This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json) Hash identifier: 1Ee/smd6jCxZQpetFuWClSt0L6oRKkZ8xlyhYodn5HM= Subject key identifier: 39:93:09:AE:0C:72:DA:41:1F:AB:05:8E:79:BC:78:30:0E:CE:C3:98 Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Certificate serial: 019B3D90BC705389E6BA35899770098C76AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft Manifest number: 1047 Signing time: Sat 20 Dec 2025 21:00:54 +0000 Manifest this update: Sat 20 Dec 2025 21:00:54 +0000 Manifest next update: Sun 21 Dec 2025 21:00:54 +0000 Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: 9B0u6Rcwmo8b9TwHWCjEC+BgdnW9wCUle/cpp+IxL5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:bc:70:53:89:e6:ba:35:89:97:70:09:8c:76:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Validity Not Before: Dec 20 21:00:54 2025 GMT Not After : Dec 21 21:00:54 2025 GMT Subject: CN=399309ae0c72da411fab058e79bc78300ecec398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:52:5d:10:94:af:bf:3a:21:7d:b2:5c:4f: d5:0d:24:ac:5d:0f:89:19:fc:a4:b4:17:e0:9f:9b: 2d:fa:12:d4:75:85:11:c7:b3:5c:74:1c:ac:c5:f3: 56:30:9f:99:2a:53:52:c3:c5:c3:8c:c4:b8:3e:91: 63:59:ba:de:18:a6:e7:d6:ec:56:f2:ff:9d:82:dd: b6:e3:1c:cd:22:5b:5a:7f:e8:1c:5a:95:bd:6e:62: 23:43:46:40:61:62:d2:a8:0d:69:2b:83:7e:7a:15: 6e:91:35:6c:25:33:37:00:b9:72:89:4c:d3:8c:e5: aa:1f:e3:01:6a:8b:b3:ca:5f:62:d2:6c:5b:22:15: d5:95:4c:24:31:54:06:a5:9b:2f:08:64:03:39:5f: fb:e5:cc:42:b5:2e:57:a9:d1:18:b4:4e:bc:c2:ae: 43:c9:69:94:bb:51:33:17:13:f0:9f:b4:73:35:46: f1:d3:31:56:de:64:e5:ef:40:a2:84:23:8b:43:3f: f3:6c:14:ff:bf:db:4b:14:83:32:df:b2:1b:de:6a: d3:9a:19:89:f3:7b:b2:b0:c8:c3:15:72:25:a4:70: 0d:c8:7f:80:93:60:86:02:63:25:10:fb:3b:9b:26: 36:44:56:3a:94:e9:42:1d:4f:87:6a:d2:35:d3:8f: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:09:AE:0C:72:DA:41:1F:AB:05:8E:79:BC:78:30:0E:CE:C3:98 X509v3 Authority Key Identifier: keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:fb:13:1d:bf:b5:ec:e0:d8:61:96:49:30:20:58:43:d5: 9e:f1:18:1a:42:c4:a2:20:35:ce:88:87:44:0a:a0:dc:7f:8d: 02:cc:8d:60:dc:33:a9:62:83:4f:f3:13:50:ab:e8:41:31:b0: 48:12:c5:d9:06:49:17:6e:95:41:c6:14:f7:e8:59:7c:21:28: d7:59:4b:22:8c:b7:7e:eb:c0:70:89:64:90:f9:b0:f9:5b:d8: 40:3b:37:16:c0:f7:54:76:7f:56:f7:0f:ad:9c:fd:e7:bb:b0: a6:da:9e:a6:d5:fb:07:04:40:22:c8:64:d6:45:2b:28:f8:ab: ff:0d:95:ad:dd:09:d8:98:eb:bf:da:e3:89:2f:1c:17:33:a2: ac:88:7e:f7:8d:81:5a:a8:81:1f:4e:c8:2f:d2:55:bd:0d:d5: 40:00:04:85:b7:73:66:58:c9:f0:d2:23:e9:de:5f:eb:50:17: b3:ed:8e:99:da:c5:5b:c8:3e:d0:a7:b9:c2:08:71:ba:5c:26: 6b:16:7a:31:53:62:9f:d6:4b:96:ec:5d:a5:18:6a:ae:4c:e0: a2:21:6a:c6:73:00:64:63:13:ab:17:9a:d7:ef:f3:60:71:b3: de:a5:ca:03:ea:f9:1a:05:81:8c:de:f9:51:82:cf:e9:9b:9a: 9f:d0:96:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLxwU4nmujWJl3AJjHarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0 MzFiNjkwHhcNMjUxMjIwMjEwMDU0WhcNMjUxMjIxMjEwMDU0WjAzMTEwLwYDVQQD EygzOTkzMDlhZTBjNzJkYTQxMWZhYjA1OGU3OWJjNzgzMDBlY2VjMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB9SXRCUr786IX2yXE/VDSSsXQ+J GfyktBfgn5st+hLUdYURx7NcdBysxfNWMJ+ZKlNSw8XDjMS4PpFjWbreGKbn1uxW 8v+dgt224xzNIltaf+gcWpW9bmIjQ0ZAYWLSqA1pK4N+ehVukTVsJTM3ALlyiUzT jOWqH+MBaouzyl9i0mxbIhXVlUwkMVQGpZsvCGQDOV/75cxCtS5XqdEYtE68wq5D yWmUu1EzFxPwn7RzNUbx0zFW3mTl70CihCOLQz/zbBT/v9tLFIMy37Ib3mrTmhmJ 83uysMjDFXIlpHANyH+Ak2CGAmMlEPs7myY2RFY6lOlCHU+HatI104+hTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmTCa4MctpBH6sFjnm8eDAOzsOYMB8GA1UdIwQY MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx/7Ex2/ tezg2GGWSTAgWEPVnvEYGkLEoiA1zoiHRAqg3H+NAsyNYNwzqWKDT/MTUKvoQTGw SBLF2QZJF26VQcYU9+hZfCEo11lLIoy3fuvAcIlkkPmw+VvYQDs3FsD3VHZ/VvcP rZz957uwptqeptX7BwRAIshk1kUrKPir/w2Vrd0J2Jjrv9rjiS8cFzOirIh+942B WqiBH07IL9JVvQ3VQAAEhbdzZljJ8NIj6d5f61AXs+2OmdrFW8g+0Ke5wghxulwm axZ6MVNin9ZLluxdpRhqrkzgoiFqxnMAZGMTqxea1+/zYHGz3qXKA+r5GgWBjN75 UYLP6Zuan9CWiA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:16 2025 by rpki-client