This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json) Hash identifier: AdKTPmGexbv5mM6ewk6rIkK8e4ttp4Acbi+k2bGK4W0= Subject key identifier: 7C:31:B3:52:DE:88:0F:CA:08:81:D2:53:2A:28:0D:40:38:A8:A5:43 Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019B3C7E708ACAD7B76940C390D74CAD2F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft Manifest number: 0B71 Signing time: Sat 20 Dec 2025 16:01:17 +0000 Manifest this update: Sat 20 Dec 2025 16:01:17 +0000 Manifest next update: Sun 21 Dec 2025 16:01:17 +0000 Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: sb7dXveDTsId3GS0OPxTEMbpLbpMXNiuSr0iBv9iygo=) 2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=) 3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:70:8a:ca:d7:b7:69:40:c3:90:d7:4c:ad:2f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Dec 20 16:01:17 2025 GMT Not After : Dec 21 16:01:17 2025 GMT Subject: CN=7c31b352de880fca0881d2532a280d4038a8a543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:76:39:ed:a5:55:61:f7:c8:dd:22:51:9b: fc:4f:44:73:68:8c:4e:6d:51:fe:9b:d9:ad:82:6a: 70:00:99:91:62:c3:47:d9:ff:6e:09:98:10:ad:97: ff:27:49:ce:f0:66:da:20:90:89:b9:94:08:57:1d: 22:ab:53:8a:a5:bb:ac:f3:27:2c:92:62:5a:1e:1e: f0:36:b3:1c:80:8c:96:f9:d1:8a:f0:a9:bf:79:cb: 5a:51:08:17:e2:bc:46:5b:c4:c5:0a:77:eb:74:12: 88:8f:6a:37:8d:83:27:1b:1e:ba:29:45:44:20:86: b9:67:58:d8:36:e0:c1:63:ba:4d:69:d8:f4:e4:ed: 6f:13:c2:9c:52:6c:bb:88:bf:17:a8:1c:36:f0:ce: 1f:f9:4f:02:ae:37:c6:36:37:df:2c:d0:b9:27:cd: 44:d7:92:b9:bd:e6:58:1a:e3:99:67:92:7b:22:0d: 85:e8:a4:9a:b3:06:e5:ef:6d:a5:58:ec:83:11:99: a3:b9:c4:5e:8f:45:37:f9:06:08:9a:36:e3:2b:de: 87:83:08:b3:43:71:ed:73:0a:75:1a:fc:42:20:82: eb:e6:1a:cf:b3:04:87:f3:51:21:60:7f:c1:14:eb: cd:7c:db:c5:50:f1:6c:54:ea:7c:d3:3e:1d:0c:dd: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:31:B3:52:DE:88:0F:CA:08:81:D2:53:2A:28:0D:40:38:A8:A5:43 X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d9:fd:b3:38:a9:fb:10:28:8f:ff:36:41:c2:ea:0a:f0:83: 80:45:0e:86:f2:8f:a7:eb:dd:3f:15:5e:ee:d9:89:82:13:e4: 2a:bf:ce:46:a7:00:da:66:c0:7f:bd:b4:30:84:0f:da:17:0d: c4:21:f6:81:56:70:2a:d6:da:4f:a9:4b:1a:d2:12:0c:dd:6e: 04:ed:6c:97:d8:3a:0b:1c:fc:18:3d:fd:34:09:57:fe:e8:1a: 57:24:bf:89:9d:d4:47:fc:8e:45:1c:ce:1a:c5:a6:e9:d6:5b: dd:8d:92:86:7f:31:2f:1e:4f:c1:bf:29:34:1d:22:a1:56:df: a3:73:d1:cd:3b:04:d1:71:1a:1b:45:bf:4a:85:af:4d:2f:71: 07:0d:6a:8b:5e:a2:53:cf:05:22:a9:db:b7:0f:d9:22:f2:fa: ad:54:28:d2:47:2f:88:2c:2f:91:57:d1:83:d7:71:b1:96:92: 63:00:1e:f0:75:4d:f8:80:40:c0:cb:74:2f:33:7d:ec:1d:49: 40:d3:71:3e:61:45:f5:29:56:80:1c:34:cf:72:7e:f3:72:18: 34:59:d2:c8:19:c0:7f:d7:fd:82:49:c5:b4:71:eb:7f:49:27: ec:74:e8:d9:9e:53:67:a2:d2:a1:60:ed:23:b6:78:37:50:60: d7:cc:0f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnCKyte3aUDDkNdMrS81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjUxMjIwMTYwMTE3WhcNMjUxMjIxMTYwMTE3WjAzMTEwLwYDVQQD Eyg3YzMxYjM1MmRlODgwZmNhMDg4MWQyNTMyYTI4MGQ0MDM4YThhNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRJ2Oe2lVWH3yN0iUZv8T0RzaIxO bVH+m9mtgmpwAJmRYsNH2f9uCZgQrZf/J0nO8GbaIJCJuZQIVx0iq1OKpbus8ycs kmJaHh7wNrMcgIyW+dGK8Km/ectaUQgX4rxGW8TFCnfrdBKIj2o3jYMnGx66KUVE IIa5Z1jYNuDBY7pNadj05O1vE8KcUmy7iL8XqBw28M4f+U8CrjfGNjffLNC5J81E 15K5veZYGuOZZ5J7Ig2F6KSaswbl722lWOyDEZmjucRej0U3+QYImjbjK96Hgwiz Q3Htcwp1GvxCIILr5hrPswSH81EhYH/BFOvNfNvFUPFsVOp80z4dDN0gWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwxs1LeiA/KCIHSUyooDUA4qKVDMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNn9szip +xAoj/82QcLqCvCDgEUOhvKPp+vdPxVe7tmJghPkKr/ORqcA2mbAf720MIQP2hcN xCH2gVZwKtbaT6lLGtISDN1uBO1sl9g6Cxz8GD39NAlX/ugaVyS/iZ3UR/yORRzO GsWm6dZb3Y2Shn8xLx5Pwb8pNB0ioVbfo3PRzTsE0XEaG0W/SoWvTS9xBw1qi16i U88FIqnbtw/ZIvL6rVQo0kcviCwvkVfRg9dxsZaSYwAe8HVN+IBAwMt0LzN97B1J QNNxPmFF9SlWgBw0z3J+83IYNFnSyBnAf9f9gknFtHHrf0kn7HTo2Z5TZ6LSoWDt I7Z4N1Bg18wPPA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:48 2025 by rpki-client