This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json) Hash identifier: TPd4Qctk5ekxyRHGDEMGdAJjtWQFIIgJQL15JaT3X+k= Subject key identifier: 74:85:42:F4:5B:91:84:24:A5:A5:BD:28:BC:26:AC:E8:50:6D:F0:E0 Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Certificate serial: 019AF577BC1B8D4185B79AA71CFE690ED197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft Manifest number: 13AF Signing time: Sat 06 Dec 2025 21:00:56 +0000 Manifest this update: Sat 06 Dec 2025 21:00:56 +0000 Manifest next update: Sun 07 Dec 2025 21:00:56 +0000 Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=) 2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: ZrAuFm0PgI0wcuHwXRVqJIdX45XLu4wLvC2nw5P02wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:bc:1b:8d:41:85:b7:9a:a7:1c:fe:69:0e:d1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Validity Not Before: Dec 6 21:00:56 2025 GMT Not After : Dec 7 21:00:56 2025 GMT Subject: CN=748542f45b918424a5a5bd28bc26ace8506df0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:80:b3:59:93:b9:4a:e1:45:2f:74:02:9e: bc:39:fc:68:6d:b7:6f:c2:ab:70:be:21:4d:11:6a: 75:8a:18:95:81:8a:1e:34:be:35:de:40:a5:ef:24: 56:6a:ec:2b:68:5a:d5:46:38:5c:5c:25:bf:11:e8: 7d:cc:6b:74:36:ef:a3:f9:9f:5f:a8:bc:3f:5f:2e: 6c:db:65:2a:97:62:5c:8c:31:ed:34:91:01:94:02: f1:5b:8e:a5:38:f6:09:ec:bc:6e:d3:f9:90:ba:06: 85:98:db:54:af:06:9e:15:b3:70:13:9c:18:6d:08: 80:63:0a:85:e2:3d:53:60:bb:c3:e5:c6:60:8f:0b: 14:fc:ae:75:24:10:c6:00:2a:f8:f4:17:83:05:0f: 7f:3d:84:da:3d:f2:55:fa:df:a5:22:4d:2b:5f:a9: bd:8b:57:2c:1f:dd:f8:e9:e4:e0:62:c9:39:97:79: 2b:86:7e:51:1c:59:7a:50:4c:7d:90:98:ec:7c:42: 00:34:a1:35:48:c6:93:95:8f:b4:59:75:1b:66:69: 1f:47:0d:0a:73:33:2f:3f:19:2d:81:f7:62:af:97: 45:85:18:7c:1f:79:18:97:f1:4c:bd:7d:d6:9c:50: f3:19:ce:72:bc:99:be:b8:d2:f3:41:9f:86:e8:18: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:85:42:F4:5B:91:84:24:A5:A5:BD:28:BC:26:AC:E8:50:6D:F0:E0 X509v3 Authority Key Identifier: keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:19:e2:c7:eb:fd:ca:91:1a:54:ab:ae:fb:67:c5:73:cc:66: 82:ed:61:cd:7e:8c:82:75:2f:30:fb:c7:a1:a9:3f:07:2a:ed: 52:f9:db:90:85:71:37:c8:50:14:93:9c:1c:3c:65:8f:d9:f9: b9:72:92:d7:2a:52:06:57:81:0a:6d:e1:04:5a:52:2e:e2:b0: d9:13:d7:e6:0f:4f:30:23:53:2f:9d:97:97:31:63:6a:d7:dc: be:35:3d:06:6e:41:34:80:9b:05:c5:5e:d1:45:ee:bc:54:0f: ea:56:b0:2a:b0:fb:31:96:48:a7:bb:5f:9f:1e:a0:2a:7c:f3: 0f:c5:39:6b:89:2f:12:72:90:80:3b:a0:4f:46:b1:97:7f:f5: ee:28:05:0a:27:91:00:c2:e3:83:4b:b7:3f:11:21:8a:50:f2: e1:30:fa:7b:e3:24:da:0c:9a:eb:95:f5:31:d8:04:55:62:f9: ab:e6:07:7b:bd:ce:35:14:b8:f1:a8:9a:55:56:be:cf:b1:1c: c0:97:24:8b:eb:dc:61:17:3d:16:b8:9c:2d:d5:5f:ce:03:ba: cc:26:69:46:6d:2a:24:c2:45:98:f1:83:01:f8:d8:91:db:0e: 7f:8b:87:30:9c:eb:25:10:0f:b3:45:80:5e:01:14:a2:61:12: 88:c0:18:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d7wbjUGFt5qnHP5pDtGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1 N2NiZTgwHhcNMjUxMjA2MjEwMDU2WhcNMjUxMjA3MjEwMDU2WjAzMTEwLwYDVQQD Eyg3NDg1NDJmNDViOTE4NDI0YTVhNWJkMjhiYzI2YWNlODUwNmRmMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbSAs1mTuUrhRS90Ap68Ofxobbdv wqtwviFNEWp1ihiVgYoeNL413kCl7yRWauwraFrVRjhcXCW/Eeh9zGt0Nu+j+Z9f qLw/Xy5s22Uql2JcjDHtNJEBlALxW46lOPYJ7Lxu0/mQugaFmNtUrwaeFbNwE5wY bQiAYwqF4j1TYLvD5cZgjwsU/K51JBDGACr49BeDBQ9/PYTaPfJV+t+lIk0rX6m9 i1csH9346eTgYsk5l3krhn5RHFl6UEx9kJjsfEIANKE1SMaTlY+0WXUbZmkfRw0K czMvPxktgfdir5dFhRh8H3kYl/FMvX3WnFDzGc5yvJm+uNLzQZ+G6BjX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSFQvRbkYQkpaW9KLwmrOhQbfDgMB8GA1UdIwQY MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt NmUwMmFmMGE0OTk0LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0 LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBnix+v9 ypEaVKuu+2fFc8xmgu1hzX6MgnUvMPvHoak/ByrtUvnbkIVxN8hQFJOcHDxlj9n5 uXKS1ypSBleBCm3hBFpSLuKw2RPX5g9PMCNTL52XlzFjatfcvjU9Bm5BNICbBcVe 0UXuvFQP6lawKrD7MZZIp7tfnx6gKnzzD8U5a4kvEnKQgDugT0axl3/17igFCieR AMLjg0u3PxEhilDy4TD6e+Mk2gya65X1MdgEVWL5q+YHe73ONRS48aiaVVa+z7Ec wJcki+vcYRc9FricLdVfzgO6zCZpRm0qJMJFmPGDAfjYkdsOf4uHMJzrJRAPs0WA XgEUomESiMAYqg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:12 2025 by rpki-client