This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json) Hash identifier: OkgrTB7FF10akxWKG5x+BtjiAWR/Vcg47JCuLAmB3aA= Subject key identifier: F9:F2:30:ED:58:9F:7F:F7:EB:83:14:EE:83:AC:9C:CA:CD:97:93:56 Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019AFE44637D677E5463FD92FB1D00D2DCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft Manifest number: 0F Signing time: Mon 08 Dec 2025 14:01:25 +0000 Manifest this update: Mon 08 Dec 2025 14:01:25 +0000 Manifest next update: Tue 09 Dec 2025 14:01:25 +0000 Files and hashes: 1: 7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa (hash: 2hfPMHbWihqBZrYe5pg+hp4U1d6XfZrolVYNzjr0Hc4=) 2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: i5SUfq3L/XmmFYXNMGtsz7d346TnFwXf5LbACd7/PU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:44:63:7d:67:7e:54:63:fd:92:fb:1d:00:d2:dc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Dec 8 14:01:25 2025 GMT Not After : Dec 9 14:01:25 2025 GMT Subject: CN=f9f230ed589f7ff7eb8314ee83ac9ccacd979356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:7b:43:96:77:04:56:ee:e3:a8:d1:05:c3: 81:75:62:31:4f:4a:94:e6:e7:ca:b4:cd:be:3b:62: 01:a1:9d:e8:b0:f8:1b:13:1b:e7:25:29:70:9f:f6: 3f:22:04:94:6a:f3:42:9c:03:e5:1e:13:a0:b5:ca: 1b:0a:4a:fe:f7:ad:68:c4:f7:7f:d2:03:70:af:38: e3:32:0c:74:65:dc:e3:f2:43:ae:7b:bc:5d:60:30: 18:69:56:31:c3:4b:2f:77:a0:94:8c:f6:8f:35:bd: 72:82:dd:b9:33:88:03:a8:3f:bc:63:61:44:ab:c5: f5:14:73:f1:0e:ba:95:b1:50:f1:c7:a8:ff:f4:50: 7a:e0:7f:9f:83:4b:fe:40:b2:d1:ef:99:3a:0a:48: 80:fb:56:4d:2d:e8:10:a9:88:e9:20:8d:25:9e:47: c8:27:f8:f0:7b:ab:37:2b:83:71:31:1c:20:5c:ab: 6d:78:6f:7b:aa:12:a5:9c:a6:bb:a7:f9:05:dd:47: 49:2b:47:6b:1a:90:27:ec:12:88:a4:69:01:d7:a8: 87:5d:37:51:24:9e:57:c7:87:60:b5:2b:3f:47:6f: e9:28:b9:00:b0:df:12:7c:60:c4:f3:7b:25:60:f9: a1:3a:16:10:cb:04:b1:c9:00:ac:c3:56:39:a4:be: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F2:30:ED:58:9F:7F:F7:EB:83:14:EE:83:AC:9C:CA:CD:97:93:56 X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:09:86:9e:49:24:ae:eb:b8:4e:c5:c2:0a:9a:0b:01:87:8d: 91:38:86:f3:cc:a7:7b:59:86:35:ee:78:c6:16:66:4e:8b:04: ef:5a:7f:af:02:29:49:07:6b:06:02:9e:64:20:3b:6d:b2:ff: 13:fe:95:84:bc:b1:a8:be:6b:53:9a:79:d0:e4:f8:48:34:cd: 37:d3:99:bb:c2:f0:7e:5b:35:3e:b5:32:ce:43:f4:db:d1:ed: 46:dd:40:40:9b:4e:e0:76:a7:b5:13:f6:ef:0d:7d:85:df:75: 7c:a2:b2:c7:c7:17:20:8a:09:bf:83:1a:1f:c0:ec:d4:04:59: 28:27:c5:e6:d8:39:d2:fb:c1:7f:02:dd:fc:c9:20:45:54:e6: cc:90:de:e1:79:92:95:48:29:da:21:57:c7:5e:75:9c:c1:b0: ab:0c:e2:de:25:20:01:35:82:8d:9e:9e:c6:f0:65:d1:ba:31: 0d:3c:9c:9c:d3:88:31:4e:0d:c5:d8:f9:5e:c6:ff:e0:09:8f: 65:63:17:86:a0:8d:d8:30:fd:f1:77:69:e6:f8:5c:f9:2a:69: be:d3:9b:cf:10:19:37:cd:3a:aa:78:3e:45:ac:42:0f:a4:90: b4:ba:62:b9:88:73:29:15:11:6c:8d:05:a5:9a:08:81:0b:00: ca:b4:a2:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+RGN9Z35UY/2S+x0A0tzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjUxMjA4MTQwMTI1WhcNMjUxMjA5MTQwMTI1WjAzMTEwLwYDVQQD EyhmOWYyMzBlZDU4OWY3ZmY3ZWI4MzE0ZWU4M2FjOWNjYWNkOTc5MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonV7Q5Z3BFbu46jRBcOBdWIxT0qU 5ufKtM2+O2IBoZ3osPgbExvnJSlwn/Y/IgSUavNCnAPlHhOgtcobCkr+961oxPd/ 0gNwrzjjMgx0Zdzj8kOue7xdYDAYaVYxw0svd6CUjPaPNb1ygt25M4gDqD+8Y2FE q8X1FHPxDrqVsVDxx6j/9FB64H+fg0v+QLLR75k6CkiA+1ZNLegQqYjpII0lnkfI J/jwe6s3K4NxMRwgXKtteG97qhKlnKa7p/kF3UdJK0drGpAn7BKIpGkB16iHXTdR JJ5Xx4dgtSs/R2/pKLkAsN8SfGDE83slYPmhOhYQywSxyQCsw1Y5pL4obQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnyMO1Yn3/364MU7oOsnMrNl5NWMB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQmGnkkk ruu4TsXCCpoLAYeNkTiG88yne1mGNe54xhZmTosE71p/rwIpSQdrBgKeZCA7bbL/ E/6VhLyxqL5rU5p50OT4SDTNN9OZu8Lwfls1PrUyzkP029HtRt1AQJtO4HantRP2 7w19hd91fKKyx8cXIIoJv4MaH8Ds1ARZKCfF5tg50vvBfwLd/MkgRVTmzJDe4XmS lUgp2iFXx151nMGwqwzi3iUgATWCjZ6exvBl0boxDTycnNOIMU4Nxdj5Xsb/4AmP ZWMXhqCN2DD98Xdp5vhc+SppvtObzxAZN806qng+RaxCD6SQtLpiuYhzKRURbI0F pZoIgQsAyrSiFQ== -----END CERTIFICATE-----Generated at Mon Dec 8 20:18:24 2025 by rpki-client