This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json) Hash identifier: NLEKTT9870A21cQ5Ep2/q8UVmRVb0P43q2375Ms8VI4= Subject key identifier: 83:25:4A:E6:EB:7E:47:6B:8B:64:D4:C3:BD:1B:09:82:05:E7:08:49 Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1 Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1 Certificate serial: 019B2098AB0F669726DA5CEBD693E3DEC47D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft Manifest number: 169E Signing time: Mon 15 Dec 2025 06:00:34 +0000 Manifest this update: Mon 15 Dec 2025 06:00:34 +0000 Manifest next update: Tue 16 Dec 2025 06:00:34 +0000 Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=) 2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=) 3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: QjauHT872BIbe1egPyuy4ZFjq/yNMKQTsXrJH9FiVhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:ab:0f:66:97:26:da:5c:eb:d6:93:e3:de:c4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1 Validity Not Before: Dec 15 06:00:34 2025 GMT Not After : Dec 16 06:00:34 2025 GMT Subject: CN=83254ae6eb7e476b8b64d4c3bd1b098205e70849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:79:21:69:0f:50:77:5d:e9:07:f0:76:b1: 15:2c:36:4b:f9:6b:0d:d6:4c:3b:f2:39:f2:b8:47: ec:cb:ba:1e:e7:80:26:31:f5:c9:95:eb:f4:f8:69: dc:c7:41:98:32:d2:b2:bc:e2:97:ad:3e:31:29:a2: 0a:d6:19:70:c8:98:cc:01:38:97:6f:2f:22:c0:bf: 19:9e:d1:2e:d2:dc:2c:6f:77:5c:3f:5b:6d:f7:3d: ca:85:0e:7d:a0:77:39:03:0f:16:75:03:4c:f6:05: 9a:cc:64:3c:75:b5:42:66:e2:cc:40:77:6a:0c:57: 7e:db:fd:6c:87:03:5b:b7:f1:b3:78:e0:e4:13:96: 89:7c:74:da:e3:c6:78:8a:df:c8:c9:4f:5e:99:20: 5b:1d:4b:66:f5:4d:42:26:0d:8f:90:45:b5:90:cc: 67:2c:96:92:81:32:1b:ed:ab:9d:33:c5:03:b5:77: e5:30:03:3f:01:49:9f:23:a2:ab:62:eb:04:20:05: 11:96:aa:b0:a2:39:15:b9:cd:53:d6:0f:81:47:38: 6d:ea:2a:84:38:bd:28:eb:f6:d0:08:81:2d:c6:b9: 84:39:f3:4b:70:ee:df:1f:ab:b4:4f:9b:95:31:f6: 65:6d:d9:3d:fe:6d:7b:a9:0b:1f:9e:19:5b:45:0b: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:4A:E6:EB:7E:47:6B:8B:64:D4:C3:BD:1B:09:82:05:E7:08:49 X509v3 Authority Key Identifier: keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9a:03:b1:1a:12:5c:e3:15:f0:95:1a:ed:7e:d8:4c:99:65: 53:a6:65:fe:49:d0:1d:f8:2a:1e:e8:6b:7c:6f:e9:40:40:db: cd:56:f2:dc:64:a4:d1:b7:d2:6c:7a:9a:a9:e6:98:86:c6:36: 6f:f8:04:3b:7c:f4:9f:dc:45:28:94:ec:bb:51:e6:25:b8:d4: b9:20:92:e5:d8:f1:7d:96:61:0f:b3:de:48:eb:3e:da:92:e8: a0:b5:73:ce:cf:bf:c6:97:fe:f7:3b:62:46:31:5e:1f:a1:0f: be:36:13:3f:e5:84:8f:b7:22:a0:5d:09:29:0b:d5:03:ef:a4: 9a:7c:a3:ad:6e:b1:75:3b:c4:17:e4:d9:30:a2:c2:3d:fc:de: 67:2a:13:ce:30:c5:7c:a5:2f:cd:f6:b5:fe:7e:e9:60:3f:5e: dd:19:a9:d4:b3:a1:77:f5:ea:38:03:14:5b:49:98:6e:bd:74: e2:e2:4d:c8:a8:75:dd:5e:89:5e:08:e5:4f:df:ad:9e:29:ef: d3:6c:40:42:59:a7:83:50:e8:cd:51:44:50:56:5e:2b:41:b9: 3e:2a:50:35:c6:fa:0e:b2:08:5b:dd:00:8b:80:0f:c4:11:37: f4:3c:5c:7a:d5:e7:a6:bd:33:6f:2d:69:13:89:b4:31:e9:12: 99:71:63:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmKsPZpcm2lzr1pPj3sR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0 ZGM3YjEwHhcNMjUxMjE1MDYwMDM0WhcNMjUxMjE2MDYwMDM0WjAzMTEwLwYDVQQD Eyg4MzI1NGFlNmViN2U0NzZiOGI2NGQ0YzNiZDFiMDk4MjA1ZTcwODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Z5IWkPUHdd6QfwdrEVLDZL+WsN 1kw78jnyuEfsy7oe54AmMfXJlev0+Gncx0GYMtKyvOKXrT4xKaIK1hlwyJjMATiX by8iwL8ZntEu0twsb3dcP1tt9z3KhQ59oHc5Aw8WdQNM9gWazGQ8dbVCZuLMQHdq DFd+2/1shwNbt/GzeODkE5aJfHTa48Z4it/IyU9emSBbHUtm9U1CJg2PkEW1kMxn LJaSgTIb7audM8UDtXflMAM/AUmfI6KrYusEIAURlqqwojkVuc1T1g+BRzht6iqE OL0o6/bQCIEtxrmEOfNLcO7fH6u0T5uVMfZlbdk9/m17qQsfnhlbRQu3DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMlSubrfkdri2TUw70bCYIF5whJMB8GA1UdIwQY MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct OWIzZGQ0MTdjMzA4LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4 LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5oDsRoS XOMV8JUa7X7YTJllU6Zl/knQHfgqHuhrfG/pQEDbzVby3GSk0bfSbHqaqeaYhsY2 b/gEO3z0n9xFKJTsu1HmJbjUuSCS5djxfZZhD7PeSOs+2pLooLVzzs+/xpf+9zti RjFeH6EPvjYTP+WEj7cioF0JKQvVA++kmnyjrW6xdTvEF+TZMKLCPfzeZyoTzjDF fKUvzfa1/n7pYD9e3Rmp1LOhd/XqOAMUW0mYbr104uJNyKh13V6JXgjlT9+tninv 02xAQlmng1DozVFEUFZeK0G5PipQNcb6DrIIW90Ai4APxBE39DxcetXnpr0zby1p E4m0MekSmXFjpw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:22:08 2025 by rpki-client