This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json) Hash identifier: DzxJ5RYpLpGMLHA5tRMhyVqHAsRDRhKnAl+LsGAmkU0= Subject key identifier: D4:B1:B3:4C:99:04:59:34:F6:40:5E:48:0C:05:AE:23:CA:2E:B4:9A Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019B0F00B4D7FD359C783AD4831D4EC7AF1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft Manifest number: EB Signing time: Thu 11 Dec 2025 20:01:03 +0000 Manifest this update: Thu 11 Dec 2025 20:01:03 +0000 Manifest next update: Fri 12 Dec 2025 20:01:03 +0000 Files and hashes: 1: CiNflCU4KFn7Aa5TSRjV9Pq0QJI.roa (hash: LgbEtmeOGTEJrLh9qdeICYZRrdXVnu1tQuix4Y2QoGI=) 2: QOeRuiRAx6f12JzbMTw8bg77wX0.roa (hash: L8eA6191FsW9Vnzupg2J6urhYsN5bGDp5k/dBDH9G8c=) 3: Xo_7x8gM362sNUx9u7YODuCsWN0.roa (hash: kMd99CyUtMJl4Cu76HE19siKUa5sAjH27qVIWnJGM5I=) 4: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: NE6CIoShvFMEbCsXMLBwoeUktR3bqlW9byO23AEQnDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:b4:d7:fd:35:9c:78:3a:d4:83:1d:4e:c7:af:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Dec 11 20:01:03 2025 GMT Not After : Dec 12 20:01:03 2025 GMT Subject: CN=d4b1b34c99045934f6405e480c05ae23ca2eb49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:a1:77:f6:72:74:17:f7:27:81:bc:4a:70: 09:27:ba:c7:d5:83:75:24:af:9f:c0:e9:c6:81:4e: 75:0a:74:7f:37:c5:d8:c9:bf:f8:e6:5f:23:6f:fb: 73:02:56:48:42:8a:9c:71:ad:4e:13:e4:81:6e:49: b5:b1:fd:15:07:5b:8e:e8:b7:bc:4d:a7:44:39:2b: ec:b1:da:c9:59:74:cf:41:e9:21:e7:ee:ca:95:88: f5:54:f3:fb:2d:4a:d0:d5:29:ac:4e:1c:fc:6d:d5: d1:91:b4:11:6b:28:30:fe:34:6e:53:bf:2c:30:c8: ea:c9:0a:59:4a:2d:1f:ff:f5:69:fc:43:50:e4:5b: 19:d8:00:14:e7:7f:c5:de:b5:09:42:18:c1:17:95: 76:c1:50:16:89:48:8c:46:e2:11:8d:72:7e:e6:e7: 8d:7d:63:05:72:93:e9:ba:12:dd:a0:78:ba:e9:cf: d0:75:b4:44:71:16:f1:4c:73:4f:66:96:ed:9e:47: e2:a3:64:d2:69:9c:78:52:70:83:64:ba:ac:ac:5d: 2b:7e:98:34:2c:5b:fe:6d:b6:10:04:69:82:98:5f: 43:88:9d:89:f9:2e:3f:a8:a4:fc:88:c7:24:ef:31: fa:48:c4:c8:e5:2e:ba:0a:92:28:72:d4:ad:c0:44: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:B3:4C:99:04:59:34:F6:40:5E:48:0C:05:AE:23:CA:2E:B4:9A X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bd:68:40:04:db:ef:ee:0d:23:fc:22:e6:6e:f8:0d:d0:81: 4a:98:36:69:6e:a0:9c:8a:d9:c5:90:5e:3c:70:21:5c:9e:ed: 3c:4c:5a:b9:f1:45:e7:f4:42:37:37:31:89:f7:1b:15:9d:0a: 8d:f6:f3:f5:32:00:f6:f1:98:66:08:f0:b8:0f:02:c7:45:9f: d2:64:86:45:53:6d:06:af:8d:2d:9a:4a:f7:a9:73:ad:d7:50: 6d:ac:bb:d0:ff:85:5c:69:3e:aa:2c:f1:1b:b2:ad:a5:61:8b: a9:3b:e7:ff:07:dd:1d:e4:57:e3:e9:b2:cb:b6:b4:88:62:b0: 7d:21:78:ac:3d:d6:ea:b6:47:2e:2f:1d:06:f3:58:f5:88:54: 0b:95:8b:d7:e2:4a:50:d8:cb:a4:dc:8b:ef:44:05:27:02:b2: a8:37:9b:4f:de:7d:bc:b0:9a:9d:ec:e3:7b:a1:bb:0c:cc:10: 59:ea:22:77:be:75:5c:80:7a:92:d2:d0:40:de:49:27:b8:ee: ec:14:3f:ed:b4:ec:32:4f:0d:34:e4:39:73:c2:67:68:e3:9d: 92:a5:19:52:fa:1b:c2:15:81:98:97:bf:24:2f:dd:ca:61:a4: 7b:8f:9c:68:a2:2f:73:1e:e0:dc:b0:01:d9:87:e9:a8:c5:f2: 3c:3a:cc:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPALTX/TWceDrUgx1Ox68aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjUxMjExMjAwMTAzWhcNMjUxMjEyMjAwMTAzWjAzMTEwLwYDVQQD EyhkNGIxYjM0Yzk5MDQ1OTM0ZjY0MDVlNDgwYzA1YWUyM2NhMmViNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHmhd/ZydBf3J4G8SnAJJ7rH1YN1 JK+fwOnGgU51CnR/N8XYyb/45l8jb/tzAlZIQoqcca1OE+SBbkm1sf0VB1uO6Le8 TadEOSvssdrJWXTPQekh5+7KlYj1VPP7LUrQ1SmsThz8bdXRkbQRaygw/jRuU78s MMjqyQpZSi0f//Vp/ENQ5FsZ2AAU53/F3rUJQhjBF5V2wVAWiUiMRuIRjXJ+5ueN fWMFcpPpuhLdoHi66c/QdbREcRbxTHNPZpbtnkfio2TSaZx4UnCDZLqsrF0rfpg0 LFv+bbYQBGmCmF9DiJ2J+S4/qKT8iMck7zH6SMTI5S66CpIoctStwETi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSxs0yZBFk09kBeSAwFriPKLrSaMB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVr1oQATb 7+4NI/wi5m74DdCBSpg2aW6gnIrZxZBePHAhXJ7tPExaufFF5/RCNzcxifcbFZ0K jfbz9TIA9vGYZgjwuA8Cx0Wf0mSGRVNtBq+NLZpK96lzrddQbay70P+FXGk+qizx G7KtpWGLqTvn/wfdHeRX4+myy7a0iGKwfSF4rD3W6rZHLi8dBvNY9YhUC5WL1+JK UNjLpNyL70QFJwKyqDebT959vLCanezje6G7DMwQWeoid751XIB6ktLQQN5JJ7ju 7BQ/7bTsMk8NNOQ5c8JnaOOdkqUZUvobwhWBmJe/JC/dymGke4+caKIvcx7g3LAB 2YfpqMXyPDrMfw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:08:25 2025 by rpki-client