84:fe:bc:3c:c7:5e:76:e7:27: b4:29:8f:0c:b2:7d:75:b1:d5:bc:25:9b:d0:de:64: 3e:be:56:74:dc:a8:e2:ec:c4:5f:bf:6b:19:b3:8a: 98:95:5e:49:2f:0b:ba:60:e1:c5:ef:bf:f2:0e:b6: 57:5b:53:1b:8b:3c:89:d1:65:4a:95:c6:4d:82:ca: de:9b:0f:e9:e1:d8:20:a8:a8:20:f8:13:04:7c:4a: 21:3f:fa:04:11:66:52:c4:46:98:ca:c1:d1:42:58: 3a:f5:46:da:30:c1:a9:a7:be:ed:3b:35:d5:a5:30: 7a:a7:c3:44:62:c2:8a:86:ff:30:20:78:54:66:65: 88:5c:12:bb:b4:15:dc:e6:3b:78:a9:77:68:80:01: bf:42:a2:47:1c:cb:52:ad:6c:12:dc:f7:99:c7:02: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:CD:81:AD:19:1C:C9:0B:74:63:A6:BF:E3:40:05:EB:F0:09:4F X509v3 Authority Key Identifier: keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:20:c5:1e:3d:39:8e:68:d1:99:06:fd:01:65:6f:dc:20:37: c6:d9:35:48:0b:ae:4b:ec:1b:14:73:92:96:ca:16:91:24:93: 44:fa:69:01:09:1e:91:2f:14:0f:cf:49:20:72:15:dc:1f:cd: a0:25:4d:6e:df:95:bb:c2:c6:74:26:d4:c3:f3:26:b0:04:e2: d0:fb:f2:fc:1c:c4:7f:6f:4f:a2:bd:60:50:85:99:5e:61:73: 24:d7:b9:3a:87:66:01:40:34:bf:1c:fb:5c:2b:22:9d:8d:68: c5:40:b8:0a:64:55:c5:07:09:57:54:49:10:26:6f:df:5d:cc: da:25:55:dd:77:f1:a2:1a:06:c2:0a:ba:ce:b8:b4:e1:0b:bb: 33:b4:11:44:1d:62:b1:5e:68:3b:e4:bc:6a:bc:8e:a8:1b:41: ae:cc:f4:d4:fd:46:2f:85:71:f7:3e:c4:90:f6:61:29:67:04: 13:5f:0e:19:01:bf:7e:dc:31:56:fc:a1:0f:3e:12:3b:d5:f1: dd:3d:a5:d3:e6:46:97:e9:ca:77:30:0d:72:97:f6:3a:07:25: cc:71:66:8f:b9:53:81:90:25:be:94:5b:24:3a:24:71:9f:0b: d5:53:84:1b:b6:45:d8:82:1e:84:f6:c3:67:99:5f:c7:16:72: 86:7f:95:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnbXkJ5dvR3h8gYHeyPcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1 ZjkwZTQwHhcNMjUxMjE3MTQwMTMxWhcNMjUxMjE4MTQwMTMxWjAzMTEwLwYDVQQD EyhhMzNiY2Q4MWFkMTkxY2M5MGI3NDYzYTZiZmUzNDAwNWViZjAwOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtg549uQfPkeKM4hGfcDWDSxHi+ NyH8lilQ+W/G5VcsJn4zNyIIq9GKNos6gdHjlsUtSgnTVeFsFh1sFMLlLWkuWcIJ Kim8Ol69SodqXXlBe1zb/Q7mtV7SaAIBdoWE/rw8x1525ye0KY8Msn11sdW8JZvQ 3mQ+vlZ03Kji7MRfv2sZs4qYlV5JLwu6YOHF77/yDrZXW1MbizyJ0WVKlcZNgsre mw/p4dggqKgg+BMEfEohP/oEEWZSxEaYysHRQlg69UbaMMGpp77tOzXVpTB6p8NE YsKKhv8wIHhUZmWIXBK7tBXc5jt4qXdogAG/QqJHHMtSrWwS3PeZxwIflwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM7zYGtGRzJC3Rjpr/jQAXr8AlPMB8GA1UdIwQY MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCDFHj05 jmjRmQb9AWVv3CA3xtk1SAuuS+wbFHOSlsoWkSSTRPppAQkekS8UD89JIHIV3B/N oCVNbt+Vu8LGdCbUw/MmsATi0Pvy/BzEf29Por1gUIWZXmFzJNe5OodmAUA0vxz7 XCsinY1oxUC4CmRVxQcJV1RJECZv313M2iVV3XfxohoGwgq6zri04Qu7M7QRRB1i sV5oO+S8aryOqBtBrsz01P1GL4Vx9z7EkPZhKWcEE18OGQG/ftwxVvyhDz4SO9Xx 3T2l0+ZGl+nKdzANcpf2OgclzHFmj7lTgZAlvpRbJDokcZ8L1VOEG7ZF2IIehPbD Z5lfxxZyhn+V4A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:34 2025 by rpki-client