This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json) Hash identifier: JgVhAomwN5lyI2iduySTjBtB3cA01fATcOakWGQNnzk= Subject key identifier: 94:1C:0A:AE:B9:BD:5E:B1:4F:C8:01:F6:7B:E5:32:EE:4A:41:AF:C8 Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009 Certificate serial: 019B59767004CADA10E4BAFBDA6EF06197C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:32 +0000 Manifest this update: Fri 26 Dec 2025 07:01:32 +0000 Manifest next update: Sat 27 Dec 2025 07:01:32 +0000 Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=) 2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: 1lpoz5F2w1fO7zVDjtmY2ZHMAi4EwDVAfNEJFvT1+J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:70:04:ca:da:10:e4:ba:fb:da:6e:f0:61:97:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009 Validity Not Before: Dec 26 07:01:32 2025 GMT Not After : Dec 27 07:01:32 2025 GMT Subject: CN=941c0aaeb9bd5eb14fc801f67be532ee4a41afc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:7c:2e:b0:f1:be:da:77:02:8b:21:83:2f: 79:b2:1f:68:4c:d1:0a:7a:b5:3c:59:e2:1c:74:aa: 91:25:20:1c:6b:b2:b0:dc:5b:99:5d:81:ec:66:51: 3e:a3:9d:ca:d1:81:21:29:d8:42:12:1b:af:fc:95: 9b:18:f5:10:8f:fa:5e:be:1b:c8:df:86:7d:f9:b7: 5b:82:25:08:72:ff:f0:d0:04:74:16:b8:cd:b9:72: 81:5e:a0:6f:e2:04:55:7f:53:72:83:06:c1:69:38: be:7b:e9:f9:00:76:9e:e9:5b:a9:92:3b:e1:fb:96: a7:b3:ba:f5:ec:0e:8f:7f:fc:9c:e4:d2:a3:8f:59: d1:60:fa:89:38:05:4d:87:cb:13:be:5f:12:30:b8: 93:c3:d6:f4:2a:9d:72:95:45:dc:21:e5:32:75:5e: 5e:1a:75:53:64:01:3f:50:34:e1:3b:58:00:2c:ef: 82:2f:bb:58:83:6e:a9:56:79:cf:08:4a:51:61:f3: 97:e0:39:87:d2:a1:a7:f4:9a:06:15:1d:27:8c:f7: ad:c1:0c:2f:ad:4d:fb:d8:64:4b:cf:5a:42:65:65: d1:3d:c8:3d:aa:19:49:8a:72:27:01:5c:a7:de:3a: 97:a9:ef:40:3e:a3:85:42:96:2c:3e:8c:d9:95:61: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:0A:AE:B9:BD:5E:B1:4F:C8:01:F6:7B:E5:32:EE:4A:41:AF:C8 X509v3 Authority Key Identifier: keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9d:89:17:87:31:d2:90:b0:81:f4:28:b5:dc:f9:42:73:79: ba:d7:7b:17:7c:0f:fa:7e:db:b3:ed:72:14:44:7f:b4:e7:14: ef:f0:6b:42:13:aa:ef:84:a2:b8:16:fc:de:d9:f0:01:8a:41: 73:c6:62:57:2c:5c:28:0c:f3:77:ff:22:05:db:16:49:39:f5: e2:99:ed:d3:d1:a2:46:27:e5:7b:6d:a0:6c:7d:fd:76:82:57: 57:6e:ef:3b:9b:0c:a5:a4:b4:22:0a:c6:89:3b:51:2e:6b:ba: d0:6a:db:03:17:05:35:92:1d:0a:c7:70:80:ec:39:95:f8:cb: fe:81:b9:38:4b:f0:64:31:55:0e:60:ba:7a:7a:ea:de:e2:9e: b0:87:a8:38:49:9d:e7:11:84:45:bb:03:f0:da:60:25:93:61: e7:7a:15:71:83:6c:33:fd:5a:2d:92:d7:48:da:ae:a8:54:7c: 07:16:f6:e6:1a:ad:24:af:e4:47:b9:94:a9:e0:92:fe:be:c3: 35:da:75:66:90:e7:74:a0:29:6d:22:b1:42:69:c2:b2:1a:fc: 14:14:a4:2d:4c:23:b0:5f:25:44:6c:1c:54:b3:a9:ce:05:1f: 93:b9:af:24:ab:b7:9e:0b:3c:cb:6c:31:5b:b8:50:66:0f:3a: 1b:02:4a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnAEytoQ5Lr72m7wYZfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMmJiMTFkMDE5NTU3ZTEyZjVmYjZlYjkwMzgzNzQyMTE2 MGQwMDkwHhcNMjUxMjI2MDcwMTMyWhcNMjUxMjI3MDcwMTMyWjAzMTEwLwYDVQQD Eyg5NDFjMGFhZWI5YmQ1ZWIxNGZjODAxZjY3YmU1MzJlZTRhNDFhZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnt8LrDxvtp3Aoshgy95sh9oTNEK erU8WeIcdKqRJSAca7Kw3FuZXYHsZlE+o53K0YEhKdhCEhuv/JWbGPUQj/pevhvI 34Z9+bdbgiUIcv/w0AR0FrjNuXKBXqBv4gRVf1NygwbBaTi+e+n5AHae6Vupkjvh +5ans7r17A6Pf/yc5NKjj1nRYPqJOAVNh8sTvl8SMLiTw9b0Kp1ylUXcIeUydV5e GnVTZAE/UDThO1gALO+CL7tYg26pVnnPCEpRYfOX4DmH0qGn9JoGFR0njPetwQwv rU372GRLz1pCZWXRPcg9qhlJinInAVyn3jqXqe9APqOFQpYsPozZlWG5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQcCq65vV6xT8gB9nvlMu5KQa/IMB8GA1UdIwQY MBaAFKArsR0BlVfhL1+265A4N0IRYNAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUt N2JkM2FiNzNlMTcyLzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUtN2JkM2FiNzNlMTcy LzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJ2JF4cx 0pCwgfQotdz5QnN5utd7F3wP+n7bs+1yFER/tOcU7/BrQhOq74SiuBb83tnwAYpB c8ZiVyxcKAzzd/8iBdsWSTn14pnt09GiRifle22gbH39doJXV27vO5sMpaS0IgrG iTtRLmu60GrbAxcFNZIdCsdwgOw5lfjL/oG5OEvwZDFVDmC6enrq3uKesIeoOEmd 5xGERbsD8NpgJZNh53oVcYNsM/1aLZLXSNquqFR8Bxb25hqtJK/kR7mUqeCS/r7D Ndp1ZpDndKApbSKxQmnCshr8FBSkLUwjsF8lRGwcVLOpzgUfk7mvJKu3ngs8y2wx W7hQZg86GwJKVw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:50 2025 by rpki-client