This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json) Hash identifier: FdSWB9v3K00vIwotyZv+bSqgXG0a7S+fydVBKO/fNt8= Subject key identifier: 00:CF:E7:F5:28:61:9A:7C:45:46:C2:09:2F:90:86:A3:BF:AD:02:31 Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61 Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61 Certificate serial: 019AF12DFDEB625201D1521CAD65345DC914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft Manifest number: 0B9C Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: gqd5Z/RF6GX1n1xCmjo9ahpLgSeyiHLk73mxreY8e/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fd:eb:62:52:01:d1:52:1c:ad:65:34:5d:c9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61 Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=00cfe7f528619a7c4546c2092f9086a3bfad0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:c1:ab:91:1b:e7:68:e6:4a:56:f4:ad:79: 52:c7:32:67:86:a5:f4:0c:79:0a:b9:ff:4c:ab:37: b9:f4:42:74:af:79:ae:a9:04:14:45:bc:7a:cc:0f: 3a:46:73:dd:a3:2b:4d:5c:bd:9e:5f:22:2e:ea:6d: af:69:50:0d:2f:1b:3e:8d:b6:25:04:c5:83:e4:2a: be:54:95:d6:d0:ab:80:ff:ae:4a:6a:30:07:01:62: 23:df:7e:3b:5a:cb:d1:43:7d:88:11:98:d0:b1:17: 18:7a:eb:f5:03:33:c0:ef:3b:a6:fc:53:99:0d:6f: aa:1b:e3:f0:38:0b:51:73:e1:fd:0e:58:da:d8:6b: 18:f1:e1:e2:d2:ef:d7:0f:a5:c0:99:39:5e:8d:f9: 12:70:2f:97:db:20:cf:79:d4:71:f3:57:84:d4:ba: 2e:85:99:1f:91:22:8c:b5:ad:32:cd:34:e3:6b:c3: 14:cd:1b:ea:28:2e:da:36:f2:65:08:07:d9:a0:81: 79:71:e8:dd:14:9d:0f:16:53:29:57:0a:50:2d:f0: 47:76:bc:67:5c:3d:d0:5b:22:66:6e:0c:f7:48:96: bc:a6:6b:e5:8c:ce:77:c0:0f:b9:0b:3a:4a:e7:78: 66:4d:cf:81:5f:e6:90:a1:f1:04:0e:9e:c4:e6:2e: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:E7:F5:28:61:9A:7C:45:46:C2:09:2F:90:86:A3:BF:AD:02:31 X509v3 Authority Key Identifier: keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:98:2a:e8:71:b6:26:3f:3a:ee:69:5e:73:81:50:44:34:00: e4:cd:30:c9:c4:af:f9:78:d9:2f:0d:b1:9a:63:78:75:d3:62: 9e:fc:60:5c:75:ec:14:52:36:03:8f:e5:53:56:ba:bc:e6:ac: 88:c7:d2:61:aa:11:38:7d:56:ed:6c:44:ec:de:eb:f9:78:d6: 43:aa:49:66:a9:59:c9:b3:01:24:0d:49:e7:9b:fe:43:e9:fd: 6a:a0:58:3e:3f:be:18:89:ce:34:56:f8:93:9c:36:58:df:af: f9:ac:15:74:a5:e0:7b:26:22:f2:35:38:be:f7:94:3c:13:55: 25:b2:6e:ba:26:11:17:0f:b2:83:20:ec:7a:cc:3a:80:29:ac: e2:44:8f:94:ff:ff:5e:4a:83:01:59:99:3b:d6:17:cb:a5:ec: 1b:9f:13:41:c1:bd:ac:d4:64:41:d2:0b:2d:0e:c3:94:83:a9: d4:a0:b8:2b:a0:e0:f4:0e:08:58:e2:4b:4f:30:71:f7:45:a5: 20:ad:91:e7:cd:0a:1e:a4:f1:ec:79:d2:cd:e2:d9:c4:58:73: f4:06:ec:76:cc:83:52:a3:87:79:92:b5:d8:ad:3f:d1:00:65: 0c:42:61:03:c5:f8:a5:65:c2:02:a2:c5:f5:fe:9a:e9:58:70: 25:2d:32:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf3rYlIB0VIcrWU0XckUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZWUxYzQyOWNlN2YzMmUzMTBkY2I0NDEzZDhhZmU4Yzc2 NDVhNjEwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD EygwMGNmZTdmNTI4NjE5YTdjNDU0NmMyMDkyZjkwODZhM2JmYWQwMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFHBq5Eb52jmSlb0rXlSxzJnhqX0 DHkKuf9Mqze59EJ0r3muqQQURbx6zA86RnPdoytNXL2eXyIu6m2vaVANLxs+jbYl BMWD5Cq+VJXW0KuA/65KajAHAWIj3347WsvRQ32IEZjQsRcYeuv1AzPA7zum/FOZ DW+qG+PwOAtRc+H9Dlja2GsY8eHi0u/XD6XAmTlejfkScC+X2yDPedRx81eE1Lou hZkfkSKMta0yzTTja8MUzRvqKC7aNvJlCAfZoIF5cejdFJ0PFlMpVwpQLfBHdrxn XD3QWyJmbgz3SJa8pmvljM53wA+5CzpK53hmTc+BX+aQofEEDp7E5i7VTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADP5/UoYZp8RUbCCS+QhqO/rQIxMB8GA1UdIwQY MBaAFJjuHEKc5/MuMQ3LRBPYr+jHZFphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMt ZmRhNThlZGVlNWU2LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMtZmRhNThlZGVlNWU2 LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJgq6HG2 Jj867mlec4FQRDQA5M0wycSv+XjZLw2xmmN4ddNinvxgXHXsFFI2A4/lU1a6vOas iMfSYaoROH1W7WxE7N7r+XjWQ6pJZqlZybMBJA1J55v+Q+n9aqBYPj++GInONFb4 k5w2WN+v+awVdKXgeyYi8jU4vveUPBNVJbJuuiYRFw+ygyDsesw6gCms4kSPlP// XkqDAVmZO9YXy6XsG58TQcG9rNRkQdILLQ7DlIOp1KC4K6Dg9A4IWOJLTzBx90Wl IK2R580KHqTx7HnSzeLZxFhz9AbsdsyDUqOHeZK12K0/0QBlDEJhA8X4pWXCAqLF 9f6a6VhwJS0ywQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:44 2025 by rpki-client