This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json) Hash identifier: Fipjat11JU0EnMhULyYwwtz2Ozj/z36wS0LtoMwhuDo= Subject key identifier: 56:38:9B:34:BF:B5:B6:E2:F5:CA:CA:84:1D:9A:34:87:45:CB:05:C4 Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48 Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148 Certificate serial: 019AF12E7C6903BB5B3029412013CBD4F4AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft Manifest number: 1506 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: 6crDOmJhvmV6V0PUT3VXtqlMz/iLCoT+IRFoLcthr5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7c:69:03:bb:5b:30:29:41:20:13:cb:d4:f4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=56389b34bfb5b6e2f5caca841d9a348745cb05c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:c4:39:e5:44:a1:32:79:f7:98:eb:1b:7e: 9f:9d:82:a9:f0:ad:3d:b2:af:d6:61:b3:5a:4d:fc: a7:92:88:18:94:a0:a2:44:30:cb:9a:4f:9e:e0:ea: 91:d4:2e:9b:84:5a:30:de:42:52:8b:bd:84:93:25: 04:e6:7e:e2:46:5d:84:66:54:8e:ba:0d:11:4a:54: 1f:eb:8f:6f:8e:1c:62:fb:0a:f2:56:49:7f:fe:ce: b8:a0:66:31:5d:bb:25:f0:17:64:b0:03:f1:e7:0f: c2:14:be:e7:7c:68:d8:83:8f:f1:7c:35:bd:23:ad: 6d:5a:af:1c:c3:45:3b:2a:cc:91:86:91:18:84:86: ae:c3:fe:f8:7c:40:b9:29:37:40:ba:25:d3:0f:cf: 9d:8d:61:d6:af:bf:30:43:7a:c8:9b:ae:0e:c6:44: 65:32:df:6d:cb:77:9b:8e:f9:9f:43:b4:0b:b1:27: e4:3e:b0:6d:03:6c:6d:ff:ae:f3:cb:9d:16:f3:8d: e6:1a:8d:1b:13:ce:f2:34:52:1c:41:45:f3:f2:81: 8a:5a:29:51:68:f2:ea:84:19:27:5d:fc:c6:44:99: cb:4e:e4:f0:c9:a9:97:9e:57:b8:1f:e5:9c:42:ff: 5a:f8:b8:6e:85:fc:74:68:56:4e:af:f1:2b:ec:25: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:9B:34:BF:B5:B6:E2:F5:CA:CA:84:1D:9A:34:87:45:CB:05:C4 X509v3 Authority Key Identifier: keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c8:7e:04:18:b8:66:04:87:a3:a9:8a:20:b3:02:f1:32:d0: 16:a1:17:23:7a:48:f7:1e:75:d3:52:c4:53:27:08:19:76:15: 50:8e:27:d8:22:09:51:00:94:42:01:23:e5:b5:da:31:55:bd: 6a:52:20:33:16:7d:64:7b:c0:93:82:8a:b0:ae:0b:0d:bc:1d: 8d:e1:88:de:7a:78:c9:8a:ef:10:92:85:b6:0b:0b:57:e3:bb: 9a:8d:f6:a1:09:31:e3:2c:50:8d:8a:e2:ce:5c:11:bd:21:d7: b7:bf:37:19:48:0f:36:a9:5c:24:98:47:0b:92:7d:12:3b:8c: 6d:59:33:97:fe:21:a9:87:72:21:73:b7:a4:bb:2e:da:88:9b: 06:18:58:86:ab:1e:8b:64:e8:28:5a:8e:d0:8d:50:42:47:79: cc:be:2a:19:0d:f6:02:a3:65:6e:b5:05:23:90:33:c6:57:fd: 75:5a:5c:4d:81:33:10:0c:a1:30:7c:e9:cf:8f:f3:c8:06:77: 9f:ed:6e:76:56:be:ee:72:8e:13:e0:c2:63:9c:75:99:e7:44: 89:dd:2a:ec:b7:5d:7f:78:12:c2:95:33:e5:46:fc:cd:16:4e: e9:63:23:e0:c5:7c:00:03:ca:d3:4f:9c:f9:4d:9b:ec:b9:3d: fa:f3:3c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnxpA7tbMClBIBPL1PSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTQ1ODI1NjJjMzEzNWJiNTJiZGI5NjE0NWUxYWQwMzc4 NmIxNDgwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg1NjM4OWIzNGJmYjViNmUyZjVjYWNhODQxZDlhMzQ4NzQ1Y2IwNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw93EOeVEoTJ595jrG36fnYKp8K09 sq/WYbNaTfynkogYlKCiRDDLmk+e4OqR1C6bhFow3kJSi72EkyUE5n7iRl2EZlSO ug0RSlQf649vjhxi+wryVkl//s64oGYxXbsl8BdksAPx5w/CFL7nfGjYg4/xfDW9 I61tWq8cw0U7KsyRhpEYhIauw/74fEC5KTdAuiXTD8+djWHWr78wQ3rIm64OxkRl Mt9ty3ebjvmfQ7QLsSfkPrBtA2xt/67zy50W843mGo0bE87yNFIcQUXz8oGKWilR aPLqhBknXfzGRJnLTuTwyamXnle4H+WcQv9a+Lhuhfx0aFZOr/Er7CUnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY4mzS/tbbi9crKhB2aNIdFywXEMB8GA1UdIwQY MBaAFKGkWCViwxNbtSvblhReGtA3hrFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ZDEwYzAtNjdiZi00MTM1LTk3YWIt YmJmMmNlMDdlY2FkLzEvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS80ZDEwYzAtNjdiZi00MTM1LTk3YWItYmJmMmNlMDdlY2Fk LzEvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMh+BBi4 ZgSHo6mKILMC8TLQFqEXI3pI9x5101LEUycIGXYVUI4n2CIJUQCUQgEj5bXaMVW9 alIgMxZ9ZHvAk4KKsK4LDbwdjeGI3np4yYrvEJKFtgsLV+O7mo32oQkx4yxQjYri zlwRvSHXt783GUgPNqlcJJhHC5J9EjuMbVkzl/4hqYdyIXO3pLsu2oibBhhYhqse i2ToKFqO0I1QQkd5zL4qGQ32AqNlbrUFI5Azxlf9dVpcTYEzEAyhMHzpz4/zyAZ3 n+1udla+7nKOE+DCY5x1medEid0q7Lddf3gSwpUz5Ub8zRZO6WMj4MV8AAPK00+c +U2b7Lk9+vM8gw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:49 2025 by rpki-client