This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json) Hash identifier: calCA60JDnLYuk/FB/KsVldxML5MHcTy8IwVN/m8/TQ= Subject key identifier: 1E:D3:27:EC:51:33:7F:37:F2:D5:5F:CA:CB:50:77:11:D9:5F:DD:4F Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Certificate serial: 019AF2ADF4A24C3B27CF7BA7CA371277A20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=) 2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: Puo0XIrfJkJK98M8/ljWGmcuwIf2+H+F6GZIDYWLQdw=) 3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f4:a2:4c:3b:27:cf:7b:a7:ca:37:12:77:a2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=1ed327ec51337f37f2d55fcacb507711d95fdd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:ee:f8:68:f5:fc:b9:cf:71:eb:0d:c1:23: 6a:d9:97:ab:89:65:c2:71:e9:a3:26:c7:d4:ab:cb: 13:d0:12:11:57:c4:d2:3d:39:65:00:a2:25:22:14: 38:97:e3:ba:33:e5:09:ff:c7:8b:3f:78:f8:5f:59: 83:93:21:2f:4a:e6:59:6d:8d:58:a1:9f:9c:7c:ea: 8a:2a:5e:09:ed:e0:ea:03:70:9b:36:c3:44:6f:ee: e4:72:f2:5a:86:d9:0c:57:1d:19:e9:39:d9:4b:f0: 58:cc:6e:10:bc:95:21:19:3d:e9:b4:db:43:49:aa: 13:ce:98:f7:f5:f1:88:b5:21:7c:5a:0a:93:8f:a5: 0e:84:ba:b7:6a:1e:d3:8e:25:52:79:00:26:00:33: c1:7e:a1:92:88:22:10:a6:cd:48:41:98:23:ba:af: 3b:f9:ee:30:15:9b:b4:98:cd:af:43:41:93:ae:ad: 31:af:3d:37:2e:9f:b2:46:99:2a:c2:0d:16:79:76: ac:d6:8f:74:aa:8c:5e:33:57:a8:28:24:5a:4f:ad: 7a:8e:30:bc:a5:08:b3:a8:19:5b:6d:2c:31:f7:67: 39:ca:d2:cf:22:9e:6f:0f:6b:7e:64:14:53:a8:32: 2e:8f:15:e5:76:27:31:43:1e:c5:4b:fe:2f:40:e4: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D3:27:EC:51:33:7F:37:F2:D5:5F:CA:CB:50:77:11:D9:5F:DD:4F X509v3 Authority Key Identifier: keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:0c:44:01:eb:7a:b8:c3:4b:91:b8:dd:6b:20:d8:a1:75:b3: 58:1f:bf:f2:44:69:36:1b:80:93:35:42:0a:87:53:33:d1:00: 2a:99:ea:46:23:dc:77:5d:f1:d9:07:41:f3:cc:96:d5:0a:99: 1c:b9:dd:ee:b9:9f:0a:20:6d:3c:46:dc:f3:3e:b6:d6:35:72: 0e:da:25:d9:cb:a1:0a:cc:d7:2a:94:11:ec:78:71:b8:a5:b6: 02:be:ed:a1:f4:46:a2:37:be:f4:92:ce:64:88:db:c9:f1:20: 94:fe:65:85:d8:b9:c2:9c:c7:b8:de:59:04:10:36:02:e6:3a: 88:20:48:63:a1:67:46:71:c9:a2:5d:db:14:d6:1f:0b:10:8b: b7:d2:2d:b9:1e:82:3f:3b:98:45:79:6a:3d:73:54:ea:4a:ac: 8f:ec:d6:48:18:c2:a3:1b:a4:4e:6f:ed:3f:75:61:de:a3:3d: 75:69:f3:21:82:86:5a:a6:2e:91:86:d3:fb:ca:f5:fa:f7:36: 00:29:ec:ee:fc:48:b4:a6:5a:0d:78:4e:02:57:26:2a:10:f1: 80:6f:51:cf:52:3e:ff:c2:8b:90:34:c0:65:f9:d7:c7:ec:ca: 25:be:c1:e5:7a:0d:fd:46:50:21:1d:15:da:38:c9:dc:e6:56: 7e:2b:0a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfSiTDsnz3unyjcSd6IOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5 MDk2ZDQwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EygxZWQzMjdlYzUxMzM3ZjM3ZjJkNTVmY2FjYjUwNzcxMWQ5NWZkZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuLu+Gj1/LnPcesNwSNq2ZeriWXC cemjJsfUq8sT0BIRV8TSPTllAKIlIhQ4l+O6M+UJ/8eLP3j4X1mDkyEvSuZZbY1Y oZ+cfOqKKl4J7eDqA3CbNsNEb+7kcvJahtkMVx0Z6TnZS/BYzG4QvJUhGT3ptNtD SaoTzpj39fGItSF8WgqTj6UOhLq3ah7TjiVSeQAmADPBfqGSiCIQps1IQZgjuq87 +e4wFZu0mM2vQ0GTrq0xrz03Lp+yRpkqwg0WeXas1o90qoxeM1eoKCRaT616jjC8 pQizqBlbbSwx92c5ytLPIp5vD2t+ZBRTqDIujxXldicxQx7FS/4vQOSZLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7TJ+xRM3838tVfystQdxHZX91PMB8GA1UdIwQY MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAxEAet6 uMNLkbjdayDYoXWzWB+/8kRpNhuAkzVCCodTM9EAKpnqRiPcd13x2QdB88yW1QqZ HLnd7rmfCiBtPEbc8z621jVyDtol2cuhCszXKpQR7HhxuKW2Ar7tofRGoje+9JLO ZIjbyfEglP5lhdi5wpzHuN5ZBBA2AuY6iCBIY6FnRnHJol3bFNYfCxCLt9ItuR6C PzuYRXlqPXNU6kqsj+zWSBjCoxukTm/tP3Vh3qM9dWnzIYKGWqYukYbT+8r1+vc2 ACns7vxItKZaDXhOAlcmKhDxgG9Rz1I+/8KLkDTAZfnXx+zKJb7B5XoN/UZQIR0V 2jjJ3OZWfisKEw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:48 2025 by rpki-client