This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json) Hash identifier: Hjslvj0jruwA6FzB8iLZyO4N5ruewZV5zZJWpjjwZE8= Subject key identifier: 1B:18:66:9E:BA:4E:21:49:A7:4F:8D:52:28:0A:D4:27:E8:3B:DE:4A Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49 Certificate serial: 019AF16469D6BC7DFC28D61A94548D9B2C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft Manifest number: 16D6 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=) 2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: sL1O2Fr5lpqbKMqJHkOslYZS3MOFdSigcOl7Kf1ehJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:d6:bc:7d:fc:28:d6:1a:94:54:8d:9b:2c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=1b18669eba4e2149a74f8d52280ad427e83bde4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:81:c5:88:23:a7:9a:3f:10:02:b2:0c:2a: 8f:06:07:43:89:e5:f3:fd:85:96:4a:78:f8:a5:bb: 23:5b:78:33:9b:8e:95:7f:e1:c7:95:4a:73:18:d4: d6:49:ad:64:e9:90:eb:d8:46:9d:56:7d:0c:5c:10: 3a:1e:f5:a1:25:7b:36:92:d2:88:f5:bf:2a:06:0e: 01:3d:6e:54:d6:ed:97:bf:39:a0:51:53:38:f3:62: 40:92:45:f4:2e:b7:12:4a:07:9c:7e:72:03:74:55: 3c:e3:a9:c5:03:0d:c1:30:4c:30:17:dd:2d:06:71: a2:46:2f:5e:31:e0:e9:5a:1a:e1:df:d1:62:24:f0: 85:ef:fd:9e:e7:e8:0a:ae:31:fc:4d:5a:31:6f:ba: a1:f2:b9:fe:aa:40:57:27:98:f2:cf:c4:3f:e9:b1: 5a:7e:f3:54:80:0a:82:d0:0d:a0:22:d5:46:7d:76: 39:c0:a1:a6:6f:46:2a:23:59:f6:35:ee:f2:72:dc: 76:a1:dc:e1:6b:44:3d:8b:16:a6:1a:b7:6a:e7:f3: 94:a3:2b:4d:73:45:f8:cb:80:e4:46:89:ca:be:df: e0:6f:c3:1f:61:27:15:0e:d1:4e:52:be:9a:b2:41: 67:7d:2e:95:5f:72:e0:e3:f1:b3:19:cb:f0:b4:6d: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:18:66:9E:BA:4E:21:49:A7:4F:8D:52:28:0A:D4:27:E8:3B:DE:4A X509v3 Authority Key Identifier: keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b0:ba:7a:4e:24:95:61:eb:87:a2:02:87:80:62:21:ff:12: e2:6a:92:bc:20:94:01:b3:66:2e:2e:42:01:57:39:4a:8f:b3: 37:3a:55:4e:d8:3a:bc:44:47:86:3d:dc:12:a0:24:da:67:8d: c2:d1:2d:75:35:8c:32:02:fc:46:ff:95:36:9a:a1:af:85:10: 4c:32:54:bd:8c:8d:30:3b:90:69:32:a8:82:b8:d3:5a:ba:c2: 79:5e:d2:4b:27:46:09:a9:7b:80:01:53:d7:8e:62:e7:48:6a: 64:56:5e:f1:36:95:51:6e:96:d5:05:51:6d:05:db:39:1a:df: 3a:4e:18:10:18:c5:2a:31:47:c7:51:77:93:c2:a1:7b:09:df: c2:69:56:c6:47:13:21:d1:f5:b7:f7:17:76:9d:06:45:1a:b7: b2:ef:31:36:7e:91:71:a9:eb:b3:1b:61:c8:f6:35:c4:af:ab: e2:4a:83:29:2a:0d:90:ea:99:5e:d6:71:0e:66:33:95:07:17: 46:ba:b2:e4:2c:44:a5:a7:5e:df:6b:54:7e:7c:84:14:fe:2d: aa:6f:c2:85:d5:ee:68:0f:98:ce:3e:f7:3e:fc:2c:da:02:4e: dc:4c:15:14:fe:59:bf:b8:1a:66:0c:e1:68:8f:cd:90:e6:4b: 50:e6:17:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGnWvH38KNYalFSNmyx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi ZTZmNDkwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygxYjE4NjY5ZWJhNGUyMTQ5YTc0ZjhkNTIyODBhZDQyN2U4M2JkZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokOBxYgjp5o/EAKyDCqPBgdDieXz /YWWSnj4pbsjW3gzm46Vf+HHlUpzGNTWSa1k6ZDr2EadVn0MXBA6HvWhJXs2ktKI 9b8qBg4BPW5U1u2XvzmgUVM482JAkkX0LrcSSgecfnIDdFU846nFAw3BMEwwF90t BnGiRi9eMeDpWhrh39FiJPCF7/2e5+gKrjH8TVoxb7qh8rn+qkBXJ5jyz8Q/6bFa fvNUgAqC0A2gItVGfXY5wKGmb0YqI1n2Ne7yctx2odzha0Q9ixamGrdq5/OUoytN c0X4y4DkRonKvt/gb8MfYScVDtFOUr6askFnfS6VX3Lg4/GzGcvwtG0cHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsYZp66TiFJp0+NUigK1CfoO95KMB8GA1UdIwQY MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLC6ek4k lWHrh6ICh4BiIf8S4mqSvCCUAbNmLi5CAVc5So+zNzpVTtg6vERHhj3cEqAk2meN wtEtdTWMMgL8Rv+VNpqhr4UQTDJUvYyNMDuQaTKogrjTWrrCeV7SSydGCal7gAFT 145i50hqZFZe8TaVUW6W1QVRbQXbORrfOk4YEBjFKjFHx1F3k8KhewnfwmlWxkcT IdH1t/cXdp0GRRq3su8xNn6RcanrsxthyPY1xK+r4kqDKSoNkOqZXtZxDmYzlQcX Rrqy5CxEpade32tUfnyEFP4tqm/ChdXuaA+Yzj73Pvws2gJO3EwVFP5Zv7gaZgzh aI/NkOZLUOYXTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:02 2025 by rpki-client