This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json) Hash identifier: X5Dw77tHbJG+f2uDX0u27qv1HwZFYn7WhCgYj0xmVrY= Subject key identifier: 20:09:5C:5F:D0:13:5D:A2:9D:5D:2B:BC:AD:7F:18:0E:91:B3:D3:93 Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d Certificate serial: 019AF19B324B73C03582FA67147EE45A8207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft Manifest number: 0DDA Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: j9ZFp7gIUncxg8tBn/wOmL/LKCy32NWJ35tMngpPZyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:32:4b:73:c0:35:82:fa:67:14:7e:e4:5a:82:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=20095c5fd0135da29d5d2bbcad7f180e91b3d393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:6d:ea:07:f5:cc:2f:32:30:47:46:33:65: 5e:90:a0:9c:c0:8b:b6:af:3b:41:c1:66:cc:dc:80: fb:9f:7c:38:3e:ef:77:49:18:98:4d:3f:76:28:42: 98:e3:d6:d3:43:69:c9:74:32:2a:d1:5e:3f:13:79: 25:81:1e:7b:59:d0:8e:60:31:9c:03:c4:91:a2:cc: 48:dd:b6:a2:00:ae:72:fe:b6:8a:04:a5:5f:30:f9: 1f:5e:19:51:bf:ea:ba:e1:23:ac:11:5d:39:2f:cf: 54:7b:58:9d:4d:3f:27:b5:40:33:d8:0e:d0:03:81: 41:4e:9e:a0:57:9f:0a:72:33:24:f5:03:45:8f:82: 45:94:e7:3d:76:18:fe:9a:d8:2b:b5:f1:67:f6:50: 83:9e:05:c2:c9:9b:ee:98:42:7d:28:f7:08:0e:b3: ff:ca:e0:ce:ef:21:e2:bd:69:e9:ae:1d:64:dc:d4: 41:00:9f:ad:10:ab:a3:c1:0f:29:9a:f4:78:5c:3c: 6c:1c:71:fe:44:62:06:d8:0f:97:6d:ba:6a:2e:8c: 0c:b9:80:4b:da:60:29:ab:2b:36:25:bf:24:c7:9d: 9c:07:8d:67:91:ab:87:26:6c:aa:94:a0:89:4b:68: 43:c2:ef:30:4c:2e:f6:26:ca:11:a0:7e:d3:fb:33: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:5C:5F:D0:13:5D:A2:9D:5D:2B:BC:AD:7F:18:0E:91:B3:D3:93 X509v3 Authority Key Identifier: keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:3f:42:45:7b:76:b1:9b:d8:86:c7:db:68:01:97:f7:9e: 15:94:47:51:b7:bd:2e:4d:d7:8f:02:8d:da:6c:80:95:38:3f: 96:d7:c0:28:6d:54:3b:ad:7f:5c:9b:fb:88:c9:e2:cc:b1:a0: e6:c2:05:75:52:8c:61:bb:f1:17:51:37:30:bf:f4:44:75:b9: 43:03:b2:f1:d3:ed:a4:ac:57:ac:96:58:50:24:fa:ef:1b:f3: be:fd:1d:52:ef:18:3f:69:26:1f:0e:b5:a0:90:6e:44:3d:bd: 30:f0:50:a3:82:a4:0f:e4:23:a8:9f:fe:ea:8e:37:b0:16:20: c7:9a:29:65:e0:88:78:b6:1e:d2:cd:27:9b:d7:57:76:fb:0a: 6f:57:6d:95:74:c3:99:a6:9b:f5:e2:71:21:6b:00:f9:3a:ba: f1:be:21:d6:76:c5:58:44:66:ed:ee:48:21:54:65:73:6f:1d: 27:f3:e4:82:ce:6f:48:a4:f1:f3:54:f9:27:9b:7d:ed:fb:8b: a4:88:a8:af:93:63:82:a7:67:b6:af:19:31:39:31:9d:63:cc: 4f:a6:da:79:7e:08:9d:97:ed:1a:bd:38:59:2f:5c:4c:2a:eb: c3:2b:9d:4d:f1:32:71:03:63:a8:b7:15:20:c4:5b:97:cb:d7: bf:a0:2c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzJLc8A1gvpnFH7kWoIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWFkZDMyZmUwOWViYzk3MmM4NTk2ZGM1YTA3MzU4OGY5 NjBjMmQwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygyMDA5NWM1ZmQwMTM1ZGEyOWQ1ZDJiYmNhZDdmMTgwZTkxYjNkMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wdt6gf1zC8yMEdGM2VekKCcwIu2 rztBwWbM3ID7n3w4Pu93SRiYTT92KEKY49bTQ2nJdDIq0V4/E3klgR57WdCOYDGc A8SRosxI3baiAK5y/raKBKVfMPkfXhlRv+q64SOsEV05L89Ue1idTT8ntUAz2A7Q A4FBTp6gV58KcjMk9QNFj4JFlOc9dhj+mtgrtfFn9lCDngXCyZvumEJ9KPcIDrP/ yuDO7yHivWnprh1k3NRBAJ+tEKujwQ8pmvR4XDxsHHH+RGIG2A+XbbpqLowMuYBL 2mApqys2Jb8kx52cB41nkauHJmyqlKCJS2hDwu8wTC72JsoRoH7T+zMK6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAJXF/QE12inV0rvK1/GA6Rs9OTMB8GA1UdIwQY MBaAFDmq3TL+CevJcshZbcWgc1iPlgwtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FyZE12NEo2OGx5eUZsdHhhQnpXSS1XREMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iOTY2YzQtNTBkMy00MDkwLThmNDYt MmU4ZWMzZDZjMmY5LzEvT2FyZE12NEo2OGx5eUZsdHhhQnpXSS1XREMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iOTY2YzQtNTBkMy00MDkwLThmNDYtMmU4ZWMzZDZjMmY5 LzEvT2FyZE12NEo2OGx5eUZsdHhhQnpXSS1XREMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch8/QkV7 drGb2IbH22gBl/eeFZRHUbe9Lk3XjwKN2myAlTg/ltfAKG1UO61/XJv7iMnizLGg 5sIFdVKMYbvxF1E3ML/0RHW5QwOy8dPtpKxXrJZYUCT67xvzvv0dUu8YP2kmHw61 oJBuRD29MPBQo4KkD+QjqJ/+6o43sBYgx5opZeCIeLYe0s0nm9dXdvsKb1dtlXTD maab9eJxIWsA+Tq68b4h1nbFWERm7e5IIVRlc28dJ/Pkgs5vSKTx81T5J5t97fuL pIior5Njgqdntq8ZMTkxnWPMT6baeX4InZftGr04WS9cTCrrwyudTfEycQNjqLcV IMRbl8vXv6Asqg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:41 2025 by rpki-client