This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json) Hash identifier: oWrLxKNoxVHNDZ/efuUNHhWSKGqSapZBPf8iR77Px74= Subject key identifier: 4F:63:7A:CE:7D:4C:CE:64:07:A1:74:F2:76:50:43:55:FB:F3:45:38 Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Certificate serial: 019B1125F6E05B63C7D1A95C2748635C3434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft Manifest number: 02E1 Signing time: Fri 12 Dec 2025 06:00:59 +0000 Manifest this update: Fri 12 Dec 2025 06:00:59 +0000 Manifest next update: Sat 13 Dec 2025 06:00:59 +0000 Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=) 2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: EonMrYLlH1kU4vNZdPB5JlS0MnaZoqZMg8OJS9CYcVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:f6:e0:5b:63:c7:d1:a9:5c:27:48:63:5c:34:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Validity Not Before: Dec 12 06:00:59 2025 GMT Not After : Dec 13 06:00:59 2025 GMT Subject: CN=4f637ace7d4cce6407a174f276504355fbf34538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ec:ba:dc:d8:24:7b:af:94:53:fe:5d:33:f3: a7:1b:6b:9f:f0:49:60:a1:94:fe:50:c9:86:33:87: 69:37:47:d0:c4:e4:ee:00:74:b4:bd:55:0d:f8:99: de:02:0a:61:86:f2:c5:42:bf:8d:33:7b:30:62:44: ca:b4:cc:1e:53:bf:de:cc:9c:10:6e:47:e3:fb:2b: 8a:15:b4:6f:65:66:18:b4:26:19:15:47:b6:de:a8: e9:1e:be:86:fa:61:ea:70:dd:32:5c:90:b2:0d:d4: 2b:83:35:3d:dd:c8:aa:f2:8d:48:da:0b:23:f8:a1: ff:de:05:bc:4c:7d:97:50:d7:79:ba:9d:61:29:71: 39:8d:15:fe:47:86:dd:3f:94:ea:76:89:20:9c:ee: 2e:6e:38:74:42:4c:8c:3d:42:c5:2d:a2:9e:ff:bc: 92:a6:0b:91:ee:d9:5e:dc:8c:bd:94:77:5f:3b:0c: 6b:14:cc:05:e7:04:92:f3:ff:ad:8f:bf:60:9c:2c: 9f:24:2c:ed:bc:1b:7d:4a:77:9f:05:15:11:dd:d6: c5:a5:88:89:6c:45:38:70:b2:81:d6:c5:ab:e0:4a: 47:3c:b7:af:48:2d:69:aa:2d:cf:2e:31:d0:9f:c6: c9:89:ef:fc:8c:c9:82:a7:c8:6b:4b:38:e3:b2:97: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:7A:CE:7D:4C:CE:64:07:A1:74:F2:76:50:43:55:FB:F3:45:38 X509v3 Authority Key Identifier: keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e5:25:3e:6c:af:7e:40:45:77:94:07:df:f1:23:7a:10:6e: 25:b8:58:b6:1a:9b:f2:dc:a5:be:ff:63:0d:ee:d6:8d:7e:18: e6:a2:6b:f4:c2:66:cc:93:1f:31:28:6e:83:87:d5:2c:8d:7c: 49:2c:db:b3:48:a3:f7:a1:b6:57:8f:e6:5e:b0:a9:15:6a:e4: 20:13:da:a3:b4:c2:e9:b5:f8:94:a9:e1:85:a9:8a:ec:d2:22: fb:8a:6a:06:f5:74:ce:b2:0b:56:c7:92:e9:be:7b:f2:b3:b1: 12:92:48:7b:ec:1e:e8:e7:33:4f:97:4b:67:ca:e1:82:26:5d: d3:0a:f8:58:61:e1:d2:79:01:20:0f:02:fa:02:0a:eb:38:eb: bb:9c:fe:6c:4e:fd:4d:63:11:1e:28:05:7e:d5:ac:20:7c:03: de:4d:59:e7:18:0c:29:9a:39:87:d2:77:19:1e:3c:c4:05:fc: 25:6c:b7:ed:35:2e:bf:77:d2:d7:51:cc:fb:4b:03:cf:db:eb: 62:94:5e:2a:84:1a:6a:fc:75:df:93:03:fe:84:ef:50:0e:dc: a6:d5:e5:11:ae:41:ca:d4:52:56:cb:7a:68:70:49:dd:87:27: c0:80:d3:08:9b:c4:cd:c0:ff:7e:14:b6:bf:ba:29:fc:b2:1e: a9:a7:95:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJfbgW2PH0alcJ0hjXDQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk MmFhMzgwHhcNMjUxMjEyMDYwMDU5WhcNMjUxMjEzMDYwMDU5WjAzMTEwLwYDVQQD Eyg0ZjYzN2FjZTdkNGNjZTY0MDdhMTc0ZjI3NjUwNDM1NWZiZjM0NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Oy63Ngke6+UU/5dM/OnG2uf8Elg oZT+UMmGM4dpN0fQxOTuAHS0vVUN+JneAgphhvLFQr+NM3swYkTKtMweU7/ezJwQ bkfj+yuKFbRvZWYYtCYZFUe23qjpHr6G+mHqcN0yXJCyDdQrgzU93ciq8o1I2gsj +KH/3gW8TH2XUNd5up1hKXE5jRX+R4bdP5TqdokgnO4ubjh0QkyMPULFLaKe/7yS pguR7tle3Iy9lHdfOwxrFMwF5wSS8/+tj79gnCyfJCztvBt9SnefBRUR3dbFpYiJ bEU4cLKB1sWr4EpHPLevSC1pqi3PLjHQn8bJie/8jMmCp8hrSzjjspfa4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9jes59TM5kB6F08nZQQ1X780U4MB8GA1UdIwQY MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt Y2YzMDVjNTQzOTNlLzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+UlPmyv fkBFd5QH3/EjehBuJbhYthqb8tylvv9jDe7WjX4Y5qJr9MJmzJMfMShug4fVLI18 SSzbs0ij96G2V4/mXrCpFWrkIBPao7TC6bX4lKnhhamK7NIi+4pqBvV0zrILVseS 6b578rOxEpJIe+we6OczT5dLZ8rhgiZd0wr4WGHh0nkBIA8C+gIK6zjru5z+bE79 TWMRHigFftWsIHwD3k1Z5xgMKZo5h9J3GR48xAX8JWy37TUuv3fS11HM+0sDz9vr YpReKoQaavx135MD/oTvUA7cptXlEa5BytRSVst6aHBJ3YcnwIDTCJvEzcD/fhS2 v7op/LIeqaeVeQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:52 2025 by rpki-client