This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft File: oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json) Hash identifier: 1RXa0H9QoerKI/3k5FQF+MSWa4XOfMuKrlT5sch+f10= Subject key identifier: 0C:8D:8E:84:8F:E0:55:B2:1B:BA:AF:C2:7A:A4:52:1E:0F:AD:7B:C7 Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10 Certificate issuer: /CN=a223d15344c02a551e63f831c604f80dbec4ba10 Certificate serial: 019B32D65B33F6F633CAF44030B4715E530D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft Manifest number: 0BD8 Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: pShL1OZm9U/Qx8k12h4TakdSsJI4W0o0yxDdMedLGcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5b:33:f6:f6:33:ca:f4:40:30:b4:71:5e:53:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10 Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=0c8d8e848fe055b21bbaafc27aa4521e0fad7bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:f9:9e:fc:ff:26:17:c7:d2:af:e5:77:ae: c8:b9:09:86:80:3b:0e:bf:67:23:27:d5:33:e5:4e: ee:de:32:ba:f8:7e:8c:81:93:c0:a2:09:a7:1d:36: 9a:ef:cf:1a:16:e3:ed:e4:a1:aa:72:64:74:b5:b3: 0f:7f:22:7c:83:dd:7d:d5:0c:7d:3b:9f:06:ab:3a: 01:a1:d2:85:6f:06:3a:13:2a:40:86:e1:4e:b6:d0: b3:3a:02:63:ad:d2:23:54:b6:1f:3f:e5:bb:01:39: 3c:3a:8e:ac:51:e4:04:01:37:1d:a1:c9:cf:a9:2b: e6:3c:27:1e:9b:0e:a4:10:37:83:0d:bd:1f:57:de: b4:43:22:91:6b:a4:ee:86:46:af:5b:74:a0:bc:a8: 0b:25:7d:92:9a:a5:66:47:5a:53:05:b7:2f:59:ea: d1:76:ac:60:53:f7:a3:54:2a:22:ef:c1:60:ce:1b: 2a:80:91:c7:d8:59:ce:fc:8e:62:05:5e:a3:ff:d9: 41:85:fa:83:6c:5c:47:d8:a2:0c:b9:b9:d5:86:95: 76:34:28:30:dd:47:af:c2:ff:09:86:29:e7:a4:2b: 32:68:eb:a0:96:ba:9d:99:0a:aa:f0:16:fc:b7:05: 50:03:f7:7b:b3:af:9a:08:ed:1d:97:1e:36:a2:e8: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:8E:84:8F:E0:55:B2:1B:BA:AF:C2:7A:A4:52:1E:0F:AD:7B:C7 X509v3 Authority Key Identifier: keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:67:ad:a5:36:65:59:6c:ba:c2:8b:68:89:e3:66:ed:40:77: 3d:80:0f:5f:15:5b:1d:03:ef:09:e5:b7:0f:aa:e6:53:76:40: 10:18:c2:db:9d:46:9a:32:b7:2f:3a:76:fd:c2:9a:6e:66:41: 57:79:5f:89:4f:cd:5d:4d:04:d4:cb:c0:42:6b:59:d2:b8:67: 08:53:5a:9a:08:36:e2:26:ee:79:fa:d8:28:b6:ec:05:ca:22: ba:53:24:65:d8:bb:4c:ed:e1:8e:56:5e:56:17:65:45:d0:bf: df:dd:d4:c4:ad:de:9b:a1:d5:cc:ce:90:6a:59:68:09:6f:d8: 0c:6b:d5:5c:dc:93:2a:94:cb:61:ba:76:00:94:b9:fd:87:26: cb:7e:73:63:f1:f2:b7:24:d3:ec:63:a6:78:fd:a7:fb:35:b7: 75:af:01:d0:e4:8e:af:34:92:0b:58:90:17:5a:c3:fa:8b:46: 1d:c9:68:f6:ca:df:2e:ec:4a:1c:32:e2:92:1b:af:76:62:0d: ae:48:fe:90:2b:d5:08:03:04:6e:4c:40:f5:68:99:47:f3:68: 06:31:be:56:82:66:a3:2a:26:a3:2f:1a:d4:80:b0:ea:28:2c: 2c:99:d4:e0:23:eb:50:47:02:dd:15:10:ef:9e:bd:ec:1c:93: e6:98:a9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1lsz9vYzyvRAMLRxXlMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMjNkMTUzNDRjMDJhNTUxZTYzZjgzMWM2MDRmODBkYmVj NGJhMTAwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD EygwYzhkOGU4NDhmZTA1NWIyMWJiYWFmYzI3YWE0NTIxZTBmYWQ3YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1v5nvz/JhfH0q/ld67IuQmGgDsO v2cjJ9Uz5U7u3jK6+H6MgZPAogmnHTaa788aFuPt5KGqcmR0tbMPfyJ8g9191Qx9 O58GqzoBodKFbwY6EypAhuFOttCzOgJjrdIjVLYfP+W7ATk8Oo6sUeQEATcdocnP qSvmPCcemw6kEDeDDb0fV960QyKRa6TuhkavW3SgvKgLJX2SmqVmR1pTBbcvWerR dqxgU/ejVCoi78FgzhsqgJHH2FnO/I5iBV6j/9lBhfqDbFxH2KIMubnVhpV2NCgw 3Uevwv8JhinnpCsyaOuglrqdmQqq8Bb8twVQA/d7s6+aCO0dlx42ouhoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyNjoSP4FWyG7qvwnqkUh4PrXvHMB8GA1UdIwQY MBaAFKIj0VNEwCpVHmP4McYE+A2+xLoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTct ODA5YTJkN2ZmMzQ4LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTctODA5YTJkN2ZmMzQ4 LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGetpTZl WWy6wotoieNm7UB3PYAPXxVbHQPvCeW3D6rmU3ZAEBjC251GmjK3Lzp2/cKabmZB V3lfiU/NXU0E1MvAQmtZ0rhnCFNamgg24ibuefrYKLbsBcoiulMkZdi7TO3hjlZe VhdlRdC/393UxK3em6HVzM6QalloCW/YDGvVXNyTKpTLYbp2AJS5/Ycmy35zY/Hy tyTT7GOmeP2n+zW3da8B0OSOrzSSC1iQF1rD+otGHclo9srfLuxKHDLikhuvdmIN rkj+kCvVCAMEbkxA9WiZR/NoBjG+VoJmoyomoy8a1ICw6igsLJnU4CPrUEcC3RUQ 75697ByT5pip0A== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:59 2025 by rpki-client