This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json) Hash identifier: WWeGtk5x/NuDRgAFVI/RxTqiAfiS4wNcokMCAvsk6X0= Subject key identifier: AB:FF:62:B6:7C:82:18:9D:BE:B2:D9:27:EF:19:44:55:74:91:3F:4E Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019B5B643D9BF695687E67772505A27DFEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft Manifest number: 0F75 Signing time: Fri 26 Dec 2025 16:00:54 +0000 Manifest this update: Fri 26 Dec 2025 16:00:54 +0000 Manifest next update: Sat 27 Dec 2025 16:00:54 +0000 Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=) 2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: bDE4MiyJvCUilYthFWORWG4OLtixIovSTJymhv5bIoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:3d:9b:f6:95:68:7e:67:77:25:05:a2:7d:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Dec 26 16:00:54 2025 GMT Not After : Dec 27 16:00:54 2025 GMT Subject: CN=abff62b67c82189dbeb2d927ef19445574913f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:88:9a:c6:78:e9:41:5d:f1:5b:b3:c0:86: ca:fa:30:1f:6b:6f:00:4a:5a:88:04:71:98:d3:de: 33:b3:47:72:04:80:48:15:38:07:fa:95:91:d9:8c: cf:7d:5e:46:71:12:d3:a6:28:94:ae:6b:36:be:0f: 32:6c:01:8c:99:94:5a:fc:24:5f:33:56:fd:a1:33: d3:91:e6:35:07:45:c3:88:42:0d:4c:d3:55:f7:b3: f2:6a:d7:f9:0a:5e:f7:3b:e0:74:e0:e6:75:9f:6f: 01:6c:c8:1a:1a:cf:78:98:b5:c9:86:f0:ad:82:80: d6:81:67:ef:5a:21:d4:81:b4:ed:69:51:f2:46:e5: 2c:5f:30:15:f9:ab:4b:09:1f:c1:70:57:2d:5c:99: d6:ac:17:1d:42:f8:07:2d:64:93:d9:05:c7:6a:81: 28:b6:49:45:f1:dc:64:b5:30:cf:5e:8a:c3:5b:68: 62:ca:30:5d:8d:1b:62:27:02:45:b1:43:05:d4:7b: fa:d7:82:fa:8d:a2:03:1d:9a:ae:6e:55:d9:28:0c: 14:97:e3:09:36:db:61:0a:d8:bf:78:e5:89:90:42: f2:ed:c3:6f:4c:58:3c:4a:7d:26:c0:3b:d9:28:44: dd:53:ad:2f:d5:3f:bd:df:65:0b:a2:a2:47:52:a6: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:62:B6:7C:82:18:9D:BE:B2:D9:27:EF:19:44:55:74:91:3F:4E X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a4:82:5c:0b:ee:ed:ac:d7:ea:20:49:4e:3c:63:de:42:4f: 51:6b:9b:60:24:5c:a6:82:1d:b7:45:16:46:46:43:ee:de:95: a4:18:95:ab:da:bb:95:95:89:39:01:8a:af:73:09:97:b2:c4: 7f:7b:8c:0b:52:d4:b0:7a:13:ae:7a:2b:75:78:4b:77:b9:6c: d9:f6:3e:14:5d:51:29:34:7a:a8:a5:9a:c8:3f:18:e6:4a:76: a8:bf:86:86:76:a9:51:8a:b6:fa:38:6e:b5:10:ab:ce:db:e9: 9a:57:5a:5c:eb:b4:13:73:c0:0a:d4:f5:97:06:e8:68:1a:c5: 38:95:25:7f:0a:a0:bf:b5:89:fb:db:04:ee:28:3e:81:9a:f7: 01:ca:9d:d3:7b:e2:09:f9:4d:e1:c6:66:87:d8:42:73:7a:d4: f7:24:8e:23:b6:d2:23:32:29:a9:94:97:99:c4:04:81:3b:49: bc:e5:88:87:f1:ef:a6:f4:21:53:03:85:04:d9:c5:23:03:c9: d7:d2:08:e4:b2:de:54:8d:87:26:c6:07:25:37:20:a2:34:88: 8e:44:7d:73:d3:48:73:78:7b:9a:6c:48:44:55:47:ec:12:c0: a7:29:31:cc:91:ab:d2:22:14:0b:51:ea:27:ae:ab:3d:da:a2: ca:ff:8e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZD2b9pVofmd3JQWiff7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjUxMjI2MTYwMDU0WhcNMjUxMjI3MTYwMDU0WjAzMTEwLwYDVQQD EyhhYmZmNjJiNjdjODIxODlkYmViMmQ5MjdlZjE5NDQ1NTc0OTEzZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ6ImsZ46UFd8VuzwIbK+jAfa28A SlqIBHGY094zs0dyBIBIFTgH+pWR2YzPfV5GcRLTpiiUrms2vg8ybAGMmZRa/CRf M1b9oTPTkeY1B0XDiEINTNNV97Pyatf5Cl73O+B04OZ1n28BbMgaGs94mLXJhvCt goDWgWfvWiHUgbTtaVHyRuUsXzAV+atLCR/BcFctXJnWrBcdQvgHLWST2QXHaoEo tklF8dxktTDPXorDW2hiyjBdjRtiJwJFsUMF1Hv614L6jaIDHZqublXZKAwUl+MJ NtthCti/eOWJkELy7cNvTFg8Sn0mwDvZKETdU60v1T+932ULoqJHUqZ2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv/YrZ8ghidvrLZJ+8ZRFV0kT9OMB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKSCXAvu 7azX6iBJTjxj3kJPUWubYCRcpoIdt0UWRkZD7t6VpBiVq9q7lZWJOQGKr3MJl7LE f3uMC1LUsHoTrnordXhLd7ls2fY+FF1RKTR6qKWayD8Y5kp2qL+GhnapUYq2+jhu tRCrztvpmldaXOu0E3PACtT1lwboaBrFOJUlfwqgv7WJ+9sE7ig+gZr3Acqd03vi CflN4cZmh9hCc3rU9ySOI7bSIzIpqZSXmcQEgTtJvOWIh/HvpvQhUwOFBNnFIwPJ 19II5LLeVI2HJsYHJTcgojSIjkR9c9NIc3h7mmxIRFVH7BLApykxzJGr0iIUC1Hq J66rPdqiyv+ODA== -----END CERTIFICATE-----Generated at Fri Dec 26 19:29:44 2025 by rpki-client