This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json) Hash identifier: epoG6Spnu7347taeIaTJSCZCE4677+piIkXo96jYF40= Subject key identifier: 93:22:89:20:36:A8:7C:0C:98:F1:1A:94:90:48:9A:D8:5C:39:FF:82 Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B348D4AF2736EE98C5B2A6EB19348AE49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft Manifest number: 1161 Signing time: Fri 19 Dec 2025 03:00:33 +0000 Manifest this update: Fri 19 Dec 2025 03:00:33 +0000 Manifest next update: Sat 20 Dec 2025 03:00:33 +0000 Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=) 2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=) 3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=) 4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=) 5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=) 6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: Zjr/+v58rLmZpu8YQWozrZ4E4UbbCHlj4gyjNsDm/tQ=) 7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:4a:f2:73:6e:e9:8c:5b:2a:6e:b1:93:48:ae:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Dec 19 03:00:33 2025 GMT Not After : Dec 20 03:00:33 2025 GMT Subject: CN=9322892036a87c0c98f11a9490489ad85c39ff82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:f0:1e:00:7b:43:41:68:48:7b:1f:0c:51: cf:fc:ca:ec:aa:c9:5c:e7:4f:55:b4:ac:88:f9:a1: 37:a0:c8:d2:9e:45:61:77:f5:01:fb:90:4c:fa:89: 52:4f:a3:87:71:ee:3d:6e:42:12:f6:8f:94:44:74: 3b:e6:d9:72:f5:89:07:64:3b:2c:22:10:89:49:13: d1:d9:5e:e8:d8:79:43:d2:2d:28:6e:77:8f:74:8e: de:be:71:4f:1d:f2:cd:77:a7:43:31:e2:3f:4c:7e: 18:70:dc:d3:21:b7:30:a6:9d:03:12:54:e6:12:6f: 12:89:3c:fe:5f:59:d8:79:9c:d2:bf:4e:d9:46:95: 29:39:25:d5:4d:98:1e:36:d7:dc:f7:e1:3e:58:1d: 76:9d:27:1f:d5:26:ba:6f:16:3e:de:9e:2f:e0:75: 21:c1:aa:a7:11:d7:55:c6:43:b2:96:cb:ad:a9:d9: 3a:c9:4c:80:9b:de:7e:d3:a7:97:5d:28:6d:2e:91: f1:67:b4:33:e4:0f:3c:7d:2d:e1:82:75:60:73:77: 32:a2:dd:7f:80:14:76:54:97:fc:a6:15:72:a9:c8: e1:3c:dd:7a:c2:1f:32:c9:d4:c1:a7:62:9d:1c:25: 7b:e5:bd:3b:40:11:2c:5f:70:84:c0:cc:be:8d:7d: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:22:89:20:36:A8:7C:0C:98:F1:1A:94:90:48:9A:D8:5C:39:FF:82 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:7b:92:2b:40:23:6a:96:a1:d0:5e:08:a7:9d:d4:8d:9e: 80:43:29:d8:07:3b:e4:5d:f2:cd:e3:e9:3b:b8:c1:90:2c:b9: 3a:23:7c:45:23:e8:8e:8f:17:38:cd:fd:16:d0:6c:f4:77:4e: ef:94:f4:8f:ea:c2:14:e8:d7:d6:16:7f:f8:a6:8a:bb:8c:96: 28:60:23:38:97:0f:fa:48:43:a5:f0:b6:c5:d8:4c:e1:fc:3c: d6:6a:a5:c5:a9:bb:3d:39:85:52:58:38:6a:7c:99:d3:d2:56: a7:bb:3b:6f:f8:dc:28:c5:d5:f1:31:a1:de:2f:a5:d4:53:4c: 61:dd:57:fd:cb:a6:47:df:bc:4a:26:09:bc:da:c1:60:a7:25: 3d:be:e5:8b:47:1e:98:04:09:27:2e:e0:c7:85:33:85:00:4a: 2b:0c:3e:ff:7e:37:da:99:22:5d:c3:dd:c9:26:3e:16:90:30: 86:e6:76:7a:01:24:16:fe:ee:bb:25:58:e7:8e:95:10:58:9b: 4f:ef:1d:97:e5:b6:ed:0a:93:91:d5:39:2d:53:e1:9f:68:b3: 24:b2:b2:84:69:79:31:87:66:82:fc:5a:05:cc:ff:06:0f:91: 8f:4f:c4:7c:d5:d5:69:2c:5b:5f:9c:e3:4d:8b:03:bb:50:38: 1a:24:32:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jUryc27pjFsqbrGTSK5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjUxMjE5MDMwMDMzWhcNMjUxMjIwMDMwMDMzWjAzMTEwLwYDVQQD Eyg5MzIyODkyMDM2YTg3YzBjOThmMTFhOTQ5MDQ4OWFkODVjMzlmZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/wHgB7Q0FoSHsfDFHP/Mrsqslc 509VtKyI+aE3oMjSnkVhd/UB+5BM+olST6OHce49bkIS9o+URHQ75tly9YkHZDss IhCJSRPR2V7o2HlD0i0obnePdI7evnFPHfLNd6dDMeI/TH4YcNzTIbcwpp0DElTm Em8SiTz+X1nYeZzSv07ZRpUpOSXVTZgeNtfc9+E+WB12nScf1Sa6bxY+3p4v4HUh waqnEddVxkOylsutqdk6yUyAm95+06eXXShtLpHxZ7Qz5A88fS3hgnVgc3cyot1/ gBR2VJf8phVyqcjhPN16wh8yydTBp2KdHCV75b07QBEsX3CEwMy+jX28GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMiiSA2qHwMmPEalJBImthcOf+CMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimB7kitA I2qWodBeCKed1I2egEMp2Ac75F3yzePpO7jBkCy5OiN8RSPojo8XOM39FtBs9HdO 75T0j+rCFOjX1hZ/+KaKu4yWKGAjOJcP+khDpfC2xdhM4fw81mqlxam7PTmFUlg4 anyZ09JWp7s7b/jcKMXV8TGh3i+l1FNMYd1X/cumR9+8SiYJvNrBYKclPb7li0ce mAQJJy7gx4UzhQBKKww+/3432pkiXcPdySY+FpAwhuZ2egEkFv7uuyVY546VEFib T+8dl+W27QqTkdU5LVPhn2izJLKyhGl5MYdmgvxaBcz/Bg+Rj0/EfNXVaSxbX5zj TYsDu1A4GiQyzw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:21 2025 by rpki-client