This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json) Hash identifier: 22SNNAP1jsubgijm242Vn5NU8rRXTExyoVU7wTi57OQ= Subject key identifier: 6E:24:8F:FE:BA:5E:F4:69:01:6D:1F:8F:A9:18:46:EF:BF:66:4A:5E Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Certificate serial: 019B104A153808AF42AAA4DD26B8393E619B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft Manifest number: 14AB Signing time: Fri 12 Dec 2025 02:00:49 +0000 Manifest this update: Fri 12 Dec 2025 02:00:49 +0000 Manifest next update: Sat 13 Dec 2025 02:00:49 +0000 Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=) 2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: HFcqLY4XNp9DmPxKwORCKRtRbL0XNcP9ZPwt8AwS+Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:15:38:08:af:42:aa:a4:dd:26:b8:39:3e:61:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Validity Not Before: Dec 12 02:00:49 2025 GMT Not After : Dec 13 02:00:49 2025 GMT Subject: CN=6e248ffeba5ef469016d1f8fa91846efbf664a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:94:eb:1a:90:d0:7a:d3:de:ab:08:4a:c2: 5e:a3:a9:72:22:3e:57:1c:27:bc:27:83:99:7b:ce: 89:d4:43:44:3b:54:27:54:55:7b:b4:d9:6d:52:20: f0:fc:83:2e:c8:c3:c4:e2:d3:35:87:a7:f1:30:15: ae:06:be:d1:70:ed:bd:43:8d:94:44:0e:8c:31:dc: eb:73:89:bc:71:5c:aa:a9:64:88:4a:95:31:9f:52: 4a:98:9d:c4:ad:01:34:50:c2:bb:c1:fc:8e:2d:0b: a0:4d:79:ba:c0:b0:94:50:1b:7d:5a:f0:1d:25:1b: bd:5e:4a:6d:e2:2d:26:7c:e3:b6:af:5f:62:85:25: 38:54:a3:f3:ab:1d:ac:5f:42:e1:32:61:d8:c6:d5: 6f:55:f3:b2:1a:db:b9:8f:6e:50:dd:f3:e8:0d:03: 1f:5c:d3:1c:fa:74:b1:70:6e:8f:54:19:47:0e:e6: 9c:73:48:d5:07:61:8a:0b:0e:c1:f7:57:43:53:9a: 46:72:7b:37:81:9b:41:da:0c:59:23:00:b6:76:89: 76:66:85:21:5a:0c:ef:1f:95:1d:3c:aa:d8:ce:06: 31:7b:60:8a:6a:ec:07:40:0d:55:a7:df:43:97:d0: b8:0e:49:97:05:18:83:22:12:0b:1b:ed:a1:49:9e: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:8F:FE:BA:5E:F4:69:01:6D:1F:8F:A9:18:46:EF:BF:66:4A:5E X509v3 Authority Key Identifier: keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:93:fc:37:70:8c:8c:49:d2:f3:cc:1c:c1:e2:50:7e:35:0e: 50:bd:91:6e:a6:72:6d:b8:17:b2:f2:32:aa:73:89:be:46:a8: 7b:04:3c:37:10:2e:15:f9:48:bb:27:c1:3c:82:d9:f9:4e:5f: c9:bc:a1:b6:5a:ba:0b:e0:43:e0:a8:97:9d:31:41:eb:9e:6a: 4f:1e:15:24:82:14:7d:34:6a:ae:f3:d8:f8:81:73:61:d1:78: 60:0f:3e:dd:13:7a:79:a0:53:df:99:44:39:65:96:23:59:97: 75:1f:d2:25:c1:33:91:ac:14:75:b5:3a:bc:ba:2a:ea:4d:0e: 85:7c:8f:34:53:31:d1:e7:ca:ac:42:d1:3a:a7:75:90:f8:d2: de:dd:d1:26:d7:93:68:e6:97:27:c4:e0:fd:61:e5:dd:04:32: 8e:7f:4e:51:68:fa:e0:34:52:73:04:85:86:74:cb:99:20:99: 86:0a:42:9b:87:31:f5:bd:32:05:49:d1:52:62:66:2d:39:9c: 5c:27:d0:ff:df:98:69:41:13:ab:60:bc:3d:30:4e:20:dd:cb: b9:10:7c:2c:86:17:a3:06:81:6d:6e:9e:1f:e7:e0:30:19:df: 78:0c:14:12:48:80:57:54:65:97:ce:5c:37:7b:48:2d:ea:bc: 77:d1:e6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQShU4CK9CqqTdJrg5PmGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw YTVmZDQwHhcNMjUxMjEyMDIwMDQ5WhcNMjUxMjEzMDIwMDQ5WjAzMTEwLwYDVQQD Eyg2ZTI0OGZmZWJhNWVmNDY5MDE2ZDFmOGZhOTE4NDZlZmJmNjY0YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuteU6xqQ0HrT3qsISsJeo6lyIj5X HCe8J4OZe86J1ENEO1QnVFV7tNltUiDw/IMuyMPE4tM1h6fxMBWuBr7RcO29Q42U RA6MMdzrc4m8cVyqqWSISpUxn1JKmJ3ErQE0UMK7wfyOLQugTXm6wLCUUBt9WvAd JRu9Xkpt4i0mfOO2r19ihSU4VKPzqx2sX0LhMmHYxtVvVfOyGtu5j25Q3fPoDQMf XNMc+nSxcG6PVBlHDuacc0jVB2GKCw7B91dDU5pGcns3gZtB2gxZIwC2dol2ZoUh WgzvH5UdPKrYzgYxe2CKauwHQA1Vp99Dl9C4DkmXBRiDIhILG+2hSZ7jSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4kj/66XvRpAW0fj6kYRu+/ZkpeMB8GA1UdIwQY MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt YjhlZDY2ZDQyNzgyLzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZP8N3CM jEnS88wcweJQfjUOUL2RbqZybbgXsvIyqnOJvkaoewQ8NxAuFflIuyfBPILZ+U5f ybyhtlq6C+BD4KiXnTFB655qTx4VJIIUfTRqrvPY+IFzYdF4YA8+3RN6eaBT35lE OWWWI1mXdR/SJcEzkawUdbU6vLoq6k0OhXyPNFMx0efKrELROqd1kPjS3t3RJteT aOaXJ8Tg/WHl3QQyjn9OUWj64DRScwSFhnTLmSCZhgpCm4cx9b0yBUnRUmJmLTmc XCfQ/9+YaUETq2C8PTBOIN3LuRB8LIYXowaBbW6eH+fgMBnfeAwUEkiAV1Rll85c N3tILeq8d9HmyA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:54:38 2025 by rpki-client