This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json) Hash identifier: FT0mU4yuYqmKU+0xZi0x218G+iu5uLlfpDRPwy15kuY= Subject key identifier: 4C:59:39:7B:48:54:6C:3C:95:93:89:AF:AB:F0:D4:2E:70:17:93:3E Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Certificate serial: 019B74ED826184C30D33D0943B843A014275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft Manifest number: 0C65 Signing time: Wed 31 Dec 2025 15:01:21 +0000 Manifest this update: Wed 31 Dec 2025 15:01:21 +0000 Manifest next update: Thu 01 Jan 2026 15:01:21 +0000 Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: i7yZUwpxt+PD842obdKSwvN2WSCiJ6mr9jij27DBu8w=) 2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:82:61:84:c3:0d:33:d0:94:3b:84:3a:01:42:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Validity Not Before: Dec 31 15:01:21 2025 GMT Not After : Jan 1 15:01:21 2026 GMT Subject: CN=4c59397b48546c3c959389afabf0d42e7017933e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:09:35:57:f0:2c:fd:43:10:93:4d:bb:5c: ff:e8:2c:a6:46:68:19:a4:32:c4:7c:36:7f:8f:9d: 84:62:f8:cb:86:ea:4c:15:6a:09:d7:a0:e5:ff:ed: 72:ab:06:37:a2:b2:11:06:3a:90:9f:17:f9:f6:d5: 2f:9f:8a:3f:06:d9:79:64:02:1f:3f:e9:31:8e:1d: 48:83:e7:f7:c9:f6:ba:9e:65:83:61:ed:a6:76:f3: e4:bc:4b:48:e6:6c:cc:bb:f1:6d:a1:5f:a7:c2:c3: 02:b9:ab:8e:72:fa:44:65:77:65:ec:d6:8f:c4:78: 08:95:bb:e3:c8:e1:7f:5c:c5:98:d6:a0:2d:7c:81: 16:ca:f5:bf:3f:dd:cd:23:4c:21:f0:48:3b:86:6c: 13:27:ca:a1:54:21:c9:ec:e4:ae:d2:48:7f:05:cc: a6:49:f7:8f:d5:ad:d7:22:ea:55:91:cd:ad:c3:bd: 74:09:d5:25:04:4a:3b:75:f7:ea:89:21:ed:3f:9f: ba:05:80:58:33:78:28:8b:28:19:e3:3c:5b:4f:74: 96:90:b3:2f:5c:ed:5e:b3:86:b2:88:a2:78:4a:48: e1:38:8c:a9:d3:95:8b:5b:04:66:56:47:ee:c3:c6: 0e:ab:81:4a:aa:fc:ef:7e:5b:5e:b6:15:56:00:b8: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:59:39:7B:48:54:6C:3C:95:93:89:AF:AB:F0:D4:2E:70:17:93:3E X509v3 Authority Key Identifier: keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:98:19:4d:d3:02:9e:2d:0a:3e:de:6f:c4:e6:b7:a4:c5:96: 7b:9c:84:8d:52:09:f4:75:e8:96:05:2f:97:2d:cc:c4:5a:c7: 5b:e1:dc:ba:71:cc:b9:96:10:3f:06:02:f6:c6:f9:b0:d5:b8: 7c:68:a7:38:bf:8e:ee:39:de:2e:3f:01:8c:1f:57:b3:c1:f0: ea:ed:48:43:c9:d5:c4:cc:57:0f:c2:70:6c:26:0d:14:48:0a: dc:e3:b1:c3:9f:ed:97:3a:54:fc:ef:46:e4:9b:4b:02:8f:2a: 70:4f:9b:34:ca:94:bc:9a:f9:02:81:38:a1:d3:a2:35:c6:05: 5c:03:0e:1b:e1:1e:4e:89:88:24:c4:53:e2:48:22:97:b2:a3: d9:eb:62:ec:a1:0b:cd:92:1b:7a:a2:4b:2d:0d:44:92:2b:2b: 6c:76:0a:0d:8e:7d:04:80:cd:0f:6e:e1:fc:c2:df:65:7d:b6: 89:ca:c0:35:fa:02:4e:a6:7f:43:9b:cd:06:84:8c:49:cc:71: 68:e7:a2:50:8c:15:b2:05:ca:86:ac:18:ac:5b:ea:b8:8e:22: 34:98:be:4d:e9:04:fa:08:50:7c:d7:d0:47:ab:7b:0f:79:fa: 19:7d:c6:12:14:b7:34:d2:e2:bf:8e:63:45:13:15:e0:1f:91: 4d:60:4b:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07YJhhMMNM9CUO4Q6AUJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3 NmNkODUwHhcNMjUxMjMxMTUwMTIxWhcNMjYwMTAxMTUwMTIxWjAzMTEwLwYDVQQD Eyg0YzU5Mzk3YjQ4NTQ2YzNjOTU5Mzg5YWZhYmYwZDQyZTcwMTc5MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDAJNVfwLP1DEJNNu1z/6CymRmgZ pDLEfDZ/j52EYvjLhupMFWoJ16Dl/+1yqwY3orIRBjqQnxf59tUvn4o/Btl5ZAIf P+kxjh1Ig+f3yfa6nmWDYe2mdvPkvEtI5mzMu/FtoV+nwsMCuauOcvpEZXdl7NaP xHgIlbvjyOF/XMWY1qAtfIEWyvW/P93NI0wh8Eg7hmwTJ8qhVCHJ7OSu0kh/Bcym SfeP1a3XIupVkc2tw710CdUlBEo7dffqiSHtP5+6BYBYM3goiygZ4zxbT3SWkLMv XO1es4ayiKJ4SkjhOIyp05WLWwRmVkfuw8YOq4FKqvzvfltethVWALjT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExZOXtIVGw8lZOJr6vw1C5wF5M+MB8GA1UdIwQY MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4 LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5gZTdMC ni0KPt5vxOa3pMWWe5yEjVIJ9HXolgUvly3MxFrHW+HcunHMuZYQPwYC9sb5sNW4 fGinOL+O7jneLj8BjB9Xs8Hw6u1IQ8nVxMxXD8JwbCYNFEgK3OOxw5/tlzpU/O9G 5JtLAo8qcE+bNMqUvJr5AoE4odOiNcYFXAMOG+EeTomIJMRT4kgil7Kj2eti7KEL zZIbeqJLLQ1EkisrbHYKDY59BIDND27h/MLfZX22icrANfoCTqZ/Q5vNBoSMScxx aOeiUIwVsgXKhqwYrFvquI4iNJi+TekE+ghQfNfQR6t7D3n6GX3GEhS3NNLiv45j RRMV4B+RTWBLDQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:11 2025 by rpki-client