This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json) Hash identifier: 9jfVgDwepk6/V1Y+dhMhPdzxzV6P2aNqBJEAd+bPiPs= Subject key identifier: 6F:48:D9:98:CA:D7:E9:F7:F1:95:55:2B:57:06:CB:1A:66:E1:0B:7A Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Certificate serial: 019B3EDB017E003FF82D014B630273CD27BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft Manifest number: 11C7 Signing time: Sun 21 Dec 2025 03:01:38 +0000 Manifest this update: Sun 21 Dec 2025 03:01:38 +0000 Manifest next update: Mon 22 Dec 2025 03:01:38 +0000 Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: nVTNsXLOlBycICujBv+e6U6iR/+x5lCb5WyXc0rAF9s=) 2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:01:7e:00:3f:f8:2d:01:4b:63:02:73:cd:27:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Validity Not Before: Dec 21 03:01:38 2025 GMT Not After : Dec 22 03:01:38 2025 GMT Subject: CN=6f48d998cad7e9f7f195552b5706cb1a66e10b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:eb:45:86:0d:28:02:9c:73:4b:1a:6f:29: 2e:df:1c:21:33:1c:c1:0f:a7:86:5b:64:de:50:38: 00:f9:26:35:ef:a6:ff:df:0b:6f:bd:9d:7d:c2:89: b9:51:af:f0:08:2f:e4:70:1c:29:67:3c:17:de:b6: 14:93:de:3a:58:b0:7d:02:b3:b0:9c:b8:22:7c:87: 8d:d0:42:f5:4a:57:7e:fa:62:b9:be:db:53:49:51: 6e:d3:b7:ab:c0:15:d7:61:4f:3e:38:73:a4:d4:1b: 39:e9:e9:f2:78:cd:fa:fe:e6:be:a5:ad:0c:a9:f4: a6:79:13:b9:ec:fc:93:16:74:6a:0b:2c:d3:8f:b3: 5a:70:f6:c5:5e:3a:a8:55:76:ea:cc:ac:c9:05:2a: 37:b7:0d:bd:e9:51:37:e7:09:89:e8:f6:05:2a:6b: 6b:59:e9:d4:ea:82:ad:41:6c:d9:85:1e:8e:45:84: c1:71:d8:d6:14:8e:dc:76:4b:55:d0:5f:d7:7b:05: 5d:bb:7a:96:bc:0a:fd:3d:08:eb:64:71:bd:ff:36: 56:39:14:9b:b5:d9:a1:30:d9:00:59:03:47:c6:27: e1:3b:1a:0c:70:d8:26:0b:ee:19:d6:5d:a4:f7:22: 56:8a:25:fb:a1:ef:60:32:21:86:0c:00:52:65:29: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:48:D9:98:CA:D7:E9:F7:F1:95:55:2B:57:06:CB:1A:66:E1:0B:7A X509v3 Authority Key Identifier: keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:39:ab:97:39:13:06:f7:d6:79:22:a9:42:c6:e7:16:fa:92: 7a:61:c4:61:73:70:80:d3:b4:23:74:f9:31:56:51:a3:4d:58: 65:4b:a5:0f:48:da:45:9e:67:6f:4a:a5:41:d3:37:05:06:54: 9c:6f:d7:72:07:d8:4a:91:d1:7d:11:00:97:6f:20:d2:c0:f1: 8f:b0:d8:dd:b3:f3:06:46:83:47:64:76:5f:66:88:2b:ba:09: 77:41:b3:4f:43:0b:08:60:ee:87:00:45:b4:72:53:f8:6d:b1: 86:d8:5f:96:e5:57:29:b6:a6:af:83:aa:6c:c7:c8:a3:da:41: 00:22:2f:db:cf:37:dc:df:11:87:97:11:6f:72:f9:cb:bf:cb: 99:4f:b1:09:7e:70:61:bd:53:8f:aa:9b:ba:ba:5f:35:1c:4f: 49:12:b1:23:b7:cd:a1:46:b9:51:8a:bc:c5:b1:1c:86:86:f6: dd:02:b2:ee:f4:ed:c7:87:46:42:78:fe:e9:c9:49:1a:26:56: 55:04:63:1f:f4:9d:bb:0c:e2:f6:9f:74:75:a5:89:8f:50:6d: c9:bd:1b:4d:96:46:8f:db:7d:8d:32:75:30:6a:1b:13:3c:89: ad:fa:70:e3:2a:0f:15:a0:df:5d:39:b2:a2:f6:4b:ba:27:3c: db:4c:fa:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wF+AD/4LQFLYwJzzSe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWNkOGM3MWE2ZTMzMjgyYzA0NWQ4Zjg4YzNiMzc4YWNm NDFiZDkwHhcNMjUxMjIxMDMwMTM4WhcNMjUxMjIyMDMwMTM4WjAzMTEwLwYDVQQD Eyg2ZjQ4ZDk5OGNhZDdlOWY3ZjE5NTU1MmI1NzA2Y2IxYTY2ZTEwYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO/rRYYNKAKcc0sabyku3xwhMxzB D6eGW2TeUDgA+SY176b/3wtvvZ19wom5Ua/wCC/kcBwpZzwX3rYUk946WLB9ArOw nLgifIeN0EL1Sld++mK5vttTSVFu07erwBXXYU8+OHOk1Bs56enyeM36/ua+pa0M qfSmeRO57PyTFnRqCyzTj7NacPbFXjqoVXbqzKzJBSo3tw296VE35wmJ6PYFKmtr WenU6oKtQWzZhR6ORYTBcdjWFI7cdktV0F/XewVdu3qWvAr9PQjrZHG9/zZWORSb tdmhMNkAWQNHxifhOxoMcNgmC+4Z1l2k9yJWiiX7oe9gMiGGDABSZSnYsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9I2ZjK1+n38ZVVK1cGyxpm4Qt6MB8GA1UdIwQY MBaAFKCc2McabjMoLARdj4jDs3is9BvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMt NmU4ZTA3ZDY2YzliLzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMtNmU4ZTA3ZDY2Yzli LzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzmrlzkT BvfWeSKpQsbnFvqSemHEYXNwgNO0I3T5MVZRo01YZUulD0jaRZ5nb0qlQdM3BQZU nG/XcgfYSpHRfREAl28g0sDxj7DY3bPzBkaDR2R2X2aIK7oJd0GzT0MLCGDuhwBF tHJT+G2xhthfluVXKbamr4OqbMfIo9pBACIv28833N8Rh5cRb3L5y7/LmU+xCX5w Yb1Tj6qburpfNRxPSRKxI7fNoUa5UYq8xbEchob23QKy7vTtx4dGQnj+6clJGiZW VQRjH/Sduwzi9p90daWJj1Btyb0bTZZGj9t9jTJ1MGobEzyJrfpw4yoPFaDfXTmy ovZLuic820z6Yg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:46 2025 by rpki-client