This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json) Hash identifier: FvaRWAf/JBicDGtn4Eym9D6tAcHgd05N7/nZdaj14fc= Subject key identifier: C2:7C:19:99:02:02:5E:53:33:DC:40:A2:A4:82:12:E5:25:6B:C9:D3 Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d Certificate serial: 019AF42E6120BE9C6B5BBFAFB447846BDD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: r1HgAse0Ez5MX7t7ZCbk7zwGvoKv89w9FsQz74QKWhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:61:20:be:9c:6b:5b:bf:af:b4:47:84:6b:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=c27c199902025e5333dc40a2a48212e5256bc9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:9c:b1:37:18:22:14:02:54:23:f3:6b:50: 75:15:f6:dd:7a:1a:ef:e9:dd:f9:1d:11:0e:51:23: d8:f0:96:1f:d4:0e:e0:b0:56:1b:7d:99:0f:8c:df: 43:c0:79:70:f5:33:9f:21:f3:65:6f:e6:da:7f:ad: 29:ca:53:ed:2c:57:a0:58:2f:cc:17:f4:f4:41:fe: bf:e5:b3:2a:b6:55:c1:4b:1a:dd:93:eb:a8:1e:87: 62:85:df:0c:fa:0c:7f:18:d1:b8:7f:1a:27:99:a9: bb:2f:9f:5e:04:67:fe:80:da:37:c0:db:42:57:3b: 53:40:94:8b:15:f5:71:fb:ea:7f:06:02:21:73:db: 52:27:d3:4a:26:fa:50:a9:ff:82:ed:b6:92:a5:b5: 5a:ff:97:cc:ce:8b:37:c9:27:89:74:d9:b3:26:59: 36:1e:ce:74:fb:e0:fa:6b:53:03:39:da:e4:8b:f6: 19:0a:26:90:72:75:d0:f1:19:e4:7a:72:d2:ad:96: 5e:c3:29:a8:30:04:68:94:0b:e5:ec:1b:2a:99:30: 31:55:d0:1c:23:22:f6:27:c4:1b:f2:a4:68:a7:2a: 0a:51:80:bd:5f:61:b0:7e:99:37:26:e0:68:75:97: 9f:df:ca:da:99:2f:3f:f0:fd:6c:8f:de:92:0a:e4: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7C:19:99:02:02:5E:53:33:DC:40:A2:A4:82:12:E5:25:6B:C9:D3 X509v3 Authority Key Identifier: keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:36:58:1c:2c:f4:28:be:e6:9d:8c:04:36:46:1a:55:52:70: ee:5a:85:fa:70:34:aa:74:07:0b:e0:23:7f:69:57:60:b8:05: bb:f4:73:fb:ba:14:57:fa:a1:98:85:dd:f0:c7:10:66:9a:38: 06:75:0c:91:d2:cf:c6:ed:a0:e1:ae:6d:5e:a8:54:ca:07:c2: 4c:8a:73:0f:3f:ce:0a:9b:51:64:4a:dd:39:6f:91:2b:be:de: b9:28:32:2c:13:13:38:60:7d:c7:c5:65:35:e8:00:5c:f4:ad: b2:1b:d1:7a:5a:cc:23:ff:92:3f:7a:50:ae:31:9f:bd:aa:55: 48:6d:ac:ce:e8:27:94:90:94:79:cc:fd:5b:f5:d2:57:92:40: 46:5a:4e:6e:70:31:3a:d2:6a:e6:cc:ab:48:f5:b7:4a:c4:4c: 17:99:48:12:4a:b7:e1:d1:35:32:b7:f6:7e:1c:2e:08:3b:61: f4:54:5a:60:4b:a3:57:71:d7:85:42:30:c8:c5:47:98:ce:2f: 47:20:28:48:17:f0:c5:62:c0:64:11:8e:61:8a:8d:9d:df:aa: fb:b3:8d:c3:24:20:f9:e6:9f:64:b6:3b:3f:91:00:c8:bb:c4: 3d:91:2d:ba:6f:85:b1:7b:66:e3:37:eb:9c:e9:b5:9c:c4:ff: 61:ca:5f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmEgvpxrW7+vtEeEa91JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx YTJiM2QwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD EyhjMjdjMTk5OTAyMDI1ZTUzMzNkYzQwYTJhNDgyMTJlNTI1NmJjOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHmcsTcYIhQCVCPza1B1Ffbdehrv 6d35HREOUSPY8JYf1A7gsFYbfZkPjN9DwHlw9TOfIfNlb+baf60pylPtLFegWC/M F/T0Qf6/5bMqtlXBSxrdk+uoHodihd8M+gx/GNG4fxonmam7L59eBGf+gNo3wNtC VztTQJSLFfVx++p/BgIhc9tSJ9NKJvpQqf+C7baSpbVa/5fMzos3ySeJdNmzJlk2 Hs50++D6a1MDOdrki/YZCiaQcnXQ8RnkenLSrZZewymoMARolAvl7BsqmTAxVdAc IyL2J8Qb8qRopyoKUYC9X2Gwfpk3JuBodZef38ramS8/8P1sj96SCuRCgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ8GZkCAl5TM9xAoqSCEuUla8nTMB8GA1UdIwQY MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDZYHCz0 KL7mnYwENkYaVVJw7lqF+nA0qnQHC+Ajf2lXYLgFu/Rz+7oUV/qhmIXd8McQZpo4 BnUMkdLPxu2g4a5tXqhUygfCTIpzDz/OCptRZErdOW+RK77euSgyLBMTOGB9x8Vl NegAXPStshvRelrMI/+SP3pQrjGfvapVSG2szugnlJCUecz9W/XSV5JARlpObnAx OtJq5syrSPW3SsRMF5lIEkq34dE1Mrf2fhwuCDth9FRaYEujV3HXhUIwyMVHmM4v RyAoSBfwxWLAZBGOYYqNnd+q+7ONwyQg+eafZLY7P5EAyLvEPZEtum+FsXtm4zfr nOm1nMT/Ycpfrw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:37 2025 by rpki-client