This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json) Hash identifier: 9ULg/1DXJE2vKdNGh3e5qDYhJXxnEGrpO65itZCQuHA= Subject key identifier: 0C:2F:C5:0F:86:46:C6:8F:66:4A:7F:72:9B:A4:7C:9F:A0:F0:F9:17 Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05 Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05 Certificate serial: 019AF1642775D1761C5920BE7CE75387342F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft Manifest number: 096D Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: KlIPeApOifoeNSphXtJgn+N5zxzRfS84i+gefPYJqgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:27:75:d1:76:1c:59:20:be:7c:e7:53:87:34:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=0c2fc50f8646c68f664a7f729ba47c9fa0f0f917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:e9:e8:ab:c2:cf:df:ab:89:13:88:2e:11: 65:19:27:14:e9:8c:48:0a:4c:22:9b:43:87:df:dc: 3d:cf:f9:0b:80:51:e9:36:aa:60:58:5d:79:0f:5b: 97:b5:0e:85:a9:30:7e:82:c3:df:81:67:95:08:27: 53:32:c5:22:63:70:4c:80:49:86:9f:4e:e1:7f:06: 7e:15:9f:d4:c2:5b:f0:8f:30:4a:db:92:34:5d:ba: 42:fd:0b:40:19:17:49:c7:2c:6f:31:a5:ed:92:17: 27:43:74:84:c6:d5:40:11:06:e5:e2:ca:5b:dd:c2: 88:42:a4:9a:98:94:89:7b:28:f4:c2:e9:1b:99:81: 73:e8:9e:bd:cd:a7:6a:5f:ef:10:44:2b:ff:7c:10: b0:83:59:e1:e4:77:a7:a3:d2:da:08:d8:6b:cc:a5: ed:3f:6f:c5:b2:77:90:6e:9d:35:8f:a1:4d:79:dd: 4d:55:e7:fa:68:31:f0:92:d9:bc:51:0c:c6:f1:47: 7c:c3:0b:01:a9:b1:c4:b3:7b:d8:af:b7:8e:4d:ec: 5f:61:6a:33:64:76:5c:22:19:40:40:53:cc:02:01: f3:96:70:97:99:43:94:d1:f5:6d:c8:2b:f8:63:b4: 05:80:a9:b6:f5:90:2d:fc:03:b2:aa:5a:69:bc:33: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:C5:0F:86:46:C6:8F:66:4A:7F:72:9B:A4:7C:9F:A0:F0:F9:17 X509v3 Authority Key Identifier: keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:52:fd:07:0d:49:20:e3:3c:16:d4:22:58:a6:fc:b5:0b:bc: df:dc:50:1e:34:d9:54:86:59:71:7d:ee:e0:b6:cb:4e:db:ae: ce:1a:a9:a3:10:4f:ac:ea:d8:f7:ec:46:f3:55:0b:e6:ab:23: 2e:08:3c:53:0d:46:23:4e:2e:72:fd:15:c9:a5:6b:e5:45:72: 58:89:70:53:ab:3a:52:89:13:af:45:d8:78:ec:e1:d4:19:44: 85:ce:80:0b:89:a8:dc:e3:70:93:39:7f:de:bf:09:ef:92:7e: f1:60:97:9f:35:51:3b:94:50:04:e0:05:67:11:80:de:c8:10: 99:ab:05:94:98:88:d1:1a:06:f0:0b:dd:e6:20:c1:e5:96:7c: 8c:f9:82:c8:11:f0:c0:78:c7:ab:c7:9c:20:1c:88:7e:7c:c7: 86:0e:20:af:70:0d:c4:a3:3c:96:5d:17:97:2d:cd:ca:d8:0e: 2c:c1:a6:92:f6:7c:49:82:45:ee:df:2e:cb:f1:25:45:d7:79: 7f:46:da:9c:97:35:30:87:63:d8:03:15:c9:51:5d:b6:70:4e: cd:c1:bf:7c:26:bc:7a:ce:81:a3:82:f3:d8:a7:a1:98:8a:02: 50:46:b6:7f:b0:9c:c9:f3:f3:41:00:ae:2c:eb:11:d4:33:24: 49:a2:da:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCd10XYcWSC+fOdThzQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTI1Njg1Yzk2ZTMyNmYyMGFlMzcyOWMwMzBmNDRmZDE0 OTliMDUwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EygwYzJmYzUwZjg2NDZjNjhmNjY0YTdmNzI5YmE0N2M5ZmEwZjBmOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJrp6KvCz9+riROILhFlGScU6YxI Ckwim0OH39w9z/kLgFHpNqpgWF15D1uXtQ6FqTB+gsPfgWeVCCdTMsUiY3BMgEmG n07hfwZ+FZ/UwlvwjzBK25I0XbpC/QtAGRdJxyxvMaXtkhcnQ3SExtVAEQbl4spb 3cKIQqSamJSJeyj0wukbmYFz6J69zadqX+8QRCv/fBCwg1nh5Heno9LaCNhrzKXt P2/FsneQbp01j6FNed1NVef6aDHwktm8UQzG8Ud8wwsBqbHEs3vYr7eOTexfYWoz ZHZcIhlAQFPMAgHzlnCXmUOU0fVtyCv4Y7QFgKm29ZAt/AOyqlppvDOmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwvxQ+GRsaPZkp/cpukfJ+g8PkXMB8GA1UdIwQY MBaAFKFSVoXJbjJvIK43KcAw9E/RSZsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAt NDQzNzFiMWNjNzJmLzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAtNDQzNzFiMWNjNzJm LzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFL9Bw1J IOM8FtQiWKb8tQu839xQHjTZVIZZcX3u4LbLTtuuzhqpoxBPrOrY9+xG81UL5qsj Lgg8Uw1GI04ucv0VyaVr5UVyWIlwU6s6UokTr0XYeOzh1BlEhc6AC4mo3ONwkzl/ 3r8J75J+8WCXnzVRO5RQBOAFZxGA3sgQmasFlJiI0RoG8Avd5iDB5ZZ8jPmCyBHw wHjHq8ecIByIfnzHhg4gr3ANxKM8ll0Xly3NytgOLMGmkvZ8SYJF7t8uy/ElRdd5 f0banJc1MIdj2AMVyVFdtnBOzcG/fCa8es6Bo4Lz2KehmIoCUEa2f7CcyfPzQQCu LOsR1DMkSaLaxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:57 2025 by rpki-client