This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json) Hash identifier: 3Itc5bhPIhBZ89v7j1LL77v3vvwc3o/CfDzlMueR33U= Subject key identifier: 79:F3:D1:FF:94:30:F9:2C:DF:D1:36:1F:5A:A2:13:10:21:D6:F7:0F Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019AF3529F8F2C6145220D3FB4BFD94E78B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=) 2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=) 3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: l4pquvKxbNlzU3qthSNqnKJKyZGPiCeK9ypixEQtWNI=) 4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9f:8f:2c:61:45:22:0d:3f:b4:bf:d9:4e:78:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=79f3d1ff9430f92cdfd1361f5aa2131021d6f70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:24:8b:7b:06:aa:31:2a:57:35:9d:02:b5: 9c:1c:a7:91:29:1d:fb:e9:41:de:51:16:36:52:ee: a2:3d:62:94:b9:45:56:b5:e7:87:c1:61:ab:b5:5e: 0e:74:84:f0:a2:ff:1e:6a:92:05:b2:f1:99:bd:74: 8f:3a:a3:75:e7:fb:c5:16:7f:ed:3b:25:27:f8:dc: 1a:07:04:3b:d8:78:a7:3c:2b:ee:63:e2:e6:b9:fb: f6:11:71:92:a8:4f:f4:9c:1a:38:b7:c1:0d:14:38: b0:cc:74:ad:de:ed:02:e8:59:00:e8:e1:cf:a3:0e: a2:12:2a:9c:99:a0:ec:a9:65:59:30:5f:3f:84:09: f5:21:6f:21:33:f2:53:da:42:9f:56:26:df:f6:ba: 79:52:fa:7a:cf:01:85:62:19:cd:fb:5c:93:37:2c: f8:0d:1c:76:87:b1:ee:17:ff:4f:87:8a:4e:52:f9: 47:53:7b:e8:2f:8c:7f:6a:18:29:1c:0d:14:f2:7c: 82:a6:cd:3f:9d:77:8a:ac:b3:ff:30:a6:b7:3e:e5: e8:1a:33:d3:0c:05:de:ad:c6:33:a6:92:39:9c:90: 4f:65:1c:c4:3a:24:12:b5:57:b9:0e:49:bd:91:11: 68:48:52:30:37:7d:52:37:8a:19:99:8a:c8:f1:ef: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:D1:FF:94:30:F9:2C:DF:D1:36:1F:5A:A2:13:10:21:D6:F7:0F X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0f:e9:88:55:21:2c:2b:d3:b3:be:6b:c3:e0:be:df:cc:b3: e2:8b:85:53:1a:b2:94:28:61:cf:d6:79:62:c2:ab:09:7a:01: 4c:2f:e7:1e:66:47:af:10:29:fb:6c:a1:fa:28:ec:63:e6:f5: b1:22:dc:d1:0b:63:3f:78:e3:43:21:79:a6:f1:da:91:7e:5b: 4e:f5:3a:3b:a7:1d:d2:22:28:b1:f4:cc:64:a1:52:c1:3b:ba: 91:58:97:5a:59:b5:60:b1:9b:74:53:c6:9f:e4:e5:3a:51:ce: 7e:35:c0:55:4b:0d:95:91:6b:6a:00:12:b1:0c:e7:11:88:a9: 2b:24:f5:47:64:83:fd:72:e1:2a:24:53:65:58:6c:4c:46:49: 37:9c:cb:48:69:cb:da:80:97:2a:c6:8b:a2:1c:39:65:96:91: c4:52:70:a5:ec:19:42:05:61:28:ae:31:65:94:65:60:20:58: f8:ba:92:bc:dc:13:7a:df:19:6b:6a:85:cc:18:85:59:3f:1c: 88:29:70:dd:bb:e3:75:9c:30:49:65:64:e7:d3:2e:59:7c:a3: 3a:d2:6f:a6:9e:f3:f2:c2:e4:2d:78:9e:82:32:1a:2f:ad:5b: 0c:2c:de:2a:db:e1:ae:74:68:41:e6:48:ce:a2:d2:07:34:8d: 48:60:b8:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp+PLGFFIg0/tL/ZTni1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD Eyg3OWYzZDFmZjk0MzBmOTJjZGZkMTM2MWY1YWEyMTMxMDIxZDZmNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu40ki3sGqjEqVzWdArWcHKeRKR37 6UHeURY2Uu6iPWKUuUVWteeHwWGrtV4OdITwov8eapIFsvGZvXSPOqN15/vFFn/t OyUn+NwaBwQ72HinPCvuY+Lmufv2EXGSqE/0nBo4t8ENFDiwzHSt3u0C6FkA6OHP ow6iEiqcmaDsqWVZMF8/hAn1IW8hM/JT2kKfVibf9rp5Uvp6zwGFYhnN+1yTNyz4 DRx2h7HuF/9Ph4pOUvlHU3voL4x/ahgpHA0U8nyCps0/nXeKrLP/MKa3PuXoGjPT DAXercYzppI5nJBPZRzEOiQStVe5Dkm9kRFoSFIwN31SN4oZmYrI8e+8EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnz0f+UMPks39E2H1qiExAh1vcPMB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ/piFUh LCvTs75rw+C+38yz4ouFUxqylChhz9Z5YsKrCXoBTC/nHmZHrxAp+2yh+ijsY+b1 sSLc0QtjP3jjQyF5pvHakX5bTvU6O6cd0iIosfTMZKFSwTu6kViXWlm1YLGbdFPG n+TlOlHOfjXAVUsNlZFragASsQznEYipKyT1R2SD/XLhKiRTZVhsTEZJN5zLSGnL 2oCXKsaLohw5ZZaRxFJwpewZQgVhKK4xZZRlYCBY+LqSvNwTet8Za2qFzBiFWT8c iClw3bvjdZwwSWVk59MuWXyjOtJvpp7z8sLkLXiegjIaL61bDCzeKtvhrnRoQeZI zqLSBzSNSGC4tg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:24 2025 by rpki-client