This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json) Hash identifier: pHPAL6GsoX7jdKmmGzAu8yRFuXXosxgP1+Por2W0umw= Subject key identifier: 15:2F:19:8C:28:D7:61:B2:4F:89:0B:77:0F:3D:F5:2A:8B:95:09:36 Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8 Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8 Certificate serial: 019B5B64C34FE891C43690A65BBCF6B4D7BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft Manifest number: 024D Signing time: Fri 26 Dec 2025 16:01:28 +0000 Manifest this update: Fri 26 Dec 2025 16:01:28 +0000 Manifest next update: Sat 27 Dec 2025 16:01:28 +0000 Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=) 2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: dBnWJ3zAz8LGr685xeEfLlRxrDEtA4pm8sEhuPie/2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:c3:4f:e8:91:c4:36:90:a6:5b:bc:f6:b4:d7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8 Validity Not Before: Dec 26 16:01:28 2025 GMT Not After : Dec 27 16:01:28 2025 GMT Subject: CN=152f198c28d761b24f890b770f3df52a8b950936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:74:a8:e9:22:0f:52:b8:a6:63:4d:95:71: 4a:5c:be:af:09:51:3f:da:da:d0:04:4b:78:85:5a: 1b:8e:53:4a:aa:7e:5a:62:bb:c0:18:82:97:88:8e: 13:48:95:3f:3d:cd:21:7c:06:2b:82:bd:e4:b3:ad: 42:f0:cd:b1:82:ac:bc:6e:cd:7d:d4:ea:97:b7:51: 44:02:69:5d:12:70:3e:5f:13:50:94:4b:a2:e5:fe: a7:db:e2:2d:c9:82:b0:e0:03:af:e3:a6:ef:2f:9a: 80:f2:6e:96:7f:57:df:c5:17:9a:1f:d9:36:a3:f7: 37:d0:43:fc:b7:10:36:aa:84:94:91:7d:ec:56:f5: e4:cf:2a:88:ab:0a:3c:80:37:da:74:61:5b:55:9e: b8:55:5b:88:67:85:16:7f:af:4f:8d:03:bd:9d:61: 5f:d7:5e:d4:a6:66:fb:57:8f:70:ba:1e:00:96:a3: 71:86:ef:8d:2c:e3:67:c9:c9:43:ce:3f:14:d8:a5: 91:31:27:e8:1f:45:dc:24:be:36:69:e1:81:e2:20: 21:6a:00:7a:c2:da:78:74:d8:31:39:16:69:80:b2: d6:09:1d:32:6d:e2:e5:ea:b3:88:2d:54:bf:0b:bc: a1:e3:99:44:01:ac:a7:50:18:2e:eb:01:a8:21:48: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2F:19:8C:28:D7:61:B2:4F:89:0B:77:0F:3D:F5:2A:8B:95:09:36 X509v3 Authority Key Identifier: keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ba:5e:ac:7d:01:c0:39:3c:81:15:5f:34:cb:fc:90:b4:fc: 7f:27:b8:08:fa:af:77:34:dd:a9:b5:b2:f7:5b:51:88:d3:37: 53:aa:18:66:17:60:48:58:eb:55:64:f6:79:5b:87:6b:d3:b5: 9d:39:ff:88:16:8e:53:a6:d3:18:52:7b:2b:44:bf:b4:c5:b9: 36:2a:3b:00:71:40:36:76:61:b2:1d:6e:d9:e2:27:f5:a7:48: dd:69:5c:8b:86:1b:b0:a9:42:d4:7d:47:fb:51:b0:7f:d2:9c: 29:0a:37:d4:d4:a7:54:32:74:a1:9d:b4:67:7b:9a:b7:51:85: ca:de:fe:84:b8:2b:62:ce:2c:2e:b5:01:f9:5d:47:24:28:7c: 3c:2f:83:31:29:3a:42:ee:0b:8f:54:32:57:66:cd:fa:c5:6f: e5:97:a5:41:31:01:71:6e:e2:30:70:14:fc:80:8a:04:35:f5: f2:08:52:8b:77:fb:12:f6:20:f6:dc:1b:ea:6d:bc:fd:f4:10: cd:c4:93:31:d1:db:18:32:de:85:4d:33:26:d6:a6:6b:83:df: 11:94:03:92:8a:0b:db:2b:3f:64:18:b4:85:40:18:6b:b4:50: bb:69:0e:58:fa:32:ca:cc:a5:e2:ee:39:47:cf:83:5e:0f:a8: dc:e7:a9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZMNP6JHENpCmW7z2tNe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGY4ZTI5ZTA0MjBlNzIzZGQxZGM0MThlODcxM2M4ZTk2 MDQzZDgwHhcNMjUxMjI2MTYwMTI4WhcNMjUxMjI3MTYwMTI4WjAzMTEwLwYDVQQD EygxNTJmMTk4YzI4ZDc2MWIyNGY4OTBiNzcwZjNkZjUyYThiOTUwOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OJ0qOkiD1K4pmNNlXFKXL6vCVE/ 2trQBEt4hVobjlNKqn5aYrvAGIKXiI4TSJU/Pc0hfAYrgr3ks61C8M2xgqy8bs19 1OqXt1FEAmldEnA+XxNQlEui5f6n2+ItyYKw4AOv46bvL5qA8m6Wf1ffxReaH9k2 o/c30EP8txA2qoSUkX3sVvXkzyqIqwo8gDfadGFbVZ64VVuIZ4UWf69PjQO9nWFf 117Upmb7V49wuh4AlqNxhu+NLONnyclDzj8U2KWRMSfoH0XcJL42aeGB4iAhagB6 wtp4dNgxORZpgLLWCR0ybeLl6rOILVS/C7yh45lEAaynUBgu6wGoIUhO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUvGYwo12GyT4kLdw899SqLlQk2MB8GA1UdIwQY MBaAFKCPjingQg5yPdHcQY6HE8jpYEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYt YThhYjVkNTczN2RmLzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYtYThhYjVkNTczN2Rm LzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7perH0B wDk8gRVfNMv8kLT8fye4CPqvdzTdqbWy91tRiNM3U6oYZhdgSFjrVWT2eVuHa9O1 nTn/iBaOU6bTGFJ7K0S/tMW5Nio7AHFANnZhsh1u2eIn9adI3Wlci4YbsKlC1H1H +1Gwf9KcKQo31NSnVDJ0oZ20Z3uat1GFyt7+hLgrYs4sLrUB+V1HJCh8PC+DMSk6 Qu4Lj1QyV2bN+sVv5ZelQTEBcW7iMHAU/ICKBDX18ghSi3f7EvYg9twb6m28/fQQ zcSTMdHbGDLehU0zJtama4PfEZQDkooL2ys/ZBi0hUAYa7RQu2kOWPoyysyl4u45 R8+DXg+o3Oep2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:43 2025 by rpki-client