This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json) Hash identifier: ulVOdMoEEZ74sZB49sVV+ye+qWuLhMycN9IkROnN3II= Subject key identifier: 73:0A:2C:DD:CC:8B:06:43:6B:66:06:2E:A8:86:D0:F0:0C:79:FE:51 Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9 Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9 Certificate serial: 019B40C8E9516A2626F39C9C2F150399D03F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft Manifest number: 0C90 Signing time: Sun 21 Dec 2025 12:01:07 +0000 Manifest this update: Sun 21 Dec 2025 12:01:07 +0000 Manifest next update: Mon 22 Dec 2025 12:01:07 +0000 Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: yWfr5ZVbqeKQYLSI0foH0/M/5slvFEGgBQJw84CIEU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:e9:51:6a:26:26:f3:9c:9c:2f:15:03:99:d0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9 Validity Not Before: Dec 21 12:01:07 2025 GMT Not After : Dec 22 12:01:07 2025 GMT Subject: CN=730a2cddcc8b06436b66062ea886d0f00c79fe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:33:04:1d:df:55:04:da:8f:ef:df:26:7a: 7c:aa:06:07:b0:8d:3b:67:53:5f:f6:44:a5:a9:92: 07:af:c2:52:d2:a4:6d:57:cc:72:94:67:ac:5b:72: a7:c5:38:a3:f1:e9:c7:20:1f:ec:45:ee:df:09:51: ce:ef:c1:09:dc:09:98:4a:b9:08:9d:dd:0a:2b:33: 85:32:90:7d:fe:16:4f:05:be:b3:d8:64:3a:3f:0c: d1:5e:8c:f3:85:9d:5d:12:e2:91:84:9e:b2:20:b0: 13:de:eb:30:f2:45:6d:f1:f0:af:61:39:92:65:a9: 48:8b:68:3f:5f:12:53:a6:f8:0d:00:62:70:2a:74: c0:3f:ca:e6:2f:ca:fb:9d:a5:d7:a5:7a:b8:a1:1d: 9d:2c:a0:d4:ec:cc:9f:9a:3f:02:80:bb:79:6a:df: f7:ac:32:79:77:cf:04:3f:7f:14:fc:7e:95:b2:3f: dd:79:81:e5:5c:e6:93:d7:f7:db:16:e9:1e:48:9b: 78:74:c0:ce:01:99:68:6b:7e:2a:3e:f0:57:f9:32: f7:b3:29:1c:67:79:27:44:f4:be:fc:33:0f:ec:fd: d4:d0:ab:82:33:c2:12:77:66:d1:09:50:5f:0e:c1: 1b:36:21:62:0c:9c:a6:11:d3:38:00:e4:9d:9c:ed: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:2C:DD:CC:8B:06:43:6B:66:06:2E:A8:86:D0:F0:0C:79:FE:51 X509v3 Authority Key Identifier: keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ad:de:63:60:28:c9:15:ae:1d:fb:27:ad:94:07:65:ca:08: 64:98:7f:17:f6:5e:ed:37:fc:39:02:17:18:59:ba:8f:e5:ea: 7b:55:82:37:50:db:2b:e9:dd:c3:89:63:46:e9:58:5a:e3:74: 8d:88:30:78:e3:d3:4a:57:34:a4:85:65:e0:8b:8e:5d:8b:35: 02:66:63:ce:a5:19:4c:7c:ce:b1:2c:3d:ee:b9:fd:8f:7d:61: 3d:b5:fc:35:4e:92:e8:a7:a9:cb:41:8d:3d:cc:6a:51:e6:c9: 49:d6:24:73:cf:32:2a:09:94:70:a6:15:7a:81:ab:41:3e:1f: b5:b3:d8:f6:19:a2:4e:f9:d5:73:5c:05:5e:9c:06:e2:a5:af: 3b:e5:cc:6d:3f:28:94:f8:9c:2b:60:0a:fd:0e:ff:a2:a4:e2: bf:8d:7f:56:60:65:9f:0e:9b:ce:0d:8b:28:13:cc:0e:cd:ed: eb:d1:90:c7:d0:b2:01:9e:d6:99:28:61:da:0f:1a:d2:86:f8: 0d:94:19:71:30:84:37:6d:a2:ee:aa:13:91:d3:e9:84:2c:da: c9:1d:fb:13:6b:ec:8c:a8:0c:67:42:5c:20:26:ae:9a:31:51: f2:8c:51:11:69:3b:24:17:d2:8c:74:ee:e1:53:3c:4f:df:8b: d3:75:8f:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOlRaiYm85ycLxUDmdA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNTY0Zjc5ODAxOTA1MTg3NGUwMmNlZWUzZmQyMWNiY2Vh YjRhZTkwHhcNMjUxMjIxMTIwMTA3WhcNMjUxMjIyMTIwMTA3WjAzMTEwLwYDVQQD Eyg3MzBhMmNkZGNjOGIwNjQzNmI2NjA2MmVhODg2ZDBmMDBjNzlmZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4czBB3fVQTaj+/fJnp8qgYHsI07 Z1Nf9kSlqZIHr8JS0qRtV8xylGesW3KnxTij8enHIB/sRe7fCVHO78EJ3AmYSrkI nd0KKzOFMpB9/hZPBb6z2GQ6PwzRXozzhZ1dEuKRhJ6yILAT3usw8kVt8fCvYTmS ZalIi2g/XxJTpvgNAGJwKnTAP8rmL8r7naXXpXq4oR2dLKDU7Myfmj8CgLt5at/3 rDJ5d88EP38U/H6Vsj/deYHlXOaT1/fbFukeSJt4dMDOAZloa34qPvBX+TL3sykc Z3knRPS+/DMP7P3U0KuCM8ISd2bRCVBfDsEbNiFiDJymEdM4AOSdnO1iNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMKLN3MiwZDa2YGLqiG0PAMef5RMB8GA1UdIwQY MBaAFKBWT3mAGQUYdOAs7uP9IcvOq0rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDUyZWUtNzZiMS00MjJmLTg3MTkt MjE1ZWVjYjNkZjkzLzEvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mMDUyZWUtNzZiMS00MjJmLTg3MTktMjE1ZWVjYjNkZjkz LzEvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXa3eY2Ao yRWuHfsnrZQHZcoIZJh/F/Ze7Tf8OQIXGFm6j+Xqe1WCN1DbK+ndw4ljRulYWuN0 jYgweOPTSlc0pIVl4IuOXYs1AmZjzqUZTHzOsSw97rn9j31hPbX8NU6S6Kepy0GN PcxqUebJSdYkc88yKgmUcKYVeoGrQT4ftbPY9hmiTvnVc1wFXpwG4qWvO+XMbT8o lPicK2AK/Q7/oqTiv41/VmBlnw6bzg2LKBPMDs3t69GQx9CyAZ7WmShh2g8a0ob4 DZQZcTCEN22i7qoTkdPphCzayR37E2vsjKgMZ0JcICaumjFR8oxREWk7JBfSjHTu 4VM8T9+L03WPkA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:30:07 2025 by rpki-client