This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: 17/TrXHcdlW+oaDqRTbRNLA3lIpMmlvj+a8ublgFch4= Subject key identifier: 11:B4:88:DA:E6:71:B9:C8:2E:20:A5:04:BA:76:6E:9C:16:C1:3D:BB Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019AF12D79B2B82F9AAFBA4EEC92C8DE7089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 06FF Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: dRKeyiAMUWn6R8wkBa7+7BJ53Z7MpSgK7waLrUeepG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:79:b2:b8:2f:9a:af:ba:4e:ec:92:c8:de:70:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=11b488dae671b9c82e20a504ba766e9c16c13dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:21:ca:c6:bf:8d:88:1f:1b:1c:87:5d:be: cf:03:ec:e1:e2:64:c5:fb:14:7b:22:78:5a:b6:4a: b7:0d:80:31:cc:36:37:7c:8a:95:c1:df:94:57:bb: 51:4d:cf:55:55:a6:21:bd:c8:19:bb:70:3d:c7:ed: f6:a9:aa:fa:cb:09:c7:0c:cc:8c:29:e9:71:f1:af: 17:88:c3:98:21:2f:d3:33:7d:75:49:6f:b3:87:d4: 95:24:29:94:28:8d:66:68:4b:2d:15:18:dd:e5:22: f3:c7:00:62:84:f7:e7:a0:79:9c:59:a8:5b:96:cb: fb:64:4a:e7:73:b1:b6:26:c0:4b:00:b6:a7:04:32: 3d:f8:36:9d:9d:af:70:00:5b:65:a5:70:f5:3a:50: a0:67:39:97:cc:5b:30:08:0c:76:a0:d1:f2:ea:1f: 0e:87:41:14:03:a7:8b:36:2c:a4:2c:ab:2d:71:47: cf:30:c6:5b:86:5d:18:ed:81:e5:4f:87:56:e6:83: 62:3d:04:59:7e:16:fd:fe:38:16:2c:a2:cd:ef:f2: 40:c7:29:3f:37:db:12:d6:28:a9:a9:74:c4:23:80: 32:46:9b:1c:62:41:2d:f1:b5:a3:8d:2b:a9:ac:88: 90:fa:c1:e4:84:04:06:2a:f4:c0:34:23:ac:e8:57: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:88:DA:E6:71:B9:C8:2E:20:A5:04:BA:76:6E:9C:16:C1:3D:BB X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c4:17:95:95:64:2d:57:fa:30:da:7b:63:28:38:8b:b9:13: 97:22:82:1c:55:c4:f2:49:ee:75:2c:64:79:a5:f4:78:21:02: 88:11:4d:08:57:95:16:e7:42:6e:f7:3d:ea:24:8d:8f:a7:13: 8b:ad:ec:98:28:76:47:27:65:ae:e9:1a:62:f8:8a:54:02:ce: 8c:8c:34:7f:4b:0c:5b:ca:15:01:5c:b4:b0:00:82:40:8d:48: ba:97:6a:83:31:bb:53:65:18:9b:06:a0:2a:0f:a9:e8:43:4d: 0a:84:c3:d2:0f:50:8f:c6:d6:ad:e3:1b:1d:f1:7d:87:f4:44: 65:b8:55:4d:43:47:dd:1b:ec:ae:b4:2d:cb:98:83:11:62:9d: 36:84:6d:90:15:d9:2f:4c:1b:fb:6c:65:72:14:e0:57:d2:d8: d2:50:70:f9:ae:18:d1:e4:20:f0:76:1c:51:eb:c5:94:4c:69: c0:6d:9e:9a:26:32:41:7a:43:2f:1a:79:87:04:ed:d2:2c:18: 67:95:4b:7f:f9:9e:53:93:1a:02:c4:77:b8:78:0d:a4:ef:99: ae:3d:6c:8b:09:00:6c:b5:23:57:cd:6c:50:ae:df:ba:2f:de: 15:dd:ba:22:29:41:c9:7b:2e:35:43:66:3a:4d:75:5a:cd:d5: 32:e0:59:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXmyuC+ar7pO7JLI3nCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD EygxMWI0ODhkYWU2NzFiOWM4MmUyMGE1MDRiYTc2NmU5YzE2YzEzZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKEhysa/jYgfGxyHXb7PA+zh4mTF +xR7Inhatkq3DYAxzDY3fIqVwd+UV7tRTc9VVaYhvcgZu3A9x+32qar6ywnHDMyM Kelx8a8XiMOYIS/TM311SW+zh9SVJCmUKI1maEstFRjd5SLzxwBihPfnoHmcWahb lsv7ZErnc7G2JsBLALanBDI9+Dadna9wAFtlpXD1OlCgZzmXzFswCAx2oNHy6h8O h0EUA6eLNiykLKstcUfPMMZbhl0Y7YHlT4dW5oNiPQRZfhb9/jgWLKLN7/JAxyk/ N9sS1iipqXTEI4AyRpscYkEt8bWjjSuprIiQ+sHkhAQGKvTANCOs6FfbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG0iNrmcbnILiClBLp2bpwWwT27MB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8QXlZVk LVf6MNp7Yyg4i7kTlyKCHFXE8knudSxkeaX0eCECiBFNCFeVFudCbvc96iSNj6cT i63smCh2RydlrukaYviKVALOjIw0f0sMW8oVAVy0sACCQI1IupdqgzG7U2UYmwag Kg+p6ENNCoTD0g9Qj8bWreMbHfF9h/REZbhVTUNH3RvsrrQty5iDEWKdNoRtkBXZ L0wb+2xlchTgV9LY0lBw+a4Y0eQg8HYcUevFlExpwG2emiYyQXpDLxp5hwTt0iwY Z5VLf/meU5MaAsR3uHgNpO+Zrj1siwkAbLUjV81sUK7fui/eFd26IilByXsuNUNm Ok11Ws3VMuBZpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:53 2025 by rpki-client