This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json) Hash identifier: uAeoPVRYe1cZEBS63tXur6DslIug1G9nsLKN8bmFRDs= Subject key identifier: 33:78:3D:1E:FC:D6:5F:C3:EF:6F:15:85:9D:C9:BF:FA:D9:A0:1E:04 Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019AF12D61D7A8FF203CFD8672E698FB6485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 0yvhJS09+/lVfFG2mCwznGQzmqYNodkrXJYSqn3gjhA=) 2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=) 3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:61:d7:a8:ff:20:3c:fd:86:72:e6:98:fb:64:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=33783d1efcd65fc3ef6f15859dc9bffad9a01e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:26:aa:35:4f:4d:97:be:01:f6:77:78:df: fe:a2:41:a5:89:d0:da:50:ed:81:dd:e4:18:84:52: dd:d2:8e:3b:b0:f5:d7:f8:13:b3:e1:d2:b9:cc:7f: 39:fd:29:c8:70:e6:55:50:74:22:a3:25:04:24:95: 5c:2a:e5:48:b1:27:dd:0e:5a:53:3b:22:ad:b9:f4: 0b:0b:7e:e3:f2:28:2d:08:2d:47:32:8d:1f:62:5d: c5:33:44:da:1d:84:e4:7b:de:38:cc:12:b8:42:aa: f8:88:69:15:8b:2c:c1:15:4d:ca:32:70:5b:4b:5c: c8:91:bc:66:9f:fb:3f:82:7f:d0:7f:ce:4b:4f:cb: f4:80:6d:0d:28:35:4f:0e:ca:4e:9f:25:fb:ba:c9: 0a:fb:00:9c:07:b9:a1:7b:3f:cf:fd:b4:e0:be:38: a6:cb:af:0f:fe:e7:ba:90:ca:9b:d3:07:e2:ff:12: 78:27:ac:09:eb:25:e6:d5:1d:2d:fe:07:22:1c:78: 81:9a:7f:e1:82:2a:b2:91:c9:e6:8f:7f:ed:3a:28: af:24:42:e8:85:93:de:03:74:fe:ee:4d:1e:f2:bb: 69:3c:5c:94:de:c2:50:11:6e:4b:b3:3e:b3:c3:be: 7c:fc:3e:35:13:2f:d9:09:51:13:51:b0:2a:98:42: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:78:3D:1E:FC:D6:5F:C3:EF:6F:15:85:9D:C9:BF:FA:D9:A0:1E:04 X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a2:6c:01:36:72:95:b1:e3:79:50:99:eb:cd:c7:82:28:9b: a7:f1:b1:f6:42:1b:71:cb:5c:2d:b6:40:dc:28:08:0c:48:f6: 72:ad:54:97:d7:40:6c:a2:e2:7e:89:72:9d:9e:49:73:e5:c3: 64:10:33:34:21:a0:dc:52:2c:7e:57:ce:a1:95:0c:8f:e3:a0: 59:46:93:fa:d4:3e:29:26:18:49:58:03:aa:d5:89:a5:ee:a8: 06:32:62:97:23:7f:8c:7d:91:a9:cc:1a:56:f9:07:fe:93:81: ae:a3:45:90:59:a9:61:9e:56:e4:e0:0e:6a:7b:68:59:98:bc: c9:3b:f8:2b:95:67:b5:2c:98:df:b6:12:10:60:7c:0d:bc:c5: a2:5a:52:79:85:c1:52:92:d4:0a:4a:d1:da:3a:3c:17:79:8b: 4f:13:90:7d:c8:2a:4a:01:c5:5e:d0:94:1a:a8:a6:bb:66:df: 56:99:3e:b6:67:21:0c:6d:4f:bf:bf:d8:14:87:91:95:ce:22: b1:a4:24:98:c8:1e:84:7a:3a:1f:5d:55:1c:25:0f:b1:38:64: d4:d6:df:8d:27:8b:15:6c:29:b6:16:d9:d6:b2:54:b8:5c:f2: 1a:b7:81:20:e1:19:49:39:8c:f0:0a:b2:e1:d3:51:94:f8:1e: 5f:1b:b0:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWHXqP8gPP2GcuaY+2SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EygzMzc4M2QxZWZjZDY1ZmMzZWY2ZjE1ODU5ZGM5YmZmYWQ5YTAxZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI0mqjVPTZe+AfZ3eN/+okGlidDa UO2B3eQYhFLd0o47sPXX+BOz4dK5zH85/SnIcOZVUHQioyUEJJVcKuVIsSfdDlpT OyKtufQLC37j8igtCC1HMo0fYl3FM0TaHYTke944zBK4Qqr4iGkViyzBFU3KMnBb S1zIkbxmn/s/gn/Qf85LT8v0gG0NKDVPDspOnyX7uskK+wCcB7mhez/P/bTgvjim y68P/ue6kMqb0wfi/xJ4J6wJ6yXm1R0t/gciHHiBmn/hgiqykcnmj3/tOiivJELo hZPeA3T+7k0e8rtpPFyU3sJQEW5Lsz6zw758/D41Ey/ZCVETUbAqmEJK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN4PR781l/D728VhZ3Jv/rZoB4EMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6JsATZy lbHjeVCZ683Hgiibp/Gx9kIbcctcLbZA3CgIDEj2cq1Ul9dAbKLifolynZ5Jc+XD ZBAzNCGg3FIsflfOoZUMj+OgWUaT+tQ+KSYYSVgDqtWJpe6oBjJilyN/jH2Rqcwa VvkH/pOBrqNFkFmpYZ5W5OAOantoWZi8yTv4K5VntSyY37YSEGB8DbzFolpSeYXB UpLUCkrR2jo8F3mLTxOQfcgqSgHFXtCUGqimu2bfVpk+tmchDG1Pv7/YFIeRlc4i saQkmMgehHo6H11VHCUPsThk1NbfjSeLFWwpthbZ1rJUuFzyGreBIOEZSTmM8Aqy 4dNRlPgeXxuw8A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:43 2025 by rpki-client