This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json) Hash identifier: bKkRodlm6QBt+IV4RkUgYGKxUWaFzJn38bbKqimtQfo= Subject key identifier: C7:F4:FC:F5:C7:81:21:E9:7D:11:D1:86:14:C5:AE:B8:31:3A:0F:49 Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Certificate serial: 019AF1645D076C83F83DDE41E137BBD94646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=) 2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: jZbV5rpbk78yVS2vqqOGX8MEP9ouoIzx8mv0T+6eUss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5d:07:6c:83:f8:3d:de:41:e1:37:bb:d9:46:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=c7f4fcf5c78121e97d11d18614c5aeb8313a0f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:38:e7:82:ad:ef:ef:26:6d:28:be:b9:46: ab:49:ba:ac:5b:b0:2f:84:3f:3d:72:f3:a0:32:75: 90:43:ad:9b:68:ac:ea:cb:87:63:d1:4d:ad:ea:c4: 60:a8:e6:a9:69:c1:0b:0a:fb:f2:59:df:3a:8c:ad: ee:1c:b8:c5:b3:10:74:89:51:6c:6e:f6:10:30:aa: c1:76:6e:21:5a:0c:15:79:af:d2:58:6c:b4:5e:0e: 7f:e1:c6:40:ec:10:96:2a:c5:18:a5:24:5c:9b:14: a6:02:62:42:a9:a4:b9:8d:fa:a5:40:00:1c:64:3a: 60:b7:a2:44:87:1c:bf:47:91:62:fe:aa:27:6f:ed: 92:d8:1a:8a:01:65:15:1c:30:6b:98:ac:22:d5:f9: 3f:96:c0:cd:5f:4d:d8:d9:1c:da:d0:ef:71:91:0e: 9d:d0:01:26:f6:53:aa:62:25:cc:be:75:5b:5b:f2: e0:a8:fa:e2:a1:a6:ef:16:15:76:1e:d2:0b:c5:c8: fa:e2:39:14:d9:71:fa:c2:66:7f:f0:86:2e:72:36: c4:c9:04:c7:2c:d0:fd:88:fb:84:3b:b9:3a:6d:a6: 53:5c:f2:60:49:3f:e9:89:e4:25:0b:db:bc:b8:c6: 4d:a9:ae:3b:65:44:e7:a2:d7:d5:78:28:0b:52:5c: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:FC:F5:C7:81:21:E9:7D:11:D1:86:14:C5:AE:B8:31:3A:0F:49 X509v3 Authority Key Identifier: keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c8:91:b5:91:9b:f2:82:f6:f2:7f:84:79:1d:25:69:5f:79: 6e:39:1d:29:61:87:66:42:38:b8:90:2d:f0:18:ed:fd:ee:e2: 85:10:a0:1c:bf:85:54:26:5d:ad:1c:84:c7:59:04:05:b6:53: 8a:85:65:ec:46:a7:42:c3:a3:e7:12:f0:aa:63:c5:93:a5:69: 3c:84:dc:86:c2:94:48:f9:25:e2:6b:84:29:fe:72:f0:ad:73: a2:c5:8e:aa:a3:8e:dd:72:ed:38:57:f9:22:1b:56:5e:9a:e6: 99:d6:ce:45:ae:20:7d:80:07:5c:ac:7c:71:81:79:ba:fc:90: b5:c4:99:00:b1:31:70:6c:30:53:ed:ba:4e:c3:d1:39:77:dd: bd:74:c5:7b:c2:62:41:d2:1f:cf:eb:86:11:1e:22:b0:23:e3: 02:fe:89:e7:0a:88:2d:59:a3:e1:84:a3:94:f0:f1:7b:2f:b3: 87:0d:c1:fb:29:ad:6c:b5:b9:50:71:1e:a4:6a:3f:35:28:64: 1e:bc:1e:6e:66:c2:e0:d2:e4:63:f3:df:2c:d6:b0:63:b4:20: 7d:c6:94:a5:30:92:2f:42:57:12:95:54:ad:13:a0:73:94:ef: a2:ad:15:99:90:5e:40:c6:40:ae:50:69:ea:2b:ab:b5:7f:5a: bd:f3:b3:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF0HbIP4Pd5B4Te72UZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi ZDIwYjgwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhjN2Y0ZmNmNWM3ODEyMWU5N2QxMWQxODYxNGM1YWViODMxM2EwZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7g454Kt7+8mbSi+uUarSbqsW7Av hD89cvOgMnWQQ62baKzqy4dj0U2t6sRgqOapacELCvvyWd86jK3uHLjFsxB0iVFs bvYQMKrBdm4hWgwVea/SWGy0Xg5/4cZA7BCWKsUYpSRcmxSmAmJCqaS5jfqlQAAc ZDpgt6JEhxy/R5Fi/qonb+2S2BqKAWUVHDBrmKwi1fk/lsDNX03Y2Rza0O9xkQ6d 0AEm9lOqYiXMvnVbW/LgqPrioabvFhV2HtILxcj64jkU2XH6wmZ/8IYucjbEyQTH LND9iPuEO7k6baZTXPJgST/pieQlC9u8uMZNqa47ZUTnotfVeCgLUlyKswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf0/PXHgSHpfRHRhhTFrrgxOg9JMB8GA1UdIwQY MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsiRtZGb 8oL28n+EeR0laV95bjkdKWGHZkI4uJAt8Bjt/e7ihRCgHL+FVCZdrRyEx1kEBbZT ioVl7EanQsOj5xLwqmPFk6VpPITchsKUSPkl4muEKf5y8K1zosWOqqOO3XLtOFf5 IhtWXprmmdbORa4gfYAHXKx8cYF5uvyQtcSZALExcGwwU+26TsPROXfdvXTFe8Ji QdIfz+uGER4isCPjAv6J5wqILVmj4YSjlPDxey+zhw3B+ymtbLW5UHEepGo/NShk HrwebmbC4NLkY/PfLNawY7QgfcaUpTCSL0JXEpVUrROgc5Tvoq0VmZBeQMZArlBp 6iurtX9avfOzxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:46:34 2025 by rpki-client