This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json) Hash identifier: W0mJH4Kl4+kPmvXPdEbYnJULzBXlt9jZj40H+b26W/o= Subject key identifier: 5C:80:74:E0:B4:95:47:36:FF:43:E4:41:A4:B4:4C:8B:D0:4E:A8:24 Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Certificate serial: 019AF163DC3DF900DE7CE2CE0D7263FFC361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft Manifest number: 0C8E Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: V80b0ASF277ufNxcp8MtBD0KM+ZaexglDdEqu/Pp91o=) 2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dc:3d:f9:00:de:7c:e2:ce:0d:72:63:ff:c3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=5c8074e0b4954736ff43e441a4b44c8bd04ea824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:e1:78:27:d3:64:88:a8:55:f4:a9:3e:9b: 6a:3f:73:85:68:2d:34:af:a8:ef:d1:ab:c4:08:9f: 18:91:a5:5e:6b:53:b2:ac:2b:9b:ae:47:e8:28:fb: 71:09:80:72:eb:e6:5e:37:cf:27:95:7d:db:c5:71: 5b:28:cb:b2:cf:a9:18:f7:07:87:76:5c:4e:c6:46: d4:54:d0:dd:96:8c:b8:2f:0c:4b:1e:fe:37:85:15: ba:9c:30:6e:a8:23:00:4f:7c:d0:12:c6:b3:ca:2f: 10:25:a1:14:9d:00:54:81:43:b0:10:9c:21:ee:6a: bc:a0:c6:08:7a:77:11:4f:bd:99:f8:a8:d2:b4:c4: a3:fb:3b:b8:f8:0d:29:8a:59:fd:37:03:6b:dd:86: c2:47:43:32:f5:71:d9:4f:34:bd:5f:cb:e0:88:b5: 3a:2b:4e:d8:9d:cb:b1:d7:90:74:09:b9:ea:02:cf: 60:68:c2:8f:74:c9:49:e2:28:5d:37:ef:5d:ee:de: 10:8a:1a:74:75:30:c8:57:a8:14:17:60:c9:08:d2: 9e:49:fd:1d:c2:6e:3d:d2:93:14:74:96:28:43:cc: 52:2d:9f:d2:e8:09:d9:10:d1:42:e5:9d:1c:9a:25: 01:d5:e4:4a:ed:6d:da:25:a0:8e:a9:39:18:f5:21: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:80:74:E0:B4:95:47:36:FF:43:E4:41:A4:B4:4C:8B:D0:4E:A8:24 X509v3 Authority Key Identifier: keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:eb:0c:78:7c:cc:c1:37:50:ba:c0:01:a5:ea:66:e5:61: 1a:82:fb:48:37:89:03:1d:01:24:a8:94:bf:d4:b0:23:8e:7b: 4d:49:fa:1c:67:38:65:c0:58:57:1d:8c:80:b4:7b:f9:ec:9d: 3f:9d:60:be:5d:7d:55:e4:06:67:e7:97:b8:5d:7c:6b:a1:7a: 0e:3c:49:81:09:91:b2:6e:22:1c:15:f3:84:04:7f:31:f1:51: 06:73:71:7c:bd:d8:50:a6:36:63:8f:bf:3a:14:4d:3c:0d:be: 7f:b7:82:3c:64:96:50:5b:a7:5b:af:80:d8:31:35:d3:dc:de: 76:df:31:8a:ae:68:71:31:c0:af:4a:2c:97:82:e3:7c:6c:28: 91:1b:b3:b2:36:e9:f6:15:10:7f:5c:d9:9e:e5:35:dd:41:7d: 6e:ed:ba:0c:44:09:1f:24:fc:e0:30:52:93:8f:1f:6b:01:ef: d8:e1:4b:d8:50:22:e9:f3:11:50:18:a7:7e:38:3f:21:af:6f: 49:b7:7b:0e:e4:2a:5b:e0:55:c1:1b:86:00:b2:d0:0f:fc:32: 2b:82:b8:54:37:77:95:88:a1:e4:02:cf:7d:6c:7f:6c:7e:69: 19:9f:bb:35:7f:8b:f3:ea:d9:99:7d:02:4f:bf:23:9b:64:f7: 72:b4:be:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9w9+QDefOLODXJj/8NhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk NmM2Y2EwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg1YzgwNzRlMGI0OTU0NzM2ZmY0M2U0NDFhNGI0NGM4YmQwNGVhODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BrheCfTZIioVfSpPptqP3OFaC00 r6jv0avECJ8YkaVea1OyrCubrkfoKPtxCYBy6+ZeN88nlX3bxXFbKMuyz6kY9weH dlxOxkbUVNDdloy4LwxLHv43hRW6nDBuqCMAT3zQEsazyi8QJaEUnQBUgUOwEJwh 7mq8oMYIencRT72Z+KjStMSj+zu4+A0piln9NwNr3YbCR0My9XHZTzS9X8vgiLU6 K07Yncux15B0CbnqAs9gaMKPdMlJ4ihdN+9d7t4Qihp0dTDIV6gUF2DJCNKeSf0d wm490pMUdJYoQ8xSLZ/S6AnZENFC5Z0cmiUB1eRK7W3aJaCOqTkY9SGRjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyAdOC0lUc2/0PkQaS0TIvQTqgkMB8GA1UdIwQY MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2 LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4brDHh8 zME3ULrAAaXqZuVhGoL7SDeJAx0BJKiUv9SwI457TUn6HGc4ZcBYVx2MgLR7+eyd P51gvl19VeQGZ+eXuF18a6F6DjxJgQmRsm4iHBXzhAR/MfFRBnNxfL3YUKY2Y4+/ OhRNPA2+f7eCPGSWUFunW6+A2DE109zedt8xiq5ocTHAr0osl4LjfGwokRuzsjbp 9hUQf1zZnuU13UF9bu26DEQJHyT84DBSk48fawHv2OFL2FAi6fMRUBinfjg/Ia9v Sbd7DuQqW+BVwRuGALLQD/wyK4K4VDd3lYih5ALPfWx/bH5pGZ+7NX+L8+rZmX0C T78jm2T3crS+hw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:02 2025 by rpki-client