This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json) Hash identifier: lVUolnD2Nku/wtz5aA8fn5HjktH7biy5Ls7qBwqJOI0= Subject key identifier: 70:0A:06:6D:0C:3B:50:8B:A0:FB:F0:08:CC:AF:58:52:63:87:5C:00 Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Certificate serial: 019B51BD2B506726479CA72293F96E27C575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 19:01:50 +0000 Manifest this update: Wed 24 Dec 2025 19:01:50 +0000 Manifest next update: Thu 25 Dec 2025 19:01:50 +0000 Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: lNb9SyEynluu7pPxNlaTXkEfOD+fm0q5ur5Zc72j+HY=) 2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:2b:50:67:26:47:9c:a7:22:93:f9:6e:27:c5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Validity Not Before: Dec 24 19:01:50 2025 GMT Not After : Dec 25 19:01:50 2025 GMT Subject: CN=700a066d0c3b508ba0fbf008ccaf585263875c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:d2:12:da:4a:df:78:e4:2b:e1:9b:51:4f: 47:9d:c9:71:35:62:19:84:26:90:be:ac:6c:9f:e1: 2f:28:a2:6b:7f:40:69:c6:c7:b8:96:cc:aa:39:78: f0:61:74:dd:93:0a:01:89:51:9d:d0:33:48:b2:c6: 9a:65:71:db:4d:b6:82:bd:18:a9:d4:46:32:41:82: 19:6c:55:c6:df:0b:09:20:2a:1d:5f:15:56:c9:30: 14:63:1b:08:16:10:c1:16:cd:f9:ac:8e:66:46:7f: d7:ef:5d:22:ed:17:b5:1a:ca:3b:11:90:49:02:c4: aa:87:e6:d8:34:fc:30:7a:41:f6:09:a8:8c:b6:43: 6b:67:e7:b8:2c:e9:fd:c7:48:18:30:d7:72:48:bf: ed:43:1c:d3:9e:8e:4c:25:80:f9:2a:62:8a:4a:f3: 55:37:cc:fe:e8:ed:39:bf:4f:9f:b5:81:83:c2:77: 8a:66:6d:2a:df:21:7b:71:4f:73:b3:8d:4a:c6:4f: a3:d9:52:5b:88:4f:51:05:4e:7b:4d:56:80:c1:11: 12:8d:60:00:79:e6:68:77:71:d4:20:eb:13:36:dd: d6:e7:d9:ae:81:65:b0:1e:f7:e9:48:ac:2a:8e:62: 80:c5:dd:73:67:4c:2d:5d:65:41:90:5a:76:0c:94: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:06:6D:0C:3B:50:8B:A0:FB:F0:08:CC:AF:58:52:63:87:5C:00 X509v3 Authority Key Identifier: keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ca:f8:8f:05:56:69:74:8a:08:39:39:8d:0d:7e:50:d9:c6: 1f:36:c7:34:aa:6b:ce:e0:ba:2c:bd:d2:2d:b9:04:bb:23:e3: 08:88:78:e2:7d:43:be:ef:e3:d3:29:78:fe:86:e7:10:7a:98: bf:a9:95:20:a4:57:a8:f4:d9:be:4f:fb:37:d7:d3:ed:f5:d4: 25:13:a1:2d:42:3c:df:61:f6:54:4c:4f:d7:31:53:9f:a4:15: 9e:8e:e4:aa:5a:aa:a2:93:60:68:e2:03:b6:fd:ae:73:31:7b: 68:cf:6a:fa:f9:19:b4:a9:e0:8b:a7:bc:c7:19:17:5f:b4:1e: f4:6d:2b:b6:38:e7:09:db:e5:64:a5:1d:3f:e0:a1:ba:57:34: 1a:35:15:24:a2:d1:aa:52:9d:86:8d:a6:01:33:ee:f7:be:15: f3:c9:ea:59:d7:dc:39:4f:ff:d9:44:85:57:20:27:41:1f:4b: 79:94:41:c1:77:f9:51:9e:2b:7c:2b:d4:b2:b4:42:ee:c1:3e: 02:eb:cf:a0:76:18:ef:2c:d5:6b:1d:8a:86:8d:4a:41:fc:e5: d2:32:75:86:1f:fa:ce:37:1b:57:f3:ed:e1:4d:d4:02:58:a4: 71:8f:52:97:44:4e:0a:d8:d6:10:18:56:d0:ab:91:80:73:a1: 67:24:93:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvStQZyZHnKcik/luJ8V1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4 YmRhY2YwHhcNMjUxMjI0MTkwMTUwWhcNMjUxMjI1MTkwMTUwWjAzMTEwLwYDVQQD Eyg3MDBhMDY2ZDBjM2I1MDhiYTBmYmYwMDhjY2FmNTg1MjYzODc1YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrSEtpK33jkK+GbUU9HnclxNWIZ hCaQvqxsn+EvKKJrf0Bpxse4lsyqOXjwYXTdkwoBiVGd0DNIssaaZXHbTbaCvRip 1EYyQYIZbFXG3wsJICodXxVWyTAUYxsIFhDBFs35rI5mRn/X710i7Re1Gso7EZBJ AsSqh+bYNPwwekH2CaiMtkNrZ+e4LOn9x0gYMNdySL/tQxzTno5MJYD5KmKKSvNV N8z+6O05v0+ftYGDwneKZm0q3yF7cU9zs41Kxk+j2VJbiE9RBU57TVaAwRESjWAA eeZod3HUIOsTNt3W59mugWWwHvfpSKwqjmKAxd1zZ0wtXWVBkFp2DJRc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAKBm0MO1CLoPvwCMyvWFJjh1wAMB8GA1UdIwQY MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcr4jwVW aXSKCDk5jQ1+UNnGHzbHNKprzuC6LL3SLbkEuyPjCIh44n1Dvu/j0yl4/obnEHqY v6mVIKRXqPTZvk/7N9fT7fXUJROhLUI832H2VExP1zFTn6QVno7kqlqqopNgaOID tv2uczF7aM9q+vkZtKngi6e8xxkXX7Qe9G0rtjjnCdvlZKUdP+Chulc0GjUVJKLR qlKdho2mATPu974V88nqWdfcOU//2USFVyAnQR9LeZRBwXf5UZ4rfCvUsrRC7sE+ AuvPoHYY7yzVax2Kho1KQfzl0jJ1hh/6zjcbV/Pt4U3UAlikcY9Sl0ROCtjWEBhW 0KuRgHOhZySTSQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:06 2025 by rpki-client