This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json) Hash identifier: caSezZbLa3b8RCUI0gi3KmpJF9o4JF+Y9t76qdf01hA= Subject key identifier: 61:5D:1E:3C:DC:BC:99:5B:C5:5E:16:51:31:13:5C:5B:47:C3:01:0F Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84 Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384 Certificate serial: 019B4B4CD0DB1B546DD238DAF14185410E2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft Manifest number: 14B3 Signing time: Tue 23 Dec 2025 13:01:23 +0000 Manifest this update: Tue 23 Dec 2025 13:01:23 +0000 Manifest next update: Wed 24 Dec 2025 13:01:23 +0000 Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=) 2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=) 3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: sseCeOylQNUh7eVE95CLmKzo63zX5K/POAQGFVCxtgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:d0:db:1b:54:6d:d2:38:da:f1:41:85:41:0e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384 Validity Not Before: Dec 23 13:01:23 2025 GMT Not After : Dec 24 13:01:23 2025 GMT Subject: CN=615d1e3cdcbc995bc55e165131135c5b47c3010f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:a4:46:a2:85:e5:4f:a6:7f:94:67:13:3b: ff:9d:c8:8c:76:35:57:c2:72:3e:1d:f0:ff:40:94: 10:f6:cf:9f:16:f5:b8:42:e8:6a:c4:39:b0:c5:41: 76:b3:d5:05:ba:f5:9f:75:3b:87:80:19:3c:59:f6: ae:c4:65:e6:06:88:3f:bf:0d:bc:64:30:48:54:f2: bb:54:ad:c6:b7:a7:a1:67:b0:3a:96:9f:77:3a:84: 53:f6:93:20:59:42:29:75:b4:b0:b2:23:24:09:35: fb:f4:54:b1:4a:7f:61:b2:56:c1:dc:4b:77:ad:50: f8:23:6d:c3:e7:65:15:49:9a:b8:67:f1:51:00:29: 48:e7:04:aa:7f:47:8e:05:23:84:8c:0e:f5:da:44: 8f:be:a3:35:71:4c:d5:52:12:1f:8c:75:39:42:41: 7d:76:92:0b:b2:e3:62:50:af:d5:e9:57:a3:0d:37: c1:5f:70:a6:6f:18:2d:7e:43:f1:ce:68:d5:ee:0d: c5:8d:b2:ea:f7:32:0a:93:02:9c:8a:e0:93:9c:3c: e9:c7:8a:a3:e9:c5:a1:ad:f3:f8:d0:07:9c:38:a9: 10:7e:12:b5:bc:15:48:8b:1e:18:25:e8:2d:b6:d1: 87:cf:5e:0c:19:0c:6e:4a:89:46:e4:7f:b0:90:6a: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5D:1E:3C:DC:BC:99:5B:C5:5E:16:51:31:13:5C:5B:47:C3:01:0F X509v3 Authority Key Identifier: keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a4:94:bd:6c:02:fb:3b:55:b1:27:3b:df:0d:f5:a9:ed:c9: d8:c6:1a:4f:c6:82:54:d6:87:72:6e:c7:9b:dc:ac:af:0a:36: 58:e7:65:58:31:06:ea:03:da:a5:69:25:5b:bc:fc:55:66:66: d6:44:92:c9:b4:0c:77:08:7d:07:35:b7:5b:95:04:d6:6f:21: d6:ee:46:d3:a3:09:5c:57:7d:2f:65:95:1d:de:50:3c:ec:e2: 4a:c9:0e:ef:36:5f:c9:9a:f6:2a:c5:91:38:f0:a7:7d:87:c7: 36:f4:8e:a1:a8:68:47:c4:b3:94:1a:77:b2:fc:61:3c:69:d8: 84:bb:d5:17:31:61:22:c2:12:60:fa:2f:d3:0c:56:85:6f:0d: 29:0e:33:1a:58:c7:ce:ee:d7:75:65:bb:c2:0f:da:db:e9:95: 46:1d:49:88:bb:17:60:91:eb:7f:84:8a:47:89:9f:d6:e7:5b: 78:02:11:86:10:35:6b:97:ba:72:3e:b1:88:3d:d5:56:64:47: b4:01:00:c9:cb:b7:fc:2a:4d:fa:af:8a:91:1f:c3:90:34:61: 5a:29:c6:42:27:f5:c3:e6:84:fa:a6:0e:a7:66:7e:9d:68:ca: 89:8b:be:97:72:71:6a:64:af:6c:92:86:0e:10:f9:37:a6:77: ab:27:17:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTNDbG1Rt0jja8UGFQQ4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTdhZDA1OTgyMDhhNmFmOWQxNTAwYTc0MGQ3M2JjZjI4 ZjAzODQwHhcNMjUxMjIzMTMwMTIzWhcNMjUxMjI0MTMwMTIzWjAzMTEwLwYDVQQD Eyg2MTVkMWUzY2RjYmM5OTViYzU1ZTE2NTEzMTEzNWM1YjQ3YzMwMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVKkRqKF5U+mf5RnEzv/nciMdjVX wnI+HfD/QJQQ9s+fFvW4QuhqxDmwxUF2s9UFuvWfdTuHgBk8WfauxGXmBog/vw28 ZDBIVPK7VK3Gt6ehZ7A6lp93OoRT9pMgWUIpdbSwsiMkCTX79FSxSn9hslbB3Et3 rVD4I23D52UVSZq4Z/FRAClI5wSqf0eOBSOEjA712kSPvqM1cUzVUhIfjHU5QkF9 dpILsuNiUK/V6VejDTfBX3CmbxgtfkPxzmjV7g3FjbLq9zIKkwKciuCTnDzpx4qj 6cWhrfP40AecOKkQfhK1vBVIix4YJegtttGHz14MGQxuSolG5H+wkGo0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFdHjzcvJlbxV4WUTETXFtHwwEPMB8GA1UdIwQY MBaAFHDnrQWYIIpq+dFQCnQNc7zyjwOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQt NjA3ZTE3YWVjNzUwLzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQtNjA3ZTE3YWVjNzUw LzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6SUvWwC +ztVsSc73w31qe3J2MYaT8aCVNaHcm7Hm9ysrwo2WOdlWDEG6gPapWklW7z8VWZm 1kSSybQMdwh9BzW3W5UE1m8h1u5G06MJXFd9L2WVHd5QPOziSskO7zZfyZr2KsWR OPCnfYfHNvSOoahoR8SzlBp3svxhPGnYhLvVFzFhIsISYPov0wxWhW8NKQ4zGljH zu7XdWW7wg/a2+mVRh1JiLsXYJHrf4SKR4mf1udbeAIRhhA1a5e6cj6xiD3VVmRH tAEAycu3/CpN+q+KkR/DkDRhWinGQif1w+aE+qYOp2Z+nWjKiYu+l3JxamSvbJKG DhD5N6Z3qycXVg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:08 2025 by rpki-client