This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json) Hash identifier: mKR0B6J+gAHvubIAq1tZ0JO4tYejWeV9hfO+hr5ANAA= Subject key identifier: 85:56:2E:16:89:82:00:5C:22:F7:E8:7B:EC:C4:22:E9:10:18:C3:F0 Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B232BDEDFA8CBC0D81631B2F76FB0DECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft Manifest number: 1158 Signing time: Mon 15 Dec 2025 18:00:36 +0000 Manifest this update: Mon 15 Dec 2025 18:00:36 +0000 Manifest next update: Tue 16 Dec 2025 18:00:36 +0000 Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=) 2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=) 3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=) 4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=) 5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=) 6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: laZ0eop/rXRaS1tkJhLScVOcgC2H2GmbW6jzv+VK9TA=) 7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:2b:de:df:a8:cb:c0:d8:16:31:b2:f7:6f:b0:de:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Dec 15 18:00:36 2025 GMT Not After : Dec 16 18:00:36 2025 GMT Subject: CN=85562e168982005c22f7e87becc422e91018c3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:52:68:e4:66:da:18:74:ed:70:e3:5e:48: 14:11:d5:10:a6:b3:25:76:d4:6e:a1:d6:73:c3:a3: 3b:94:f5:ad:0e:72:14:94:93:30:f8:6a:b5:c2:40: e1:e7:3b:55:0f:49:3b:a1:d9:20:41:95:36:b4:b5: d3:66:da:a8:46:93:b2:74:26:92:6d:38:eb:bb:f1: af:a7:f1:09:f2:77:68:f1:ef:8d:62:42:8f:f8:45: b6:80:ee:03:48:ae:8d:aa:d1:20:fe:dc:20:f4:14: 3b:7d:37:79:eb:26:d7:fb:74:ef:00:02:62:82:68: 5c:12:c6:70:8c:b5:44:2a:ae:7f:75:fb:c0:e7:1a: 4f:3d:7a:1e:83:7d:77:97:c4:fb:88:62:48:34:c0: 11:08:ae:16:1b:ec:7f:d9:cb:4e:97:9d:06:8d:16: 8b:e7:ad:d6:2e:4c:c7:be:a6:88:79:99:ca:0e:32: e2:ff:17:bf:92:0d:dc:a5:95:3a:17:a3:78:4e:cd: bc:1a:b5:5f:fc:1a:c6:45:3c:92:d0:e8:4a:ec:e8: 18:1b:2c:95:08:df:fe:76:ca:f9:4b:b0:fb:56:27: 63:63:74:e5:00:0e:14:2a:a9:11:d7:50:58:8b:7c: e2:32:a2:0a:fb:92:32:d3:42:2e:7e:57:e8:32:39: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:2E:16:89:82:00:5C:22:F7:E8:7B:EC:C4:22:E9:10:18:C3:F0 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c4:6f:f0:33:01:b6:08:f1:45:84:6a:d6:57:60:dc:c7:53: f7:4f:fe:54:d9:9b:5e:f4:1a:2e:14:00:ae:b4:93:88:cd:9e: 5e:56:a4:a5:26:a0:bd:c3:31:b9:44:11:cb:52:fa:3e:e4:49: 59:67:ce:38:1e:92:b6:0e:93:8b:7c:a5:c8:d5:6f:e6:56:4c: 4b:aa:8c:36:a8:bf:63:bd:3c:67:40:95:38:66:37:78:83:14: 1d:7b:98:d7:a8:00:4f:3b:39:82:71:71:a0:fb:47:f6:af:04: 01:57:8b:89:56:3b:36:8d:82:4d:e1:93:c9:a5:76:c1:e0:2c: 44:75:57:75:ff:21:19:7c:0d:81:30:93:0f:7a:29:a0:34:b4: 81:94:ce:c1:67:94:8e:c6:9e:60:ba:2d:5d:f9:89:af:5d:25: c0:37:fd:d1:42:e7:79:bf:31:82:4e:d7:30:21:c2:19:c6:53: 65:35:0a:82:e0:48:15:de:3b:7e:bf:8a:e4:b1:73:f2:4f:8d: 9b:87:58:35:d1:c2:3d:c2:4b:5b:28:b2:3d:fe:50:00:b0:99: d5:f7:a2:7d:b8:56:cf:7c:c9:0b:23:aa:a3:ff:a0:0f:ef:52: 96:f5:db:be:f2:96:81:c7:21:70:49:23:0f:61:45:c6:1f:48: a6:23:27:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjK97fqMvA2BYxsvdvsN7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjUxMjE1MTgwMDM2WhcNMjUxMjE2MTgwMDM2WjAzMTEwLwYDVQQD Eyg4NTU2MmUxNjg5ODIwMDVjMjJmN2U4N2JlY2M0MjJlOTEwMThjM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J1SaORm2hh07XDjXkgUEdUQprMl dtRuodZzw6M7lPWtDnIUlJMw+Gq1wkDh5ztVD0k7odkgQZU2tLXTZtqoRpOydCaS bTjru/Gvp/EJ8ndo8e+NYkKP+EW2gO4DSK6NqtEg/twg9BQ7fTd56ybX+3TvAAJi gmhcEsZwjLVEKq5/dfvA5xpPPXoeg313l8T7iGJINMARCK4WG+x/2ctOl50GjRaL 563WLkzHvqaIeZnKDjLi/xe/kg3cpZU6F6N4Ts28GrVf/BrGRTyS0OhK7OgYGyyV CN/+dsr5S7D7VidjY3TlAA4UKqkR11BYi3ziMqIK+5Iy00IuflfoMjmv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVWLhaJggBcIvfoe+zEIukQGMPwMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8Rv8DMB tgjxRYRq1ldg3MdT90/+VNmbXvQaLhQArrSTiM2eXlakpSagvcMxuUQRy1L6PuRJ WWfOOB6Stg6Ti3ylyNVv5lZMS6qMNqi/Y708Z0CVOGY3eIMUHXuY16gATzs5gnFx oPtH9q8EAVeLiVY7No2CTeGTyaV2weAsRHVXdf8hGXwNgTCTD3opoDS0gZTOwWeU jsaeYLotXfmJr10lwDf90ULneb8xgk7XMCHCGcZTZTUKguBIFd47fr+K5LFz8k+N m4dYNdHCPcJLWyiyPf5QALCZ1feifbhWz3zJCyOqo/+gD+9SlvXbvvKWgcchcEkj D2FFxh9IpiMngA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:04:42 2025 by rpki-client