This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json) Hash identifier: a0MQ95LwdgExJp+Qh5ks2VDE5RqbEMnrGeGcCzMrxDU= Subject key identifier: 0A:59:88:67:00:15:14:8C:4F:C1:32:C4:F9:36:59:D7:F7:E2:B0:B9 Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42 Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342 Certificate serial: 019AF2091ACB4BE58E7183B1286130B62C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: HVv0gpmSiGeu8DN7wRkT1g0l+HxUckn6gBJCeunBbEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:cb:4b:e5:8e:71:83:b1:28:61:30:b6:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=0a5988670015148c4fc132c4f93659d7f7e2b0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:17:2b:bf:4a:e5:08:9c:d9:9b:93:9b:ff: e0:67:95:e4:99:3e:90:7e:28:50:72:fb:6d:47:29: d8:f6:af:6c:3e:98:2a:9c:2c:0d:88:c3:54:4c:12: 4a:ff:0a:d3:89:51:03:f8:a9:c0:39:3b:9a:a8:73: e4:02:02:2e:a5:8b:ec:ec:6e:da:a7:43:58:f5:83: f5:06:c3:78:92:89:c8:22:2b:e4:70:7c:1c:c3:47: 5c:e4:8e:6c:56:bb:a1:81:38:4c:56:e2:a9:a3:5d: 28:71:91:e7:29:45:5d:7c:71:3b:7c:b5:2e:f2:68: 53:66:76:b8:3e:f0:a1:db:2b:be:d4:ea:13:e5:fb: 15:83:d2:78:dd:d2:02:43:6c:fc:8d:ce:0e:ff:84: 70:d6:76:9d:1b:5c:68:cb:c8:09:0d:31:62:31:8a: de:e1:7c:03:86:98:dd:61:8b:10:6b:03:e3:b1:27: dd:f5:1b:61:88:6c:f6:b9:5f:66:a9:1c:b5:e2:ed: 8a:2b:07:9e:a7:c0:7c:e4:f0:66:e1:cd:bc:85:3a: 38:99:28:60:ec:f0:40:e2:d0:fd:ff:ae:91:5c:4e: f5:68:c4:37:c9:f5:01:76:20:fa:27:0b:e3:80:07: 68:58:9d:93:a4:cf:a2:64:7b:47:14:90:b3:14:64: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:59:88:67:00:15:14:8C:4F:C1:32:C4:F9:36:59:D7:F7:E2:B0:B9 X509v3 Authority Key Identifier: keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ee:62:09:bd:36:d0:51:b2:07:8d:97:aa:d1:6a:3c:59:bd: 01:97:2b:c1:93:9c:9f:8d:41:2f:0a:17:e0:b6:75:4e:3d:84: 45:19:c7:b6:98:54:65:f5:ed:ec:2a:91:c8:21:53:33:a9:9c: 0c:07:66:fe:f8:c7:30:a4:f5:b1:8d:f1:e1:c1:f8:fd:c9:40: 89:87:7a:29:1b:c4:3a:75:18:9b:36:ff:50:84:b6:a2:49:15: ef:34:22:83:ca:2e:c1:ec:c8:62:4e:9a:cd:d5:fd:84:c0:0f: 4c:57:7a:1f:80:2f:7b:52:fd:06:8b:5b:cb:28:21:c2:f0:db: 3c:70:d4:5a:37:af:76:ef:e8:d0:41:7c:fa:2e:61:e5:b3:dc: 85:d4:ad:ce:8f:6c:1e:0b:b9:4f:ba:7d:6e:c7:cb:bf:57:b9: e3:ea:ce:0f:4d:e5:1a:ed:75:2e:5a:19:02:f0:bd:7a:1b:39: 69:da:fd:4a:47:90:c6:0a:d3:e2:5b:a5:5c:9f:1e:34:d4:6b: 5f:a1:7d:fd:2a:35:bd:cb:98:87:8a:99:0d:91:2e:b4:b3:b6: 6f:9e:39:e3:59:e2:5b:b2:dc:32:61:ad:57:1e:f9:5d:b3:ab: 6b:c6:3e:04:aa:61:80:22:f2:e9:40:52:b9:5f:92:2d:44:43: 7e:84:2f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRrLS+WOcYOxKGEwtixYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODM0NjhhZDE2ZTY5OThkNGRiNzc2OWJlZmJmYTA2ZWEx ZjEzNDIwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EygwYTU5ODg2NzAwMTUxNDhjNGZjMTMyYzRmOTM2NTlkN2Y3ZTJiMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3YXK79K5Qic2ZuTm//gZ5XkmT6Q fihQcvttRynY9q9sPpgqnCwNiMNUTBJK/wrTiVED+KnAOTuaqHPkAgIupYvs7G7a p0NY9YP1BsN4konIIivkcHwcw0dc5I5sVruhgThMVuKpo10ocZHnKUVdfHE7fLUu 8mhTZna4PvCh2yu+1OoT5fsVg9J43dICQ2z8jc4O/4Rw1nadG1xoy8gJDTFiMYre 4XwDhpjdYYsQawPjsSfd9RthiGz2uV9mqRy14u2KKweep8B85PBm4c28hTo4mShg 7PBA4tD9/66RXE71aMQ3yfUBdiD6JwvjgAdoWJ2TpM+iZHtHFJCzFGTG9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApZiGcAFRSMT8EyxPk2Wdf34rC5MB8GA1UdIwQY MBaAFKGDRorRbmmY1Nt3ab77+gbqHxNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2Mt MzcxYWM3YzY1NGRhLzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2MtMzcxYWM3YzY1NGRh LzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu5iCb02 0FGyB42XqtFqPFm9AZcrwZOcn41BLwoX4LZ1Tj2ERRnHtphUZfXt7CqRyCFTM6mc DAdm/vjHMKT1sY3x4cH4/clAiYd6KRvEOnUYmzb/UIS2okkV7zQig8ouwezIYk6a zdX9hMAPTFd6H4Ave1L9BotbyyghwvDbPHDUWjevdu/o0EF8+i5h5bPchdStzo9s Hgu5T7p9bsfLv1e54+rOD03lGu11LloZAvC9ehs5adr9SkeQxgrT4lulXJ8eNNRr X6F9/So1vcuYh4qZDZEutLO2b54541niW7LcMmGtVx75XbOra8Y+BKphgCLy6UBS uV+SLURDfoQvCw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:27 2025 by rpki-client