This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json) Hash identifier: 9ea1a4LRkmHCl7dlu2TDB7Umw2G/WivQwPme3gSEK0s= Subject key identifier: 2A:55:AA:14:A5:5A:4D:7D:DE:57:14:9C:78:B8:FC:D4:ED:10:7E:B5 Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c Certificate serial: 019AF1D2211EC088C58E1490137CBD582F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: 0cFJkjon4fvf1KTE0Tf5IKwCMA1A6g88SGP2JE4plBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:21:1e:c0:88:c5:8e:14:90:13:7c:bd:58:2f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=2a55aa14a55a4d7dde57149c78b8fcd4ed107eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:c0:98:25:dc:ed:3c:da:5e:d6:70:3c:39: d0:e2:c5:32:46:19:9b:0d:b0:ec:6f:00:42:bb:09: 09:19:cd:95:35:52:7c:68:b6:2a:73:52:b2:22:5e: 1b:cd:ac:1e:a3:d9:d7:8a:4f:6d:c6:64:7f:51:bc: 7b:fd:43:85:97:5e:6b:be:ff:20:67:c9:03:6f:41: 12:90:e5:10:4d:e2:ac:bb:45:2c:8a:9e:93:c3:6d: 75:27:86:c3:15:77:8c:41:94:e9:fa:de:bc:7f:54: 80:ce:5e:16:d8:69:da:0d:b3:65:c0:ef:b1:ec:82: 68:63:65:b7:7c:48:80:83:73:a0:42:e0:db:67:76: 4d:f3:15:24:98:e1:3b:9b:0c:8b:eb:37:18:ef:e1: 5d:29:7d:01:92:a8:ca:51:56:a7:99:86:ee:84:32: 8d:1f:d4:07:47:97:d6:10:03:12:79:b6:95:80:92: 67:b3:d1:19:81:87:a8:a8:93:88:93:2a:db:9f:ea: 78:cd:b2:f9:70:63:0f:51:f7:af:1f:fa:86:88:e8: 0f:14:99:3b:16:be:7e:9b:0a:64:13:77:72:74:35: 85:4d:9a:2b:ef:26:81:be:6a:f3:61:21:db:2a:3a: b5:c4:37:ef:55:54:ef:74:09:70:c5:a4:dd:e4:24: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:55:AA:14:A5:5A:4D:7D:DE:57:14:9C:78:B8:FC:D4:ED:10:7E:B5 X509v3 Authority Key Identifier: keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:66:a3:98:9f:4d:76:2a:37:f6:81:80:4f:72:ef:20:60: 90:97:b8:d6:fb:6d:ab:8a:4a:c8:4c:97:22:c0:83:e9:e5:8f: a5:5d:41:1e:ec:ed:3d:b6:b0:62:f5:15:ca:d2:71:a1:24:bc: 41:cf:ce:51:6f:6f:3d:52:ab:a0:48:36:a8:29:2d:6f:18:64: 3c:98:4f:90:e0:03:80:5b:26:6f:b1:69:44:52:ad:44:d5:aa: cb:7c:d6:b7:37:74:79:2a:03:b2:c8:04:19:c9:20:0e:3c:05: 6e:1e:9b:2d:13:3c:c4:3e:36:a9:28:da:e9:8b:47:19:43:68: 6e:68:52:2e:02:56:26:11:3e:4f:62:86:8a:1c:3e:16:0c:6e: 58:60:65:57:3f:79:3a:13:6d:a5:e5:c4:55:d0:79:c0:b5:fb: e5:c4:6d:70:d3:95:a7:40:e0:96:ef:0b:ae:c9:cb:0b:6d:d6: b1:94:83:c2:18:bd:7d:37:c6:ac:08:5a:a5:62:03:e6:ae:f7: 9f:a9:6a:c6:75:51:57:16:04:31:d0:ff:9a:d5:26:35:fe:90: 89:57:10:b3:03:51:e4:ba:a4:d4:5a:13:d5:d3:69:27:f0:05: cb:4f:24:48:7d:8f:06:cb:b0:c6:57:ff:d8:83:49:a9:94:ee: d6:2b:c6:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iEewIjFjhSQE3y9WC81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYjM3M2JmOGU0NzcyNzc1ZTdjOGZjNWZiZDMyOWNkZWU0 NGEzMmMwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EygyYTU1YWExNGE1NWE0ZDdkZGU1NzE0OWM3OGI4ZmNkNGVkMTA3ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6rAmCXc7TzaXtZwPDnQ4sUyRhmb DbDsbwBCuwkJGc2VNVJ8aLYqc1KyIl4bzaweo9nXik9txmR/Ubx7/UOFl15rvv8g Z8kDb0ESkOUQTeKsu0Usip6Tw211J4bDFXeMQZTp+t68f1SAzl4W2GnaDbNlwO+x 7IJoY2W3fEiAg3OgQuDbZ3ZN8xUkmOE7mwyL6zcY7+FdKX0BkqjKUVanmYbuhDKN H9QHR5fWEAMSebaVgJJns9EZgYeoqJOIkyrbn+p4zbL5cGMPUfevH/qGiOgPFJk7 Fr5+mwpkE3dydDWFTZor7yaBvmrzYSHbKjq1xDfvVVTvdAlwxaTd5CQnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpVqhSlWk193lcUnHi4/NTtEH61MB8GA1UdIwQY MBaAFKCzc7+OR3J3XnyPxfvTKc3uRKMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MDcyMTMtYjI2NC00ODUzLTkzNDMt ZWU1NTg1YWUxM2I3LzEvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80MDcyMTMtYjI2NC00ODUzLTkzNDMtZWU1NTg1YWUxM2I3 LzEvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCtmo5if TXYqN/aBgE9y7yBgkJe41vttq4pKyEyXIsCD6eWPpV1BHuztPbawYvUVytJxoSS8 Qc/OUW9vPVKroEg2qCktbxhkPJhPkOADgFsmb7FpRFKtRNWqy3zWtzd0eSoDssgE GckgDjwFbh6bLRM8xD42qSja6YtHGUNobmhSLgJWJhE+T2KGihw+FgxuWGBlVz95 OhNtpeXEVdB5wLX75cRtcNOVp0Dglu8LrsnLC23WsZSDwhi9fTfGrAhapWID5q73 n6lqxnVRVxYEMdD/mtUmNf6QiVcQswNR5Lqk1FoT1dNpJ/AFy08kSH2PBsuwxlf/ 2INJqZTu1ivGrg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:08 2025 by rpki-client