This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json) Hash identifier: QxurMxakhQlG1X1c3Ka2zDZvaK4eUF5j/Q6kAuLSRGo= Subject key identifier: B0:7E:81:59:97:5D:0E:9D:F0:D8:94:5C:50:85:12:F5:3E:97:C7:6A Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd Certificate serial: 019B717DBAE24A320EC39BA50ECD3C0253CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft Manifest number: 0425 Signing time: Tue 30 Dec 2025 23:00:23 +0000 Manifest this update: Tue 30 Dec 2025 23:00:23 +0000 Manifest next update: Wed 31 Dec 2025 23:00:23 +0000 Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: tV+tTv6cOBGDLpnA6fxQ83Y/Is7ssh1xIbkA3MRBpq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:ba:e2:4a:32:0e:c3:9b:a5:0e:cd:3c:02:53:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd Validity Not Before: Dec 30 23:00:23 2025 GMT Not After : Dec 31 23:00:23 2025 GMT Subject: CN=b07e8159975d0e9df0d8945c508512f53e97c76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:aa:03:64:ef:98:36:1e:cc:20:fb:fd:5c: 0c:b0:77:92:dd:3b:06:e6:87:55:5d:45:49:6f:2f: 36:95:5b:ba:27:75:d3:1c:65:dd:48:89:f1:95:44: 28:a4:82:57:03:6d:55:a4:1c:b4:c9:03:19:8a:ee: bd:5e:06:e7:51:9d:de:92:01:75:bf:b8:0e:a1:42: 36:cf:6c:51:dc:97:62:f5:68:60:e4:ed:4d:74:61: 6e:a4:93:a0:45:49:e6:12:9e:8f:c4:d6:c0:66:d1: cf:46:dd:33:ae:86:0d:54:63:9f:fa:9d:3d:f2:5e: cd:a5:a7:2d:0f:c4:dd:aa:62:30:fb:b9:bb:10:eb: 23:9f:5b:e0:77:80:aa:bf:a4:2d:5c:46:db:3d:a6: f2:18:0b:9b:74:12:09:9d:c4:ad:a8:c8:19:d9:d8: 0c:06:51:89:55:82:a3:ab:e6:fe:ca:2b:9f:c8:47: 5b:67:d5:85:e7:8c:de:44:d2:4c:2d:fd:02:2f:9a: 98:87:ae:26:f0:54:3f:2c:3d:3d:64:01:ec:27:48: bf:4e:77:9e:06:3d:29:73:d5:c0:7e:fa:13:68:f6: e6:d2:44:02:7c:c6:cc:2c:4d:db:41:db:37:5e:a5: 75:5a:b5:ca:a7:5e:c4:56:75:d1:27:e8:c5:e5:b7: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:81:59:97:5D:0E:9D:F0:D8:94:5C:50:85:12:F5:3E:97:C7:6A X509v3 Authority Key Identifier: keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4c:d3:d9:b0:e4:a0:ce:d2:ff:e6:5b:f1:45:4a:38:37:07: 4e:20:fb:e6:cd:1d:d0:98:b4:12:9f:9a:59:55:f6:c2:7d:1b: fc:58:f0:d7:f3:49:9f:25:ea:86:c1:0f:18:eb:a4:4d:ae:a0: ba:6a:bc:31:f8:22:0e:85:5b:15:94:7f:1e:3c:99:04:64:8b: 78:e5:ce:cb:9a:f6:fb:5b:c9:0e:a0:52:34:e0:15:bd:a5:32: d6:28:2c:f7:1e:40:99:2b:04:f1:50:a3:db:db:28:1e:a0:e1: f3:4d:c6:91:45:47:25:06:73:d1:6c:cf:1c:c1:8f:73:8d:e1: d5:99:22:21:5d:52:83:24:d7:4f:ff:a9:2e:39:88:c7:96:8e: b5:db:12:35:80:a0:e0:fa:60:19:23:0e:7c:a6:68:01:98:62: a9:f8:d9:bd:c5:10:cc:e8:49:1d:39:44:80:da:d1:19:2b:66: da:3b:7b:98:05:9d:9f:6b:8b:f8:be:e8:45:d1:75:0c:9d:e6: ee:75:26:2f:9d:f2:c7:c3:66:66:21:78:41:3e:a6:68:99:86: 0a:8c:6d:cf:d7:c5:5f:43:3a:75:1b:c4:fa:08:84:18:a7:f4: 13:60:a7:9e:d8:d7:6c:c7:49:a6:c6:46:64:6d:e5:0e:3f:8d: b8:f2:30:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfbriSjIOw5ulDs08AlPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWMyZmYyMDIxNmQzYmM2NDc1Yjg1MGE0NjVlMzYyZjRl Y2VlY2QwHhcNMjUxMjMwMjMwMDIzWhcNMjUxMjMxMjMwMDIzWjAzMTEwLwYDVQQD EyhiMDdlODE1OTk3NWQwZTlkZjBkODk0NWM1MDg1MTJmNTNlOTdjNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaeqA2TvmDYezCD7/VwMsHeS3TsG 5odVXUVJby82lVu6J3XTHGXdSInxlUQopIJXA21VpBy0yQMZiu69XgbnUZ3ekgF1 v7gOoUI2z2xR3Jdi9Whg5O1NdGFupJOgRUnmEp6PxNbAZtHPRt0zroYNVGOf+p09 8l7NpactD8TdqmIw+7m7EOsjn1vgd4Cqv6QtXEbbPabyGAubdBIJncStqMgZ2dgM BlGJVYKjq+b+yiufyEdbZ9WF54zeRNJMLf0CL5qYh64m8FQ/LD09ZAHsJ0i/Tnee Bj0pc9XAfvoTaPbm0kQCfMbMLE3bQds3XqV1WrXKp17EVnXRJ+jF5bdz7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB+gVmXXQ6d8NiUXFCFEvU+l8dqMB8GA1UdIwQY MBaAFKHsL/ICFtO8ZHW4UKRl42L07O7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V3djhnSVcwN3hrZGJoUXBHWGpZdlRzN3MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yM2JkNWUtZjdlNC00ZDlkLWI1NzMt NTA3NTYzODg1NDAzLzEvb2V3djhnSVcwN3hrZGJoUXBHWGpZdlRzN3MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yM2JkNWUtZjdlNC00ZDlkLWI1NzMtNTA3NTYzODg1NDAz LzEvb2V3djhnSVcwN3hrZGJoUXBHWGpZdlRzN3MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEzT2bDk oM7S/+Zb8UVKODcHTiD75s0d0Ji0Ep+aWVX2wn0b/Fjw1/NJnyXqhsEPGOukTa6g umq8MfgiDoVbFZR/HjyZBGSLeOXOy5r2+1vJDqBSNOAVvaUy1igs9x5AmSsE8VCj 29soHqDh803GkUVHJQZz0WzPHMGPc43h1ZkiIV1SgyTXT/+pLjmIx5aOtdsSNYCg 4PpgGSMOfKZoAZhiqfjZvcUQzOhJHTlEgNrRGStm2jt7mAWdn2uL+L7oRdF1DJ3m 7nUmL53yx8NmZiF4QT6maJmGCoxtz9fFX0M6dRvE+giEGKf0E2CnntjXbMdJpsZG ZG3lDj+NuPIwQQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:57:17 2025 by rpki-client