This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json) Hash identifier: U/GRA1mkCQWW4DGbrh+hnc/Ej1WRStR55TRyi9pt94I= Subject key identifier: 43:83:8D:D6:73:46:03:69:0D:BF:DB:A1:78:C4:FB:BD:20:A2:0B:75 Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Certificate serial: 019AF23F7BF263B31735B79AF64EF09ECE17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft Manifest number: 1020 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: nkZmqVi7yCPSDq62LcEj4sCGzVEsXMXIPXEFUr0M17U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7b:f2:63:b3:17:35:b7:9a:f6:4e:f0:9e:ce:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=43838dd6734603690dbfdba178c4fbbd20a20b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:37:06:b3:77:c6:8d:95:c0:a1:ac:b1:8d: b6:ae:30:4e:d7:01:10:05:58:71:cc:c7:18:e4:45: f7:81:cc:44:85:a4:6f:70:a3:cf:0d:bc:67:3d:ab: fe:5a:d0:84:8d:ab:39:ba:7c:a9:e3:9d:4a:52:f2: f5:dc:bf:73:cd:40:13:52:f7:50:7d:c9:09:f5:b5: 00:ef:7a:66:1d:30:2b:f8:1a:b8:26:74:91:51:5d: e4:18:22:39:98:db:87:57:66:57:26:0c:00:65:4d: bf:4c:5d:92:1c:3b:b6:32:f6:8d:62:40:57:99:3a: f3:f1:4c:b6:d8:5b:7c:90:c3:01:09:05:b9:ff:7f: 7b:94:2e:f8:c0:39:a1:a5:64:ac:e8:e2:74:ee:ea: 55:0f:fa:6e:a7:d8:0a:8e:c6:6d:84:12:e0:a3:0f: 74:0e:f5:1f:34:23:71:4c:c2:bc:54:ba:d8:6a:f3: bb:58:92:91:d8:0a:a4:6f:c6:80:5a:09:d2:55:7b: 41:50:b0:20:62:9d:91:6c:0f:95:26:0a:9a:87:a0: 67:c6:e1:f5:19:2a:eb:f9:1d:60:13:b0:45:95:4b: ec:c6:16:ae:a5:2b:cf:87:39:34:30:e0:52:12:a9: 78:56:89:16:08:98:88:da:2c:df:5b:03:08:0e:f0: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:8D:D6:73:46:03:69:0D:BF:DB:A1:78:C4:FB:BD:20:A2:0B:75 X509v3 Authority Key Identifier: keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ee:1b:36:28:42:24:69:5c:f5:33:b3:9a:5b:be:a4:35:f2: ea:16:15:6c:ac:1e:1c:f8:cf:94:15:fc:04:49:52:83:35:44: 4f:f4:4a:ca:52:70:75:13:fa:f5:a2:9a:a8:9c:b0:58:3f:c9: a2:ef:1f:10:e3:f8:19:94:66:da:07:f2:bf:aa:04:09:ba:df: 9e:c0:92:3e:c1:3c:68:46:c4:73:90:9e:50:04:60:1b:65:d7: 99:de:10:9e:d3:9e:da:ee:6a:10:17:35:b1:ff:94:c8:ac:34: fe:22:f5:94:11:68:93:c1:d3:71:b9:06:5c:32:70:85:27:aa: b1:18:85:38:45:76:2a:cf:86:b1:f7:88:32:91:3d:c2:91:10: 7f:66:46:f7:40:b2:3d:84:9e:0f:07:50:21:67:c2:fd:ec:40: 1e:c1:10:a2:fd:1c:54:d6:84:6e:dc:d2:fb:a1:d3:04:35:d7: a8:c9:28:99:17:4a:87:41:0e:79:9f:bb:c7:47:97:5b:1e:27: f6:b6:7a:02:cc:c9:67:93:55:d2:a2:3f:4a:cb:09:df:14:86: 99:1d:e4:07:c5:96:8e:94:59:ce:c2:23:fc:28:9e:52:66:24: 23:3d:ca:e5:af:89:37:50:92:75:47:77:58:8a:50:4c:d2:91: 6a:8c:4d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3vyY7MXNbea9k7wns4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0 MzFiNjkwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg0MzgzOGRkNjczNDYwMzY5MGRiZmRiYTE3OGM0ZmJiZDIwYTIwYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodw3BrN3xo2VwKGssY22rjBO1wEQ BVhxzMcY5EX3gcxEhaRvcKPPDbxnPav+WtCEjas5unyp451KUvL13L9zzUATUvdQ fckJ9bUA73pmHTAr+Bq4JnSRUV3kGCI5mNuHV2ZXJgwAZU2/TF2SHDu2MvaNYkBX mTrz8Uy22Ft8kMMBCQW5/397lC74wDmhpWSs6OJ07upVD/pup9gKjsZthBLgow90 DvUfNCNxTMK8VLrYavO7WJKR2Aqkb8aAWgnSVXtBULAgYp2RbA+VJgqah6BnxuH1 GSrr+R1gE7BFlUvsxhaupSvPhzk0MOBSEql4VokWCJiI2izfWwMIDvACTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEODjdZzRgNpDb/boXjE+70gogt1MB8GA1UdIwQY MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbu4bNihC JGlc9TOzmlu+pDXy6hYVbKweHPjPlBX8BElSgzVET/RKylJwdRP69aKaqJywWD/J ou8fEOP4GZRm2gfyv6oECbrfnsCSPsE8aEbEc5CeUARgG2XXmd4QntOe2u5qEBc1 sf+UyKw0/iL1lBFok8HTcbkGXDJwhSeqsRiFOEV2Ks+GsfeIMpE9wpEQf2ZG90Cy PYSeDwdQIWfC/exAHsEQov0cVNaEbtzS+6HTBDXXqMkomRdKh0EOeZ+7x0eXWx4n 9rZ6AszJZ5NV0qI/SssJ3xSGmR3kB8WWjpRZzsIj/CieUmYkIz3K5a+JN1CSdUd3 WIpQTNKRaoxNKw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:03 2025 by rpki-client