This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json) Hash identifier: S70NBcWP/vCCsyYKjQViU9G6mJ0qt6MB8QwCYyr+cbY= Subject key identifier: 97:D1:1C:05:A7:A4:FA:53:25:FF:66:28:5E:7A:92:4F:3B:CE:D0:F1 Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd Certificate serial: 019AF50A935E4CBF1A79192BA073AF8083F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft Manifest number: 1601 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: A92wnmk3eeUVMvAXNymFrdhbtDaRpXyyaOt/cl7cT2I=) 2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:93:5e:4c:bf:1a:79:19:2b:a0:73:af:80:83:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=97d11c05a7a4fa5325ff66285e7a924f3bced0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:cd:65:d0:79:ac:83:bd:67:ac:81:e1:76: 34:3f:60:b4:bd:c4:c4:82:bf:85:10:39:4b:83:3c: bb:29:86:5c:37:56:14:b6:53:2b:3a:ed:64:e3:a8: 60:e8:3b:92:63:fc:63:b4:25:9f:63:2b:2b:a7:a7: 05:a0:f9:33:48:29:19:f0:a8:b3:dc:42:75:a1:c2: 36:79:c0:a7:9d:82:32:e5:7d:a7:c5:72:01:6d:83: aa:6c:fb:cf:6f:37:b3:fa:26:a0:1e:e8:94:11:a9: 16:08:c6:16:b4:eb:5d:0d:0c:38:b4:a9:8e:e1:97: 5c:af:70:ae:d5:c5:c5:65:fc:29:f9:f9:f5:44:3e: 9b:24:3d:45:2c:9e:ec:2d:be:df:18:b2:8f:4c:e7: e9:ec:06:92:4c:bd:c5:9d:81:10:ee:f4:dd:5e:e5: d1:9b:54:b3:5b:bf:9f:b1:a5:53:7b:82:0f:2b:15: f5:9f:d8:10:16:a2:49:f0:cb:15:8c:49:7a:e0:6f: 89:ef:a9:9c:3f:03:1e:f7:56:9a:eb:c9:43:c0:f9: cf:f0:52:04:0d:c7:a6:6e:7d:1b:5e:09:66:ce:8d: 92:af:45:79:0e:fb:f7:b8:8d:0e:37:42:13:20:db: 68:03:36:cf:bb:53:34:c6:2b:56:fb:9b:c2:e9:2e: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:1C:05:A7:A4:FA:53:25:FF:66:28:5E:7A:92:4F:3B:CE:D0:F1 X509v3 Authority Key Identifier: keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:fc:c1:fc:2b:a1:60:72:e6:45:63:d1:92:07:fd:bf:f0: e8:b2:d3:d3:86:ea:6f:f6:77:1d:a7:87:28:6a:86:86:16:4a: 42:1e:57:81:b6:4a:76:d0:79:a5:01:b2:1a:93:95:af:84:21: 5c:4b:e2:e1:44:db:56:79:4b:ba:95:fb:5a:3c:95:6a:b8:12: 0b:50:1d:1c:7b:3b:54:6d:33:6e:04:02:0b:03:f5:7d:cb:93: db:e7:d0:cd:c3:58:7a:26:a9:d3:95:f7:0e:67:00:0d:e9:22: 40:88:39:fe:cc:a9:68:bc:8f:c5:2e:28:f9:4a:f1:b7:54:12: 3b:36:b1:b5:33:2e:d6:fa:7b:eb:fe:b2:bd:db:77:9f:fb:9a: 40:0b:be:72:52:0f:91:5f:21:8a:94:87:74:a4:d9:dd:24:7c: 52:dd:52:73:1a:e5:b0:5c:63:99:e5:11:e0:5c:a7:3e:27:16: 89:64:fa:94:cc:b9:29:c9:66:68:62:70:e9:31:70:7e:a8:00: 6a:b2:6b:f8:52:30:fd:fa:8f:3c:fc:23:6f:7e:7b:96:6d:fc: 69:f9:c8:a2:ad:e7:73:09:f4:4c:3a:24:27:09:06:48:0a:99: 28:c4:38:e1:06:16:80:e0:53:92:75:b6:5b:08:1e:ff:17:9c: 0b:4e:7f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpNeTL8aeRkroHOvgIP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2M2M2NiZDkzNDgyNWU1NWJiZTM1OWNiNzMwNjg2OWVk NDUxY2QwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD Eyg5N2QxMWMwNWE3YTRmYTUzMjVmZjY2Mjg1ZTdhOTI0ZjNiY2VkMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4PNZdB5rIO9Z6yB4XY0P2C0vcTE gr+FEDlLgzy7KYZcN1YUtlMrOu1k46hg6DuSY/xjtCWfYysrp6cFoPkzSCkZ8Kiz 3EJ1ocI2ecCnnYIy5X2nxXIBbYOqbPvPbzez+iagHuiUEakWCMYWtOtdDQw4tKmO 4Zdcr3Cu1cXFZfwp+fn1RD6bJD1FLJ7sLb7fGLKPTOfp7AaSTL3FnYEQ7vTdXuXR m1SzW7+fsaVTe4IPKxX1n9gQFqJJ8MsVjEl64G+J76mcPwMe91aa68lDwPnP8FIE Dcembn0bXglmzo2Sr0V5Dvv3uI0ON0ITINtoAzbPu1M0xitW+5vC6S4g/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfRHAWnpPpTJf9mKF56kk87ztDxMB8GA1UdIwQY MBaAFDo8Y8vZNIJeVbvjWctzBoae1FHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUt NTQ4ZTdlNGIxMDJiLzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUtNTQ4ZTdlNGIxMDJi LzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibn8wfwr oWBy5kVj0ZIH/b/w6LLT04bqb/Z3HaeHKGqGhhZKQh5XgbZKdtB5pQGyGpOVr4Qh XEvi4UTbVnlLupX7WjyVargSC1AdHHs7VG0zbgQCCwP1fcuT2+fQzcNYeiap05X3 DmcADekiQIg5/sypaLyPxS4o+Urxt1QSOzaxtTMu1vp76/6yvdt3n/uaQAu+clIP kV8hipSHdKTZ3SR8Ut1ScxrlsFxjmeUR4FynPicWiWT6lMy5KclmaGJw6TFwfqgA arJr+FIw/fqPPPwjb357lm38afnIoq3ncwn0TDokJwkGSAqZKMQ44QYWgOBTknW2 Wwge/xecC05/rA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:40 2025 by rpki-client