This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json) Hash identifier: 6aZW/8JATrXCWjD6sw521zyNggcAP02SoOtHDKqm1B8= Subject key identifier: 84:11:FF:0B:F6:97:7E:52:35:33:6C:53:E7:7C:A8:F8:4F:48:B9:F2 Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Certificate serial: 019B4926E2A4AEA86829A342A0DA9F93CC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft Manifest number: 0657 Signing time: Tue 23 Dec 2025 03:00:43 +0000 Manifest this update: Tue 23 Dec 2025 03:00:43 +0000 Manifest next update: Wed 24 Dec 2025 03:00:43 +0000 Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=) 2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: 3PGrnUZINTgTum8Jm9u+dwBv5/M5vs7PUi8+zz+XFx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:e2:a4:ae:a8:68:29:a3:42:a0:da:9f:93:cc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Validity Not Before: Dec 23 03:00:43 2025 GMT Not After : Dec 24 03:00:43 2025 GMT Subject: CN=8411ff0bf6977e5235336c53e77ca8f84f48b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:12:e7:f0:ad:af:60:1d:c0:5a:3e:65:70: 5d:11:62:e7:e8:06:51:22:b6:58:5f:ea:26:ab:1f: 25:a1:eb:c8:63:29:67:94:91:6f:49:73:8f:6e:03: 5f:8f:99:3c:b2:b9:05:41:c4:cd:28:b1:b2:05:95: 22:34:46:08:77:ab:8d:0e:c8:eb:e4:55:58:4e:c4: 3c:7a:19:da:7a:a7:41:3c:b9:36:3f:00:dc:dd:87: 97:71:bd:fc:a4:49:dc:9b:f6:a4:03:08:1d:7d:3b: cb:db:16:63:bd:81:93:37:3e:b8:db:2f:c5:b3:94: cf:85:1a:0f:96:68:ea:fd:0a:6e:bf:b8:d4:6d:49: 1e:8d:14:8e:70:28:08:01:bb:0d:05:04:53:63:e3: 99:e0:12:df:d1:59:9c:88:50:f3:5d:a0:4d:c0:72: 54:cf:b4:f7:c9:5f:fc:13:ba:17:cc:f2:ce:c7:ed: 45:69:66:dc:6d:77:82:a7:df:95:08:d3:30:95:e1: 8a:04:08:11:10:65:99:81:86:ca:92:38:62:20:61: 41:52:83:21:12:11:cf:9e:a4:6f:db:65:cd:73:5d: 99:b4:0e:73:af:38:99:f2:d0:db:c3:56:24:5a:8b: c9:76:11:e7:10:3f:63:bd:a3:29:dd:ed:1d:48:bf: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:11:FF:0B:F6:97:7E:52:35:33:6C:53:E7:7C:A8:F8:4F:48:B9:F2 X509v3 Authority Key Identifier: keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:0a:fa:f0:82:42:f1:67:a7:2b:9d:6b:24:3a:59:02:25: 81:5a:36:96:8f:c5:6d:a3:f4:dd:fb:fe:08:d6:a6:d0:37:33: e1:a8:da:56:0b:2f:98:ba:78:54:d6:c2:42:8b:a8:cd:b8:fe: ea:b7:3a:a3:7e:93:7d:c5:7d:57:1c:39:eb:a6:65:0d:cc:da: 6d:d9:b6:ad:d4:4a:dd:33:22:d4:34:32:af:c5:0f:6a:82:63: 6d:26:dc:ed:ea:10:4c:68:2d:e4:3c:e5:01:2d:30:b4:fd:b6: d5:d7:44:08:f8:ab:63:c9:79:0e:00:f5:ee:4e:42:12:a7:6e: 5e:d0:f3:4f:fc:72:ad:48:e9:b5:6a:4d:24:e0:1b:7d:c1:fe: be:22:6d:f0:17:df:86:e7:b1:a2:ad:52:9d:55:8a:80:09:c3: c6:ff:b3:bb:53:8b:9e:5a:5b:bf:55:e3:cb:a5:99:ca:29:54: 52:02:eb:59:45:0c:18:c5:46:76:c2:94:de:44:91:5e:e6:61: 6d:6d:7b:87:20:13:f2:91:5b:21:81:ad:3a:84:7c:f2:54:40: ee:c8:de:ca:68:a0:5e:9e:47:53:25:16:31:07:e0:f6:6e:a8: 2f:76:21:1e:db:18:df:34:2d:c3:c2:62:32:b7:d1:56:a3:de: 95:6a:c9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJuKkrqhoKaNCoNqfk8yLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj OWQ4ZGEwHhcNMjUxMjIzMDMwMDQzWhcNMjUxMjI0MDMwMDQzWjAzMTEwLwYDVQQD Eyg4NDExZmYwYmY2OTc3ZTUyMzUzMzZjNTNlNzdjYThmODRmNDhiOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRwS5/Ctr2AdwFo+ZXBdEWLn6AZR IrZYX+omqx8loevIYylnlJFvSXOPbgNfj5k8srkFQcTNKLGyBZUiNEYId6uNDsjr 5FVYTsQ8ehnaeqdBPLk2PwDc3YeXcb38pEncm/akAwgdfTvL2xZjvYGTNz642y/F s5TPhRoPlmjq/Qpuv7jUbUkejRSOcCgIAbsNBQRTY+OZ4BLf0VmciFDzXaBNwHJU z7T3yV/8E7oXzPLOx+1FaWbcbXeCp9+VCNMwleGKBAgREGWZgYbKkjhiIGFBUoMh EhHPnqRv22XNc12ZtA5zrziZ8tDbw1YkWovJdhHnED9jvaMp3e0dSL+keQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQR/wv2l35SNTNsU+d8qPhPSLnyMB8GA1UdIwQY MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUsK+vCC QvFnpyudayQ6WQIlgVo2lo/FbaP03fv+CNam0Dcz4ajaVgsvmLp4VNbCQouozbj+ 6rc6o36TfcV9Vxw566ZlDczabdm2rdRK3TMi1DQyr8UPaoJjbSbc7eoQTGgt5Dzl AS0wtP221ddECPirY8l5DgD17k5CEqduXtDzT/xyrUjptWpNJOAbfcH+viJt8Bff huexoq1SnVWKgAnDxv+zu1OLnlpbv1Xjy6WZyilUUgLrWUUMGMVGdsKU3kSRXuZh bW17hyAT8pFbIYGtOoR88lRA7sjeymigXp5HUyUWMQfg9m6oL3YhHtsY3zQtw8Ji MrfRVqPelWrJKQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:34:40 2025 by rpki-client