This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json) Hash identifier: Kgb0IhmmFDUKSnt/KosST4PDpxJn2uCnPs9zrWDjhMA= Subject key identifier: FB:48:44:3F:2D:2F:0A:1F:1F:8A:C3:F4:0D:93:7B:7A:E0:AA:83:DD Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019B3C46FE617C2519C2765FBD97400EB151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft Manifest number: 59 Signing time: Sat 20 Dec 2025 15:00:44 +0000 Manifest this update: Sat 20 Dec 2025 15:00:44 +0000 Manifest next update: Sun 21 Dec 2025 15:00:44 +0000 Files and hashes: 1: ZYsoBGMwVduC-15rPBuElury6Nw.roa (hash: JY9tVJYutXSfQPNipmAaG+iP3ktsBCWu487gcbubKLw=) 2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: cesW575E4euffWx+arcLQvb2SmIgnn3InuuOBbnb1G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:fe:61:7c:25:19:c2:76:5f:bd:97:40:0e:b1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Dec 20 15:00:44 2025 GMT Not After : Dec 21 15:00:44 2025 GMT Subject: CN=fb48443f2d2f0a1f1f8ac3f40d937b7ae0aa83dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:78:9a:78:f7:3d:bb:75:b5:a8:aa:ce:93:ce: 8c:27:8c:d5:34:8f:06:2b:9c:8b:77:4d:75:32:20: ed:7f:b5:af:be:6a:14:97:01:00:d1:4d:47:9a:b1: a5:ec:f6:80:32:c9:08:21:2a:04:b7:a5:3e:a8:f3: e9:ac:c9:52:1e:0f:fd:4c:51:15:c1:a8:8c:3b:3f: 61:9b:0f:3d:a3:2e:4f:83:e9:a1:59:63:a5:22:8d: 3b:ef:4a:95:34:fe:66:8f:28:df:b9:b2:85:e4:cd: bf:27:9a:e5:a8:22:54:8c:df:8f:10:1a:6a:39:43: 42:60:95:aa:42:23:ca:9d:07:54:3e:ae:43:d4:a7: 33:f6:56:35:b0:ab:cd:43:8f:4e:de:2a:4a:c7:0e: 8a:85:a3:f2:97:d6:bb:1f:a4:b4:ec:a2:a2:b2:07: e8:8d:69:32:b2:7d:f3:bf:7b:f1:59:67:4d:bc:73: 72:2c:72:09:35:c5:32:89:9c:a1:d8:7a:60:ad:b1: 86:35:c4:62:8a:b9:1d:c7:5d:6f:68:bc:bd:b9:73: 99:85:4e:a8:96:aa:1d:8d:66:bb:ef:d8:65:d4:d4: 09:36:e7:63:b8:88:87:9b:6c:dd:17:d5:44:d5:0a: b3:8a:f7:27:58:6a:4c:3e:53:56:b9:d7:e7:0c:d5: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:44:3F:2D:2F:0A:1F:1F:8A:C3:F4:0D:93:7B:7A:E0:AA:83:DD X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ac:93:50:10:99:83:6d:9b:d0:55:10:8b:5d:04:b5:6a:72: 8b:a3:b1:93:62:ba:d8:97:5a:b5:57:3d:8f:c5:0e:52:77:7c: b1:74:03:08:80:8a:39:b1:e0:28:f7:81:9b:dc:43:a5:eb:0b: 6a:5b:2b:55:c6:1a:7f:00:bd:4f:ad:85:57:c6:08:51:6a:01: 57:1a:99:04:83:1f:fa:91:22:b7:35:30:59:12:97:e7:13:d4: 87:ba:cf:85:67:82:fd:9c:b9:f7:cd:d1:7c:05:e0:ea:4e:5e: a0:91:4e:38:51:34:bf:d4:38:cf:3f:e8:0a:bc:d6:71:79:d1: 1c:c3:d2:c9:9c:3a:68:6c:46:29:6e:cd:17:87:9d:94:f1:eb: 9a:79:fb:72:f6:ec:50:87:c1:03:0f:27:ce:1b:f2:fc:db:f3: 33:f6:bd:74:6b:3a:8f:de:3f:c9:c3:1e:4a:f9:d3:e9:a8:38: da:18:84:d6:59:78:c7:06:24:ab:b5:a5:48:d5:1e:fd:8e:1b: 7b:98:11:fa:5a:f7:1f:a5:8b:4b:e6:01:d5:77:1d:38:0b:0a: 0a:07:ba:ec:56:cb:67:c1:cd:0e:d8:54:eb:04:2d:d5:5a:8a: d8:b7:08:46:4c:5c:51:a9:cf:cb:f2:ab:c6:1f:9b:e7:eb:5d: e8:f4:58:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rv5hfCUZwnZfvZdADrFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjUxMjIwMTUwMDQ0WhcNMjUxMjIxMTUwMDQ0WjAzMTEwLwYDVQQD EyhmYjQ4NDQzZjJkMmYwYTFmMWY4YWMzZjQwZDkzN2I3YWUwYWE4M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XiaePc9u3W1qKrOk86MJ4zVNI8G K5yLd011MiDtf7WvvmoUlwEA0U1HmrGl7PaAMskIISoEt6U+qPPprMlSHg/9TFEV waiMOz9hmw89oy5Pg+mhWWOlIo0770qVNP5mjyjfubKF5M2/J5rlqCJUjN+PEBpq OUNCYJWqQiPKnQdUPq5D1Kcz9lY1sKvNQ49O3ipKxw6KhaPyl9a7H6S07KKisgfo jWkysn3zv3vxWWdNvHNyLHIJNcUyiZyh2HpgrbGGNcRiirkdx11vaLy9uXOZhU6o lqodjWa779hl1NQJNudjuIiHm2zdF9VE1QqzivcnWGpMPlNWudfnDNUsqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtIRD8tLwofH4rD9A2Te3rgqoPdMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKyTUBCZ g22b0FUQi10EtWpyi6Oxk2K62JdatVc9j8UOUnd8sXQDCICKObHgKPeBm9xDpesL alsrVcYafwC9T62FV8YIUWoBVxqZBIMf+pEitzUwWRKX5xPUh7rPhWeC/Zy5983R fAXg6k5eoJFOOFE0v9Q4zz/oCrzWcXnRHMPSyZw6aGxGKW7NF4edlPHrmnn7cvbs UIfBAw8nzhvy/NvzM/a9dGs6j94/ycMeSvnT6ag42hiE1ll4xwYkq7WlSNUe/Y4b e5gR+lr3H6WLS+YB1XcdOAsKCge67FbLZ8HNDthU6wQt1VqK2LcIRkxcUanPy/Kr xh+b5+td6PRYKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:37 2025 by rpki-client