This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json) Hash identifier: Mll8maKsv5fe2Jp0mO6NOPsdIGJEXeNIGFMoe/Rfm8s= Subject key identifier: FF:25:29:98:53:E9:A3:1C:F3:23:68:7B:6E:F1:44:2C:C0:F7:B0:A4 Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a Certificate serial: 019AF1641A53A10920A767A281AD131000B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft Manifest number: 0470 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: PNKpuYIe21bPze34HwrmCR5EN8BYqUA2+f71bR/o3Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1a:53:a1:09:20:a7:67:a2:81:ad:13:10:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=ff25299853e9a31cf323687b6ef1442cc0f7b0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:e7:c4:a0:e2:e8:4a:4c:ff:fc:7e:c8:de: 45:6f:15:a9:c2:e0:0d:1a:ee:ec:70:0f:20:c0:fb: 4f:f0:fe:8a:c0:2e:be:01:44:b3:30:ec:3c:0b:14: c0:d8:e4:c0:2a:e9:d7:37:16:ca:de:a1:db:3e:ae: b9:83:53:d5:74:1b:7b:ef:d8:09:18:d0:c1:79:1f: 8d:4f:6a:07:e9:27:d9:b1:68:51:c0:33:9d:ed:47: b4:2f:19:db:5b:e2:a4:a4:f4:32:3c:49:47:c7:28: 7a:45:14:0f:2e:0b:48:fd:bd:07:14:32:1c:e8:46: 9f:19:7b:d3:b7:93:94:fb:6c:c6:85:04:77:0f:bf: 5d:cb:07:2a:a2:47:8e:1d:35:1c:ad:0c:7c:4d:c8: 5e:91:e6:44:bd:8c:b9:80:40:63:4a:f4:4a:b4:9e: 6d:4a:ef:b3:ac:b0:db:84:d0:c0:42:e0:45:2b:2f: 72:5d:77:28:86:da:13:ba:92:3d:44:20:55:3c:ef: 8e:c6:75:33:7f:ca:c6:09:55:64:65:d2:8b:ea:16: ae:54:22:4f:e5:81:98:20:07:62:64:19:1b:21:ba: 63:23:bc:c3:8f:43:39:19:a0:30:b4:91:3c:c4:ff: 57:27:66:9a:ba:92:34:14:df:fe:39:8b:75:ed:03: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:25:29:98:53:E9:A3:1C:F3:23:68:7B:6E:F1:44:2C:C0:F7:B0:A4 X509v3 Authority Key Identifier: keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:55:58:9f:19:16:ef:8e:a8:1a:cb:07:bc:62:bc:3b:4c: ed:a6:8a:6d:04:c0:a2:71:86:06:53:cb:b6:ff:b6:8f:a5:bb: 4f:ca:7a:50:8f:6e:e3:7d:17:d8:8c:ba:97:41:d5:4c:b9:3e: 32:41:bb:38:b7:1d:ce:dd:db:a9:78:e3:0e:d5:b2:f7:f5:cb: 57:5b:09:98:94:0b:7a:f3:25:24:5a:45:86:d8:f6:dd:4f:1b: 61:e1:3c:49:82:13:bf:71:fd:a6:cc:39:69:98:cb:43:99:c0: 91:3e:7d:80:8b:84:3b:65:2d:ec:13:f1:dc:8c:13:55:82:59: 5f:73:bf:e7:71:fd:27:e0:b6:1a:81:f6:c8:b7:b6:51:70:e7: bb:ad:2e:13:18:88:0b:5c:c1:cf:0f:60:2d:39:b9:ac:f2:16: 40:f1:17:bb:41:7f:42:ba:9f:fc:d3:78:80:51:af:c9:a7:2b: e2:3b:03:07:f6:4d:ce:89:65:d3:01:ba:de:de:75:6e:4a:33: 9a:00:83:17:7e:be:1d:15:38:ad:5c:50:38:65:ae:74:df:9b: 6d:3d:4c:a8:be:8b:ce:70:b4:eb:9c:41:4a:16:02:dd:5d:3a: 8d:52:c9:28:96:14:86:43:02:3d:c3:88:c0:c9:ac:7b:9e:33: 7f:40:34:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBpToQkgp2eiga0TEACwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzVlZGI1MDY0MjExNDQzMWFkYWVkOGJjNTA1ZTY4NTU5 Y2FkNGEwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EyhmZjI1Mjk5ODUzZTlhMzFjZjMyMzY4N2I2ZWYxNDQyY2MwZjdiMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PnnxKDi6EpM//x+yN5FbxWpwuAN Gu7scA8gwPtP8P6KwC6+AUSzMOw8CxTA2OTAKunXNxbK3qHbPq65g1PVdBt779gJ GNDBeR+NT2oH6SfZsWhRwDOd7Ue0LxnbW+KkpPQyPElHxyh6RRQPLgtI/b0HFDIc 6EafGXvTt5OU+2zGhQR3D79dywcqokeOHTUcrQx8TchekeZEvYy5gEBjSvRKtJ5t Su+zrLDbhNDAQuBFKy9yXXcohtoTupI9RCBVPO+OxnUzf8rGCVVkZdKL6hauVCJP 5YGYIAdiZBkbIbpjI7zDj0M5GaAwtJE8xP9XJ2aaupI0FN/+OYt17QPmWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8lKZhT6aMc8yNoe27xRCzA97CkMB8GA1UdIwQY MBaAFKA17bUGQhFEMa2u2LxQXmhVnK1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUt ZDQ5OGFhYjRlYjJhLzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUtZDQ5OGFhYjRlYjJh LzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXBVWJ8Z Fu+OqBrLB7xivDtM7aaKbQTAonGGBlPLtv+2j6W7T8p6UI9u430X2Iy6l0HVTLk+ MkG7OLcdzt3bqXjjDtWy9/XLV1sJmJQLevMlJFpFhtj23U8bYeE8SYITv3H9psw5 aZjLQ5nAkT59gIuEO2Ut7BPx3IwTVYJZX3O/53H9J+C2GoH2yLe2UXDnu60uExiI C1zBzw9gLTm5rPIWQPEXu0F/Qrqf/NN4gFGvyacr4jsDB/ZNzoll0wG63t51bkoz mgCDF36+HRU4rVxQOGWudN+bbT1MqL6LznC065xBShYC3V06jVLJKJYUhkMCPcOI wMmse54zf0A03A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:03 2025 by rpki-client