This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft File: oWhu-kcXfglRrIjFZNj4hQvuxdA.mft (raw, json) Hash identifier: HtqtP+/aDhOSdVMaFkx4LnvlSZRYGorSYytymXNrjJA= Subject key identifier: 47:09:E6:D3:77:FC:9C:63:11:9E:85:CB:20:89:83:1F:9D:52:B3:AD Authority key identifier: A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0 Certificate issuer: /CN=a1686efa47177e0951ac88c564d8f8850beec5d0 Certificate serial: 019B337B2254139BB57C51BA8C5298A586F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft Manifest number: 0E13 Signing time: Thu 18 Dec 2025 22:01:06 +0000 Manifest this update: Thu 18 Dec 2025 22:01:06 +0000 Manifest next update: Fri 19 Dec 2025 22:01:06 +0000 Files and hashes: 1: oWhu-kcXfglRrIjFZNj4hQvuxdA.crl (hash: RslxX3kSd7qju99wKBjCp7wrBlFT/qMafj6txDQQC8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:22:54:13:9b:b5:7c:51:ba:8c:52:98:a5:86:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1686efa47177e0951ac88c564d8f8850beec5d0 Validity Not Before: Dec 18 22:01:06 2025 GMT Not After : Dec 19 22:01:06 2025 GMT Subject: CN=4709e6d377fc9c63119e85cb2089831f9d52b3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:e3:7c:1e:01:ee:ff:46:e8:2f:6e:d3:fe: 8f:25:b3:3d:8b:39:9a:b9:09:d0:82:b1:05:97:70: 3e:5d:cd:3a:aa:e8:92:c9:a0:dd:07:85:c7:2f:71: 90:15:68:38:b4:c5:aa:87:bb:1e:87:b7:3b:09:48: cd:2d:f4:d5:3c:fb:34:43:d5:e6:85:61:67:a6:f5: f3:f0:85:a1:cb:db:ad:ed:17:67:57:dd:26:8d:a0: cc:41:8d:1d:3f:7e:63:bb:4a:2e:98:5c:72:4f:5a: ee:f5:62:4a:be:ca:c1:1c:c7:1e:50:8e:eb:99:34: 80:2f:f4:a4:72:44:10:7b:42:a8:05:6e:15:b2:1e: 81:8f:b0:d9:23:f1:2b:b3:40:e6:c0:e2:a6:dd:7b: 0b:d9:1b:0b:98:1c:b2:8d:42:ce:18:dc:9a:08:d3: a4:71:74:bc:25:e1:94:a2:dd:a7:2a:e4:fd:e6:aa: 6c:12:02:fd:a0:fc:8e:df:38:65:0a:e8:e6:4e:82: 1d:8f:bf:33:b9:2f:61:39:94:73:f3:bb:36:3c:7b: ad:89:e9:55:14:55:61:af:5e:4b:b8:f5:13:b9:b1: fe:03:fd:51:ed:16:16:03:41:5d:04:43:52:c0:35: e8:bb:14:88:35:83:19:d4:a6:42:b3:a7:0d:92:af: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:E6:D3:77:FC:9C:63:11:9E:85:CB:20:89:83:1F:9D:52:B3:AD X509v3 Authority Key Identifier: keyid:A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:86:b8:8c:0b:0a:1b:c9:fd:87:9e:5d:95:39:e6:b0:f4: 66:a2:73:bb:31:3d:fc:39:d0:ce:52:1e:ce:4a:35:22:0f:d6: 5d:4b:bb:05:c5:b6:f1:20:cc:ab:3a:fc:b4:38:52:8c:47:a6: 93:e4:f3:2e:58:4b:ee:b2:88:36:5e:11:22:74:03:eb:54:46: 17:43:87:05:8d:39:60:26:02:2a:a1:98:93:78:92:4d:f2:7e: 98:a6:03:21:4c:b9:36:25:68:e3:9f:5a:0f:8e:f3:0d:25:ba: 9b:8d:d8:47:c1:85:78:7e:6d:22:1e:35:3f:ef:47:b1:7f:a3: d8:49:85:c1:9d:2c:73:ce:a7:c9:d9:2e:7e:66:07:12:cb:4f: 52:b9:41:35:9e:4a:c9:3c:5b:ce:00:b1:50:8e:38:76:bd:dd: c4:58:fd:87:99:67:01:91:50:fb:b6:60:72:52:d4:d8:7d:1d: 2d:a5:d7:07:93:22:a7:ff:04:db:56:e2:4a:d1:07:50:94:82: d8:24:6e:f9:43:61:a0:e4:46:58:15:f6:86:9e:49:2b:5f:ea: b0:34:8b:9c:d2:0d:d9:72:d6:f3:e5:a1:b2:53:a2:80:cc:3e: 31:43:d2:c4:40:56:a7:78:3a:e1:8a:7b:91:37:63:03:30:83: f4:76:ca:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeyJUE5u1fFG6jFKYpYb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjg2ZWZhNDcxNzdlMDk1MWFjODhjNTY0ZDhmODg1MGJl ZWM1ZDAwHhcNMjUxMjE4MjIwMTA2WhcNMjUxMjE5MjIwMTA2WjAzMTEwLwYDVQQD Eyg0NzA5ZTZkMzc3ZmM5YzYzMTE5ZTg1Y2IyMDg5ODMxZjlkNTJiM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BfjfB4B7v9G6C9u0/6PJbM9izma uQnQgrEFl3A+Xc06quiSyaDdB4XHL3GQFWg4tMWqh7seh7c7CUjNLfTVPPs0Q9Xm hWFnpvXz8IWhy9ut7RdnV90mjaDMQY0dP35ju0oumFxyT1ru9WJKvsrBHMceUI7r mTSAL/SkckQQe0KoBW4Vsh6Bj7DZI/Ers0DmwOKm3XsL2RsLmByyjULOGNyaCNOk cXS8JeGUot2nKuT95qpsEgL9oPyO3zhlCujmToIdj78zuS9hOZRz87s2PHutielV FFVhr15LuPUTubH+A/1R7RYWA0FdBENSwDXouxSINYMZ1KZCs6cNkq86BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcJ5tN3/JxjEZ6FyyCJgx+dUrOtMB8GA1UdIwQY MBaAFKFobvpHF34JUayIxWTY+IUL7sXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dodS1rY1hmZ2xScklqRlpOajRoUXZ1eGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMWQxOTgtODU0Zi00ODgzLWFiOTAt Y2E0MWIzM2I4ODNhLzEvb1dodS1rY1hmZ2xScklqRlpOajRoUXZ1eGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMWQxOTgtODU0Zi00ODgzLWFiOTAtY2E0MWIzM2I4ODNh LzEvb1dodS1rY1hmZ2xScklqRlpOajRoUXZ1eGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu+GuIwL ChvJ/YeeXZU55rD0ZqJzuzE9/DnQzlIezko1Ig/WXUu7BcW28SDMqzr8tDhSjEem k+TzLlhL7rKINl4RInQD61RGF0OHBY05YCYCKqGYk3iSTfJ+mKYDIUy5NiVo459a D47zDSW6m43YR8GFeH5tIh41P+9HsX+j2EmFwZ0sc86nydkufmYHEstPUrlBNZ5K yTxbzgCxUI44dr3dxFj9h5lnAZFQ+7ZgclLU2H0dLaXXB5Mip/8E21biStEHUJSC 2CRu+UNhoORGWBX2hp5JK1/qsDSLnNIN2XLW8+WhslOigMw+MUPSxEBWp3g64Yp7 kTdjAzCD9HbKtw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:29 2025 by rpki-client