This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json) Hash identifier: dfgMCXEy+JsUtMWS+3VJzl1XwaEc8pZmzJ0uUbZugxQ= Subject key identifier: 55:BD:F2:8A:9B:CD:2A:56:71:BE:40:23:A2:81:19:65:E4:B7:B9:F7 Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb Certificate serial: 019AF209A9768F31B4A1860F5400F3BC4674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft Manifest number: 0A6B Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: gMISUcQjiUxFKpjptGh2kWNMvmbnngb5C4szRdciOdY=) 2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a9:76:8f:31:b4:a1:86:0f:54:00:f3:bc:46:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=55bdf28a9bcd2a5671be4023a2811965e4b7b9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:a5:6f:dc:5f:0b:4a:0a:52:f3:d6:02:67: 36:4d:63:ea:28:a1:87:38:7b:d5:2c:54:d7:6c:2e: 4b:a6:8c:c4:c1:bf:54:1d:3b:ef:61:74:b4:57:6e: 8b:15:80:ce:64:22:72:e6:c3:ef:ac:82:02:8a:f3: a1:43:d6:80:75:31:f3:f4:eb:3d:7a:74:99:d8:45: 37:fd:97:42:b4:49:b2:fc:f1:ce:9c:af:b2:92:b3: 41:27:63:b3:45:fc:72:f3:00:2d:9b:fc:d9:0e:b1: e0:4d:4c:db:a3:9a:35:da:ed:73:61:34:76:60:94: 31:b2:1f:42:f4:2b:11:c1:9f:fc:90:4f:d9:6f:89: 30:f4:51:62:ce:74:d4:2a:8d:05:ff:26:af:57:de: 31:0f:37:ee:b3:df:ec:33:d3:66:3a:e7:41:5b:bd: 29:e6:d9:62:85:1f:ac:55:dd:dc:6e:98:2f:ea:f2: f7:01:f4:df:6d:4a:e5:83:49:ed:60:f8:21:95:94: b7:73:65:f6:3f:25:9c:f8:66:da:19:b3:17:99:9a: 2d:7e:e9:7e:a8:8a:68:a7:c0:6e:5a:dd:d6:4c:9d: 5c:45:68:49:07:fc:48:ca:d4:6e:62:d5:72:00:ad: d6:7f:0b:5a:f5:7d:6b:dd:ab:ac:5a:df:a2:9c:1f: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BD:F2:8A:9B:CD:2A:56:71:BE:40:23:A2:81:19:65:E4:B7:B9:F7 X509v3 Authority Key Identifier: keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2d:ee:0c:b0:b9:81:7e:b4:b7:05:b7:ff:bc:03:a1:29:be: d0:de:8c:c1:f7:09:3e:a1:bf:fe:1a:9c:99:fb:de:05:0e:c6: 29:d7:51:4e:10:64:e2:8f:de:eb:a2:f8:76:72:e3:7b:74:b8: 11:0a:4c:b7:aa:33:c4:fa:76:3a:a1:ba:c7:7c:09:70:8c:72: 90:ec:c5:15:a1:32:eb:1c:95:35:6d:e2:e4:07:58:49:17:32: 7a:68:2a:8f:f1:96:b0:65:7b:2f:4f:cd:43:79:35:62:7d:04: 28:83:a3:24:05:c1:0a:9b:7a:a9:97:27:41:cf:c5:0a:56:78: 40:e2:56:fe:c1:2f:de:2f:33:48:e9:a9:a3:aa:27:3b:bf:e9: 39:bc:f8:1c:45:2d:6a:57:a5:1a:ae:6c:bc:8f:9a:ee:53:17: c9:58:1e:3f:ba:1b:37:27:6f:ac:a8:63:67:33:ef:a3:f7:98: 88:fd:66:3c:80:d1:bc:03:9a:81:1e:d7:d9:6a:18:72:aa:70: c3:99:a0:bc:3c:e5:45:26:e4:ba:ad:85:17:90:0c:4b:87:9d: dd:da:7f:a9:9d:6b:d3:51:53:3d:2b:49:f9:17:d3:fb:e5:98: 43:04:db:f0:be:89:b4:6c:a5:30:72:c0:4e:a1:a3:54:7c:20: 3c:24:38:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCal2jzG0oYYPVADzvEZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTNhNzY3M2E3OTk5ZGQ0OTZhMDgwZGJiYWZhMTA3N2Fk OTgwZmIwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD Eyg1NWJkZjI4YTliY2QyYTU2NzFiZTQwMjNhMjgxMTk2NWU0YjdiOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gylb9xfC0oKUvPWAmc2TWPqKKGH OHvVLFTXbC5LpozEwb9UHTvvYXS0V26LFYDOZCJy5sPvrIICivOhQ9aAdTHz9Os9 enSZ2EU3/ZdCtEmy/PHOnK+ykrNBJ2OzRfxy8wAtm/zZDrHgTUzbo5o12u1zYTR2 YJQxsh9C9CsRwZ/8kE/Zb4kw9FFiznTUKo0F/yavV94xDzfus9/sM9NmOudBW70p 5tlihR+sVd3cbpgv6vL3AfTfbUrlg0ntYPghlZS3c2X2PyWc+GbaGbMXmZotful+ qIpop8BuWt3WTJ1cRWhJB/xIytRuYtVyAK3Wfwta9X1r3ausWt+inB+SWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW98oqbzSpWcb5AI6KBGWXkt7n3MB8GA1UdIwQY MBaAFKLjp2c6eZndSWoIDbuvoQd62YD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEt ODUzZDJmMTgzZWI4LzEvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEtODUzZDJmMTgzZWI4 LzEvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS3uDLC5 gX60twW3/7wDoSm+0N6MwfcJPqG//hqcmfveBQ7GKddRThBk4o/e66L4dnLje3S4 EQpMt6ozxPp2OqG6x3wJcIxykOzFFaEy6xyVNW3i5AdYSRcyemgqj/GWsGV7L0/N Q3k1Yn0EKIOjJAXBCpt6qZcnQc/FClZ4QOJW/sEv3i8zSOmpo6onO7/pObz4HEUt alelGq5svI+a7lMXyVgeP7obNydvrKhjZzPvo/eYiP1mPIDRvAOagR7X2WoYcqpw w5mgvDzlRSbkuq2FF5AMS4ed3dp/qZ1r01FTPStJ+RfT++WYQwTb8L6JtGylMHLA TqGjVHwgPCQ4Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client