This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json) Hash identifier: tPHGykUZysTokbvELpY9Iu/738AC3rp3+Ooxrg9Iv6o= Subject key identifier: FE:A5:30:F9:E9:4D:47:98:74:11:92:DF:01:FD:E0:CC:D7:67:4E:1D Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc Certificate serial: 019B32D679CE8A0D84734EF38461F5299651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:01:15 +0000 Manifest this update: Thu 18 Dec 2025 19:01:15 +0000 Manifest next update: Fri 19 Dec 2025 19:01:15 +0000 Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: CbWPBqGC5j/drFkbqh/hF7V6gcyZlK+zx6RR+dqh9Dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:79:ce:8a:0d:84:73:4e:f3:84:61:f5:29:96:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc Validity Not Before: Dec 18 19:01:15 2025 GMT Not After : Dec 19 19:01:15 2025 GMT Subject: CN=fea530f9e94d4798741192df01fde0ccd7674e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:ad:ba:1c:e5:19:c8:e2:65:20:aa:be:60: a8:b9:a6:ff:cf:16:dc:ab:e5:68:5c:5b:fe:0b:4f: 99:dc:0b:4d:1d:50:d4:dc:06:5b:5d:bd:7e:80:3d: 72:c1:fe:a8:27:80:36:73:1f:d7:e2:fa:21:53:ef: cf:36:9c:77:5e:c4:18:09:d5:07:68:53:ca:7d:d5: 5d:78:7a:ae:e5:27:73:41:e4:e0:57:58:1c:57:20: 24:5d:2d:85:c8:0c:e9:d4:68:ac:67:5d:8b:a6:81: e8:f5:f4:d8:b3:37:d8:76:6e:43:46:31:5b:5b:07: 6c:6c:e1:c3:63:a7:a3:60:03:2b:3c:e2:3f:d7:4a: 61:86:77:78:ca:f9:38:36:2c:4d:8b:39:db:f6:be: cd:08:d9:6c:bd:6f:04:05:bf:45:ac:c4:66:41:c9: f4:a5:21:52:9d:96:45:0f:c3:d9:65:d7:de:60:62: 0b:82:97:d8:83:00:03:d4:bb:97:82:59:dc:32:6f: b9:49:3f:39:1e:71:dd:4a:27:33:1c:83:a3:32:82: a8:6e:49:7f:33:c3:a1:56:af:98:91:7d:aa:d4:11: ed:ad:63:30:20:fb:2f:d8:2a:32:ea:93:e0:4f:d8: 24:0a:78:48:f4:bd:27:6c:33:d1:ea:85:90:9b:7e: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:30:F9:E9:4D:47:98:74:11:92:DF:01:FD:E0:CC:D7:67:4E:1D X509v3 Authority Key Identifier: keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:80:40:f6:25:74:8e:87:4d:37:97:a2:e3:71:c6:15:97:82: 28:de:a5:61:e9:7b:d5:eb:43:03:98:91:99:67:8a:b3:1f:f5: 93:12:72:35:70:ea:ff:d6:aa:fd:cc:88:e3:93:8e:5a:37:cb: 7a:5e:fc:68:67:e8:a2:83:ba:ae:fd:c5:ae:d0:91:b6:8c:c9: 47:5f:60:03:0a:eb:d9:32:95:82:17:5d:f5:c9:ed:12:8b:30: ef:09:df:e8:35:02:b5:81:9a:16:95:d4:05:34:e4:33:9d:77: 28:c4:90:a5:0b:af:df:44:cb:36:39:75:88:08:81:95:a1:00: 94:93:68:dd:22:49:88:08:53:7c:0b:29:16:8a:f2:fa:de:d7: e4:32:cd:f4:ed:bd:11:dc:e1:3b:e7:d4:c8:b3:b1:12:39:8f: da:42:c7:4b:23:a0:12:d5:b1:00:b9:fc:da:7f:3b:5f:e8:c0: 65:f9:47:85:1b:2b:00:5a:65:42:e0:78:33:c8:ab:61:0b:5e: 47:39:b6:3b:ba:74:bd:2b:60:86:85:d8:a0:d8:42:cc:c0:23: 43:de:69:85:70:c2:4a:6e:21:1a:29:4d:31:03:a9:2f:d6:2d: d2:11:51:21:ae:31:71:e9:e5:a1:81:d5:3e:43:75:87:67:f1: 13:55:33:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1nnOig2Ec07zhGH1KZZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4 OTNjZmMwHhcNMjUxMjE4MTkwMTE1WhcNMjUxMjE5MTkwMTE1WjAzMTEwLwYDVQQD EyhmZWE1MzBmOWU5NGQ0Nzk4NzQxMTkyZGYwMWZkZTBjY2Q3Njc0ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKytuhzlGcjiZSCqvmCouab/zxbc q+VoXFv+C0+Z3AtNHVDU3AZbXb1+gD1ywf6oJ4A2cx/X4vohU+/PNpx3XsQYCdUH aFPKfdVdeHqu5SdzQeTgV1gcVyAkXS2FyAzp1GisZ12LpoHo9fTYszfYdm5DRjFb WwdsbOHDY6ejYAMrPOI/10phhnd4yvk4NixNiznb9r7NCNlsvW8EBb9FrMRmQcn0 pSFSnZZFD8PZZdfeYGILgpfYgwAD1LuXglncMm+5ST85HnHdSiczHIOjMoKobkl/ M8OhVq+YkX2q1BHtrWMwIPsv2Coy6pPgT9gkCnhI9L0nbDPR6oWQm37NqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6lMPnpTUeYdBGS3wH94MzXZ04dMB8GA1UdIwQY MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIBA9iV0 jodNN5ei43HGFZeCKN6lYel71etDA5iRmWeKsx/1kxJyNXDq/9aq/cyI45OOWjfL el78aGfoooO6rv3FrtCRtozJR19gAwrr2TKVghdd9cntEosw7wnf6DUCtYGaFpXU BTTkM513KMSQpQuv30TLNjl1iAiBlaEAlJNo3SJJiAhTfAspFory+t7X5DLN9O29 EdzhO+fUyLOxEjmP2kLHSyOgEtWxALn82n87X+jAZflHhRsrAFplQuB4M8irYQte Rzm2O7p0vStghoXYoNhCzMAjQ95phXDCSm4hGilNMQOpL9Yt0hFRIa4xcenloYHV PkN1h2fxE1UzJA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:29:44 2025 by rpki-client