This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json) Hash identifier: ge04c2DD522r5fUqieQKdC/BjLq/HvQuQTP3EHp2nbw= Subject key identifier: 03:D8:8B:50:11:C7:56:AE:7E:0C:BA:08:60:80:26:34:33:6D:6E:CC Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15 Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15 Certificate serial: 019B3569A39DEC5FFA4AE6318DAA25ADA79E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft Manifest number: 0676 Signing time: Fri 19 Dec 2025 07:01:14 +0000 Manifest this update: Fri 19 Dec 2025 07:01:14 +0000 Manifest next update: Sat 20 Dec 2025 07:01:14 +0000 Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: ogEEuRn3WuFXI/FMIG1O0x+FbH1DrzfYCW2qzegxSYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:a3:9d:ec:5f:fa:4a:e6:31:8d:aa:25:ad:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15 Validity Not Before: Dec 19 07:01:14 2025 GMT Not After : Dec 20 07:01:14 2025 GMT Subject: CN=03d88b5011c756ae7e0cba0860802634336d6ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:e2:05:c0:36:19:a9:1b:74:7e:f9:c4:99: 97:e9:e0:4b:ec:e3:c6:7b:39:88:4f:a3:9a:91:39: e4:c2:d8:d0:c8:2b:56:4d:70:53:90:95:a7:ba:a2: 7b:bb:42:3c:39:28:6c:69:f9:67:a1:31:fc:b0:63: 33:af:e0:73:cc:16:4c:e4:d4:fa:c0:4d:50:1c:6f: 62:a4:79:e0:16:06:a2:8f:f7:f9:e7:71:4c:61:dd: 7a:61:a1:fa:cb:55:f8:15:dd:95:e5:27:ba:e2:c6: fb:cc:ba:d3:60:0e:af:ae:5b:66:b8:eb:c2:e2:47: 6d:87:39:8a:f9:01:a5:bf:31:2a:0b:20:18:69:ce: ea:04:9a:a2:3b:4d:08:89:97:0a:96:85:e9:dc:96: 69:b7:ec:8f:05:02:d1:f0:1a:27:16:9d:c9:00:7e: 37:c1:cb:31:2f:d8:6c:61:5d:ac:5d:1d:43:b9:3b: f6:1a:09:73:be:a7:d6:5c:6c:22:6e:90:e3:ca:02: ee:7e:c1:5b:41:61:4e:b1:d3:6e:a1:81:f9:2e:4b: f4:ae:58:36:f8:31:d6:19:70:1a:bf:0c:b7:74:a1: 12:43:f0:12:69:2d:c9:34:1f:60:71:82:be:c5:c8: e9:29:36:55:1a:53:db:73:54:6c:09:8e:f2:84:dd: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D8:8B:50:11:C7:56:AE:7E:0C:BA:08:60:80:26:34:33:6D:6E:CC X509v3 Authority Key Identifier: keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5b:1c:78:06:6a:d2:12:7b:1d:27:d0:17:44:0c:ab:c2:cb: c2:5b:cc:c8:dd:0d:ce:f7:99:65:83:74:fc:05:c0:2b:82:6d: 6a:a2:d8:c2:2f:5a:1f:5d:7f:f1:60:bc:ae:b2:a3:ac:0f:4c: 6a:71:14:c0:8a:2a:ec:0a:f5:4f:ee:39:2c:73:4a:61:c4:16: ad:10:29:b5:65:24:11:0f:7e:58:87:08:b9:5e:50:67:16:1b: 78:d0:f9:76:9f:d3:13:d7:fc:24:e4:2b:d1:9d:d2:9f:38:e3: a9:a2:9d:2e:68:42:78:cb:91:8a:77:ab:73:0d:16:e3:cd:52: 84:5d:25:65:14:e5:fd:a9:e0:ae:38:e7:0f:7a:aa:8d:9a:b0: 4e:66:79:b2:9c:e1:ec:2a:20:a7:32:54:ca:5f:11:7e:5d:11: 7e:8b:38:99:f1:de:b4:08:e5:07:6a:aa:47:b6:c4:2f:b9:a5: 79:73:f9:1a:8d:33:92:4c:61:af:9d:d5:1e:39:f9:ad:ff:e3: 82:08:70:6c:5f:ec:70:e4:e6:cb:a3:57:c5:f8:4e:c4:63:37: 8c:ea:83:02:0f:ad:41:5f:22:18:de:ed:24:55:ff:9a:c2:27: 72:fc:00:54:dd:3b:31:07:71:63:b4:b7:bf:e2:d8:5f:36:ca: 23:79:0e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aaOd7F/6SuYxjaolraeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjkwYTU3NjUxOWU3ODc3YTY0MDhhY2RmNmU2OWJiODQ3 MmFhMTUwHhcNMjUxMjE5MDcwMTE0WhcNMjUxMjIwMDcwMTE0WjAzMTEwLwYDVQQD EygwM2Q4OGI1MDExYzc1NmFlN2UwY2JhMDg2MDgwMjYzNDMzNmQ2ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2HiBcA2GakbdH75xJmX6eBL7OPG ezmIT6OakTnkwtjQyCtWTXBTkJWnuqJ7u0I8OShsaflnoTH8sGMzr+BzzBZM5NT6 wE1QHG9ipHngFgaij/f553FMYd16YaH6y1X4Fd2V5Se64sb7zLrTYA6vrltmuOvC 4kdthzmK+QGlvzEqCyAYac7qBJqiO00IiZcKloXp3JZpt+yPBQLR8BonFp3JAH43 wcsxL9hsYV2sXR1DuTv2GglzvqfWXGwibpDjygLufsFbQWFOsdNuoYH5Lkv0rlg2 +DHWGXAavwy3dKESQ/ASaS3JNB9gcYK+xcjpKTZVGlPbc1RsCY7yhN3+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPYi1ARx1aufgy6CGCAJjQzbW7MMB8GA1UdIwQY MBaAFKFpCldlGeeHemQIrN9uabuEcqoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMTcxNDctYTZjMS00ZjQ4LWE1ZDkt MmNkZTQwNDVjNDJhLzEvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMTcxNDctYTZjMS00ZjQ4LWE1ZDktMmNkZTQwNDVjNDJh LzEvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1sceAZq 0hJ7HSfQF0QMq8LLwlvMyN0NzveZZYN0/AXAK4JtaqLYwi9aH11/8WC8rrKjrA9M anEUwIoq7Ar1T+45LHNKYcQWrRAptWUkEQ9+WIcIuV5QZxYbeND5dp/TE9f8JOQr 0Z3SnzjjqaKdLmhCeMuRinercw0W481ShF0lZRTl/angrjjnD3qqjZqwTmZ5spzh 7CogpzJUyl8Rfl0Rfos4mfHetAjlB2qqR7bEL7mleXP5Go0zkkxhr53VHjn5rf/j gghwbF/scOTmy6NXxfhOxGM3jOqDAg+tQV8iGN7tJFX/msIncvwAVN07MQdxY7S3 v+LYXzbKI3kOTA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:21 2025 by rpki-client