This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json) Hash identifier: nNV5Jxu9LazbrGPQpbHLCpRQAFpU6WeMTnI4WU+TjLs= Subject key identifier: 8D:82:9E:96:07:62:41:36:E0:9F:01:4A:A2:62:56:8B:36:AD:B6:0C Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Certificate serial: 019AF0BEE70ECE3507C16C9FA213A1B5E74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft Manifest number: 12F1 Signing time: Fri 05 Dec 2025 23:00:34 +0000 Manifest this update: Fri 05 Dec 2025 23:00:34 +0000 Manifest next update: Sat 06 Dec 2025 23:00:34 +0000 Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: UYxS/5iyZRq155IHr+3PwCJJJIMbI9wpcHOal1rMMCA=) 2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e7:0e:ce:35:07:c1:6c:9f:a2:13:a1:b5:e7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Validity Not Before: Dec 5 23:00:34 2025 GMT Not After : Dec 6 23:00:34 2025 GMT Subject: CN=8d829e9607624136e09f014aa262568b36adb60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:15:a4:bf:19:02:33:51:36:bc:96:1b:22: a6:68:04:6f:56:b9:a3:26:82:38:de:d3:4c:24:ce: 0f:99:a6:14:d7:7b:f1:0c:fb:af:e8:7c:4b:cd:04: 03:d6:c1:59:17:4b:ed:9f:59:89:6b:25:54:21:7b: f0:38:28:84:c4:94:e2:43:f5:64:73:6c:ae:a8:79: 89:e2:7a:67:90:9d:86:66:77:07:1a:74:0b:1d:05: 35:05:b3:47:ef:40:7b:6f:3d:2a:ca:23:9c:2a:d7: 13:e3:18:8d:4c:68:35:04:14:fd:d1:6e:dd:01:5a: 39:6f:e6:ee:b6:bb:1f:38:38:e5:7f:18:34:c7:07: 50:76:13:3b:ee:c1:7c:34:02:9f:c8:a8:98:10:00: 3b:db:b8:61:02:53:a5:eb:da:c6:f6:c4:72:5c:d3: fb:de:cb:bf:ab:d4:94:23:6a:9b:8d:77:ad:87:5c: f5:3d:37:c8:19:4b:88:da:f9:8d:58:dd:f3:9c:26: 2d:5e:53:f3:9e:be:d7:96:5e:7e:cf:02:07:d3:14: a7:42:72:cc:7b:1f:0d:0b:0c:c4:3b:d5:00:17:11: 47:b1:1c:d4:b3:25:e9:fa:56:97:ba:f1:44:f2:c7: f1:80:fe:d6:59:60:a3:c7:07:1b:28:3b:47:a3:41: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:9E:96:07:62:41:36:E0:9F:01:4A:A2:62:56:8B:36:AD:B6:0C X509v3 Authority Key Identifier: keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:66:95:3b:ee:28:97:6d:f7:48:70:51:2a:8c:54:08:83:ac: 2d:76:2d:05:64:0a:b8:b4:6b:f6:f7:f4:10:d6:37:dc:25:1f: 1e:4a:ad:bb:ec:98:df:52:02:1a:2c:39:2f:23:ff:a3:52:88: 17:9c:15:7e:2b:14:b5:83:9f:49:55:0f:8a:4a:3f:94:40:c1: 0f:b5:c5:d7:e6:f2:3b:fd:ef:da:8c:d8:11:a5:60:f9:3f:85: 1d:9e:99:97:ff:1c:4e:6a:60:23:0c:c0:ea:06:83:fb:6b:49: c8:cd:5f:dc:47:05:d4:c5:44:ff:57:5d:e7:02:48:09:eb:ee: 35:32:07:4e:78:ce:af:17:fb:c1:71:89:6b:02:1c:8b:2f:8a: 6a:ac:4e:31:fa:39:d1:0f:21:fe:a1:99:3c:af:41:66:4c:70: 17:2e:3a:fa:63:ea:2b:1f:83:f8:04:13:57:95:36:85:c1:01: 1e:cd:ab:75:b0:81:f6:b2:7a:fe:2d:65:a8:91:87:d6:61:4f: 03:a7:34:9e:9e:5e:df:2f:97:42:62:f3:88:5b:68:55:11:2c: f2:cd:ce:3d:ce:63:4d:5a:72:61:3d:0e:6e:f1:77:ff:a1:ca: 9e:2a:16:b8:1e:61:b7:34:c1:ae:cc:ac:ac:f9:6d:2b:88:b0: aa:1a:4c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvucOzjUHwWyfohOhtedLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0 YjI0ZGYwHhcNMjUxMjA1MjMwMDM0WhcNMjUxMjA2MjMwMDM0WjAzMTEwLwYDVQQD Eyg4ZDgyOWU5NjA3NjI0MTM2ZTA5ZjAxNGFhMjYyNTY4YjM2YWRiNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YkVpL8ZAjNRNryWGyKmaARvVrmj JoI43tNMJM4PmaYU13vxDPuv6HxLzQQD1sFZF0vtn1mJayVUIXvwOCiExJTiQ/Vk c2yuqHmJ4npnkJ2GZncHGnQLHQU1BbNH70B7bz0qyiOcKtcT4xiNTGg1BBT90W7d AVo5b+butrsfODjlfxg0xwdQdhM77sF8NAKfyKiYEAA727hhAlOl69rG9sRyXNP7 3su/q9SUI2qbjXeth1z1PTfIGUuI2vmNWN3znCYtXlPznr7Xll5+zwIH0xSnQnLM ex8NCwzEO9UAFxFHsRzUsyXp+laXuvFE8sfxgP7WWWCjxwcbKDtHo0GJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2CnpYHYkE24J8BSqJiVos2rbYMMB8GA1UdIwQY MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5 LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWaVO+4o l233SHBRKoxUCIOsLXYtBWQKuLRr9vf0ENY33CUfHkqtu+yY31ICGiw5LyP/o1KI F5wVfisUtYOfSVUPiko/lEDBD7XF1+byO/3v2ozYEaVg+T+FHZ6Zl/8cTmpgIwzA 6gaD+2tJyM1f3EcF1MVE/1dd5wJICevuNTIHTnjOrxf7wXGJawIciy+KaqxOMfo5 0Q8h/qGZPK9BZkxwFy46+mPqKx+D+AQTV5U2hcEBHs2rdbCB9rJ6/i1lqJGH1mFP A6c0np5e3y+XQmLziFtoVREs8s3OPc5jTVpyYT0ObvF3/6HKnioWuB5htzTBrsys rPltK4iwqhpMTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:55 2025 by rpki-client