This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json) Hash identifier: /0o9SvgOXzLw/26qvjkVA6JVIJCwNjKHaRGFzuupE1Y= Subject key identifier: 44:68:31:ED:1F:B7:78:78:88:3D:10:E7:80:60:70:9B:32:5A:A5:8A Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019AF1640CE8E57D6D13AE7A3FD33675BB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft Manifest number: 0797 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=) 2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: 0ihWwiFeJZa86zBpLPKy8ODUWTFUefg0T98NvRi+kpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0c:e8:e5:7d:6d:13:ae:7a:3f:d3:36:75:bb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=446831ed1fb77878883d10e78060709b325aa58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:96:1a:fc:89:b0:3e:e3:2c:8a:a1:35:89: 0b:39:b2:a0:64:5b:0d:43:42:c3:e2:8b:fd:ce:50: d5:3f:39:6d:e6:e1:13:cf:03:bd:a7:1f:43:67:c5: 0b:85:61:46:8c:9e:a7:ef:42:35:cb:2d:9c:b1:31: 4e:ab:ba:6b:69:18:af:e5:bc:79:4e:fd:b3:dd:00: 86:6d:83:ef:ef:8d:93:9a:c2:ae:f9:60:4f:b0:cf: c6:57:6f:05:7d:0d:fe:01:4e:ae:26:de:93:48:c1: 46:e7:ce:2f:af:7d:4a:3e:64:6c:6c:6b:04:5e:12: 56:17:f5:fd:76:be:88:24:58:74:cd:14:4a:c6:a0: 6e:dc:a7:18:a3:01:0f:7c:21:7c:3b:7c:bf:dd:06: 09:75:09:23:21:fc:39:ad:73:02:14:5b:7c:70:83: 6a:f9:00:d4:b0:8f:e2:b5:cd:01:22:e9:24:b7:19: e7:0a:74:75:e9:db:50:5b:b7:57:1c:d5:d6:cb:82: b0:66:13:88:0f:f1:fa:eb:20:01:09:53:a3:f3:65: 06:d1:6e:a0:12:36:3d:be:51:73:c6:e7:09:3f:73: 05:12:af:e6:9e:21:4f:8a:ae:1f:53:6b:97:e0:9b: d2:ca:b0:77:e9:8f:e5:e3:f0:3f:03:a9:63:f7:62: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:68:31:ED:1F:B7:78:78:88:3D:10:E7:80:60:70:9B:32:5A:A5:8A X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:34:d6:4c:78:a3:f9:25:d2:cd:4e:a0:c2:35:18:c2:23: ff:c0:e1:b4:1f:23:0f:d3:a9:71:c7:df:1f:f5:c4:07:41:c1: 4b:09:ec:a2:7f:0d:cb:51:0f:7e:17:ea:9c:8a:3f:29:58:b3: 7a:96:01:62:fb:80:b9:56:54:48:00:15:a2:0d:2d:91:d8:8c: 71:01:cd:99:89:22:68:06:9c:d5:3f:75:98:f7:4a:3f:78:fd: e6:b7:c5:ce:78:fd:b6:c6:dc:94:02:ce:cc:4b:cc:37:d2:ba: 2b:09:fd:b8:6a:12:b2:98:d5:7f:3f:98:c2:09:d8:57:22:6b: c0:d7:bf:8c:a6:1a:f8:d4:98:16:52:af:e6:88:e4:5e:a2:bd: b7:87:ef:d9:a0:d2:93:9e:cd:b5:f5:52:80:2b:fa:44:df:88: 21:6b:cb:88:f6:8a:bb:0d:71:bb:19:ec:1f:27:80:3a:c8:56: c1:c8:ed:4d:ed:76:71:52:a2:77:eb:67:6c:68:b8:2e:48:06: 60:06:22:98:61:ca:f1:19:10:17:5a:f0:d6:2e:0d:fd:35:b2: f0:51:66:17:41:5f:88:c9:5b:da:a3:fe:ba:5e:61:7b:14:14: c3:f0:0b:1c:cc:d5:0a:4e:88:c6:ba:1e:82:9c:e5:b7:0b:66: cb:e0:d6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAzo5X1tE656P9M2dbszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg0NDY4MzFlZDFmYjc3ODc4ODgzZDEwZTc4MDYwNzA5YjMyNWFhNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvaWGvyJsD7jLIqhNYkLObKgZFsN Q0LD4ov9zlDVPzlt5uETzwO9px9DZ8ULhWFGjJ6n70I1yy2csTFOq7praRiv5bx5 Tv2z3QCGbYPv742TmsKu+WBPsM/GV28FfQ3+AU6uJt6TSMFG584vr31KPmRsbGsE XhJWF/X9dr6IJFh0zRRKxqBu3KcYowEPfCF8O3y/3QYJdQkjIfw5rXMCFFt8cINq +QDUsI/itc0BIukktxnnCnR16dtQW7dXHNXWy4KwZhOID/H66yABCVOj82UG0W6g EjY9vlFzxucJP3MFEq/mniFPiq4fU2uX4JvSyrB36Y/l4/A/A6lj92K+XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERoMe0ft3h4iD0Q54BgcJsyWqWKMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5 LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNI01kx4 o/kl0s1OoMI1GMIj/8DhtB8jD9OpccffH/XEB0HBSwnson8Ny1EPfhfqnIo/KViz epYBYvuAuVZUSAAVog0tkdiMcQHNmYkiaAac1T91mPdKP3j95rfFznj9tsbclALO zEvMN9K6Kwn9uGoSspjVfz+YwgnYVyJrwNe/jKYa+NSYFlKv5ojkXqK9t4fv2aDS k57NtfVSgCv6RN+IIWvLiPaKuw1xuxnsHyeAOshWwcjtTe12cVKid+tnbGi4LkgG YAYimGHK8RkQF1rw1i4N/TWy8FFmF0FfiMlb2qP+ul5hexQUw/ALHMzVCk6Ixroe gpzltwtmy+DWbg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:50 2025 by rpki-client