This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json) Hash identifier: +yyjQ2CP8KIkuFAk51lgeNQR6Fc/KN6J6b1QybaI8us= Subject key identifier: 09:69:C6:EE:78:DE:87:AC:EA:DF:1E:D6:CD:34:8E:97:EE:AA:15:19 Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d Certificate serial: 019AF12DBC699C6E6BEFB9614EFEA00DD53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft Manifest number: 0B20 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: RnVkvaPnnpaaL2rlUZepT9WMKhAyHcz2q/JLmJbGkJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bc:69:9c:6e:6b:ef:b9:61:4e:fe:a0:0d:d5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=0969c6ee78de87aceadf1ed6cd348e97eeaa1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:9f:cf:f3:cc:b0:f9:b0:08:08:bf:fb:d5: 4d:59:d0:d8:50:39:78:96:b1:77:0d:03:d6:c4:13: c2:f9:cd:fe:30:8d:7a:3f:ab:0a:c1:f5:84:4a:e8: ec:bb:e6:97:27:e9:c3:0d:b9:2c:dc:01:de:33:eb: 4a:09:88:3a:a7:b3:9f:53:23:46:d2:03:86:d8:c4: c4:e5:7f:d6:76:86:21:af:8b:89:9a:fa:01:5d:b7: 4e:0b:8b:d8:bb:34:fd:b6:8d:7c:0d:94:92:10:b0: b8:1e:2f:f1:a2:d0:7e:78:78:b1:8b:78:52:9e:c1: 62:16:9d:61:49:b9:a0:44:45:f4:77:99:a7:8b:36: 4c:9f:4b:5e:c5:87:4b:82:85:97:7e:0c:d9:f3:66: 76:f5:76:6a:98:31:19:64:71:8c:ef:0b:84:2d:c3: 69:21:61:c1:db:d0:d2:29:72:a8:75:76:c9:55:92: b6:08:a1:d8:f5:a6:04:28:92:a3:85:bd:0c:61:50: d1:8b:df:47:f3:7a:db:dc:6a:69:c6:7a:30:7b:4a: 04:74:a3:75:aa:31:a4:d4:e2:70:e4:9e:77:73:e6: 29:05:d1:49:cf:e9:f4:26:69:3b:e4:3c:68:10:dd: 53:b6:5b:ab:dc:cb:2d:62:2c:88:0c:cf:fe:91:2a: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:C6:EE:78:DE:87:AC:EA:DF:1E:D6:CD:34:8E:97:EE:AA:15:19 X509v3 Authority Key Identifier: keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6c:25:05:f7:4f:1c:12:b8:e7:ca:e1:9c:89:4a:39:3f:db: b7:3f:13:3e:14:3a:e0:02:61:04:72:8e:12:13:25:79:f8:ec: 22:53:78:44:40:4e:84:a2:eb:5a:91:1d:96:19:87:81:e1:8f: 8f:02:6f:66:a4:60:cd:92:af:dd:b5:50:55:d6:a5:8e:91:4d: 99:9a:9e:2d:58:50:a0:12:33:d4:d2:96:80:dd:cc:67:3a:3e: 88:7d:f7:25:47:7a:34:01:83:07:4a:c8:66:a4:b8:5a:22:96: a6:77:f9:93:16:b1:a4:4d:8f:ae:fb:45:a7:e3:f0:03:07:18: 26:6f:80:53:98:36:22:13:af:74:84:8f:09:41:4a:ed:cd:f8: 8b:7e:5a:b7:ac:b4:45:ad:ba:2e:04:01:f7:31:44:11:49:5c: c7:be:8d:0f:45:b7:fc:18:30:eb:74:de:92:f8:54:a3:3a:0c: 4d:8b:aa:ed:83:81:6c:82:32:8d:05:bb:35:5b:12:29:5d:2f: 22:89:0d:97:d3:37:69:4a:37:9a:44:53:f7:a8:78:54:e8:2d: fe:4c:ba:0b:5b:7a:54:22:b4:5f:38:03:b9:e9:6a:e2:1f:ff: 31:b5:4f:f8:cd:36:42:ff:bb:8a:90:ee:21:d3:17:4c:26:5f: 2f:86:e6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbxpnG5r77lhTv6gDdU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2NiZGRmZDc5MjA2ZDY1YzRlZTgxNjhlYWY2ZTcwOTAy MGY5NWQwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EygwOTY5YzZlZTc4ZGU4N2FjZWFkZjFlZDZjZDM0OGU5N2VlYWExNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzqfz/PMsPmwCAi/+9VNWdDYUDl4 lrF3DQPWxBPC+c3+MI16P6sKwfWESujsu+aXJ+nDDbks3AHeM+tKCYg6p7OfUyNG 0gOG2MTE5X/WdoYhr4uJmvoBXbdOC4vYuzT9to18DZSSELC4Hi/xotB+eHixi3hS nsFiFp1hSbmgREX0d5mnizZMn0texYdLgoWXfgzZ82Z29XZqmDEZZHGM7wuELcNp IWHB29DSKXKodXbJVZK2CKHY9aYEKJKjhb0MYVDRi99H83rb3Gppxnowe0oEdKN1 qjGk1OJw5J53c+YpBdFJz+n0Jmk75DxoEN1Ttlur3MstYiyIDM/+kSp6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlpxu543oes6t8e1s00jpfuqhUZMB8GA1UdIwQY MBaAFDl8vd/XkgbWXE7oFo6vbnCQIPldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2Mt YTZiMGZkZTIxOTA2LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2MtYTZiMGZkZTIxOTA2 LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2wlBfdP HBK458rhnIlKOT/btz8TPhQ64AJhBHKOEhMlefjsIlN4REBOhKLrWpEdlhmHgeGP jwJvZqRgzZKv3bVQVdaljpFNmZqeLVhQoBIz1NKWgN3MZzo+iH33JUd6NAGDB0rI ZqS4WiKWpnf5kxaxpE2PrvtFp+PwAwcYJm+AU5g2IhOvdISPCUFK7c34i35at6y0 Ra26LgQB9zFEEUlcx76ND0W3/Bgw63TekvhUozoMTYuq7YOBbIIyjQW7NVsSKV0v IokNl9M3aUo3mkRT96h4VOgt/ky6C1t6VCK0XzgDuelq4h//MbVP+M02Qv+7ipDu IdMXTCZfL4bm0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:43 2025 by rpki-client