This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json) Hash identifier: Bw3gJx3h/+vf3hB0E3DnEJfKGvNSGAme5DWjgGbSxxE= Subject key identifier: 37:FB:94:81:AE:76:3C:FA:37:99:B0:48:58:EF:17:64:4C:BF:01:A8 Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019AF42DF481169621298614BC12C0ACF450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=) 2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: acvmEk5RYG3QxmrVIrh3v1c9GbweU6bG5r9LVX2/HRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f4:81:16:96:21:29:86:14:bc:12:c0:ac:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=37fb9481ae763cfa3799b04858ef17644cbf01a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:31:6a:a6:db:71:92:1e:70:3f:a1:6f:ee: 5c:86:4a:e5:44:30:d2:75:ef:7b:77:8f:80:16:a8: 21:7a:41:f2:a6:3f:89:b7:99:36:73:ba:71:99:f9: 19:29:d3:85:98:4a:7b:82:8a:bb:30:4a:55:63:b9: 22:73:16:04:6a:72:8d:25:3e:8b:a8:ad:af:5b:1f: 93:d9:3a:cb:48:cc:8a:01:66:bc:77:a5:87:74:e6: 5b:d0:90:cc:f6:8c:d6:ca:f0:de:8e:04:f8:ce:da: dd:84:ef:74:9f:e8:bc:7d:50:a3:80:a1:4b:fe:a4: cb:80:50:01:f0:ab:59:6e:33:b0:d5:44:02:98:aa: 99:76:22:32:fd:e9:35:fb:cf:36:47:e3:42:61:7b: 0b:f8:fc:4b:c7:23:1d:fb:0e:b0:22:e4:8b:e6:10: a0:98:59:9b:bf:65:0b:c1:6f:fa:78:e8:26:36:25: b8:97:7d:b3:55:9c:4d:b2:da:2b:df:9f:24:39:d0: a4:a6:59:d7:6e:f0:20:19:07:72:b5:6b:fc:0c:8f: 8a:5e:6a:36:be:13:c2:07:fd:25:de:2b:10:f5:3f: a2:1c:90:e7:76:af:b7:04:fa:cb:45:c8:5a:9d:f1: 8c:3b:11:15:d5:bb:8c:33:37:92:c0:f2:35:94:e7: 76:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:94:81:AE:76:3C:FA:37:99:B0:48:58:EF:17:64:4C:BF:01:A8 X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6b:9e:7b:39:1a:c3:05:35:3b:ae:09:2a:fa:9c:80:4d:fd: 08:95:b0:24:b9:f4:da:cc:d9:c7:ee:be:c3:10:cc:5e:c2:66: 65:03:32:7f:df:54:2c:66:89:e2:08:4c:9f:85:d4:4c:98:3c: c5:f0:80:b1:80:0b:26:b4:c0:7f:b1:97:83:8a:d5:a0:35:64: 92:16:d9:e3:6c:ac:79:94:5f:68:d8:32:80:a9:55:cc:cd:df: 61:b1:65:6a:98:a0:f8:6a:89:d1:c6:d1:b5:3c:ca:de:32:41: 41:84:fe:bf:72:ee:9e:34:a9:f3:b8:8d:ef:d3:8c:e7:be:32: 9e:cd:0f:62:a0:7f:65:d8:2e:c3:bc:48:4a:23:f7:9a:c5:14: de:45:15:ee:b4:47:9f:96:a0:88:e2:2c:a8:22:14:62:83:fa: a9:24:ad:d8:83:76:69:0d:c4:7b:1b:0a:0b:c7:76:34:a3:8a: 4b:61:41:a0:a6:a2:25:25:be:2c:ee:8f:d9:45:2a:8b:b8:a2: 05:a4:1b:de:c9:0e:90:3a:24:8c:74:7c:2b:1e:2e:e2:cd:1c: e7:06:d9:c7:ef:e4:2d:cd:fb:a0:31:66:ef:c0:9b:62:57:78: 2c:9a:7d:44:6f:d4:f5:b7:7e:da:86:a4:8d:5d:da:de:6b:60: bf:2c:d8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfSBFpYhKYYUvBLArPRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD EygzN2ZiOTQ4MWFlNzYzY2ZhMzc5OWIwNDg1OGVmMTc2NDRjYmYwMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMxaqbbcZIecD+hb+5chkrlRDDS de97d4+AFqghekHypj+Jt5k2c7pxmfkZKdOFmEp7goq7MEpVY7kicxYEanKNJT6L qK2vWx+T2TrLSMyKAWa8d6WHdOZb0JDM9ozWyvDejgT4ztrdhO90n+i8fVCjgKFL /qTLgFAB8KtZbjOw1UQCmKqZdiIy/ek1+882R+NCYXsL+PxLxyMd+w6wIuSL5hCg mFmbv2ULwW/6eOgmNiW4l32zVZxNstor358kOdCkplnXbvAgGQdytWv8DI+KXmo2 vhPCB/0l3isQ9T+iHJDndq+3BPrLRchanfGMOxEV1buMMzeSwPI1lOd2bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf7lIGudjz6N5mwSFjvF2RMvwGoMB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmueezka wwU1O64JKvqcgE39CJWwJLn02szZx+6+wxDMXsJmZQMyf99ULGaJ4ghMn4XUTJg8 xfCAsYALJrTAf7GXg4rVoDVkkhbZ42yseZRfaNgygKlVzM3fYbFlapig+GqJ0cbR tTzK3jJBQYT+v3LunjSp87iN79OM574yns0PYqB/Zdguw7xISiP3msUU3kUV7rRH n5agiOIsqCIUYoP6qSSt2IN2aQ3EexsKC8d2NKOKS2FBoKaiJSW+LO6P2UUqi7ii BaQb3skOkDokjHR8Kx4u4s0c5wbZx+/kLc37oDFm78CbYld4LJp9RG/U9bd+2oak jV3a3mtgvyzYkw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:43 2025 by rpki-client