This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json) Hash identifier: /jg1SW+KTsBp8BkcPx7lMtgRoVxQJ5hqzdyc7Sjqmho= Subject key identifier: BA:E1:DF:81:D5:2E:74:F9:C4:83:16:66:8A:47:CA:5C:D9:E5:69:59 Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5 Certificate serial: 019B240793CC6B63997FFE66BF5D7C904421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 22:00:34 +0000 Manifest this update: Mon 15 Dec 2025 22:00:34 +0000 Manifest next update: Tue 16 Dec 2025 22:00:34 +0000 Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=) 2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: vQcxzv0osGHPcC6I5hI4jd60HyAeSuAG2wK8IXk2a7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:93:cc:6b:63:99:7f:fe:66:bf:5d:7c:90:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5 Validity Not Before: Dec 15 22:00:34 2025 GMT Not After : Dec 16 22:00:34 2025 GMT Subject: CN=bae1df81d52e74f9c48316668a47ca5cd9e56959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:4e:ab:38:da:6a:88:05:c7:c8:b9:78:b4: e8:57:d6:8e:b9:14:e5:5c:db:c3:c3:4e:75:d2:c9: 1b:25:d2:7a:61:48:89:4b:a2:e9:5d:f9:2a:2e:02: c3:83:b6:2e:4e:4b:7a:27:d0:ab:fb:64:dd:af:6f: 12:b0:34:c8:d7:9b:35:a0:70:a5:0e:d6:57:b0:4d: eb:23:6b:e9:10:42:f0:c5:f7:ec:50:a0:fe:3b:ba: 5c:fc:9d:ee:46:2b:6b:bf:4d:fd:15:54:f3:4e:35: 6a:ae:01:ed:77:ff:a8:99:b8:50:39:3f:85:a1:29: fd:69:c4:86:d9:81:32:16:44:55:10:6c:37:33:11: f1:57:40:12:b7:a4:8a:9e:6b:c2:3b:34:ee:11:25: 04:0d:c6:86:f0:95:78:4d:a4:a0:41:33:b8:c9:10: cf:0b:97:62:6b:3f:b3:99:ff:e4:af:5c:81:63:96: b0:a3:81:27:00:f0:74:ca:81:65:d3:b4:4b:da:9a: 7e:16:b7:c7:77:3c:fa:09:35:dc:2d:d4:45:43:4e: 53:e8:e1:33:c9:94:18:09:fe:83:d0:00:8a:75:be: 57:54:b9:7a:d7:eb:02:b4:b9:ea:33:3c:a1:1e:9f: 00:ab:ca:2f:88:f6:92:05:c0:2b:6b:58:1c:6f:5e: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:DF:81:D5:2E:74:F9:C4:83:16:66:8A:47:CA:5C:D9:E5:69:59 X509v3 Authority Key Identifier: keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:42:6a:06:ff:0f:e2:a8:a0:0d:11:5a:68:51:1e:18:b4:e2: 49:d2:9a:33:fb:7f:42:c6:61:bb:fa:a5:05:28:12:41:6a:57: bf:87:02:c6:d9:b1:40:17:bf:6f:78:8b:d4:4c:8b:3d:b2:46: 55:5f:95:55:52:9f:ca:0b:47:e6:65:0b:4f:2e:03:78:f5:45: 02:53:77:68:98:92:ab:74:8f:5e:13:ec:50:d0:49:e6:af:2b: 7b:ac:93:97:73:72:42:fc:1e:1a:34:82:3c:1b:4b:c9:c7:2f: 8b:c3:28:ae:5e:8e:99:8f:38:e2:b9:5f:48:d0:3c:75:82:00: 0b:46:a0:a5:1c:e4:bb:e3:5c:18:23:9f:ba:2e:2e:ea:90:cd: 76:63:c1:45:35:4a:30:1b:ab:78:1d:5f:5c:c5:bb:85:fb:65: 19:19:2e:60:0a:83:74:1e:2c:18:c2:3a:ef:55:2e:a6:c8:af: 7f:bd:b2:4d:a8:74:0b:70:31:2f:b8:76:3b:ca:52:67:9c:ed: 35:36:af:05:b4:24:42:62:d6:91:bc:b9:6f:6f:76:29:c6:c4: 29:b9:10:f9:fb:cd:c0:3b:d4:59:3d:69:35:8f:4f:43:ba:c0: 43:a4:24:80:a9:04:c0:52:2e:65:f0:62:aa:fa:f3:41:a9:f0: ab:22:e7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB5PMa2OZf/5mv118kEQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTdkNmEyY2Y0Mjg4MGRiZWJmNDJhMzI1MTkwN2EyMWM5 MWE0YTUwHhcNMjUxMjE1MjIwMDM0WhcNMjUxMjE2MjIwMDM0WjAzMTEwLwYDVQQD EyhiYWUxZGY4MWQ1MmU3NGY5YzQ4MzE2NjY4YTQ3Y2E1Y2Q5ZTU2OTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1pOqzjaaogFx8i5eLToV9aOuRTl XNvDw0510skbJdJ6YUiJS6LpXfkqLgLDg7YuTkt6J9Cr+2Tdr28SsDTI15s1oHCl DtZXsE3rI2vpEELwxffsUKD+O7pc/J3uRitrv039FVTzTjVqrgHtd/+ombhQOT+F oSn9acSG2YEyFkRVEGw3MxHxV0ASt6SKnmvCOzTuESUEDcaG8JV4TaSgQTO4yRDP C5diaz+zmf/kr1yBY5awo4EnAPB0yoFl07RL2pp+FrfHdzz6CTXcLdRFQ05T6OEz yZQYCf6D0ACKdb5XVLl61+sCtLnqMzyhHp8Aq8oviPaSBcAra1gcb143xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrh34HVLnT5xIMWZopHylzZ5WlZMB8GA1UdIwQY MBaAFKCX1qLPQogNvr9CoyUZB6IckaSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt NmZjYWYyNzI5YmU1LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1 LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkJqBv8P 4qigDRFaaFEeGLTiSdKaM/t/QsZhu/qlBSgSQWpXv4cCxtmxQBe/b3iL1EyLPbJG VV+VVVKfygtH5mULTy4DePVFAlN3aJiSq3SPXhPsUNBJ5q8re6yTl3NyQvweGjSC PBtLyccvi8Morl6OmY844rlfSNA8dYIAC0agpRzku+NcGCOfui4u6pDNdmPBRTVK MBureB1fXMW7hftlGRkuYAqDdB4sGMI671Uupsivf72yTah0C3AxL7h2O8pSZ5zt NTavBbQkQmLWkby5b292KcbEKbkQ+fvNwDvUWT1pNY9PQ7rAQ6QkgKkEwFIuZfBi qvrzQanwqyLn4g== -----END CERTIFICATE-----Generated at Tue Dec 16 04:59:07 2025 by rpki-client