This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json) Hash identifier: bh8+OMN5ZxE2azdyyO7CeOzhaiO85rvh3Ij42r+j4pU= Subject key identifier: 9F:84:1D:54:03:DF:1B:8F:49:68:01:70:90:11:EC:3B:89:24:18:F2 Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00 Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00 Certificate serial: 019AF12CC4BA90F01935AE875169E9DA717A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft Manifest number: 1060 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: 2xcNX0ke7t7xL6Wh+UAVNNb+cktzywuGczrpL2mxDSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c4:ba:90:f0:19:35:ae:87:51:69:e9:da:71:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32da7899887aac449958bb90eb535951a973a00 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=9f841d5403df1b8f496801709011ec3b892418f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:5d:38:8e:72:7c:a0:e6:a9:7b:7c:1e:99: 8e:02:31:96:a3:90:ef:26:a0:ab:fd:50:7e:20:54: fa:8c:3a:67:84:e4:88:19:2b:28:75:2d:49:02:82: 7c:09:67:5e:39:6a:a1:ac:eb:3b:88:f3:e0:59:61: 77:28:db:b9:72:93:b3:6f:d9:fa:ab:dd:f0:a7:6f: 00:c2:a0:b1:0e:7a:3d:5f:c8:b0:db:fa:29:fd:18: 9b:31:53:0b:c3:ab:95:63:93:b4:db:03:df:41:67: 90:50:0e:2f:61:98:da:00:95:ba:4a:0c:cf:4c:4d: e2:4c:07:03:6f:e9:0d:b8:a9:00:5a:2e:4b:09:b4: a6:b9:fe:fb:da:53:42:3a:a1:60:b8:2b:7c:b4:5e: 9b:6d:2a:86:91:39:2c:bd:87:70:05:78:47:1c:84: ac:f0:99:5b:2b:da:7c:59:45:86:5d:db:e9:d6:6b: 9b:b9:53:b3:f8:d1:c3:06:aa:82:7b:66:b3:9e:a7: 21:4e:e6:72:11:a7:a9:76:69:c0:be:ed:60:2c:6b: 59:ea:5a:5d:4a:a6:10:fc:a4:f2:e4:3c:f6:c7:85: 6a:ee:ef:4a:a1:91:80:b6:f3:74:9e:74:d0:ff:8f: 38:09:3b:2d:c4:d0:60:fe:a4:b3:94:d0:d1:29:8f: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:84:1D:54:03:DF:1B:8F:49:68:01:70:90:11:EC:3B:89:24:18:F2 X509v3 Authority Key Identifier: keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5d:76:b6:3e:45:e5:6f:b2:aa:17:cb:5d:af:74:83:27:be: 59:2d:65:a6:93:99:0a:0d:f2:05:1d:b2:0f:f2:78:70:05:17: be:94:43:c1:c1:ca:8c:e2:71:77:fb:9e:8e:dd:86:f4:91:0d: 75:4e:2c:79:e8:95:65:db:16:cc:5c:c9:34:d6:60:bc:81:cb: d6:e7:a1:85:05:ba:d6:76:c2:e4:5d:c6:48:9f:39:4f:a3:86: 13:2c:3c:ff:7e:3b:9b:47:3c:19:2d:c9:4a:5c:f0:4b:a3:21: 06:7d:3f:21:ab:0c:4f:3a:a2:13:03:e9:5b:81:6e:58:77:3c: a6:bf:bd:9c:a4:81:d7:a4:d4:95:dd:a6:2c:c1:6b:82:c6:3d: fd:5e:14:30:d3:92:af:e2:fd:17:00:27:99:90:7a:73:02:89: 1e:f8:ce:83:0f:4e:0e:65:79:9f:2a:da:98:d7:69:de:ff:f1: 3e:2c:5a:44:23:bc:4e:7a:6b:02:c2:3f:c2:6c:26:a4:c8:ae: cb:d1:34:8d:c9:1b:bf:5a:06:1a:3f:1e:70:e3:bf:7d:17:f9: d1:32:1b:14:79:ea:65:e6:4b:a0:95:46:5a:55:1b:72:32:95: 3c:8f:ef:b1:94:6b:7e:87:41:95:72:08:52:f4:78:44:3b:c0: 88:af:bd:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMS6kPAZNa6HUWnp2nF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmRhNzg5OTg4N2FhYzQ0OTk1OGJiOTBlYjUzNTk1MWE5 NzNhMDAwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD Eyg5Zjg0MWQ1NDAzZGYxYjhmNDk2ODAxNzA5MDExZWMzYjg5MjQxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWtdOI5yfKDmqXt8HpmOAjGWo5Dv JqCr/VB+IFT6jDpnhOSIGSsodS1JAoJ8CWdeOWqhrOs7iPPgWWF3KNu5cpOzb9n6 q93wp28AwqCxDno9X8iw2/op/RibMVMLw6uVY5O02wPfQWeQUA4vYZjaAJW6SgzP TE3iTAcDb+kNuKkAWi5LCbSmuf772lNCOqFguCt8tF6bbSqGkTksvYdwBXhHHISs 8JlbK9p8WUWGXdvp1mubuVOz+NHDBqqCe2aznqchTuZyEaepdmnAvu1gLGtZ6lpd SqYQ/KTy5Dz2x4Vq7u9KoZGAtvN0nnTQ/484CTstxNBg/qSzlNDRKY/mcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+EHVQD3xuPSWgBcJAR7DuJJBjyMB8GA1UdIwQY MBaAFKMtp4mYh6rESZWLuQ61NZUalzoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMzg4YjYtNDNjNi00NDU4LWFiZjUt ZDMzMzJmOTA0NGVjLzEvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hMzg4YjYtNDNjNi00NDU4LWFiZjUtZDMzMzJmOTA0NGVj LzEvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi112tj5F 5W+yqhfLXa90gye+WS1lppOZCg3yBR2yD/J4cAUXvpRDwcHKjOJxd/uejt2G9JEN dU4seeiVZdsWzFzJNNZgvIHL1uehhQW61nbC5F3GSJ85T6OGEyw8/347m0c8GS3J SlzwS6MhBn0/IasMTzqiEwPpW4FuWHc8pr+9nKSB16TUld2mLMFrgsY9/V4UMNOS r+L9FwAnmZB6cwKJHvjOgw9ODmV5nyramNdp3v/xPixaRCO8TnprAsI/wmwmpMiu y9E0jckbv1oGGj8ecOO/fRf50TIbFHnqZeZLoJVGWlUbcjKVPI/vsZRrfodBlXII UvR4RDvAiK+9Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:31 2025 by rpki-client