This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json) Hash identifier: wIxLO1or7KZXn+tmu50wtvrf1sc6ye6F95dAdaOh6qo= Subject key identifier: 20:F8:70:DC:3F:EC:E9:40:70:9A:52:F8:E1:68:FE:A9:22:F0:A9:A3 Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009 Certificate serial: 019AFCC373E9D671AACFBB69E44D74644BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 07:00:58 +0000 Manifest this update: Mon 08 Dec 2025 07:00:58 +0000 Manifest next update: Tue 09 Dec 2025 07:00:58 +0000 Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=) 2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: gpdujf2I1XL4skNFeiWS0NSGxV8Yb3BfHS6t5i8tKOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:73:e9:d6:71:aa:cf:bb:69:e4:4d:74:64:4b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009 Validity Not Before: Dec 8 07:00:58 2025 GMT Not After : Dec 9 07:00:58 2025 GMT Subject: CN=20f870dc3fece940709a52f8e168fea922f0a9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:d2:5b:b6:df:28:f7:58:f3:53:00:a4:09: ae:86:41:89:dc:90:68:94:f0:66:71:56:64:fc:d1: f0:8c:ed:58:81:88:c6:a7:c8:6d:60:9c:8e:a2:17: 9b:f3:f9:59:90:f1:58:df:8d:c5:38:a9:d8:4d:e7: 54:05:4d:de:9d:f5:57:04:b8:ba:5e:c2:85:45:d4: 4c:c2:86:af:e7:17:89:e6:2b:e2:64:94:1f:a7:d0: 25:9b:31:57:65:86:af:33:27:93:44:34:fb:3b:0b: ac:15:ba:62:28:54:57:8b:a5:d2:92:fa:ef:45:5a: f1:05:ca:51:f6:4b:9d:2b:7a:05:02:dc:2d:1a:fe: 9e:34:70:18:1a:91:4f:31:b1:1a:2d:43:f1:c4:2a: 24:1a:a9:de:ea:4e:4a:50:fe:31:72:f9:14:65:90: eb:9e:9a:32:70:7d:09:8a:3b:88:a5:5e:b9:63:c7: e4:96:9d:66:fc:85:d8:43:16:d0:c3:fc:0d:4b:cf: a9:b9:9d:68:fa:ca:61:df:d5:61:7c:74:01:79:5e: 7c:d8:2b:68:78:5c:c2:d7:be:27:94:74:71:f2:57: 12:fb:b2:6a:0e:df:e8:b9:ff:10:05:89:0a:69:fd: 84:97:2b:69:a0:2e:6c:7c:f9:45:18:3b:54:c6:a3: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F8:70:DC:3F:EC:E9:40:70:9A:52:F8:E1:68:FE:A9:22:F0:A9:A3 X509v3 Authority Key Identifier: keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:14:26:95:51:e1:a2:24:81:28:0c:1c:c1:ea:4d:d4:ba:b5: 5a:14:ce:47:9f:5c:ff:2c:69:dc:8a:d2:37:25:e8:78:65:96: 9c:cb:c3:56:bd:64:59:8f:b5:99:60:d7:9f:c5:da:00:28:7c: 42:95:8c:f3:39:1b:4f:50:f5:fe:a9:8e:86:a8:50:b2:01:04: e1:c4:b5:15:08:de:69:71:39:45:3b:cf:a7:fe:00:d3:f7:61: 38:d2:a7:fe:bb:83:c9:13:bd:2b:f6:61:e0:39:47:f7:c4:e4: ef:e8:15:4f:68:cf:f6:97:c3:90:ce:da:fc:92:db:56:38:1f: 7d:79:d5:06:de:ea:23:7f:86:d8:a4:af:83:0c:b0:23:df:95: 04:3a:e8:fa:06:de:1e:01:cc:b5:ff:6f:89:60:d8:13:4f:1d: 54:8e:62:77:8e:22:c9:1e:a9:26:48:b4:56:9b:4a:3f:5a:28: a4:5d:da:5d:fb:3a:9f:e2:5d:ff:74:9a:fb:c3:da:79:0e:fc: 82:9d:3b:b0:c4:60:e9:98:98:3c:98:0a:e6:2b:7f:d7:d0:4f: f7:08:f8:4d:14:74:eb:68:f7:69:42:10:a3:0e:f5:d5:54:37: a1:9d:1a:28:b1:a5:5e:0b:f9:96:bf:8d:33:5a:b1:ce:2a:a3: 2a:d5:ed:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w3Pp1nGqz7tp5E10ZEv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMmJiMTFkMDE5NTU3ZTEyZjVmYjZlYjkwMzgzNzQyMTE2 MGQwMDkwHhcNMjUxMjA4MDcwMDU4WhcNMjUxMjA5MDcwMDU4WjAzMTEwLwYDVQQD EygyMGY4NzBkYzNmZWNlOTQwNzA5YTUyZjhlMTY4ZmVhOTIyZjBhOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQjSW7bfKPdY81MApAmuhkGJ3JBo lPBmcVZk/NHwjO1YgYjGp8htYJyOoheb8/lZkPFY343FOKnYTedUBU3enfVXBLi6 XsKFRdRMwoav5xeJ5iviZJQfp9AlmzFXZYavMyeTRDT7OwusFbpiKFRXi6XSkvrv RVrxBcpR9kudK3oFAtwtGv6eNHAYGpFPMbEaLUPxxCokGqne6k5KUP4xcvkUZZDr npoycH0JijuIpV65Y8fklp1m/IXYQxbQw/wNS8+puZ1o+sph39VhfHQBeV582Cto eFzC174nlHRx8lcS+7JqDt/ouf8QBYkKaf2ElytpoC5sfPlFGDtUxqNjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD4cNw/7OlAcJpS+OFo/qki8KmjMB8GA1UdIwQY MBaAFKArsR0BlVfhL1+265A4N0IRYNAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUt N2JkM2FiNzNlMTcyLzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUtN2JkM2FiNzNlMTcy LzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxQmlVHh oiSBKAwcwepN1Lq1WhTOR59c/yxp3IrSNyXoeGWWnMvDVr1kWY+1mWDXn8XaACh8 QpWM8zkbT1D1/qmOhqhQsgEE4cS1FQjeaXE5RTvPp/4A0/dhONKn/ruDyRO9K/Zh 4DlH98Tk7+gVT2jP9pfDkM7a/JLbVjgffXnVBt7qI3+G2KSvgwywI9+VBDro+gbe HgHMtf9viWDYE08dVI5id44iyR6pJki0VptKP1oopF3aXfs6n+Jd/3Sa+8PaeQ78 gp07sMRg6ZiYPJgK5it/19BP9wj4TRR062j3aUIQow711VQ3oZ0aKLGlXgv5lr+N M1qxziqjKtXt8Q== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:21 2025 by rpki-client