This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json) Hash identifier: H3VVZhHQJkZH0LswdMQuaOOeKYu6cJZocUy/3+yH9Zo= Subject key identifier: A6:FD:62:77:53:03:EE:10:E4:27:A5:B0:95:E1:56:41:B2:7C:65:9F Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Certificate serial: 019AF389A0F73B0A3E7CD6AD80A0A0932340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft Manifest number: 11A0 Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: wVSEKvt+0EIkEbF7f+fV+oMBfQoGlB6F6S5oyd4DJKo=) 2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a0:f7:3b:0a:3e:7c:d6:ad:80:a0:a0:93:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=a6fd62775303ee10e427a5b095e15641b27c659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:03:1c:a1:d3:1a:c8:b1:fc:42:29:ab:53: 45:ea:b7:1e:2e:c2:6d:c8:3b:db:7f:cf:4b:23:49: d4:2d:45:19:5e:62:cb:e4:42:c0:f4:36:8a:1a:e5: d1:fc:0e:7a:10:58:a7:67:5c:6d:40:fe:16:40:0a: f5:6d:ad:2f:f7:a5:15:f7:85:37:d2:1b:8d:02:62: 64:54:96:95:7c:51:15:74:b6:52:ea:20:87:e0:f4: 36:24:9c:93:5c:80:3e:f2:a2:c9:a4:f2:96:58:e8: 53:6e:7b:e6:10:cf:3b:54:43:03:7d:c2:0f:dd:19: 30:ca:47:6b:61:a4:5e:b1:90:fb:03:37:d9:5d:fe: 88:0b:42:31:cb:11:91:90:9d:ac:af:32:50:8c:89: b4:86:01:cb:a6:ec:a8:3d:cf:e3:a7:48:62:9a:8b: e7:72:98:74:9b:1b:9e:2a:77:6a:88:8d:05:b4:ac: 51:44:6b:58:ec:89:63:cf:01:5a:34:d5:24:0a:e8: e1:55:39:33:4d:69:f7:8c:37:b0:d4:95:71:c6:e1: 5b:bd:7b:df:c6:47:00:22:89:fe:a2:b4:39:89:36: 72:04:4f:2b:85:c7:a8:2a:bc:42:1e:0d:e8:fb:ff: 82:ba:f9:4d:97:64:9b:61:0c:c2:91:ed:b2:26:f9: f8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FD:62:77:53:03:EE:10:E4:27:A5:B0:95:E1:56:41:B2:7C:65:9F X509v3 Authority Key Identifier: keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8c:21:cf:24:ca:94:c8:a1:37:5b:f3:a8:c6:ba:b7:33:2a: 4f:24:ed:08:17:69:1c:a2:ac:99:69:33:6b:f7:cd:69:af:2e: d3:98:0b:5f:4b:93:61:17:4a:96:f5:50:34:ff:50:fe:de:58: 96:2a:b1:1a:19:8d:e9:32:b3:db:d0:83:2e:ad:b9:1b:ed:a5: 46:18:76:b6:29:93:89:f9:95:d6:e5:19:5c:31:9a:c7:26:b8: 83:0b:cf:3c:bf:a1:d9:1b:c3:d6:f2:6e:c1:24:d7:99:ae:f0: ed:77:98:13:28:0c:88:e8:3d:d6:0d:64:b9:df:86:c4:ee:39: 63:5d:c1:1e:f3:2c:00:d2:ed:87:9c:9d:e1:0c:cf:aa:6c:6e: cd:45:73:dc:20:3a:cf:9a:80:37:38:51:b5:65:0b:1e:8a:1c: 3f:1b:04:e6:93:36:7a:1a:da:95:b7:e9:7d:69:47:53:1e:a2: fd:6f:12:1a:43:50:7a:2f:b2:d6:d1:8a:33:f5:1d:67:b2:9e: 90:15:0c:9d:28:a0:5a:cb:16:9d:d6:ba:03:a0:96:29:6c:ef: 49:25:b1:18:cb:77:3e:c2:57:d7:f8:17:4f:01:0e:87:67:28: a8:35:8f:bd:81:ba:66:6a:ab:d3:49:07:8d:2b:29:04:52:9a: eb:8f:67:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaD3Owo+fNatgKCgkyNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWNkOGM3MWE2ZTMzMjgyYzA0NWQ4Zjg4YzNiMzc4YWNm NDFiZDkwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD EyhhNmZkNjI3NzUzMDNlZTEwZTQyN2E1YjA5NWUxNTY0MWIyN2M2NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZMDHKHTGsix/EIpq1NF6rceLsJt yDvbf89LI0nULUUZXmLL5ELA9DaKGuXR/A56EFinZ1xtQP4WQAr1ba0v96UV94U3 0huNAmJkVJaVfFEVdLZS6iCH4PQ2JJyTXIA+8qLJpPKWWOhTbnvmEM87VEMDfcIP 3RkwykdrYaResZD7AzfZXf6IC0IxyxGRkJ2srzJQjIm0hgHLpuyoPc/jp0himovn cph0mxueKndqiI0FtKxRRGtY7IljzwFaNNUkCujhVTkzTWn3jDew1JVxxuFbvXvf xkcAIon+orQ5iTZyBE8rhceoKrxCHg3o+/+CuvlNl2SbYQzCke2yJvn4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb9YndTA+4Q5CelsJXhVkGyfGWfMB8GA1UdIwQY MBaAFKCc2McabjMoLARdj4jDs3is9BvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMt NmU4ZTA3ZDY2YzliLzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMtNmU4ZTA3ZDY2Yzli LzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATowhzyTK lMihN1vzqMa6tzMqTyTtCBdpHKKsmWkza/fNaa8u05gLX0uTYRdKlvVQNP9Q/t5Y liqxGhmN6TKz29CDLq25G+2lRhh2timTifmV1uUZXDGaxya4gwvPPL+h2RvD1vJu wSTXma7w7XeYEygMiOg91g1kud+GxO45Y13BHvMsANLth5yd4QzPqmxuzUVz3CA6 z5qANzhRtWULHoocPxsE5pM2ehralbfpfWlHUx6i/W8SGkNQei+y1tGKM/UdZ7Ke kBUMnSigWssWnda6A6CWKWzvSSWxGMt3PsJX1/gXTwEOh2coqDWPvYG6Zmqr00kH jSspBFKa649nGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:51 2025 by rpki-client