This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json) Hash identifier: Ieq/5Mp7CKFCnAPQr8YmfowWBmVeIfrQIlow3SIKBOI= Subject key identifier: 02:78:48:E3:7F:9D:B9:25:5F:C9:49:56:6C:92:3A:15:30:6D:0A:76 Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e Certificate serial: 019B4A716CA2E70387D54B2C9927CF235B6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 09:01:45 +0000 Manifest this update: Tue 23 Dec 2025 09:01:45 +0000 Manifest next update: Wed 24 Dec 2025 09:01:45 +0000 Files and hashes: 1: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: rTWvmDYWzevhyfsjBasjKxaN/5zI3s478mJQxZK35SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:6c:a2:e7:03:87:d5:4b:2c:99:27:cf:23:5b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e Validity Not Before: Dec 23 09:01:45 2025 GMT Not After : Dec 24 09:01:45 2025 GMT Subject: CN=027848e37f9db9255fc949566c923a15306d0a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:46:0f:f8:52:53:8f:0a:c5:d6:ab:e0:a1: cc:c4:8f:6c:77:4e:41:a7:80:82:3b:9b:1f:13:19: b3:d9:66:33:79:34:3e:6c:7c:38:15:b3:1f:ff:fa: 87:0d:25:5a:2b:b9:5a:fb:39:29:30:2b:b9:64:da: d8:45:11:7a:fe:83:22:b6:29:5f:eb:69:ce:d8:99: df:4a:0f:98:65:f7:a7:9a:ae:79:b6:66:78:1f:51: 4e:c4:78:65:c1:0c:c7:55:6b:0e:ac:c1:22:5a:32: 3b:98:76:a5:a3:d0:10:cd:31:61:cb:ac:ed:9e:0c: be:b2:f3:ec:b9:08:94:24:91:28:2c:6f:12:08:8e: 51:5a:ea:1e:0d:a7:69:90:25:ba:7f:d3:6e:5a:06: 82:43:25:db:95:26:63:97:b6:32:5b:42:ac:28:88: e7:f3:ea:88:92:b6:f9:eb:11:82:aa:0a:93:eb:0a: c4:17:30:a7:60:97:42:12:9c:d4:12:eb:07:7b:84: 66:b9:ba:c9:ca:ca:f6:f9:17:d7:48:58:c1:de:ad: 3d:53:da:7b:02:ca:eb:f6:31:de:82:38:90:62:0b: 36:ae:b8:01:db:59:47:eb:a4:12:c9:08:db:71:6c: 93:eb:9f:2a:eb:d1:4b:47:d2:b8:ec:e0:eb:ca:eb: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:78:48:E3:7F:9D:B9:25:5F:C9:49:56:6C:92:3A:15:30:6D:0A:76 X509v3 Authority Key Identifier: keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8f:b4:38:5d:46:5a:f8:df:64:7d:9a:a9:b6:03:88:f6:59: 3b:b6:71:9b:fa:99:ac:04:80:73:0d:51:8e:fd:1e:e8:a0:8d: 85:16:40:08:52:6b:e6:c1:0f:6b:ec:b6:05:c1:33:a3:c2:c8: 2e:d7:83:04:c5:87:21:ae:de:20:a1:f9:d2:3e:b5:45:a0:26: c6:16:e0:8e:a0:dd:3a:1e:02:b3:48:a6:50:87:8b:ab:e8:0a: 9f:e9:b6:a4:df:cb:09:a6:08:00:34:8b:79:dc:73:44:6d:ab: 8c:b1:9f:b6:3a:68:b6:35:4e:b7:13:58:62:07:8d:57:c9:87: 15:24:05:87:fe:ff:f7:4e:a9:c9:ef:0f:c5:c9:48:03:f3:57: d0:a9:3e:c3:ab:8c:ac:df:11:80:5a:b2:7e:79:18:c6:f5:10: 56:fd:78:93:4b:35:01:c6:19:62:cf:6b:41:22:f0:37:72:32: ba:74:cb:ca:1f:cb:39:1b:95:99:fe:19:3e:61:8d:ab:a9:01: c1:1c:42:2e:f4:6b:2f:08:2a:aa:40:d5:c5:73:1d:f6:4b:ec: df:73:47:4e:cd:41:3e:c1:c6:43:ca:0a:5e:df:60:37:aa:6e: 92:5c:cb:71:2e:7d:22:1f:49:0e:81:27:4b:7d:a0:86:df:ea: 32:44:9e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcWyi5wOH1UssmSfPI1tuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWE2MTk5NzU1ZTYzMDBmMDQwMmMyYTA4ZWQ0MzdhMGE3 MzAwMWUwHhcNMjUxMjIzMDkwMTQ1WhcNMjUxMjI0MDkwMTQ1WjAzMTEwLwYDVQQD EygwMjc4NDhlMzdmOWRiOTI1NWZjOTQ5NTY2YzkyM2ExNTMwNmQwYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHVGD/hSU48Kxdar4KHMxI9sd05B p4CCO5sfExmz2WYzeTQ+bHw4FbMf//qHDSVaK7la+zkpMCu5ZNrYRRF6/oMitilf 62nO2JnfSg+YZfenmq55tmZ4H1FOxHhlwQzHVWsOrMEiWjI7mHalo9AQzTFhy6zt ngy+svPsuQiUJJEoLG8SCI5RWuoeDadpkCW6f9NuWgaCQyXblSZjl7YyW0KsKIjn 8+qIkrb56xGCqgqT6wrEFzCnYJdCEpzUEusHe4RmubrJysr2+RfXSFjB3q09U9p7 Asrr9jHegjiQYgs2rrgB21lH66QSyQjbcWyT658q69FLR9K47ODryuubYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ4SON/nbklX8lJVmySOhUwbQp2MB8GA1UdIwQY MBaAFJDqYZl1XmMA8EAsKgjtQ3oKcwAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTkt YzM5ODA4ZDAzYTE4LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTktYzM5ODA4ZDAzYTE4 LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdI+0OF1G WvjfZH2aqbYDiPZZO7Zxm/qZrASAcw1Rjv0e6KCNhRZACFJr5sEPa+y2BcEzo8LI LteDBMWHIa7eIKH50j61RaAmxhbgjqDdOh4Cs0imUIeLq+gKn+m2pN/LCaYIADSL edxzRG2rjLGftjpotjVOtxNYYgeNV8mHFSQFh/7/906pye8PxclIA/NX0Kk+w6uM rN8RgFqyfnkYxvUQVv14k0s1AcYZYs9rQSLwN3IyunTLyh/LORuVmf4ZPmGNq6kB wRxCLvRrLwgqqkDVxXMd9kvs33NHTs1BPsHGQ8oKXt9gN6puklzLcS59Ih9JDoEn S32ght/qMkSeAg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:16 2025 by rpki-client