This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json) Hash identifier: uQ8L0hzMElsF1nyGoc2L0t8wfyIETl5vgA3fW8pbsho= Subject key identifier: FA:06:F8:DB:A3:51:E8:E2:EE:A2:7D:37:46:D5:12:6A:F9:EE:BD:67 Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Certificate serial: 019AF31C6B46CE33765772E231E228114308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft Manifest number: 138A Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=) 2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: uGJcl3K8YDkRN5BXvDdA8yknFdM9/Ijl0uElDFwRB4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6b:46:ce:33:76:57:72:e2:31:e2:28:11:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=fa06f8dba351e8e2eea27d3746d5126af9eebd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:60:e4:69:e3:bb:31:d8:ed:78:d5:19:ab: b6:3a:52:26:55:b1:e7:e6:9f:fe:e9:81:59:ed:50: 07:d1:3d:44:6c:1d:7a:07:84:d1:42:de:4a:4a:ab: a0:cf:8b:ac:90:94:52:b8:d5:05:f5:74:c0:2a:3e: a5:cb:19:4d:df:b5:e0:62:ac:ab:27:86:de:79:44: cc:aa:29:3d:ee:e4:b5:38:4e:bd:09:ed:17:39:ce: 78:c6:e9:fd:f5:f4:5d:bb:52:4c:cb:76:0f:2a:66: 08:0a:21:cc:7d:4d:3c:76:ca:5c:f6:7b:73:74:89: 63:dd:30:0c:cb:5d:83:19:02:06:c8:d6:14:28:23: 57:c6:97:78:33:ad:05:1d:f2:53:8d:bc:a0:63:51: c1:6e:4e:10:ef:ed:48:ea:aa:31:8b:df:9f:64:a2: d5:6d:77:d5:a1:21:66:86:56:2b:bc:d6:da:78:46: c6:6c:b1:0b:1d:cd:56:ba:8e:1c:90:8e:b4:c0:b7: 93:63:a9:cb:34:89:01:d0:62:43:aa:3c:ab:da:9c: 3d:8a:25:b1:b4:0f:34:48:fb:73:46:52:69:0c:34: 23:b8:77:1b:b1:b1:af:81:14:fa:12:ff:de:e8:d8: de:45:72:4b:de:6c:f2:fa:44:e5:32:09:7e:eb:f6: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:F8:DB:A3:51:E8:E2:EE:A2:7D:37:46:D5:12:6A:F9:EE:BD:67 X509v3 Authority Key Identifier: keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:f1:8d:ab:b9:d9:9a:cc:90:1b:9d:9b:9d:39:54:11:3a: cf:5b:9a:4d:c9:40:26:b1:04:b8:07:b3:7d:5a:0c:b4:32:ae: d7:04:38:05:b1:a3:1e:3d:ca:69:fe:8b:ca:ed:bc:8b:3f:a8: 73:77:58:2b:51:41:c2:24:14:5e:53:b7:76:cd:0e:2a:68:53: 2e:07:88:d0:f3:a1:e4:2c:cf:b7:89:05:cf:24:2e:70:b4:6c: f8:1c:4e:d5:6a:b8:c6:44:52:ed:16:f8:cb:f3:24:98:31:ee: e6:5b:52:b3:ae:38:68:e8:42:a4:f4:11:15:92:55:fb:68:fb: 09:ff:6b:1b:0b:2f:b7:d3:f7:00:9a:0b:4b:0c:cd:de:59:df: f8:e1:66:77:94:3a:ce:63:ec:71:32:10:00:e2:9d:ac:b1:2f: 54:6a:41:87:6f:42:48:a3:54:bc:4c:5b:89:78:17:8d:22:86: 28:00:2a:84:00:c4:68:2e:9f:96:fb:2a:36:95:30:cc:8c:3e: 61:80:86:48:99:ed:07:a7:b7:32:5a:39:38:c8:6d:7a:cb:63: ed:f3:57:23:4f:0a:11:85:a4:4f:e5:e8:d2:55:79:7e:f0:60: 42:81:0d:e0:d7:a3:32:a2:d9:1f:4a:17:11:ea:71:c4:d5:7e: 4b:8c:94:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGtGzjN2V3LiMeIoEUMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk NjdiZTMwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhmYTA2ZjhkYmEzNTFlOGUyZWVhMjdkMzc0NmQ1MTI2YWY5ZWViZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o5g5GnjuzHY7XjVGau2OlImVbHn 5p/+6YFZ7VAH0T1EbB16B4TRQt5KSqugz4uskJRSuNUF9XTAKj6lyxlN37XgYqyr J4beeUTMqik97uS1OE69Ce0XOc54xun99fRdu1JMy3YPKmYICiHMfU08dspc9ntz dIlj3TAMy12DGQIGyNYUKCNXxpd4M60FHfJTjbygY1HBbk4Q7+1I6qoxi9+fZKLV bXfVoSFmhlYrvNbaeEbGbLELHc1Wuo4ckI60wLeTY6nLNIkB0GJDqjyr2pw9iiWx tA80SPtzRlJpDDQjuHcbsbGvgRT6Ev/e6NjeRXJL3mzy+kTlMgl+6/bJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoG+NujUeji7qJ9N0bVEmr57r1nMB8GA1UdIwQY MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzfxjau5 2ZrMkBudm505VBE6z1uaTclAJrEEuAezfVoMtDKu1wQ4BbGjHj3Kaf6Lyu28iz+o c3dYK1FBwiQUXlO3ds0OKmhTLgeI0POh5CzPt4kFzyQucLRs+BxO1Wq4xkRS7Rb4 y/MkmDHu5ltSs644aOhCpPQRFZJV+2j7Cf9rGwsvt9P3AJoLSwzN3lnf+OFmd5Q6 zmPscTIQAOKdrLEvVGpBh29CSKNUvExbiXgXjSKGKAAqhADEaC6flvsqNpUwzIw+ YYCGSJntB6e3Mlo5OMhtestj7fNXI08KEYWkT+Xo0lV5fvBgQoEN4NejMqLZH0oX EepxxNV+S4yUcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:47 2025 by rpki-client