This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json) Hash identifier: ngzHUCogcxkbPAE71Ifp/Gq8fiv2IiS4KQkiQjcFkNI= Subject key identifier: 67:9A:68:CA:6A:DB:44:72:C7:AD:24:5B:66:DC:AA:30:57:7C:9A:56 Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Certificate serial: 019AF464F06C1B26727007B4758C62676B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=) 2: kOdUd0BJh7m4b0s0dCs4QgMWNUQ.roa (hash: tZ3TxxDR2EXxSPIMDVq3TJt9N6UyL2XMXlm7RgpGHLk=) 3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: 9lTdCQ8ozNfa67Retevx4xxSNfFZdzbVi2U6DsKZHi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f0:6c:1b:26:72:70:07:b4:75:8c:62:67:6b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=679a68ca6adb4472c7ad245b66dcaa30577c9a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:0c:db:90:33:1a:03:36:2a:e4:c1:6d:2c: 27:10:c8:d0:7a:7d:e7:2e:0a:5f:a3:f9:0f:76:9a: 76:5d:9c:e4:3a:3d:55:a7:0c:7f:5e:e8:2b:c9:55: 37:88:22:90:c2:8b:d4:25:f2:19:25:e1:98:2b:ad: 7c:bb:5f:bd:d9:34:2d:c2:4c:c6:44:1a:09:16:79: ac:63:8e:8d:57:a6:d6:3e:19:f4:0f:8d:80:54:0a: 05:d2:49:28:c1:29:8f:7b:50:e8:d6:32:c5:51:c2: 0d:2e:a9:63:e2:4a:78:29:c0:61:b0:d6:ec:a7:fb: f6:d1:ef:91:6a:bc:bb:a6:be:35:ef:f5:f8:8e:43: 6b:0c:46:10:d5:1f:9b:e6:1d:e9:19:c1:0a:ac:8e: f7:05:eb:dc:62:3a:34:74:8f:02:e4:ff:11:d6:4b: 14:c1:c5:aa:b3:bc:c2:a7:21:64:2f:ce:c6:ed:e8: d5:8f:dd:9e:15:29:86:4e:ce:59:74:0b:fd:a9:e9: b4:eb:d9:ff:be:c3:e9:34:02:65:4d:cb:c2:ba:77: 0b:2f:10:f7:5f:f2:66:3a:c5:42:d6:ba:98:b2:7d: 97:cf:be:0c:5a:58:a0:3b:83:69:27:ff:61:af:b3: ed:5e:46:c6:e1:50:60:ca:e6:da:a0:cd:fe:b8:ab: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9A:68:CA:6A:DB:44:72:C7:AD:24:5B:66:DC:AA:30:57:7C:9A:56 X509v3 Authority Key Identifier: keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:3e:69:81:e0:f4:e0:5d:52:0c:76:36:67:64:55:3b:61: 6f:4a:9a:c8:7b:a5:6f:bf:1d:56:f7:b7:98:eb:c8:c4:bc:31: b1:fd:4f:33:eb:e2:a2:69:4e:2e:ba:68:b6:c6:09:32:f8:31: 35:04:f0:f7:65:e7:d3:be:f8:e4:1e:1e:59:7a:a9:3f:59:4e: c6:86:df:6a:41:16:e9:ca:c0:eb:54:8c:da:f2:94:f0:e8:87: 9e:6b:41:17:4c:08:e6:e3:cb:b4:6e:62:d9:2e:4a:ae:e1:6e: 53:87:bb:20:e9:f2:d6:78:63:a1:57:88:5f:57:72:a5:06:62: 47:c7:72:d9:32:0f:19:5b:3a:61:09:1a:aa:31:1f:28:2b:6d: db:0e:01:fa:33:4e:54:88:13:55:b6:c2:90:e7:d8:66:67:fe: f7:e5:49:c9:08:f6:cf:10:46:7a:00:01:77:c6:39:11:91:0b: da:ee:f8:fc:df:f4:46:1b:9e:8a:f6:f7:31:49:05:8b:0f:07: 7b:c9:55:ff:a2:4f:60:99:7b:ee:3c:35:70:40:0a:68:e3:65: b0:b9:3f:eb:f5:91:9b:ec:24:36:a5:6d:9c:74:5d:c2:cc:cf: 43:70:35:e0:91:04:4f:31:32:dd:93:f9:69:30:70:c5:70:f7: fd:d8:e1:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPBsGyZycAe0dYxiZ2txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5 OWVhMzEwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD Eyg2NzlhNjhjYTZhZGI0NDcyYzdhZDI0NWI2NmRjYWEzMDU3N2M5YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45cM25AzGgM2KuTBbSwnEMjQen3n Lgpfo/kPdpp2XZzkOj1Vpwx/XugryVU3iCKQwovUJfIZJeGYK618u1+92TQtwkzG RBoJFnmsY46NV6bWPhn0D42AVAoF0kkowSmPe1Do1jLFUcINLqlj4kp4KcBhsNbs p/v20e+Rary7pr417/X4jkNrDEYQ1R+b5h3pGcEKrI73BevcYjo0dI8C5P8R1ksU wcWqs7zCpyFkL87G7ejVj92eFSmGTs5ZdAv9qem069n/vsPpNAJlTcvCuncLLxD3 X/JmOsVC1rqYsn2Xz74MWligO4NpJ/9hr7PtXkbG4VBgyubaoM3+uKvPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeaaMpq20Ryx60kW2bcqjBXfJpWMB8GA1UdIwQY MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxY+aYHg 9OBdUgx2NmdkVTthb0qayHulb78dVve3mOvIxLwxsf1PM+viomlOLrpotsYJMvgx NQTw92Xn07745B4eWXqpP1lOxobfakEW6crA61SM2vKU8OiHnmtBF0wI5uPLtG5i 2S5KruFuU4e7IOny1nhjoVeIX1dypQZiR8dy2TIPGVs6YQkaqjEfKCtt2w4B+jNO VIgTVbbCkOfYZmf+9+VJyQj2zxBGegABd8Y5EZEL2u74/N/0Rhueivb3MUkFiw8H e8lV/6JPYJl77jw1cEAKaONlsLk/6/WRm+wkNqVtnHRdwszPQ3A14JEETzEy3ZP5 aTBwxXD3/djhgw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:36 2025 by rpki-client