This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json) Hash identifier: gW2TYp6hzdYHLAyUt3HV4Ub8bd6ZNmUeCVuNdhrjKtA= Subject key identifier: A4:11:BB:91:D2:FE:95:EF:19:99:DE:20:C6:10:AD:41:A7:6B:FF:1C Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Certificate serial: 019AF23FD5C0E1FA34EA5863CFA26A108DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft Manifest number: 02D1 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=) 2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: FhFmMmQ+170LFrirdleMfw1D8IYyy5WffhjudOStmxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d5:c0:e1:fa:34:ea:58:63:cf:a2:6a:10:8d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=a411bb91d2fe95ef1999de20c610ad41a76bff1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:fd:a4:51:b9:2e:d2:7d:70:5a:c3:86:eb: 82:23:b0:3c:69:77:fd:64:e1:84:0d:4f:a0:5d:2a: 08:91:41:76:7c:5c:a8:2e:50:61:c4:8b:c0:f5:1c: f5:bf:8b:c0:a0:e7:43:ac:98:8e:33:c7:56:8c:64: 8f:9f:f4:c9:bc:8a:08:c6:0d:89:67:b1:f4:ea:30: 4b:35:fc:d9:bc:51:51:65:00:e5:3e:45:73:4e:fd: 09:ab:0c:e2:b6:a6:39:fa:3c:54:25:63:40:89:2f: dc:3b:06:b5:69:32:62:ef:f1:46:d3:bd:a0:50:7a: 57:93:62:16:ef:d8:aa:79:18:dd:e7:bb:d6:e1:58: 9a:93:b1:b2:82:1d:92:c6:e0:08:a8:a3:98:3f:ab: a0:d1:df:94:cf:61:d3:05:34:12:cd:e1:10:36:99: 8a:86:79:7f:4d:12:59:d8:b4:61:6d:06:b5:73:ee: af:e7:e5:26:54:f5:ce:ff:c0:36:f0:24:5b:79:90: cd:50:fb:0e:a0:a5:28:80:fe:00:f3:6b:00:e7:c1: 8e:62:ad:b9:f8:95:32:92:b1:b4:03:7a:d6:48:24: ab:ee:6d:c0:7c:39:67:ca:35:38:31:fb:17:5c:c0: 0c:d1:d7:b4:5d:6b:0c:70:bb:29:b2:5c:6c:a2:03: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:BB:91:D2:FE:95:EF:19:99:DE:20:C6:10:AD:41:A7:6B:FF:1C X509v3 Authority Key Identifier: keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:be:3a:f9:e8:31:96:53:ba:5e:20:3e:cc:5b:89:af:14:79: 48:f0:36:a9:7e:8a:70:97:9d:81:82:68:10:08:6c:b8:46:d2: e4:9b:80:7a:86:91:36:8d:6a:42:6b:b7:ca:7d:ae:a5:5b:2c: e0:63:71:a9:0f:50:14:d3:bb:ca:c7:ab:d6:15:30:ff:00:b1: 5d:10:9f:00:60:71:8f:7e:0f:4f:90:da:1e:59:04:1f:94:7a: ad:9e:79:32:9b:d8:ed:69:31:f2:60:af:29:47:18:0e:b3:ad: eb:28:6f:0f:1e:15:5c:c4:4e:7d:11:1b:c5:b7:5c:49:b3:f1: 75:ec:56:f0:fd:a9:0d:c8:e7:52:a8:04:8e:17:1d:74:15:ac: d5:e6:47:b3:ea:df:6e:09:b0:a9:f6:e0:e4:6f:bb:be:e4:b2: c0:3d:78:ea:2c:6f:2d:96:23:0e:95:94:85:47:77:1b:48:a1: 53:01:5a:d8:7f:3c:b9:bd:8c:90:c6:bf:67:26:7b:0a:ca:92: e9:61:2d:3a:57:38:c7:f9:69:e4:ae:d4:7d:b6:bf:ed:9b:a7: 98:83:d5:07:ee:2f:24:a8:93:ff:e9:8e:7c:3d:b9:02:b8:c7: 37:e5:cc:63:e2:e3:24:a0:43:56:fb:8b:2a:18:c1:91:c3:22: 88:39:7e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9XA4fo06lhjz6JqEI3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk MmFhMzgwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhhNDExYmI5MWQyZmU5NWVmMTk5OWRlMjBjNjEwYWQ0MWE3NmJmZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm/9pFG5LtJ9cFrDhuuCI7A8aXf9 ZOGEDU+gXSoIkUF2fFyoLlBhxIvA9Rz1v4vAoOdDrJiOM8dWjGSPn/TJvIoIxg2J Z7H06jBLNfzZvFFRZQDlPkVzTv0JqwzitqY5+jxUJWNAiS/cOwa1aTJi7/FG072g UHpXk2IW79iqeRjd57vW4Viak7Gygh2SxuAIqKOYP6ug0d+Uz2HTBTQSzeEQNpmK hnl/TRJZ2LRhbQa1c+6v5+UmVPXO/8A28CRbeZDNUPsOoKUogP4A82sA58GOYq25 +JUykrG0A3rWSCSr7m3AfDlnyjU4MfsXXMAM0de0XWsMcLspslxsogPaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQRu5HS/pXvGZneIMYQrUGna/8cMB8GA1UdIwQY MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt Y2YzMDVjNTQzOTNlLzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR746+egx llO6XiA+zFuJrxR5SPA2qX6KcJedgYJoEAhsuEbS5JuAeoaRNo1qQmu3yn2upVss 4GNxqQ9QFNO7yser1hUw/wCxXRCfAGBxj34PT5DaHlkEH5R6rZ55MpvY7Wkx8mCv KUcYDrOt6yhvDx4VXMROfREbxbdcSbPxdexW8P2pDcjnUqgEjhcddBWs1eZHs+rf bgmwqfbg5G+7vuSywD146ixvLZYjDpWUhUd3G0ihUwFa2H88ub2MkMa/ZyZ7CsqS 6WEtOlc4x/lp5K7Ufba/7ZunmIPVB+4vJKiT/+mOfD25ArjHN+XMY+LjJKBDVvuL KhjBkcMiiDl+dw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:40 2025 by rpki-client