This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json) Hash identifier: 8kakJY8pn36hBz6gqA2dtk8pjWMby6YGfwJ2wnLUXuw= Subject key identifier: C5:13:2F:13:19:05:26:E1:A5:8F:ED:BB:F0:61:A6:EC:FE:B3:AD:58 Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29 Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729 Certificate serial: 019AF61C9972054B28ECD7BF754A04CBD0C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:01:00 +0000 Manifest this update: Sun 07 Dec 2025 00:01:00 +0000 Manifest next update: Mon 08 Dec 2025 00:01:00 +0000 Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: SsSAebqhCRy8Rn4CKj0S0ZssF7QwGYsGKX50a8Yb4QM=) 2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:99:72:05:4b:28:ec:d7:bf:75:4a:04:cb:d0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729 Validity Not Before: Dec 7 00:01:00 2025 GMT Not After : Dec 8 00:01:00 2025 GMT Subject: CN=c5132f13190526e1a58fedbbf061a6ecfeb3ad58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:9e:b0:96:07:79:c0:31:bf:fa:f3:f8:84: 0f:1f:48:b2:ed:3b:e0:2c:49:5f:2a:cb:4b:38:d3: de:6f:e9:56:5e:1a:78:dc:7b:56:cd:36:22:f7:63: e5:78:a6:73:a3:73:65:75:be:bc:05:7e:8c:ea:41: eb:e8:27:3b:5a:e8:2f:b4:37:07:20:68:69:e6:d1: c8:0c:6c:19:2d:22:42:80:c8:8d:36:58:a6:c2:dd: 0a:16:c9:e0:31:cc:8a:31:72:5d:2c:9e:37:e5:ee: d9:28:e9:27:80:40:86:ff:11:fd:fb:c1:c5:30:dd: 50:d6:bb:b8:23:68:c4:7b:ed:ce:04:2a:99:20:b3: 40:ec:04:64:ec:b2:81:4b:70:63:e8:0e:ba:c8:b7: 6f:fe:85:d6:59:9e:da:dd:dc:29:da:85:02:49:e2: 51:d3:6b:55:2f:3f:09:36:eb:20:b5:55:fa:b4:08: cf:42:1a:97:5c:17:58:7b:27:97:4c:32:d1:77:35: 32:6d:1f:13:24:db:77:a4:15:f5:49:34:cf:f3:89: 62:c1:f5:9c:1f:91:24:b1:1a:c4:9d:d8:a2:ec:ed: 04:b7:7b:10:7c:27:ec:cd:0b:ae:36:75:4a:6b:d0: 3e:83:87:04:43:2a:1a:03:25:0d:16:38:ca:4c:4a: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:13:2F:13:19:05:26:E1:A5:8F:ED:BB:F0:61:A6:EC:FE:B3:AD:58 X509v3 Authority Key Identifier: keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:45:e7:9d:1b:ae:03:2e:32:d1:81:6e:5d:b0:04:36:a2:68: 50:11:c2:f8:40:c7:04:e8:93:ef:c0:38:1d:49:35:db:0a:a2: 44:5a:c4:e8:08:b1:74:13:7e:98:24:86:db:5d:52:c2:4b:a4: da:e4:00:01:02:65:f7:2a:3d:9b:54:ad:17:91:8b:2e:cd:b8: b0:7f:e0:a7:8f:71:da:6a:c9:6c:cd:10:c5:e8:31:6c:78:e9: b9:c9:e7:86:f4:4a:fc:80:fc:2b:3f:5d:61:f0:13:82:25:52: 0c:d7:f8:89:b1:bc:d3:87:23:40:01:58:09:af:b3:8c:c1:6c: 40:48:68:39:46:23:d1:d6:c2:2a:9b:ef:35:88:68:cf:95:21: f6:e1:64:df:ea:80:35:00:4b:80:6c:79:db:00:d4:31:a1:5c: 6e:9e:6d:4f:ff:a0:c9:a8:aa:d0:89:8e:76:02:9d:2d:28:b3: a1:27:52:4a:db:a8:03:06:17:e8:f2:4a:2d:6a:22:80:5a:02: b7:93:c6:4b:b2:b0:86:56:c1:c2:76:6a:ca:60:45:ce:d7:6e: 01:f3:9d:67:62:6a:e0:bf:51:5b:2e:b1:47:eb:20:9b:7d:39: a2:d2:d5:a6:80:45:65:24:80:84:fe:5a:c5:b3:7e:98:19:d7: 3a:8d:ef:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJlyBUso7Ne/dUoEy9DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl MjQ3MjkwHhcNMjUxMjA3MDAwMTAwWhcNMjUxMjA4MDAwMTAwWjAzMTEwLwYDVQQD EyhjNTEzMmYxMzE5MDUyNmUxYTU4ZmVkYmJmMDYxYTZlY2ZlYjNhZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bWesJYHecAxv/rz+IQPH0iy7Tvg LElfKstLONPeb+lWXhp43HtWzTYi92PleKZzo3Nldb68BX6M6kHr6Cc7WugvtDcH IGhp5tHIDGwZLSJCgMiNNlimwt0KFsngMcyKMXJdLJ435e7ZKOkngECG/xH9+8HF MN1Q1ru4I2jEe+3OBCqZILNA7ARk7LKBS3Bj6A66yLdv/oXWWZ7a3dwp2oUCSeJR 02tVLz8JNusgtVX6tAjPQhqXXBdYeyeXTDLRdzUybR8TJNt3pBX1STTP84liwfWc H5EksRrEndii7O0Et3sQfCfszQuuNnVKa9A+g4cEQyoaAyUNFjjKTEq9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUTLxMZBSbhpY/tu/Bhpuz+s61YMB8GA1UdIwQY MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0 LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkXnnRuu Ay4y0YFuXbAENqJoUBHC+EDHBOiT78A4HUk12wqiRFrE6AixdBN+mCSG211Swkuk 2uQAAQJl9yo9m1StF5GLLs24sH/gp49x2mrJbM0QxegxbHjpucnnhvRK/ID8Kz9d YfATgiVSDNf4ibG804cjQAFYCa+zjMFsQEhoOUYj0dbCKpvvNYhoz5Uh9uFk3+qA NQBLgGx52wDUMaFcbp5tT/+gyaiq0ImOdgKdLSizoSdSStuoAwYX6PJKLWoigFoC t5PGS7KwhlbBwnZqymBFztduAfOdZ2Jq4L9RWy6xR+sgm305otLVpoBFZSSAhP5a xbN+mBnXOo3vaA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:00 2025 by rpki-client