This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json) Hash identifier: ZSKvVw9YXhqhgYhIhHr3FEM7TLSGz18o3dpvDmaqgtQ= Subject key identifier: 42:56:E5:9A:B9:10:96:CE:A9:71:C3:6D:51:C2:1D:98:54:13:18:F2 Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9 Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9 Certificate serial: 019AF3891493FF7486F7EAB35CB4941D384E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft Manifest number: 0C68 Signing time: Sat 06 Dec 2025 12:00:38 +0000 Manifest this update: Sat 06 Dec 2025 12:00:38 +0000 Manifest next update: Sun 07 Dec 2025 12:00:38 +0000 Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: pMhxAAbfhSj2DH3lZZDB5clFjuLlxZLBdXjDVZYkp9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:14:93:ff:74:86:f7:ea:b3:5c:b4:94:1d:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9 Validity Not Before: Dec 6 12:00:38 2025 GMT Not After : Dec 7 12:00:38 2025 GMT Subject: CN=4256e59ab91096cea971c36d51c21d98541318f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:14:99:ef:cd:8a:ae:c5:74:0b:b8:31:ee: e9:b5:7a:4f:49:ba:c7:1c:a5:3f:d1:51:c0:bc:16: bc:5f:11:c8:21:59:e1:59:2d:35:19:cd:03:fe:b8: 44:0b:4c:d3:80:7a:91:ed:03:47:0b:62:8e:7b:63: 7a:f0:52:5c:76:00:56:66:ab:60:18:52:0c:19:c1: 3a:85:fd:2e:94:6d:95:73:81:cc:60:1c:d3:e9:32: e2:f3:a6:4e:69:86:1a:57:d1:0e:eb:dc:73:d9:f7: 55:22:8b:98:b4:4f:69:fb:6c:75:fa:40:79:81:47: 10:5c:a0:8e:e0:d8:0a:30:2e:2e:a7:e0:2f:c6:1f: eb:59:ca:a7:04:81:ed:bd:c1:f8:b5:0d:8e:22:8b: fb:a1:f1:c3:78:44:d1:4d:7c:eb:30:d4:e8:dc:6a: 69:b8:03:bc:3f:d8:0f:e8:9e:c1:33:77:d0:dc:f7: 16:21:f3:af:44:c4:27:e7:88:d3:36:fc:bc:e5:4c: 19:6c:28:3a:28:c7:63:c7:28:3f:78:51:a7:ea:f1: cc:17:29:4e:49:b5:4f:67:d6:0d:e6:d3:4b:a5:d6: cf:02:0d:3d:d3:ad:76:c2:15:dd:f5:06:6a:5a:31: 67:a9:17:94:7d:30:83:68:2c:3a:34:70:87:bc:6c: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:E5:9A:B9:10:96:CE:A9:71:C3:6D:51:C2:1D:98:54:13:18:F2 X509v3 Authority Key Identifier: keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:37:39:08:86:e8:e8:38:e1:6d:17:f1:5f:56:e3:3d:41:96: 70:28:9c:4f:13:60:f6:95:9b:e5:80:52:29:66:28:0a:63:cc: a1:58:8c:fe:87:df:ac:0d:93:34:08:f0:4a:d7:d4:1a:eb:e1: 17:0b:fb:09:fe:7f:c2:d1:95:8b:ce:4c:80:be:d4:01:06:40: 61:80:81:42:4b:5e:a3:57:8e:d3:19:e9:3b:58:03:65:89:1a: 76:23:3c:50:d1:76:1e:f7:f5:ed:84:df:41:2d:e2:8b:0b:42: 4a:08:98:d8:3c:b5:05:5d:7f:19:f8:c4:77:1c:e9:29:f1:52: e1:fb:35:da:95:cd:e7:8b:61:be:b6:f9:34:78:a5:e7:75:7d: e1:c2:1d:27:28:5f:3f:05:a4:1a:f5:0c:10:fd:7a:8d:60:4b: ab:50:0e:6b:ae:c1:19:1c:c2:98:ea:4e:61:a9:c8:ab:bb:7d: 15:3d:b1:30:af:31:2f:ab:93:eb:b6:8b:54:27:34:2f:a6:f8: 26:63:e6:96:1a:74:ee:5b:22:e7:44:50:9f:c3:d8:a0:b5:e9: 1a:5f:71:24:8c:77:22:25:98:1e:5c:d1:53:05:4a:a7:6f:2c: 79:83:4e:b6:d5:0e:2a:e2:dc:91:04:e8:15:ab:1b:11:b2:99: f6:cf:61:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRST/3SG9+qzXLSUHThOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNTY0Zjc5ODAxOTA1MTg3NGUwMmNlZWUzZmQyMWNiY2Vh YjRhZTkwHhcNMjUxMjA2MTIwMDM4WhcNMjUxMjA3MTIwMDM4WjAzMTEwLwYDVQQD Eyg0MjU2ZTU5YWI5MTA5NmNlYTk3MWMzNmQ1MWMyMWQ5ODU0MTMxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QkUme/Niq7FdAu4Me7ptXpPSbrH HKU/0VHAvBa8XxHIIVnhWS01Gc0D/rhEC0zTgHqR7QNHC2KOe2N68FJcdgBWZqtg GFIMGcE6hf0ulG2Vc4HMYBzT6TLi86ZOaYYaV9EO69xz2fdVIouYtE9p+2x1+kB5 gUcQXKCO4NgKMC4up+Avxh/rWcqnBIHtvcH4tQ2OIov7ofHDeETRTXzrMNTo3Gpp uAO8P9gP6J7BM3fQ3PcWIfOvRMQn54jTNvy85UwZbCg6KMdjxyg/eFGn6vHMFylO SbVPZ9YN5tNLpdbPAg090612whXd9QZqWjFnqReUfTCDaCw6NHCHvGz54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJW5Zq5EJbOqXHDbVHCHZhUExjyMB8GA1UdIwQY MBaAFKBWT3mAGQUYdOAs7uP9IcvOq0rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDUyZWUtNzZiMS00MjJmLTg3MTkt MjE1ZWVjYjNkZjkzLzEvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mMDUyZWUtNzZiMS00MjJmLTg3MTktMjE1ZWVjYjNkZjkz LzEvb0ZaUGVZQVpCUmgwNEN6dTRfMGh5ODZyU3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDc5CIbo 6DjhbRfxX1bjPUGWcCicTxNg9pWb5YBSKWYoCmPMoViM/offrA2TNAjwStfUGuvh Fwv7Cf5/wtGVi85MgL7UAQZAYYCBQkteo1eO0xnpO1gDZYkadiM8UNF2Hvf17YTf QS3iiwtCSgiY2Dy1BV1/GfjEdxzpKfFS4fs12pXN54thvrb5NHil53V94cIdJyhf PwWkGvUMEP16jWBLq1AOa67BGRzCmOpOYanIq7t9FT2xMK8xL6uT67aLVCc0L6b4 JmPmlhp07lsi50RQn8PYoLXpGl9xJIx3IiWYHlzRUwVKp28seYNOttUOKuLckQTo FasbEbKZ9s9hgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:25 2025 by rpki-client