This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json) Hash identifier: Eua8ARoY65IhwR+rab0AvwzTAwSXUGgAH5vwsi65Lt4= Subject key identifier: CB:77:30:CA:4B:20:E9:9E:CF:F3:F0:BB:17:91:24:89:A7:51:72:9A Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Certificate serial: 019B4091AFCA9C4A5EBC187EEB78F4883AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft Manifest number: 14C4 Signing time: Sun 21 Dec 2025 11:00:47 +0000 Manifest this update: Sun 21 Dec 2025 11:00:47 +0000 Manifest next update: Mon 22 Dec 2025 11:00:47 +0000 Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=) 2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: k7hC8+5SDMI9q2SDTMFK67Jac35ifnU2lxoSPamVm6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:af:ca:9c:4a:5e:bc:18:7e:eb:78:f4:88:3a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Validity Not Before: Dec 21 11:00:47 2025 GMT Not After : Dec 22 11:00:47 2025 GMT Subject: CN=cb7730ca4b20e99ecff3f0bb17912489a751729a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:cb:91:de:66:4b:42:13:b7:e2:00:53:b6: 75:14:1e:5f:87:d0:e8:c5:74:70:ad:d8:e3:c5:e1: 87:01:06:82:fe:0e:f2:e0:e2:16:cb:29:85:05:9c: bc:c9:15:c3:76:56:90:6a:ac:53:18:a5:2f:76:0c: 00:15:dc:80:c9:3e:d5:4e:77:a8:3c:32:f2:99:63: e4:f4:c6:24:2d:c7:62:26:98:57:04:29:0b:7b:d0: bb:ba:5d:37:c4:13:46:a0:f1:7e:d1:a6:62:92:b3: ea:c4:98:78:cc:b8:98:aa:35:64:9a:03:ee:ae:ef: 5a:15:c2:b6:af:14:d8:c1:d5:de:5e:19:e5:75:3f: 92:6d:60:6a:54:98:59:2f:45:d9:cc:ff:19:4c:dd: c1:e2:12:2e:31:d3:15:ef:f7:11:18:cd:df:fe:62: dc:a9:ed:9a:89:3b:65:e0:6f:2a:3a:d4:7e:dc:42: 39:5a:27:29:d8:a5:48:8b:b8:63:24:0c:ae:6d:57: d5:0c:ae:ea:d6:4b:38:27:bf:7b:b2:8b:c6:e2:e8: 71:86:8a:01:b8:07:06:94:f0:5a:1b:6b:49:36:ff: d1:80:4c:ce:53:58:df:8a:bd:05:db:5e:8b:c3:5c: c7:06:4c:68:7e:c3:e8:b1:0d:33:43:b6:aa:d9:f7: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:30:CA:4B:20:E9:9E:CF:F3:F0:BB:17:91:24:89:A7:51:72:9A X509v3 Authority Key Identifier: keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:3d:32:f7:d0:82:c6:0c:c8:50:66:df:ea:67:29:99:8c:3e: 55:58:f8:9a:e3:67:ba:c5:17:02:1e:a1:62:36:08:8a:fa:4e: db:4c:46:3c:b6:d8:70:0f:9b:05:c8:8f:c2:be:71:bb:c4:54: e3:96:1c:43:35:98:8a:b6:ca:9e:f9:39:38:ce:c9:0b:0d:c8: f9:ae:89:aa:d7:ea:71:14:0c:aa:c1:35:d1:6f:26:0d:34:77: 2d:c9:97:60:e8:d9:b5:50:1c:8c:70:ef:dc:22:37:9e:89:ad: 5a:2d:e4:d1:7c:ad:0d:ce:07:98:8f:d7:49:da:3f:86:8a:2d: ef:1c:df:98:55:82:a8:e6:cd:67:9b:c3:13:f3:89:65:62:93: 4f:36:9c:56:1c:be:64:aa:28:f0:8e:31:a6:55:a3:db:58:90: 4d:76:94:9f:36:68:13:cf:91:9e:74:4e:7c:fc:e9:74:e5:40: 37:f8:44:02:de:f5:97:c1:ce:6d:54:2b:e9:48:85:a4:fe:d3: b2:b9:5a:af:c9:29:5b:45:f9:46:e3:e7:5e:05:e9:29:93:b2: ee:ce:b2:92:72:ed:90:d3:b3:30:16:16:ae:a4:fc:24:ea:19: 2f:d2:a1:dd:cf:f9:f4:92:e6:e4:48:8b:5a:ff:04:9c:76:6b: 73:57:78:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAka/KnEpevBh+63j0iDrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw YTVmZDQwHhcNMjUxMjIxMTEwMDQ3WhcNMjUxMjIyMTEwMDQ3WjAzMTEwLwYDVQQD EyhjYjc3MzBjYTRiMjBlOTllY2ZmM2YwYmIxNzkxMjQ4OWE3NTE3MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozrLkd5mS0ITt+IAU7Z1FB5fh9Do xXRwrdjjxeGHAQaC/g7y4OIWyymFBZy8yRXDdlaQaqxTGKUvdgwAFdyAyT7VTneo PDLymWPk9MYkLcdiJphXBCkLe9C7ul03xBNGoPF+0aZikrPqxJh4zLiYqjVkmgPu ru9aFcK2rxTYwdXeXhnldT+SbWBqVJhZL0XZzP8ZTN3B4hIuMdMV7/cRGM3f/mLc qe2aiTtl4G8qOtR+3EI5Wicp2KVIi7hjJAyubVfVDK7q1ks4J797sovG4uhxhooB uAcGlPBaG2tJNv/RgEzOU1jfir0F216Lw1zHBkxofsPosQ0zQ7aq2fd7RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt3MMpLIOmez/PwuxeRJImnUXKaMB8GA1UdIwQY MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt YjhlZDY2ZDQyNzgyLzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxT0y99CC xgzIUGbf6mcpmYw+VVj4muNnusUXAh6hYjYIivpO20xGPLbYcA+bBciPwr5xu8RU 45YcQzWYirbKnvk5OM7JCw3I+a6JqtfqcRQMqsE10W8mDTR3LcmXYOjZtVAcjHDv 3CI3nomtWi3k0XytDc4HmI/XSdo/hoot7xzfmFWCqObNZ5vDE/OJZWKTTzacVhy+ ZKoo8I4xplWj21iQTXaUnzZoE8+RnnROfPzpdOVAN/hEAt71l8HObVQr6UiFpP7T srlar8kpW0X5RuPnXgXpKZOy7s6yknLtkNOzMBYWrqT8JOoZL9Kh3c/59JLm5EiL Wv8EnHZrc1d4mQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:59 2025 by rpki-client