This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json) Hash identifier: QaBJEu9YDj1frwdmIbo6kLiH0LUAp8Kg1RWV1mlYsMw= Subject key identifier: 42:07:00:3A:97:9A:15:FF:55:A2:93:7F:B4:E8:D3:42:C4:F9:D7:B2 Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85 Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085 Certificate serial: 019AF208C1BE475BAD0414BCC49A332B2545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft Manifest number: 0452 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: FXp8fQ6gh8oelASFQ2BfVeHiv6Y.roa (hash: JfDcJIX809/8XwYFjwqEGsiF/3/D+Oif9zz1ms1Fn7c=) 2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: AEKG6dShwvuXp9s8eMDXof2460A8o9Qwp226cwfvsvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c1:be:47:5b:ad:04:14:bc:c4:9a:33:2b:25:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=4207003a979a15ff55a2937fb4e8d342c4f9d7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:f3:3e:d5:fb:be:48:51:cc:df:09:77:6f: 70:33:c1:0d:bc:3c:f2:2f:a1:a3:5e:52:77:c7:5b: 54:36:de:6d:24:da:4c:3d:d5:7b:0d:46:6b:24:f3: 4f:6a:0b:eb:fe:9a:1e:40:29:82:95:5f:37:85:05: 8b:08:e9:3f:b6:73:80:fa:86:f9:36:84:04:85:bd: 1f:ee:4d:93:f3:3d:e9:52:2e:16:33:04:7d:a1:91: 1a:c0:79:58:6a:a3:eb:b4:72:fc:92:53:57:61:9e: 72:a2:4a:6d:5c:6c:2f:32:79:0b:2e:71:e3:d8:7f: 09:d2:b1:a4:41:58:87:c6:18:27:59:fe:1f:de:0d: 89:8a:4e:7f:a5:0f:f6:f0:87:c4:c6:61:96:3d:8e: f2:f2:04:4a:6e:1c:87:50:09:0d:58:57:d0:d7:c8: f4:95:7c:8a:c1:0d:a9:08:99:90:10:51:2e:98:86: a1:34:cc:83:8a:d2:8d:77:ac:48:a3:14:a0:99:53: 22:49:d9:3a:49:45:12:2b:76:54:da:cc:ec:8c:40: b8:11:e3:cd:f1:6b:d2:ae:ae:ef:7b:1f:95:05:a0: c5:12:91:60:7f:8a:d9:1b:66:4c:2f:9c:ef:35:96: 0e:c4:53:05:6a:53:7d:07:29:25:7c:8b:19:e2:df: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:00:3A:97:9A:15:FF:55:A2:93:7F:B4:E8:D3:42:C4:F9:D7:B2 X509v3 Authority Key Identifier: keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:6e:81:b8:89:43:f3:a0:97:9d:64:f1:a2:6d:54:17:94: 9d:07:64:88:f4:bf:23:8a:6f:8d:ca:ed:de:7a:b2:d7:ba:00: b8:7a:6b:7a:fb:7d:ad:20:4b:22:6c:c9:92:8c:1b:92:8f:14: 36:f6:4c:66:59:e5:29:76:11:6c:98:2b:ea:0d:7e:f9:17:3a: 55:9a:1c:da:e0:57:4c:67:56:7b:05:43:f4:3e:c6:2e:e0:aa: 82:7d:f1:b3:28:99:d1:fa:83:86:e1:5a:d6:b7:38:bb:af:45: e0:7d:7b:7c:dd:e2:91:bb:f2:9e:70:ae:89:18:15:53:43:ef: 47:c3:df:ea:17:a8:10:51:f7:9f:c5:b4:0b:4e:78:6e:ef:85: 55:22:cb:3a:ba:d4:21:83:07:07:ce:a8:60:7b:87:4f:3c:be: e0:52:53:12:b7:bb:bd:6d:a9:6b:90:5f:8c:98:3c:c7:0b:2e: d8:b2:93:4c:91:c4:a1:68:f7:8a:b2:b4:5c:ce:9c:a5:ad:fe: 55:f4:fe:c6:6f:db:54:93:43:de:67:9c:ad:54:a6:5f:a4:28: 01:70:bb:9c:33:38:c8:5b:4e:8d:f9:87:35:21:c4:a7:7c:77: f5:23:29:06:51:13:bc:44:bb:b9:69:59:14:92:df:24:90:a8: ec:66:32:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMG+R1utBBS8xJozKyVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjUxMmI4YTI2MmJhZDU5OWEzYjAyMzM1OGM1Y2VjY2Fj OWUwODUwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg0MjA3MDAzYTk3OWExNWZmNTVhMjkzN2ZiNGU4ZDM0MmM0ZjlkN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdHzPtX7vkhRzN8Jd29wM8ENvDzy L6GjXlJ3x1tUNt5tJNpMPdV7DUZrJPNPagvr/poeQCmClV83hQWLCOk/tnOA+ob5 NoQEhb0f7k2T8z3pUi4WMwR9oZEawHlYaqPrtHL8klNXYZ5yokptXGwvMnkLLnHj 2H8J0rGkQViHxhgnWf4f3g2Jik5/pQ/28IfExmGWPY7y8gRKbhyHUAkNWFfQ18j0 lXyKwQ2pCJmQEFEumIahNMyDitKNd6xIoxSgmVMiSdk6SUUSK3ZU2szsjEC4EePN 8WvSrq7vex+VBaDFEpFgf4rZG2ZML5zvNZYOxFMFalN9ByklfIsZ4t8J4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIHADqXmhX/VaKTf7To00LE+deyMB8GA1UdIwQY MBaAFKFlEriiYrrVmaOwIzWMXOzKyeCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgt YzllYzNhOThmOWEzLzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgtYzllYzNhOThmOWEz LzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixFugbiJ Q/Ogl51k8aJtVBeUnQdkiPS/I4pvjcrt3nqy17oAuHprevt9rSBLImzJkowbko8U NvZMZlnlKXYRbJgr6g1++Rc6VZoc2uBXTGdWewVD9D7GLuCqgn3xsyiZ0fqDhuFa 1rc4u69F4H17fN3ikbvynnCuiRgVU0PvR8Pf6heoEFH3n8W0C054bu+FVSLLOrrU IYMHB86oYHuHTzy+4FJTEre7vW2pa5BfjJg8xwsu2LKTTJHEoWj3irK0XM6cpa3+ VfT+xm/bVJND3mecrVSmX6QoAXC7nDM4yFtOjfmHNSHEp3x39SMpBlETvES7uWlZ FJLfJJCo7GYylA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:47 2025 by rpki-client