This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json) Hash identifier: 7mRTcULEU9zb68db0v4WJ/5URuqdqVq7+gSiGqwV4yU= Subject key identifier: 51:00:76:78:89:3C:37:B3:C1:04:D4:12:C0:21:51:65:13:23:7D:92 Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1 Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1 Certificate serial: 019AF2772C74AE93404BD5B61F6A454C8F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft Manifest number: 05B0 Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: /KFWAAslGCkhr4+vLXPO3BR/jBPw2AqTcKbz6Jr4ZK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2c:74:ae:93:40:4b:d5:b6:1f:6a:45:4c:8f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=51007678893c37b3c104d412c021516513237d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:c8:b3:7e:37:9e:16:6c:93:ec:f1:84:c5: b8:3f:60:3b:77:ff:fb:e8:d7:43:35:d7:0d:59:2f: c2:ac:60:10:11:7a:90:3c:14:ff:0e:78:94:f0:f4: 29:5c:fe:2b:31:e2:de:e4:c7:56:5f:bf:f1:4b:75: 2f:db:cf:56:2a:cc:07:40:d7:74:e1:62:70:81:b2: f1:c5:e4:de:66:dc:2c:d4:ef:ca:df:72:05:bf:1d: d6:5a:b0:65:48:ef:4f:8d:00:f5:6b:57:85:0f:f8: a1:cc:f3:cf:be:9f:6f:65:77:e8:e3:f7:f6:1f:44: ff:0a:c7:53:e2:1e:32:38:5e:5a:a9:bf:17:b7:44: 7a:2a:dd:20:7c:85:5f:61:89:0a:7c:fa:73:e1:83: f6:47:42:d5:9c:27:c7:1f:0b:d7:d3:10:86:d3:c7: ec:6c:99:43:6b:4e:71:60:0e:cd:8d:98:cb:1e:78: 3f:51:90:54:75:30:3f:e3:c5:b1:29:80:e9:04:7f: dc:de:fd:d9:05:52:dc:45:92:33:16:89:dd:01:7e: 92:b0:68:9a:58:02:80:77:1a:ae:ef:7e:51:bc:20: a6:01:ea:87:45:64:99:79:8b:db:5a:bf:01:c3:72: 02:c3:cb:35:35:d4:3a:b0:a0:95:71:4b:28:f7:95: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:76:78:89:3C:37:B3:C1:04:D4:12:C0:21:51:65:13:23:7D:92 X509v3 Authority Key Identifier: keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2b:81:4c:3d:ec:8b:c5:07:ec:a8:23:6d:3c:ba:64:b4:5d: d8:77:53:fa:56:af:77:bb:79:94:0d:ef:b8:0b:0e:c2:4e:7e: cd:51:cc:f9:26:fd:bb:da:cd:9d:c8:29:07:9c:6d:17:fc:3e: 2f:bd:24:56:d6:77:2f:b8:4d:77:26:cc:11:1a:c5:14:c3:84: 2e:83:b8:75:45:93:cc:54:33:e2:e9:e9:c0:99:b5:71:71:08: 63:c5:ac:3e:c7:66:d6:60:f9:e1:27:1e:83:60:9f:35:53:40: aa:be:7b:82:4e:fa:2e:9f:e0:34:1b:66:be:84:db:45:f2:5a: 9a:9b:b8:9b:bc:84:43:0c:f3:8f:14:1e:45:4d:51:15:40:ee: ed:0e:8a:5e:ff:38:b2:89:6f:b6:55:37:08:df:05:ea:8f:80: 58:a2:ef:6b:85:2b:ab:41:9f:31:36:5c:86:ca:bc:78:31:4f: ea:bb:9b:20:8e:ad:ee:69:32:5c:ed:68:fb:ad:9f:3a:f5:d2: 8c:43:35:73:e3:07:b8:f2:cc:12:49:58:3a:88:df:b5:a7:3d: 93:a0:01:56:80:21:7b:d8:df:12:af:4e:e7:ac:6b:73:ca:72: fd:0d:02:8c:70:f9:89:65:2e:52:4d:ee:ca:88:27:e0:70:26: f3:bf:17:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyx0rpNAS9W2H2pFTI9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OGU1MzliY2M1ZTkzNDYyNDM0NGQ4ODRmNjIyOTkzYjFl ZTlhYTEwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD Eyg1MTAwNzY3ODg5M2MzN2IzYzEwNGQ0MTJjMDIxNTE2NTEzMjM3ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ7Is343nhZsk+zxhMW4P2A7d//7 6NdDNdcNWS/CrGAQEXqQPBT/DniU8PQpXP4rMeLe5MdWX7/xS3Uv289WKswHQNd0 4WJwgbLxxeTeZtws1O/K33IFvx3WWrBlSO9PjQD1a1eFD/ihzPPPvp9vZXfo4/f2 H0T/CsdT4h4yOF5aqb8Xt0R6Kt0gfIVfYYkKfPpz4YP2R0LVnCfHHwvX0xCG08fs bJlDa05xYA7NjZjLHng/UZBUdTA/48WxKYDpBH/c3v3ZBVLcRZIzFondAX6SsGia WAKAdxqu735RvCCmAeqHRWSZeYvbWr8Bw3ICw8s1NdQ6sKCVcUso95WZTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEAdniJPDezwQTUEsAhUWUTI32SMB8GA1UdIwQY MBaAFDmOU5vMXpNGJDRNiE9iKZOx7pqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMt OWQ4NjUyOGRhMDk5LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMtOWQ4NjUyOGRhMDk5 LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiuBTD3s i8UH7KgjbTy6ZLRd2HdT+lavd7t5lA3vuAsOwk5+zVHM+Sb9u9rNncgpB5xtF/w+ L70kVtZ3L7hNdybMERrFFMOELoO4dUWTzFQz4unpwJm1cXEIY8WsPsdm1mD54Sce g2CfNVNAqr57gk76Lp/gNBtmvoTbRfJampu4m7yEQwzzjxQeRU1RFUDu7Q6KXv84 solvtlU3CN8F6o+AWKLva4Urq0GfMTZchsq8eDFP6rubII6t7mkyXO1o+62fOvXS jEM1c+MHuPLMEklYOojftac9k6ABVoAhe9jfEq9O56xrc8py/Q0CjHD5iWUuUk3u yogn4HAm878Xrg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:52 2025 by rpki-client