This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json) Hash identifier: 58NgueJFOv+ZpywfnpFNTlEsHv5opzy6sOWNebdjOnU= Subject key identifier: 98:B2:65:6B:BA:B4:1B:21:B5:EE:D7:0B:60:29:D5:B9:07:83:6A:2B Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Certificate serial: 019AF2AE012D3B05942CA622837160E9F89A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft Manifest number: 0725 Signing time: Sat 06 Dec 2025 08:01:21 +0000 Manifest this update: Sat 06 Dec 2025 08:01:21 +0000 Manifest next update: Sun 07 Dec 2025 08:01:21 +0000 Files and hashes: 1: GgU4V3exF_KMsbXxFhlxd1M5pl8.roa (hash: l8v1ZDd4kP5GR80G/4+UL0QS/Pev1eqpTKkPGhrjSW4=) 2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: 5vwjLsOnMgPLE45kbL3XsPv3YEXOAppFVIoohM2mV8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:01:2d:3b:05:94:2c:a6:22:83:71:60:e9:f8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Validity Not Before: Dec 6 08:01:21 2025 GMT Not After : Dec 7 08:01:21 2025 GMT Subject: CN=98b2656bbab41b21b5eed70b6029d5b907836a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:8e:6e:43:8f:41:ce:f8:3b:b0:46:4c:9f: 82:a0:d1:cb:b9:32:ae:ba:5e:a9:a4:8e:1d:7c:2f: 70:fc:df:78:16:f6:ae:72:00:f3:80:7f:7e:7e:d5: 1c:7c:f1:44:27:44:ba:b4:1c:6e:b3:56:f2:2e:7d: 3d:da:4d:f1:64:48:ce:77:6b:6a:b5:46:ed:c8:4a: 91:57:67:55:7e:6a:9e:29:04:61:94:6d:08:c3:82: 30:d7:19:5e:a7:e7:dc:8f:6f:83:58:34:ec:7a:78: f9:94:be:47:fc:65:9b:bd:a9:ef:98:3a:b5:bd:39: 4c:d5:24:84:76:cc:0a:10:b5:08:1e:a5:be:67:0d: c6:09:a1:77:90:a9:2f:9a:e8:e2:a1:b7:2a:1c:1f: 8d:02:89:98:dc:23:f1:11:61:9b:69:b7:bf:5a:7f: dd:1b:d4:8e:45:4e:92:b9:25:fe:ec:51:dc:cb:7d: b2:f8:5d:19:65:f5:9c:32:48:c9:b5:3a:3c:e8:45: 0b:58:6c:04:1a:23:f0:22:38:e8:6c:0b:a5:68:48: 6c:d3:33:90:9d:67:c1:65:9c:31:9a:e6:5a:47:10: 52:ac:ad:fe:34:d5:01:ee:64:8d:66:d5:e3:7c:b9: 45:32:25:be:82:10:fe:80:28:58:00:99:d1:32:57: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:65:6B:BA:B4:1B:21:B5:EE:D7:0B:60:29:D5:B9:07:83:6A:2B X509v3 Authority Key Identifier: keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cb:ca:c2:d5:de:a3:00:05:29:17:cd:ab:42:ee:31:3f:dd: 10:c1:6d:fc:ae:ee:ab:45:bd:63:81:c8:f1:65:9c:40:53:aa: 22:83:22:aa:d7:ba:96:dc:5d:ad:dc:59:4e:b9:fa:18:46:b8: 21:cd:37:79:85:1b:41:9e:9c:e7:de:fa:c0:28:7f:ee:a6:dd: 4b:c7:aa:e0:fc:51:bf:f1:b2:44:18:14:ec:02:77:09:bb:c8: 40:83:b7:7e:7f:90:a5:cb:bc:94:22:db:41:51:76:bb:97:37: 98:b6:7e:6a:e2:6e:ac:60:6c:e2:a1:a9:68:a8:2a:3f:35:ae: 37:54:cd:58:18:e3:98:c8:b2:d9:ce:96:c2:4a:0b:73:73:66: a4:b5:da:5c:10:09:00:e1:6f:18:6a:dd:48:01:58:6b:ec:6c: f0:27:b2:ac:bc:83:9e:01:1e:04:67:91:5f:19:20:11:6d:52: 38:ab:24:75:97:78:bb:98:fe:07:f3:ff:df:53:a1:e3:68:fa: 8d:46:3f:16:31:a4:f7:53:7a:4b:c3:1c:6c:16:1c:45:a8:93: 6f:32:09:3d:48:02:5e:ea:9b:d7:20:73:6d:2b:fb:cc:f1:db: c8:90:fa:e3:7b:3a:9b:69:8f:33:c7:17:cd:c7:8f:f5:b6:36: 27:a6:7e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrgEtOwWULKYig3Fg6fiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3 MGRmZTcwHhcNMjUxMjA2MDgwMTIxWhcNMjUxMjA3MDgwMTIxWjAzMTEwLwYDVQQD Eyg5OGIyNjU2YmJhYjQxYjIxYjVlZWQ3MGI2MDI5ZDViOTA3ODM2YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu+ObkOPQc74O7BGTJ+CoNHLuTKu ul6ppI4dfC9w/N94FvaucgDzgH9+ftUcfPFEJ0S6tBxus1byLn092k3xZEjOd2tq tUbtyEqRV2dVfmqeKQRhlG0Iw4Iw1xlep+fcj2+DWDTsenj5lL5H/GWbvanvmDq1 vTlM1SSEdswKELUIHqW+Zw3GCaF3kKkvmujiobcqHB+NAomY3CPxEWGbabe/Wn/d G9SORU6SuSX+7FHcy32y+F0ZZfWcMkjJtTo86EULWGwEGiPwIjjobAulaEhs0zOQ nWfBZZwxmuZaRxBSrK3+NNUB7mSNZtXjfLlFMiW+ghD+gChYAJnRMlenUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiyZWu6tBshte7XC2Ap1bkHg2orMB8GA1UdIwQY MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0 LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8vKwtXe owAFKRfNq0LuMT/dEMFt/K7uq0W9Y4HI8WWcQFOqIoMiqte6ltxdrdxZTrn6GEa4 Ic03eYUbQZ6c5976wCh/7qbdS8eq4PxRv/GyRBgU7AJ3CbvIQIO3fn+Qpcu8lCLb QVF2u5c3mLZ+auJurGBs4qGpaKgqPzWuN1TNWBjjmMiy2c6WwkoLc3NmpLXaXBAJ AOFvGGrdSAFYa+xs8CeyrLyDngEeBGeRXxkgEW1SOKskdZd4u5j+B/P/31Oh42j6 jUY/FjGk91N6S8McbBYcRaiTbzIJPUgCXuqb1yBzbSv7zPHbyJD643s6m2mPM8cX zceP9bY2J6Z+Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:02 2025 by rpki-client