This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json) Hash identifier: yk9ArChIhkFZVAswBOO6sSE2+kkWI26To2GszBMINEo= Subject key identifier: 44:96:A8:B7:B5:A9:E8:96:32:4D:47:BE:E1:C2:64:2D:03:91:68:EC Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Certificate serial: 019B1E05E525F74833F7FBC796096B57016F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft Manifest number: 0CBE Signing time: Sun 14 Dec 2025 18:01:01 +0000 Manifest this update: Sun 14 Dec 2025 18:01:01 +0000 Manifest next update: Mon 15 Dec 2025 18:01:01 +0000 Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=) 2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: 7EyfND/uqNdwhO8YXIcSglk5XFJlDs/Q6BljHmItSjY=) 3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:e5:25:f7:48:33:f7:fb:c7:96:09:6b:57:01:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980 Validity Not Before: Dec 14 18:01:01 2025 GMT Not After : Dec 15 18:01:01 2025 GMT Subject: CN=4496a8b7b5a9e896324d47bee1c2642d039168ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:67:d6:34:3c:85:b6:d7:61:52:49:07:2e:3c: 27:13:33:5d:a7:f2:fc:b0:53:91:78:2d:cb:95:b2: 97:1e:85:0d:6f:56:a3:62:43:96:bc:d6:b2:3f:e4: 99:6e:59:b7:78:2d:7f:04:c4:8a:3f:06:46:fd:8f: ef:52:21:71:8c:be:15:95:9f:47:17:49:ce:83:82: fe:c3:a8:b8:28:37:a2:bd:11:d5:8d:c2:2f:28:4a: 82:51:18:fe:69:c8:5a:cc:98:b0:55:db:7c:ac:5a: db:07:76:a0:2c:8d:27:37:6a:2f:d3:d6:56:04:64: e7:21:1e:60:7c:21:5f:d6:7f:fc:8c:10:95:28:7d: 41:f2:4f:f0:33:67:c5:79:88:93:ec:31:2a:be:5a: 9a:ba:a8:e2:1a:09:67:9b:0e:58:96:02:f6:c0:a3: 3c:f3:f5:35:62:8e:06:b6:08:35:aa:e2:5d:29:24: d7:07:96:f4:37:e6:c2:66:ac:df:b8:35:05:f9:92: a8:22:bb:d9:ae:8c:bd:d1:6e:32:63:f2:0b:69:2e: ee:94:d3:69:db:ca:52:f9:79:3a:9b:f9:e1:8b:44: 19:bc:bc:72:7c:0f:1e:a9:32:65:3b:c9:ef:8b:6a: c3:d6:7b:59:4a:2a:ac:3e:45:04:4b:8a:07:80:be: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:A8:B7:B5:A9:E8:96:32:4D:47:BE:E1:C2:64:2D:03:91:68:EC X509v3 Authority Key Identifier: keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:85:e6:5e:ec:01:8c:12:6d:32:ad:ba:63:49:32:f1:99:d9: 98:97:1f:ee:0c:a7:69:7a:a2:18:b2:1b:56:0d:76:96:64:e6: ed:9b:42:b4:c4:40:74:68:2f:de:62:ba:98:3a:e0:ff:c0:f6: 7b:39:35:6d:e4:78:ee:12:04:19:8a:d6:47:4c:09:c3:51:dc: 98:39:35:68:b6:53:e8:32:d7:77:82:f8:78:dc:b9:22:3f:48: 4b:c5:bd:1f:04:cd:ec:51:60:0d:80:b8:7f:0f:b9:a8:07:91: ec:b3:ea:91:6b:36:8c:0f:4f:96:74:d7:f3:1b:69:0f:dc:bf: 30:1d:02:29:75:41:61:a0:ba:80:f5:97:22:3d:48:5f:54:95: 6a:c9:96:78:65:e6:63:86:d5:c5:d2:a9:28:0f:9a:a1:01:ea: e7:d0:33:b6:d3:77:14:4d:a5:03:33:5d:9a:c1:e5:11:b9:02: d1:a1:8d:85:16:9f:2f:fd:f4:ce:9c:0c:13:49:e9:ad:a6:a9: 30:a2:77:56:d6:40:92:70:f5:7e:6e:ca:da:10:7e:51:39:c6: 68:53:21:7b:48:65:22:47:62:25:cb:e9:45:72:61:55:6c:f5: fa:1d:e1:53:a9:4e:73:72:d5:7c:9b:96:3a:f5:6f:02:c0:02: ff:22:7d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBeUl90gz9/vHlglrVwFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi ZGY5ODAwHhcNMjUxMjE0MTgwMTAxWhcNMjUxMjE1MTgwMTAxWjAzMTEwLwYDVQQD Eyg0NDk2YThiN2I1YTllODk2MzI0ZDQ3YmVlMWMyNjQyZDAzOTE2OGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92fWNDyFttdhUkkHLjwnEzNdp/L8 sFOReC3LlbKXHoUNb1ajYkOWvNayP+SZblm3eC1/BMSKPwZG/Y/vUiFxjL4VlZ9H F0nOg4L+w6i4KDeivRHVjcIvKEqCURj+achazJiwVdt8rFrbB3agLI0nN2ov09ZW BGTnIR5gfCFf1n/8jBCVKH1B8k/wM2fFeYiT7DEqvlqauqjiGglnmw5YlgL2wKM8 8/U1Yo4Gtgg1quJdKSTXB5b0N+bCZqzfuDUF+ZKoIrvZroy90W4yY/ILaS7ulNNp 28pS+Xk6m/nhi0QZvLxyfA8eqTJlO8nvi2rD1ntZSiqsPkUES4oHgL5d+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESWqLe1qeiWMk1HvuHCZC0DkWjsMB8GA1UdIwQY MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4XmXuwB jBJtMq26Y0ky8ZnZmJcf7gynaXqiGLIbVg12lmTm7ZtCtMRAdGgv3mK6mDrg/8D2 ezk1beR47hIEGYrWR0wJw1HcmDk1aLZT6DLXd4L4eNy5Ij9IS8W9HwTN7FFgDYC4 fw+5qAeR7LPqkWs2jA9PlnTX8xtpD9y/MB0CKXVBYaC6gPWXIj1IX1SVasmWeGXm Y4bVxdKpKA+aoQHq59AzttN3FE2lAzNdmsHlEbkC0aGNhRafL/30zpwME0npraap MKJ3VtZAknD1fm7K2hB+UTnGaFMhe0hlIkdiJcvpRXJhVWz1+h3hU6lOc3LVfJuW OvVvAsAC/yJ9yQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:08 2025 by rpki-client