This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json) Hash identifier: Ve4iVxjunS4PmJ+JKQBCJ66ubPbYnQXMlkjXf9gtx7Y= Subject key identifier: FA:9C:0F:B1:DA:E0:CD:AF:14:C1:41:C6:E0:4E:65:DA:46:EB:4A:DB Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae Certificate serial: 019B5072BAB8B315B8F62F46CCB3DD492203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 13:00:54 +0000 Manifest this update: Wed 24 Dec 2025 13:00:54 +0000 Manifest next update: Thu 25 Dec 2025 13:00:54 +0000 Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: CcMuVoHGaAW9k3fO6cKdoSeV+Lkw+pyenfRp0eHXlcM=) 2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ba:b8:b3:15:b8:f6:2f:46:cc:b3:dd:49:22:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae Validity Not Before: Dec 24 13:00:54 2025 GMT Not After : Dec 25 13:00:54 2025 GMT Subject: CN=fa9c0fb1dae0cdaf14c141c6e04e65da46eb4adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:2d:25:27:26:9b:57:35:13:c2:41:8b:82: ff:e6:43:77:53:e4:a1:5f:c7:35:b4:ef:33:fa:d7: 0f:d0:1d:1b:bd:1e:3b:ad:b6:9c:ba:09:f4:0f:b4: 0f:cf:52:c5:b0:d2:d6:d5:ff:a7:45:b9:c7:7a:e9: 7a:88:29:4d:75:0b:1d:78:b6:89:66:32:d3:e4:ce: cf:db:67:44:81:ae:59:6d:e5:ec:6c:35:5a:46:05: e9:20:3b:a3:ad:3f:b7:2c:1d:2d:27:b5:08:8e:46: 7c:21:cd:db:d0:5f:2f:c6:2e:c6:00:c2:26:f4:9a: b0:fe:f6:75:52:3c:ff:83:69:51:e5:fe:f4:99:b4: 56:98:6b:b1:c5:d7:9a:a3:68:6d:61:13:79:40:d8: f0:5c:c8:93:07:84:c9:b5:1a:68:e1:a2:82:8e:6b: 25:16:1a:be:19:ea:63:51:27:07:76:66:2a:04:01: 18:97:b7:29:6d:e0:b8:d8:4e:82:0e:75:ef:89:15: 64:91:f2:7d:90:16:08:81:c1:9e:ac:b0:e6:79:be: 27:63:ab:52:4a:24:58:57:d9:7e:f9:65:c5:34:74: 54:d2:89:01:8d:d3:83:ec:1d:42:6c:d2:4f:79:19: ff:f5:b9:da:d6:0f:6b:56:1a:e3:25:3d:6d:bb:f4: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:0F:B1:DA:E0:CD:AF:14:C1:41:C6:E0:4E:65:DA:46:EB:4A:DB X509v3 Authority Key Identifier: keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7b:bc:ea:16:d3:46:7d:81:cb:09:b7:63:80:ed:96:16:de: 82:fc:71:59:9a:42:3e:02:a1:0a:4a:a4:e2:c5:01:7f:f0:ec: f2:43:65:81:44:df:30:a5:41:5c:a9:ae:e5:95:34:44:52:8e: 96:e0:b0:e6:da:6d:97:fc:e7:8d:56:d0:74:ed:22:de:7a:8f: 58:b5:b0:67:b2:33:0c:83:ea:64:a2:7e:52:3f:d8:9a:62:ac: c7:50:3b:56:01:f0:5f:4c:dc:bd:6b:d5:6b:18:ab:02:e8:c3: 13:a7:f1:7f:c7:7e:89:4f:41:e4:2d:97:83:22:6f:39:42:46: 28:11:5e:65:43:ed:bc:da:fc:fe:ae:5d:7e:dd:d0:33:82:75: 0d:66:f4:f1:00:da:69:6c:79:60:a5:cc:70:a3:e3:44:c1:f4: 70:e7:bd:f1:4f:2f:93:f7:19:9e:94:cf:06:b6:87:9d:c2:3d: d0:d6:ab:89:24:56:f3:21:d9:75:7e:42:46:ac:22:7b:26:06: e9:a4:c5:85:e4:2d:39:02:21:f5:4d:9e:44:60:99:20:96:0e: 64:1f:aa:26:cd:84:7d:e5:50:5f:a7:a8:66:0a:fe:52:39:b0: fe:a4:a0:3d:ea:09:9c:a8:c4:df:72:ec:53:a2:d5:6e:52:55: 79:bb:49:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcrq4sxW49i9GzLPdSSIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1 ZjYzYWUwHhcNMjUxMjI0MTMwMDU0WhcNMjUxMjI1MTMwMDU0WjAzMTEwLwYDVQQD EyhmYTljMGZiMWRhZTBjZGFmMTRjMTQxYzZlMDRlNjVkYTQ2ZWI0YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHMtJScmm1c1E8JBi4L/5kN3U+Sh X8c1tO8z+tcP0B0bvR47rbacugn0D7QPz1LFsNLW1f+nRbnHeul6iClNdQsdeLaJ ZjLT5M7P22dEga5ZbeXsbDVaRgXpIDujrT+3LB0tJ7UIjkZ8Ic3b0F8vxi7GAMIm 9Jqw/vZ1Ujz/g2lR5f70mbRWmGuxxdeao2htYRN5QNjwXMiTB4TJtRpo4aKCjmsl Fhq+GepjUScHdmYqBAEYl7cpbeC42E6CDnXviRVkkfJ9kBYIgcGerLDmeb4nY6tS SiRYV9l++WXFNHRU0okBjdOD7B1CbNJPeRn/9bna1g9rVhrjJT1tu/RyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqcD7Ha4M2vFMFBxuBOZdpG60rbMB8GA1UdIwQY MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3 LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3u86hbT Rn2Bywm3Y4DtlhbegvxxWZpCPgKhCkqk4sUBf/Ds8kNlgUTfMKVBXKmu5ZU0RFKO luCw5tptl/znjVbQdO0i3nqPWLWwZ7IzDIPqZKJ+Uj/YmmKsx1A7VgHwX0zcvWvV axirAujDE6fxf8d+iU9B5C2XgyJvOUJGKBFeZUPtvNr8/q5dft3QM4J1DWb08QDa aWx5YKXMcKPjRMH0cOe98U8vk/cZnpTPBraHncI90NariSRW8yHZdX5CRqwieyYG 6aTFheQtOQIh9U2eRGCZIJYOZB+qJs2EfeVQX6eoZgr+Ujmw/qSgPeoJnKjE33Ls U6LVblJVebtJlw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:17:20 2025 by rpki-client