This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json) Hash identifier: FPsAKwIBu3WGA3tTF1/jtLjJBUZQu8T/OtjMn/sjq7E= Subject key identifier: 97:89:11:DA:B1:E0:24:E1:83:0A:BD:3D:44:68:41:3E:B3:C8:DE:61 Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Certificate serial: 019B1A28B20B4756D297C55E3109C38A1A18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft Manifest number: 177D Signing time: Sun 14 Dec 2025 00:00:33 +0000 Manifest this update: Sun 14 Dec 2025 00:00:33 +0000 Manifest next update: Mon 15 Dec 2025 00:00:33 +0000 Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=) 2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=) 3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: yWtpt4ZCVRoYvg8wvX4WsJaDpu/6NbyIHgicOVUOnlY=) 4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:b2:0b:47:56:d2:97:c5:5e:31:09:c3:8a:1a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Validity Not Before: Dec 14 00:00:33 2025 GMT Not After : Dec 15 00:00:33 2025 GMT Subject: CN=978911dab1e024e1830abd3d4468413eb3c8de61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:9d:60:4b:6f:ae:b1:a9:af:74:3f:34:cd: 9e:19:e4:11:0e:bc:f5:7d:bf:41:2b:7f:61:5e:5d: d6:65:74:29:6a:6e:41:ab:bd:37:0d:4d:8c:92:bc: ea:94:c6:4e:01:a3:dd:03:47:7b:ea:cb:4c:c0:dd: 98:bc:7a:79:29:90:ec:f1:1b:51:9c:99:1b:0e:08: 97:df:02:80:9d:bd:8a:28:11:20:96:5d:3c:38:ef: bb:ec:4f:79:f4:77:de:47:bf:8a:02:fc:7e:61:6b: 52:e6:51:4c:b4:75:09:08:40:00:7a:b3:d3:ac:f8: 23:ef:35:c9:9d:b4:e5:ec:27:c0:43:26:81:61:2f: f5:32:bd:c2:2e:3e:43:0c:27:11:0b:2c:f9:82:54: 2f:be:56:fa:93:5f:f3:fc:fd:87:cc:71:e3:e4:1b: 9d:c8:c2:47:87:05:7c:4f:a2:0d:3a:bf:3c:f3:b7: e3:15:bc:36:2f:69:e8:5f:b9:d7:ad:6a:6f:91:c2: 54:4d:65:20:96:f5:b9:67:b7:b8:b1:41:dc:08:d1: 26:85:37:1d:e1:9c:72:c0:e4:6d:96:f5:66:9b:5f: be:08:1b:7a:7f:f8:da:99:b9:d8:4a:8e:d0:9c:2a: a9:03:3d:1b:e1:3f:fd:46:0e:71:65:45:88:a2:75: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:89:11:DA:B1:E0:24:E1:83:0A:BD:3D:44:68:41:3E:B3:C8:DE:61 X509v3 Authority Key Identifier: keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:a0:ed:d8:96:17:9a:c4:78:84:14:5e:63:b3:3c:0b:fa: e2:de:cd:82:a7:da:dd:b7:fc:66:75:e9:61:6c:6a:f5:a4:c3: d0:9d:d1:f6:86:eb:a1:44:02:df:97:53:e5:cf:52:d0:59:82: 45:95:a3:9c:cc:7a:ed:0a:2a:1c:ee:76:3e:ba:9f:41:a8:03: 1f:05:d7:ea:40:ba:ae:9f:c5:ef:09:bf:2b:e3:cc:e1:3f:23: b3:a5:c3:5f:f9:36:9d:85:1a:61:94:a9:a0:6e:fd:ec:16:e1: 58:2c:6d:f8:24:6e:15:e9:df:f4:28:0a:d6:8d:e0:49:67:79: 65:ea:a9:4b:1c:7a:2e:21:87:4a:b3:1d:01:46:47:ac:d4:3e: 69:d8:79:9f:da:ca:df:9f:e5:1a:71:cc:8d:f2:2e:13:09:90: 55:95:56:6a:46:eb:65:20:04:d2:92:97:86:68:98:f5:4c:f7: 52:ee:ea:39:6a:9b:af:d3:7f:51:73:ab:e7:69:1d:90:6f:ca: c2:cf:d8:59:58:49:a3:b1:00:5b:61:de:5e:32:4b:6a:9e:c6: 9e:49:26:6c:8a:48:0a:aa:b1:56:55:63:32:5e:c7:52:23:16: 86:e9:96:00:14:93:59:67:0a:a3:62:fa:f2:49:23:70:ae:24: 62:cd:b1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKLILR1bSl8VeMQnDihoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk ZGQyNmEwHhcNMjUxMjE0MDAwMDMzWhcNMjUxMjE1MDAwMDMzWjAzMTEwLwYDVQQD Eyg5Nzg5MTFkYWIxZTAyNGUxODMwYWJkM2Q0NDY4NDEzZWIzYzhkZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GdYEtvrrGpr3Q/NM2eGeQRDrz1 fb9BK39hXl3WZXQpam5Bq703DU2MkrzqlMZOAaPdA0d76stMwN2YvHp5KZDs8RtR nJkbDgiX3wKAnb2KKBEgll08OO+77E959HfeR7+KAvx+YWtS5lFMtHUJCEAAerPT rPgj7zXJnbTl7CfAQyaBYS/1Mr3CLj5DDCcRCyz5glQvvlb6k1/z/P2HzHHj5Bud yMJHhwV8T6INOr8887fjFbw2L2noX7nXrWpvkcJUTWUglvW5Z7e4sUHcCNEmhTcd 4ZxywORtlvVmm1++CBt6f/jambnYSo7QnCqpAz0b4T/9Rg5xZUWIonXh3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeJEdqx4CThgwq9PURoQT6zyN5hMB8GA1UdIwQY MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU12g7diW F5rEeIQUXmOzPAv64t7Ngqfa3bf8ZnXpYWxq9aTD0J3R9obroUQC35dT5c9S0FmC RZWjnMx67QoqHO52PrqfQagDHwXX6kC6rp/F7wm/K+PM4T8js6XDX/k2nYUaYZSp oG797BbhWCxt+CRuFenf9CgK1o3gSWd5ZeqpSxx6LiGHSrMdAUZHrNQ+adh5n9rK 35/lGnHMjfIuEwmQVZVWakbrZSAE0pKXhmiY9Uz3Uu7qOWqbr9N/UXOr52kdkG/K ws/YWVhJo7EAW2HeXjJLap7GnkkmbIpICqqxVlVjMl7HUiMWhumWABSTWWcKo2L6 8kkjcK4kYs2xLA== -----END CERTIFICATE-----Generated at Sun Dec 14 06:27:08 2025 by rpki-client