This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json) Hash identifier: gPTlE44qcHQMTKh6C/EEflCDAOiqE5j8YkPNfRxqNYg= Subject key identifier: 44:9C:31:72:9E:6C:09:D3:B5:2E:1C:A8:C8:E8:86:CA:75:0E:8B:DD Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0 Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0 Certificate serial: 019AF31BA84C0A3DB3F77CF7BEEFAD856D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: 9Exj+dF7Up3fUnBaLYxzEdSQjiNSm+1aOvGfwEea3Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a8:4c:0a:3d:b3:f7:7c:f7:be:ef:ad:85:6d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=449c31729e6c09d3b52e1ca8c8e886ca750e8bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ca:03:30:4e:9d:c4:60:17:4f:45:7e:cc:85: e5:02:67:fa:76:bc:39:91:bc:26:40:c9:5c:e1:51: 1a:77:24:48:53:9c:d4:a9:47:ff:06:3b:1f:ef:08: 18:a0:98:e4:80:b2:01:ad:2b:63:e0:0d:53:94:48: 33:ce:2c:b2:88:f8:eb:f9:75:f5:b5:4f:f6:f1:27: 33:40:33:2c:40:88:c4:99:f4:be:07:63:68:8d:0d: b9:39:dd:f3:98:77:88:2f:82:5e:86:c1:60:5c:b3: 44:03:be:dc:e6:18:a1:20:fd:c6:bc:72:f0:50:bb: de:4d:ab:fe:c9:e7:29:d1:52:75:97:81:5b:ea:be: 4a:b2:20:9b:14:3d:b4:9c:18:a7:86:5c:f8:41:87: e2:6a:03:d2:69:25:3d:6a:2b:0d:c1:2a:fb:08:73: f4:26:6c:f0:07:e9:a4:4a:c3:5e:2c:7f:89:b4:1a: c9:4c:c3:4a:4c:1a:bb:b4:41:4b:e2:dc:f5:ab:63: 77:c3:ab:a5:32:87:9a:dc:eb:2a:61:a0:2e:d5:aa: 8f:f9:f6:86:2f:15:fa:83:de:c6:a2:45:ff:50:d9: 7a:20:10:4a:aa:84:3d:5a:d3:1e:9b:87:7c:94:6c: 31:92:45:39:7d:4d:50:34:4c:c3:73:6a:4a:0c:db: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:31:72:9E:6C:09:D3:B5:2E:1C:A8:C8:E8:86:CA:75:0E:8B:DD X509v3 Authority Key Identifier: keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9a:32:b2:ce:a1:22:be:05:1a:aa:8c:15:ce:58:8e:35:bd: de:df:42:b7:bc:a5:4d:e1:55:80:cf:d5:41:58:a0:f8:8c:83: 08:d7:59:06:3f:16:35:e2:63:f5:ee:b1:2b:1c:9d:03:ae:bb: 7a:a1:13:a9:1c:77:90:6c:f8:7c:74:99:43:2f:1a:c1:44:0e: 0c:90:d3:f9:d6:46:ca:09:5f:07:f1:d0:84:9f:98:ae:3e:95: ee:f4:4b:ce:21:1c:77:8a:ae:ba:e0:92:e8:7c:6a:87:33:7d: 6c:6b:64:45:6a:c5:07:e7:f9:dd:46:49:fa:37:f4:f7:a6:c9: 02:54:5b:63:80:22:c3:c2:f4:da:7e:4a:5e:f6:50:c2:b4:fe: cc:05:b2:e5:82:c1:a0:ce:84:c9:29:84:c5:d4:c6:69:0d:a3: 9f:99:95:bd:f4:b2:05:d0:17:be:c8:48:34:ae:85:ce:72:04: 45:d1:d5:f5:83:69:97:e6:42:f9:00:82:5a:bc:18:2f:57:e2: 5a:34:96:7b:25:ba:ea:3f:69:26:2e:0e:52:12:5b:87:fe:c6: b5:ba:ce:7a:72:18:f2:7a:dd:5e:f5:de:f4:af:05:56:03:63: 5c:13:0f:9f:84:97:7f:65:13:40:26:53:7c:a9:c2:99:9c:e1: d2:77:c6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6hMCj2z93z3vu+thW1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTBmZTkzZjQ3ZjgzODc5YWUyY2I4MzU0ODhjZDlmN2Q2 OTliYzAwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD Eyg0NDljMzE3MjllNmMwOWQzYjUyZTFjYThjOGU4ODZjYTc1MGU4YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+coDME6dxGAXT0V+zIXlAmf6drw5 kbwmQMlc4VEadyRIU5zUqUf/Bjsf7wgYoJjkgLIBrStj4A1TlEgzziyyiPjr+XX1 tU/28SczQDMsQIjEmfS+B2NojQ25Od3zmHeIL4JehsFgXLNEA77c5hihIP3GvHLw ULveTav+yecp0VJ1l4Fb6r5KsiCbFD20nBinhlz4QYfiagPSaSU9aisNwSr7CHP0 JmzwB+mkSsNeLH+JtBrJTMNKTBq7tEFL4tz1q2N3w6ulMoea3OsqYaAu1aqP+faG LxX6g97GokX/UNl6IBBKqoQ9WtMem4d8lGwxkkU5fU1QNEzDc2pKDNvY0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEScMXKebAnTtS4cqMjohsp1DovdMB8GA1UdIwQY MBaAFKCQ/pP0f4OHmuLLg1SIzZ99aZvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjIt MjU3ODFlMTE2NzgyLzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjItMjU3ODFlMTE2Nzgy LzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpoyss6h Ir4FGqqMFc5YjjW93t9Ct7ylTeFVgM/VQVig+IyDCNdZBj8WNeJj9e6xKxydA667 eqETqRx3kGz4fHSZQy8awUQODJDT+dZGyglfB/HQhJ+Yrj6V7vRLziEcd4quuuCS 6HxqhzN9bGtkRWrFB+f53UZJ+jf096bJAlRbY4Aiw8L02n5KXvZQwrT+zAWy5YLB oM6EySmExdTGaQ2jn5mVvfSyBdAXvshINK6FznIERdHV9YNpl+ZC+QCCWrwYL1fi WjSWeyW66j9pJi4OUhJbh/7GtbrOenIY8nrdXvXe9K8FVgNjXBMPn4SXf2UTQCZT fKnCmZzh0nfG0A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:27 2025 by rpki-client