This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft File: oXYKUBSDGdYXKjgg2IipJMCdel8.mft (raw, json) Hash identifier: YFZ8z+TDFQEo7RZXubiPvtvWXU5cRwRVtGMgtFAB1Xg= Subject key identifier: B8:19:6D:7E:15:45:21:AA:08:87:32:04:41:3E:99:16:09:CF:92:1F Authority key identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F Certificate issuer: /CN=a1760a50148319d6172a3820d888a924c09d7a5f Certificate serial: 019AF12E6AF9F39CD60C89BE25B8EBBCD5C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft Manifest number: 19 Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: oXYKUBSDGdYXKjgg2IipJMCdel8.crl (hash: gBrEavzKc+/umuTsoa5f4urPVNRQnvPW1dyGSKSYfTw=) 2: skNw0-S5lXSBLgJDnUIwuxob_VE.roa (hash: L7NdVGLJO+2+mxUNZPcg0M6qJdkyLkrgbxDY8ChE+3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6a:f9:f3:9c:d6:0c:89:be:25:b8:eb:bc:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1760a50148319d6172a3820d888a924c09d7a5f Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=b8196d7e154521aa08873204413e991609cf921f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:07:b8:75:ec:cd:90:13:bd:20:56:62:03: 87:1f:15:fd:de:12:d7:f5:d2:55:00:0d:9b:2a:c7: c8:f4:73:fe:7f:d5:99:33:bf:95:c4:e5:c7:e4:3a: 03:19:af:0c:32:19:eb:16:b6:7d:b3:a3:74:23:c0: c8:53:63:5b:c8:22:22:c1:27:f4:7d:20:69:3d:1f: e1:6e:ef:55:0f:77:3f:7c:f4:30:dc:00:74:e4:93: af:0c:c3:3a:26:ae:05:2a:6c:27:f4:db:de:25:92: f1:35:d1:c0:a1:e1:76:29:36:c7:5c:86:04:a7:47: dc:18:29:83:91:ff:20:84:94:d2:f8:1b:7c:ef:61: 1d:29:bf:c2:e2:38:d5:64:d3:0d:fe:3d:33:e8:3a: b1:2e:17:39:5f:e8:95:10:a0:d3:29:0e:19:4e:69: f9:ff:ff:a5:68:eb:f0:7b:8d:18:1b:83:56:1f:83: 2d:ec:d9:e4:0c:e8:d9:d0:e3:92:41:2c:f7:f0:08: 37:2b:2f:e9:0b:e5:08:c2:df:f5:b2:a0:69:a7:ac: 01:2b:83:01:95:15:eb:e7:70:6a:ee:d9:66:9f:a0: 1a:d5:37:27:b6:3a:b2:69:c1:13:00:22:53:b8:6f: 78:fd:cc:90:88:60:ae:e2:c8:3e:74:92:8f:c5:73: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:6D:7E:15:45:21:AA:08:87:32:04:41:3E:99:16:09:CF:92:1F X509v3 Authority Key Identifier: keyid:A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:91:43:1b:0c:b4:20:7e:2b:c6:5c:45:e4:aa:bf:4d:d8: 51:f3:ff:f4:b0:2e:a9:36:8c:3e:30:24:9a:54:e2:71:bc:a2: 32:f0:2d:82:62:92:75:9c:c8:0e:17:f6:d6:45:dd:ed:fb:0a: fd:fc:72:44:9c:04:68:8b:2e:a7:55:d6:05:4e:38:a5:01:b7: 64:6f:af:79:0e:6b:5f:c8:de:18:63:fc:de:46:a0:39:03:40: 8d:19:c4:81:e1:33:4a:9e:b7:c8:97:8e:4d:97:20:13:eb:02: 5f:7a:6c:ac:09:3c:a2:7f:5f:51:33:86:8f:02:77:d0:05:be: 76:2b:d0:59:3a:66:f0:74:32:9a:16:9e:e4:5b:1c:93:d7:8d: 6c:0c:78:87:67:ad:55:12:6e:c8:4e:db:e2:3a:f0:31:5e:3c: cf:22:d6:06:db:ce:1c:35:49:db:2a:8d:1b:05:be:b6:b9:10: 80:d1:55:3d:aa:72:bd:af:33:86:6c:52:e7:5a:56:da:dd:61: e0:fb:c6:53:08:a9:9f:84:14:79:77:5b:52:0b:91:eb:ec:24: 86:78:c2:67:45:35:ac:bd:14:e1:6f:6b:51:98:ac:e0:24:1e: 75:9b:65:73:4e:12:8b:f1:c9:d1:bc:5e:30:09:66:5a:b1:e4: c7:d8:d9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmr585zWDIm+JbjrvNXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNzYwYTUwMTQ4MzE5ZDYxNzJhMzgyMGQ4ODhhOTI0YzA5 ZDdhNWYwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD EyhiODE5NmQ3ZTE1NDUyMWFhMDg4NzMyMDQ0MTNlOTkxNjA5Y2Y5MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydMHuHXszZATvSBWYgOHHxX93hLX 9dJVAA2bKsfI9HP+f9WZM7+VxOXH5DoDGa8MMhnrFrZ9s6N0I8DIU2NbyCIiwSf0 fSBpPR/hbu9VD3c/fPQw3AB05JOvDMM6Jq4FKmwn9NveJZLxNdHAoeF2KTbHXIYE p0fcGCmDkf8ghJTS+Bt872EdKb/C4jjVZNMN/j0z6DqxLhc5X+iVEKDTKQ4ZTmn5 //+laOvwe40YG4NWH4Mt7NnkDOjZ0OOSQSz38Ag3Ky/pC+UIwt/1sqBpp6wBK4MB lRXr53Bq7tlmn6Aa1TcntjqyacETACJTuG94/cyQiGCu4sg+dJKPxXNcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZbX4VRSGqCIcyBEE+mRYJz5IfMB8GA1UdIwQY MBaAFKF2ClAUgxnWFyo4INiIqSTAnXpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZmJlMTctYjU4Yy00ZWEyLThiMzIt OTFmNzE5YjViMDQ2LzEvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZmJlMTctYjU4Yy00ZWEyLThiMzItOTFmNzE5YjViMDQ2 LzEvb1hZS1VCU0RHZFlYS2pnZzJJaXBKTUNkZWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0KRQxsM tCB+K8ZcReSqv03YUfP/9LAuqTaMPjAkmlTicbyiMvAtgmKSdZzIDhf21kXd7fsK /fxyRJwEaIsup1XWBU44pQG3ZG+veQ5rX8jeGGP83kagOQNAjRnEgeEzSp63yJeO TZcgE+sCX3psrAk8on9fUTOGjwJ30AW+divQWTpm8HQymhae5Fsck9eNbAx4h2et VRJuyE7b4jrwMV48zyLWBtvOHDVJ2yqNGwW+trkQgNFVPapyva8zhmxS51pW2t1h 4PvGUwipn4QUeXdbUguR6+wkhnjCZ0U1rL0U4W9rUZis4CQedZtlc04Si/HJ0bxe MAlmWrHkx9jZ7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:07 2025 by rpki-client