This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json) Hash identifier: Vwr4eFDbOOglT3wjXt4xM594/CNQPg8X/d7uBZfoJ8U= Subject key identifier: 89:10:87:DE:A3:41:F9:05:59:61:2B:F0:22:04:14:5D:A4:A4:3F:BD Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Certificate serial: 019B59ACB014A943ED6F53C6A4E2CD763B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft Manifest number: 09AA Signing time: Fri 26 Dec 2025 08:00:48 +0000 Manifest this update: Fri 26 Dec 2025 08:00:48 +0000 Manifest next update: Sat 27 Dec 2025 08:00:48 +0000 Files and hashes: 1: 4XG6DuE-VOpXPlm1OM2r12JgRic.roa (hash: A9cZGvYN3HxFKk3EJisSEe/6Tu/3YVMhQqYAsXSqvsk=) 2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=) 3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: tIJ4Yqq0jP1+iroE/71tw1feC6mInVs+VSxV3dD3Z4M=) 4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:b0:14:a9:43:ed:6f:53:c6:a4:e2:cd:76:3b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Validity Not Before: Dec 26 08:00:48 2025 GMT Not After : Dec 27 08:00:48 2025 GMT Subject: CN=891087dea341f90559612bf02204145da4a43fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:5a:80:2b:55:7f:6e:4b:78:36:25:e2:a8: bc:24:7b:a3:d7:f2:dc:0c:4a:1b:d0:ed:ee:ea:76: c3:3e:62:41:a4:7f:34:a4:14:e4:fe:25:ef:9d:fe: aa:ba:9e:a0:d1:00:b1:7d:83:fa:f4:63:a2:e0:2f: 21:8b:73:e2:92:07:35:72:3f:81:9b:de:21:9f:d8: c6:ac:17:58:1d:a7:a8:3c:cf:27:ee:1f:b8:9c:0d: 67:5a:61:8b:69:3c:07:78:a7:8f:d7:38:fa:8d:a1: c5:0d:6d:54:7d:21:5d:04:62:c5:62:54:6c:f4:63: 93:33:76:f8:c9:04:ed:7f:39:57:64:ce:ac:03:08: ec:82:b9:33:7c:d3:66:ab:83:92:fa:4b:ff:41:80: 6e:cf:f6:7c:2f:a0:b0:29:82:3d:89:5f:bb:d1:15: 39:1c:b8:8a:e0:c3:63:22:57:2b:48:ae:84:bf:6c: cc:8f:fd:de:27:ea:2e:b8:f0:fc:dc:e6:29:60:ef: 8f:51:fd:9b:9f:bd:3c:28:e1:bb:f6:b8:cf:b2:65: 03:63:02:ef:66:23:6c:bd:f0:22:b2:df:3d:51:3a: ca:16:a4:5b:78:83:81:9d:34:17:48:90:d4:05:a6: 19:23:6f:67:91:9f:fa:f5:b7:e8:89:55:94:72:13: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:10:87:DE:A3:41:F9:05:59:61:2B:F0:22:04:14:5D:A4:A4:3F:BD X509v3 Authority Key Identifier: keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:df:3b:cf:21:92:26:0e:57:75:64:56:50:a3:e3:89:be: 6a:81:e8:6b:04:d9:b6:3f:43:1d:ef:a8:e3:a0:97:e2:48:be: 85:62:12:3f:3d:c5:2d:7b:df:ad:f1:6c:6a:0b:1b:cd:5b:1e: 80:0a:d7:ac:f0:17:3d:6d:68:7f:26:9f:16:df:61:46:84:ba: 7c:dd:6b:0c:21:6f:d6:6e:dc:5e:b1:c3:e1:3a:1c:bb:a7:71: ea:96:a6:43:00:a3:0b:b9:72:26:13:30:d9:d6:9f:56:c7:c5: 71:5e:2f:12:17:b9:fc:5c:07:fc:96:1e:b5:52:01:36:dd:c5: 15:57:3d:8f:01:c1:dd:08:65:94:6e:57:bb:18:c1:72:4c:30: 43:06:8c:0d:cd:89:8b:33:86:c0:60:62:97:86:db:7f:a2:6a: 74:f0:47:bb:1e:be:15:0d:74:6e:ad:b7:9e:c4:ad:b5:ae:d7: 89:e4:7a:6f:b7:f7:c7:0f:e2:4f:26:dd:af:10:4a:35:79:8c: 58:b1:2b:0b:07:d0:bf:0e:ca:5a:c1:b4:37:23:ad:65:fe:05: df:d4:a7:57:08:f1:ea:f6:b7:9f:26:c2:7c:b4:3a:40:75:fc: 1f:db:0f:70:ab:cf:ab:b0:20:52:ce:1a:c3:d8:0c:86:3c:2a: e5:b6:c8:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLAUqUPtb1PGpOLNdjuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi ZDM3NDAwHhcNMjUxMjI2MDgwMDQ4WhcNMjUxMjI3MDgwMDQ4WjAzMTEwLwYDVQQD Eyg4OTEwODdkZWEzNDFmOTA1NTk2MTJiZjAyMjA0MTQ1ZGE0YTQzZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5agCtVf25LeDYl4qi8JHuj1/Lc DEob0O3u6nbDPmJBpH80pBTk/iXvnf6qup6g0QCxfYP69GOi4C8hi3Pikgc1cj+B m94hn9jGrBdYHaeoPM8n7h+4nA1nWmGLaTwHeKeP1zj6jaHFDW1UfSFdBGLFYlRs 9GOTM3b4yQTtfzlXZM6sAwjsgrkzfNNmq4OS+kv/QYBuz/Z8L6CwKYI9iV+70RU5 HLiK4MNjIlcrSK6Ev2zMj/3eJ+ouuPD83OYpYO+PUf2bn708KOG79rjPsmUDYwLv ZiNsvfAist89UTrKFqRbeIOBnTQXSJDUBaYZI29nkZ/69bfoiVWUchNXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkQh96jQfkFWWEr8CIEFF2kpD+9MB8GA1UdIwQY MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7TfO88h kiYOV3VkVlCj44m+aoHoawTZtj9DHe+o46CX4ki+hWISPz3FLXvfrfFsagsbzVse gArXrPAXPW1ofyafFt9hRoS6fN1rDCFv1m7cXrHD4Tocu6dx6pamQwCjC7lyJhMw 2dafVsfFcV4vEhe5/FwH/JYetVIBNt3FFVc9jwHB3QhllG5XuxjBckwwQwaMDc2J izOGwGBil4bbf6JqdPBHux6+FQ10bq23nsStta7XieR6b7f3xw/iTybdrxBKNXmM WLErCwfQvw7KWsG0NyOtZf4F39SnVwjx6va3nybCfLQ6QHX8H9sPcKvPq7AgUs4a w9gMhjwq5bbIQA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client