This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json) Hash identifier: kmy3kBvy+j107IM6aptcmz/ZjeZTw3vdH7sl60l7r5Q= Subject key identifier: 5C:97:6B:9F:52:23:07:0A:9D:E3:C8:EF:65:79:53:08:1F:10:C4:8A Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae Certificate serial: 019B5FE5A9FA34B54882FD5DB6B7169D3965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 13:00:45 +0000 Manifest this update: Sat 27 Dec 2025 13:00:45 +0000 Manifest next update: Sun 28 Dec 2025 13:00:45 +0000 Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: 37zlCl9VonpsJ9+m7VkVigVfCZdygaL7n2UqGFAckH0=) 2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:a9:fa:34:b5:48:82:fd:5d:b6:b7:16:9d:39:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae Validity Not Before: Dec 27 13:00:45 2025 GMT Not After : Dec 28 13:00:45 2025 GMT Subject: CN=5c976b9f5223070a9de3c8ef657953081f10c48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:84:53:3b:98:74:cf:d2:a1:70:4e:56:83: 3e:3d:c7:df:00:66:a3:a8:3f:46:b5:2d:43:df:95: 3e:1f:23:86:8a:b0:58:c8:dc:ce:b8:25:78:45:47: fa:32:16:0b:c8:4a:d1:19:e1:5b:26:e8:b7:57:b9: 35:1c:85:ad:57:60:97:0a:7e:77:04:d9:f2:58:6f: a1:51:b8:d7:f8:17:de:c4:f3:bb:ae:de:43:63:48: 3a:ad:b0:cc:82:8d:91:f3:6f:e2:8e:80:32:30:87: 5d:18:0b:f8:87:51:8b:60:a3:81:5b:74:cc:d9:0b: ee:7a:dd:64:18:dc:b3:f1:79:f5:01:d5:a5:6c:f7: 27:88:0b:29:a0:6a:e1:f9:a5:d6:6b:1c:6f:7c:fd: 58:b0:58:0c:46:ec:8c:81:4d:7d:b0:f6:19:bf:25: 10:29:a4:3b:09:ce:b7:98:95:dc:59:e3:dd:50:75: 12:d7:4a:de:ef:23:48:3b:3e:04:7a:6f:85:31:5d: 10:a2:44:8c:95:4f:74:3a:6e:52:ae:03:75:99:27: a5:27:90:3b:7b:24:30:c6:73:22:cb:d7:e9:9a:82: 85:89:36:1a:d3:99:5d:88:0c:12:fe:25:be:2e:cf: 6e:e6:fd:03:c3:e1:55:c8:49:4b:65:b7:98:0a:6d: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:6B:9F:52:23:07:0A:9D:E3:C8:EF:65:79:53:08:1F:10:C4:8A X509v3 Authority Key Identifier: keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f1:ec:1f:cb:3c:6a:fe:fd:77:55:87:a6:12:c7:82:1b:1d: 3d:11:27:9b:be:a9:f3:75:29:bb:14:3c:cf:f3:96:f0:44:31: a2:44:46:a7:02:88:2b:47:72:5f:2b:0a:01:79:f4:23:5e:49: 83:31:56:cf:a1:49:97:b0:96:75:87:f0:37:49:17:24:79:b0: 6d:ec:5f:96:b3:eb:43:3c:d2:75:73:b8:df:cf:15:34:e2:f6: 6a:81:19:45:38:ea:32:08:2f:67:ca:d6:35:67:99:9c:0b:cd: 33:74:4a:1f:d2:f5:a7:85:bc:19:e3:00:22:b5:77:b8:54:6e: 7f:b1:55:51:b6:10:80:02:23:f2:36:bf:9c:14:71:18:cb:1f: c3:0c:06:43:2d:7d:7c:02:de:29:8c:14:32:4f:32:ee:27:95: c9:90:67:6b:70:5d:6a:d5:d3:c5:70:6d:d8:82:9a:ff:fc:6c: 37:69:39:be:43:58:29:2d:04:8c:ab:99:7f:de:6d:f6:f2:be: 68:97:22:08:ea:17:93:2b:7a:1e:95:88:47:8b:49:37:a7:16: 90:08:3c:0b:1e:5f:b0:41:6c:e1:57:7c:f9:62:ac:91:47:4c: 3a:26:4e:21:9f:0d:4d:01:9e:15:54:62:01:6f:d7:b7:b4:de: f7:ce:36:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5an6NLVIgv1dtrcWnTllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1 ZjYzYWUwHhcNMjUxMjI3MTMwMDQ1WhcNMjUxMjI4MTMwMDQ1WjAzMTEwLwYDVQQD Eyg1Yzk3NmI5ZjUyMjMwNzBhOWRlM2M4ZWY2NTc5NTMwODFmMTBjNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZeEUzuYdM/SoXBOVoM+PcffAGaj qD9GtS1D35U+HyOGirBYyNzOuCV4RUf6MhYLyErRGeFbJui3V7k1HIWtV2CXCn53 BNnyWG+hUbjX+BfexPO7rt5DY0g6rbDMgo2R82/ijoAyMIddGAv4h1GLYKOBW3TM 2Qvuet1kGNyz8Xn1AdWlbPcniAspoGrh+aXWaxxvfP1YsFgMRuyMgU19sPYZvyUQ KaQ7Cc63mJXcWePdUHUS10re7yNIOz4Eem+FMV0QokSMlU90Om5SrgN1mSelJ5A7 eyQwxnMiy9fpmoKFiTYa05ldiAwS/iW+Ls9u5v0Dw+FVyElLZbeYCm0TMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyXa59SIwcKnePI72V5UwgfEMSKMB8GA1UdIwQY MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3 LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/HsH8s8 av79d1WHphLHghsdPREnm76p83UpuxQ8z/OW8EQxokRGpwKIK0dyXysKAXn0I15J gzFWz6FJl7CWdYfwN0kXJHmwbexflrPrQzzSdXO4388VNOL2aoEZRTjqMggvZ8rW NWeZnAvNM3RKH9L1p4W8GeMAIrV3uFRuf7FVUbYQgAIj8ja/nBRxGMsfwwwGQy19 fALeKYwUMk8y7ieVyZBna3BdatXTxXBt2IKa//xsN2k5vkNYKS0EjKuZf95t9vK+ aJciCOoXkyt6HpWIR4tJN6cWkAg8Cx5fsEFs4Vd8+WKskUdMOiZOIZ8NTQGeFVRi AW/Xt7Te9842Tw== -----END CERTIFICATE-----Generated at Sat Dec 27 16:13:34 2025 by rpki-client