This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json) Hash identifier: 3SDQqNVpwyS1qYkYeWs23v4ktjtwGxA6hbku/HTcnnI= Subject key identifier: 84:67:12:CC:46:A6:FC:DF:45:36:E9:4D:5A:4A:6F:2C:28:E7:DB:57 Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Certificate serial: 019AF31CA069668F93DC9C4A2277D8AD717B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: kHULJTR3AaeapTn2w2FjoNNfehmlX4d6i37253hyy5Y=) 2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a0:69:66:8f:93:dc:9c:4a:22:77:d8:ad:71:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=846712cc46a6fcdf4536e94d5a4a6f2c28e7db57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:cc:ee:0e:85:0a:37:5e:42:c8:e1:b3:52: 8b:6a:a7:48:73:f5:ab:71:51:e0:a7:d5:d2:30:7e: d0:5c:9b:4b:70:ac:65:9a:5b:d0:5b:27:e7:f6:fb: 4a:1b:5f:58:23:9b:df:9b:17:12:b2:4e:2d:3e:56: dc:20:e9:7a:7e:59:6d:37:f8:83:0a:93:fa:f2:43: d3:44:d2:6d:15:ac:d6:ba:c7:4b:31:e9:b6:ef:56: ad:70:e0:7f:5d:3c:67:eb:3b:db:9b:0d:6c:36:d9: bc:0a:93:02:b3:85:9a:8b:90:03:86:38:9f:d8:93: 90:c7:3d:88:23:95:c9:3b:2c:ad:d4:f9:6a:c7:c2: 85:26:70:28:40:86:b9:79:85:7c:95:70:e3:8e:4d: 9d:25:d5:94:4a:fa:d4:15:c9:bf:ed:a4:39:09:96: f3:99:07:60:49:02:26:e0:57:8e:8e:7c:71:a5:61: 4a:ba:ee:ba:d5:6f:b0:fd:90:78:c3:2b:ee:0f:e2: 7b:ad:9d:7b:c8:93:00:22:63:eb:cf:b4:e0:69:72: f7:b0:bb:f4:46:3d:b9:c9:c8:a3:23:f9:ed:c1:f8: ba:91:3a:cd:8b:0e:d2:b6:0d:f2:cc:da:0c:3c:7a: 8e:a6:24:ba:91:6f:fa:94:f6:df:8e:ce:1a:11:63: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:12:CC:46:A6:FC:DF:45:36:E9:4D:5A:4A:6F:2C:28:E7:DB:57 X509v3 Authority Key Identifier: keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:84:b3:5b:bc:32:53:dc:95:c5:23:ea:5d:81:5d:4c:d0:b9: a9:89:96:8f:5f:d4:c2:4d:6c:5b:2a:f9:96:0b:ee:50:4c:5d: 9c:34:a4:e1:73:c0:1d:e8:ef:b5:6a:62:54:ab:98:f7:bb:12: b1:03:79:1c:16:18:3f:de:3b:b0:22:60:51:7a:1e:8a:ae:04: ca:55:61:ed:d7:3b:38:90:4f:e3:07:fe:fa:69:da:e4:aa:83: 35:16:9d:92:9c:fc:cc:d5:6e:15:0d:e3:d8:ee:5c:4b:c2:07: bf:1f:83:f9:ce:24:e9:a0:87:47:a3:9b:1f:7f:19:43:72:62: cc:c2:03:e9:6e:bc:41:37:54:4f:c1:ba:af:4b:07:75:7a:04: 7d:40:b9:4d:db:78:e5:b2:51:f6:a7:b4:98:55:25:ce:df:5b: 5c:77:ef:99:75:8f:26:ba:ae:b5:a6:6e:5a:e4:98:d1:99:06: e2:b9:d2:54:e5:84:89:cf:39:a4:ed:97:71:4a:65:ad:28:f0: d9:18:10:73:23:8e:0f:86:c0:9c:8b:19:0a:70:6e:55:ee:fc: 85:42:63:fc:df:10:19:97:ae:c0:52:00:b9:54:d0:c7:82:80: 5a:f8:c9:50:4d:74:e5:a4:80:ba:c6:eb:9c:83:1b:ca:3e:78: 66:42:79:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKBpZo+T3JxKInfYrXF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4 YmRhY2YwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD Eyg4NDY3MTJjYzQ2YTZmY2RmNDUzNmU5NGQ1YTRhNmYyYzI4ZTdkYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43M7g6FCjdeQsjhs1KLaqdIc/Wr cVHgp9XSMH7QXJtLcKxlmlvQWyfn9vtKG19YI5vfmxcSsk4tPlbcIOl6flltN/iD CpP68kPTRNJtFazWusdLMem271atcOB/XTxn6zvbmw1sNtm8CpMCs4Wai5ADhjif 2JOQxz2II5XJOyyt1Plqx8KFJnAoQIa5eYV8lXDjjk2dJdWUSvrUFcm/7aQ5CZbz mQdgSQIm4FeOjnxxpWFKuu661W+w/ZB4wyvuD+J7rZ17yJMAImPrz7TgaXL3sLv0 Rj25ycijI/ntwfi6kTrNiw7Stg3yzNoMPHqOpiS6kW/6lPbfjs4aEWO1hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRnEsxGpvzfRTbpTVpKbywo59tXMB8GA1UdIwQY MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYSzW7wy U9yVxSPqXYFdTNC5qYmWj1/Uwk1sWyr5lgvuUExdnDSk4XPAHejvtWpiVKuY97sS sQN5HBYYP947sCJgUXoeiq4EylVh7dc7OJBP4wf++mna5KqDNRadkpz8zNVuFQ3j 2O5cS8IHvx+D+c4k6aCHR6ObH38ZQ3JizMID6W68QTdUT8G6r0sHdXoEfUC5Tdt4 5bJR9qe0mFUlzt9bXHfvmXWPJrqutaZuWuSY0ZkG4rnSVOWEic85pO2XcUplrSjw 2RgQcyOOD4bAnIsZCnBuVe78hUJj/N8QGZeuwFIAuVTQx4KAWvjJUE105aSAusbr nIMbyj54ZkJ5XA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:16:08 2025 by rpki-client