This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json) Hash identifier: MpFL2GpnAQR2QRy6+T0Ktf98GUIx3ILwR+BmjGxtNnY= Subject key identifier: 84:A7:67:07:83:94:2B:DD:4B:DA:9E:A6:5F:B8:98:2E:34:F6:85:26 Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Certificate serial: 019B711015E849938469B36CA47B039A9629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft Manifest number: 11E1 Signing time: Tue 30 Dec 2025 21:00:38 +0000 Manifest this update: Tue 30 Dec 2025 21:00:38 +0000 Manifest next update: Wed 31 Dec 2025 21:00:38 +0000 Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: qOrqQPNvYDrHX8VGcc1EstV6jMsMFcD/FI974QhytPY=) 2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:15:e8:49:93:84:69:b3:6c:a4:7b:03:9a:96:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Validity Not Before: Dec 30 21:00:38 2025 GMT Not After : Dec 31 21:00:38 2025 GMT Subject: CN=84a7670783942bdd4bda9ea65fb8982e34f68526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:31:8a:1a:9e:b5:9d:a4:09:fc:5a:77:59: 54:3f:52:25:69:e3:ce:8e:40:c2:07:1f:6c:bf:a6: 89:88:e5:58:22:38:d6:8e:6a:0a:c8:64:95:b6:dd: 61:98:43:a5:b4:83:5f:a0:f7:c5:56:c7:30:3b:23: ec:c5:3e:c7:40:47:bb:6c:20:3a:6f:67:f8:69:ac: f4:ea:83:2b:71:90:ef:33:f9:df:92:73:97:b5:04: 17:00:b0:52:8b:33:20:20:bc:ba:09:11:80:0b:c7: 58:21:f8:48:eb:f1:4b:b0:72:82:1c:c0:8d:05:37: 79:c6:7f:72:42:c6:b8:64:a5:00:2a:fd:e4:cd:f5: 1f:46:e3:9e:ae:5d:fb:1a:d2:a2:c4:42:6c:f5:24: 28:d2:8c:42:b9:7c:43:75:16:15:64:e7:e0:35:a2: 4f:42:11:c8:d1:b5:44:0b:4c:56:91:23:0b:c0:87: 6a:6f:d3:84:03:15:cf:89:16:11:bf:06:14:cf:e5: 40:32:10:e5:19:e8:5d:aa:9f:c5:ff:a6:18:e3:36: 4a:27:ee:35:e3:6f:7d:f7:11:f4:91:af:5b:27:95: 41:2e:85:b5:c1:cf:43:b5:1d:90:c1:c6:63:fc:4b: c3:1f:dd:7f:8b:1d:fc:38:f2:a8:a2:33:ac:9d:aa: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:67:07:83:94:2B:DD:4B:DA:9E:A6:5F:B8:98:2E:34:F6:85:26 X509v3 Authority Key Identifier: keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a1:1a:9e:09:32:f9:e7:a9:dd:0b:57:1b:e6:b5:82:3f:ce: 59:9b:47:4c:19:ff:f3:e0:1b:c6:b4:17:01:af:1f:a7:10:ff: 7a:74:23:0f:35:ed:71:83:05:ba:36:ff:25:55:a3:2f:e8:49: d2:66:e0:61:70:52:03:ee:31:0a:6e:76:52:8d:79:ec:79:62: fb:8b:59:86:1e:3a:86:a8:d8:e3:82:97:09:ad:e4:ba:9e:2f: 50:04:ad:bb:ff:62:c3:79:52:e3:b5:50:a4:53:20:d0:ef:42: 07:47:b3:d6:62:9b:05:b4:38:1d:9b:e2:a1:a8:bc:40:f6:51: 88:0d:cf:45:58:b5:15:15:c9:17:dd:0f:50:0b:7e:6f:1e:9b: 22:ae:da:1a:aa:84:e7:c6:bf:8c:f7:dc:6a:68:f5:30:38:46: 42:ce:22:9c:74:1b:77:29:5c:a0:59:e6:a1:06:70:04:d3:e6: a6:79:b1:50:65:93:31:35:43:f6:be:fa:23:d3:e1:ce:93:5b: 76:aa:b7:95:4d:69:e9:7f:6f:73:b8:12:da:1f:19:be:04:fd: 4d:ca:67:28:7a:28:3e:21:82:13:96:c7:76:b1:02:22:4d:67: bd:8a:97:ac:02:36:8e:42:9e:d8:86:7f:6f:c5:bb:81:ae:50: 8a:0a:1f:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEBXoSZOEabNspHsDmpYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWNkOGM3MWE2ZTMzMjgyYzA0NWQ4Zjg4YzNiMzc4YWNm NDFiZDkwHhcNMjUxMjMwMjEwMDM4WhcNMjUxMjMxMjEwMDM4WjAzMTEwLwYDVQQD Eyg4NGE3NjcwNzgzOTQyYmRkNGJkYTllYTY1ZmI4OTgyZTM0ZjY4NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06MxihqetZ2kCfxad1lUP1IlaePO jkDCBx9sv6aJiOVYIjjWjmoKyGSVtt1hmEOltINfoPfFVscwOyPsxT7HQEe7bCA6 b2f4aaz06oMrcZDvM/nfknOXtQQXALBSizMgILy6CRGAC8dYIfhI6/FLsHKCHMCN BTd5xn9yQsa4ZKUAKv3kzfUfRuOerl37GtKixEJs9SQo0oxCuXxDdRYVZOfgNaJP QhHI0bVEC0xWkSMLwIdqb9OEAxXPiRYRvwYUz+VAMhDlGehdqp/F/6YY4zZKJ+41 42999xH0ka9bJ5VBLoW1wc9DtR2QwcZj/EvDH91/ix38OPKoojOsnaojCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISnZweDlCvdS9qepl+4mC409oUmMB8GA1UdIwQY MBaAFKCc2McabjMoLARdj4jDs3is9BvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMt NmU4ZTA3ZDY2YzliLzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMtNmU4ZTA3ZDY2Yzli LzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6Eangky +eep3QtXG+a1gj/OWZtHTBn/8+AbxrQXAa8fpxD/enQjDzXtcYMFujb/JVWjL+hJ 0mbgYXBSA+4xCm52Uo157Hli+4tZhh46hqjY44KXCa3kup4vUAStu/9iw3lS47VQ pFMg0O9CB0ez1mKbBbQ4HZvioai8QPZRiA3PRVi1FRXJF90PUAt+bx6bIq7aGqqE 58a/jPfcamj1MDhGQs4inHQbdylcoFnmoQZwBNPmpnmxUGWTMTVD9r76I9PhzpNb dqq3lU1p6X9vc7gS2h8ZvgT9TcpnKHooPiGCE5bHdrECIk1nvYqXrAI2jkKe2IZ/ b8W7ga5QigofAA== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:53 2025 by rpki-client