This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json) Hash identifier: y5k06FFRQTtB2/YOY4NbmDwbSfgh7RCFK/nLdHbKDd0= Subject key identifier: D3:35:50:55:7F:C0:73:49:1F:2C:36:C6:D7:44:5A:F8:2E:41:65:C3 Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Certificate serial: 019AF0BF2A00BF9CA055EC5B6E4D670EA936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft Manifest number: 11B2 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=) 2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 081o5LrZBrg0xnUt3w9IwmpK6aZBOean0Lto1X8g6zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2a:00:bf:9c:a0:55:ec:5b:6e:4d:67:0e:a9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=d33550557fc073491f2c36c6d7445af82e4165c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:2f:2b:95:8f:4f:fe:db:95:c3:a3:34:62: da:29:c6:69:3f:ea:cb:61:54:ff:dc:c6:9c:4e:61: b4:73:66:6b:b6:7a:6f:c8:b2:3f:23:d6:c8:3f:89: 71:78:58:9c:7e:55:e9:77:bc:37:c6:8b:fe:2a:47: 92:a4:de:b2:56:4f:e6:cf:eb:eb:7a:a9:cb:83:65: 6f:e0:3e:6b:13:32:a0:0a:e1:bb:80:d2:c7:e2:50: e1:2f:dc:02:4d:ef:17:95:22:67:f4:a6:11:6f:db: 8a:dd:50:e0:49:52:e6:6f:5c:2c:9d:c4:f3:96:b2: 28:0a:23:6d:b5:d2:58:41:d9:d0:76:4f:f2:ca:83: 91:dc:c5:aa:6b:34:07:de:b0:f0:97:b8:7e:9d:ae: 41:ce:ff:34:33:e0:22:d7:bf:08:8b:92:a0:77:5c: 4c:ae:60:d8:cd:09:e9:e9:6d:d6:b0:aa:44:50:7a: 80:d2:04:d6:bf:f6:f7:14:fb:1b:de:72:b0:f0:0a: 53:df:c2:1a:85:a1:e3:16:12:8a:0a:aa:a2:a6:75: 77:03:f6:38:c0:33:3f:69:16:75:c6:18:00:f0:55: 00:9d:30:88:da:5b:5e:a1:08:77:e6:57:09:c4:b6: 1b:5b:88:63:dc:4c:d2:f0:97:a4:c8:bf:21:40:1d: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:50:55:7F:C0:73:49:1F:2C:36:C6:D7:44:5A:F8:2E:41:65:C3 X509v3 Authority Key Identifier: keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2f:3c:69:8a:b6:54:5e:e0:0f:cf:09:55:e7:65:5e:7e:ef: c1:99:da:02:34:74:c8:26:6c:40:9b:8b:7d:b2:6d:40:5f:1c: fe:98:a7:ff:cc:ca:37:cc:f1:28:55:f8:3a:93:f4:97:b5:48: 68:8a:8f:b0:a6:1a:99:d0:ca:8e:a4:28:4e:db:15:e8:3e:b2: d2:f7:4e:37:f2:30:17:e9:bd:a7:f4:1d:4a:cb:1d:08:35:e8: cb:9e:c0:ce:ff:23:9e:ba:a6:65:92:58:49:ed:17:3b:8b:86: 23:1e:ef:04:04:3f:d4:97:cb:e1:99:d3:fc:94:bc:76:32:24: c1:33:48:64:b9:1c:cd:c6:dc:c6:ae:3c:16:87:aa:3f:e0:01: 95:5e:0d:06:73:d9:1c:19:f6:0c:dc:94:73:10:79:d4:19:1b: fc:2a:a4:31:d0:88:3e:c6:fc:df:5e:4e:c4:cb:9f:2a:e2:fe: c4:cb:c4:dd:58:7f:14:a4:cc:e2:e6:2c:3f:4f:62:47:10:85: 78:7f:28:a9:c4:c3:8f:c0:71:ff:85:30:24:4a:14:78:ac:8d: 87:e8:89:2d:1d:c3:98:a4:0b:91:67:7b:4a:9b:38:cb:23:f6: 24:d2:d2:dc:c3:2b:0d:01:98:82:66:af:89:99:b6:f3:6d:7b: 38:8f:59:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyoAv5ygVexbbk1nDqk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOTUyMWM3MzUyZDFjYWMzZjk4Yzc1NmZjN2E2YjRiM2Fl OTc1M2QwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EyhkMzM1NTA1NTdmYzA3MzQ5MWYyYzM2YzZkNzQ0NWFmODJlNDE2NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qsvK5WPT/7blcOjNGLaKcZpP+rL YVT/3MacTmG0c2ZrtnpvyLI/I9bIP4lxeFicflXpd7w3xov+KkeSpN6yVk/mz+vr eqnLg2Vv4D5rEzKgCuG7gNLH4lDhL9wCTe8XlSJn9KYRb9uK3VDgSVLmb1wsncTz lrIoCiNttdJYQdnQdk/yyoOR3MWqazQH3rDwl7h+na5Bzv80M+Ai178Ii5Kgd1xM rmDYzQnp6W3WsKpEUHqA0gTWv/b3FPsb3nKw8ApT38IahaHjFhKKCqqipnV3A/Y4 wDM/aRZ1xhgA8FUAnTCI2lteoQh35lcJxLYbW4hj3EzS8JekyL8hQB14CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM1UFV/wHNJHyw2xtdEWvguQWXDMB8GA1UdIwQY MBaAFKGVIcc1LRysP5jHVvx6a0s66XU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMt ZTVhZGEzNmZhMWYzLzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMtZTVhZGEzNmZhMWYz LzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS88aYq2 VF7gD88JVedlXn7vwZnaAjR0yCZsQJuLfbJtQF8c/pin/8zKN8zxKFX4OpP0l7VI aIqPsKYamdDKjqQoTtsV6D6y0vdON/IwF+m9p/QdSssdCDXoy57Azv8jnrqmZZJY Se0XO4uGIx7vBAQ/1JfL4ZnT/JS8djIkwTNIZLkczcbcxq48FoeqP+ABlV4NBnPZ HBn2DNyUcxB51Bkb/CqkMdCIPsb8315OxMufKuL+xMvE3Vh/FKTM4uYsP09iRxCF eH8oqcTDj8Bx/4UwJEoUeKyNh+iJLR3DmKQLkWd7Sps4yyP2JNLS3MMrDQGYgmav iZm28217OI9ZVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:06 2025 by rpki-client