This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json) Hash identifier: zrjd2DkMHawZvBECchxDkhbbvGcWaNlos8ZJ55Uz58s= Subject key identifier: E6:B6:18:96:0C:77:03:C6:AA:A4:1C:AF:49:06:0B:6E:58:0A:94:C1 Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d Certificate serial: 019B39B40F48D226B959403CD1FA1A967CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 03:01:00 +0000 Manifest this update: Sat 20 Dec 2025 03:01:00 +0000 Manifest next update: Sun 21 Dec 2025 03:01:00 +0000 Files and hashes: 1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=) 2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: 4LMxUYPh1JR7QVe2KO3CXhpTl6YSQnnuzJS9mmDvUJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:0f:48:d2:26:b9:59:40:3c:d1:fa:1a:96:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d Validity Not Before: Dec 20 03:01:00 2025 GMT Not After : Dec 21 03:01:00 2025 GMT Subject: CN=e6b618960c7703c6aaa41caf49060b6e580a94c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:cf:ff:2a:ce:1b:7f:c3:d8:a3:61:df:28: de:a8:1f:12:23:5f:27:07:ee:cd:7f:2f:bd:3b:da: 70:fc:34:9e:e9:dd:00:d0:d9:6e:99:d2:71:04:56: 5a:b7:75:81:9e:3f:a9:e0:f1:ff:70:33:25:f1:28: f9:44:13:59:41:76:7d:7f:42:e7:d7:97:79:e1:ef: 13:16:fa:d8:94:ea:aa:93:09:9b:ca:97:5b:ff:da: 2f:ba:38:5f:97:7c:cd:5e:08:43:f7:eb:77:ca:4f: 00:8e:8c:ab:b1:0a:15:22:5a:73:d0:1b:2f:b3:50: b6:dd:a4:68:e9:b5:2e:b1:71:9e:68:32:c5:46:0b: 1d:34:e0:29:e6:1b:d1:df:75:93:86:92:fa:e1:36: 7c:7e:eb:2a:62:de:0c:90:a4:c5:4f:56:b8:eb:03: 5d:4e:0e:9f:f1:78:32:10:eb:15:33:ac:ab:32:af: 53:d3:a7:77:93:c6:56:8d:44:c1:be:86:d7:fc:cb: a2:09:0e:d6:71:67:76:e8:f3:eb:1d:98:d6:48:24: 85:a0:1d:1f:09:97:14:50:23:8e:62:e7:29:9e:2e: 02:f1:5b:54:f0:4b:61:89:29:6c:b8:8a:6f:f5:2b: e0:e0:b4:2a:bc:12:c5:8d:b3:07:85:81:79:5a:51: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:18:96:0C:77:03:C6:AA:A4:1C:AF:49:06:0B:6E:58:0A:94:C1 X509v3 Authority Key Identifier: keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:51:74:5b:9e:f1:a0:dd:81:21:fc:d7:c6:a9:c0:87:4f:bb: 10:22:54:a5:59:5e:a9:f7:39:0c:4a:04:fc:11:0f:49:85:7b: 36:c3:34:8a:3c:fa:aa:e7:c9:2d:f9:d7:27:8e:00:77:e2:53: 06:89:43:c3:6f:a8:7f:d0:4b:f6:ff:d1:de:41:ae:64:a8:c4: 1c:75:17:b8:36:52:bb:b8:60:ff:68:a3:43:d8:c5:8f:fe:ce: f7:29:e7:21:c0:82:1a:46:4d:be:34:64:fe:8e:c8:17:7c:aa: 37:87:c0:da:a9:00:71:1d:02:e5:15:50:53:37:97:28:05:dd: 84:a4:39:da:95:38:cd:05:65:3f:dd:33:f4:4d:6b:6e:ee:4a: 59:24:21:7e:94:00:0e:ee:ef:c2:6e:b3:31:5e:db:e4:39:b0: c4:81:0b:5d:7d:05:59:e1:88:32:04:08:a8:fd:97:86:2e:04: 0b:60:82:cc:b6:63:61:13:89:9b:ed:5a:d2:92:ff:d7:7c:41: e3:70:0d:50:82:a1:16:2b:bb:6a:c4:c1:8d:e3:2d:1e:eb:10: 04:83:3d:f2:5e:93:79:eb:0f:31:e1:f9:01:b2:8f:85:55:77: 82:06:32:10:cb:c0:fc:b0:b6:e5:03:15:c8:44:e0:f6:3b:c5: 70:58:4d:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tA9I0ia5WUA80foalnzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjlkNGQyNzU3MmVmNWE2YTZkYmVjZDc5MmVlZjk4Y2U5 MDcxNmQwHhcNMjUxMjIwMDMwMTAwWhcNMjUxMjIxMDMwMTAwWjAzMTEwLwYDVQQD EyhlNmI2MTg5NjBjNzcwM2M2YWFhNDFjYWY0OTA2MGI2ZTU4MGE5NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkzP/yrOG3/D2KNh3yjeqB8SI18n B+7Nfy+9O9pw/DSe6d0A0NlumdJxBFZat3WBnj+p4PH/cDMl8Sj5RBNZQXZ9f0Ln 15d54e8TFvrYlOqqkwmbypdb/9ovujhfl3zNXghD9+t3yk8AjoyrsQoVIlpz0Bsv s1C23aRo6bUusXGeaDLFRgsdNOAp5hvR33WThpL64TZ8fusqYt4MkKTFT1a46wNd Tg6f8XgyEOsVM6yrMq9T06d3k8ZWjUTBvobX/MuiCQ7WcWd26PPrHZjWSCSFoB0f CZcUUCOOYucpni4C8VtU8EthiSlsuIpv9Svg4LQqvBLFjbMHhYF5WlFUOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOa2GJYMdwPGqqQcr0kGC25YCpTBMB8GA1UdIwQY MBaAFKMp1NJ1cu9aam2+zXku75jOkHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUt ZWUxNzg1NzhkY2I1LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUtZWUxNzg1NzhkY2I1 LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1F0W57x oN2BIfzXxqnAh0+7ECJUpVleqfc5DEoE/BEPSYV7NsM0ijz6qufJLfnXJ44Ad+JT BolDw2+of9BL9v/R3kGuZKjEHHUXuDZSu7hg/2ijQ9jFj/7O9ynnIcCCGkZNvjRk /o7IF3yqN4fA2qkAcR0C5RVQUzeXKAXdhKQ52pU4zQVlP90z9E1rbu5KWSQhfpQA Du7vwm6zMV7b5DmwxIELXX0FWeGIMgQIqP2Xhi4EC2CCzLZjYROJm+1a0pL/13xB 43ANUIKhFiu7asTBjeMtHusQBIM98l6TeesPMeH5AbKPhVV3ggYyEMvA/LC25QMV yETg9jvFcFhNjg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:25 2025 by rpki-client