This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json) Hash identifier: /5gg3sIzt7GRmHWnXfmAYhc+uvV03JNKY71pHwIp4BQ= Subject key identifier: B1:81:8C:5E:10:5C:2D:44:9B:16:94:C1:39:E4:C8:70:BE:D5:F8:BA Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019B39B3ED2321987BE417F8B585EB98BBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft Manifest number: 0E6C Signing time: Sat 20 Dec 2025 03:00:51 +0000 Manifest this update: Sat 20 Dec 2025 03:00:51 +0000 Manifest next update: Sun 21 Dec 2025 03:00:51 +0000 Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=) 2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: AEGvVp135frl0QsNugmKDrtK4SmVVnpdGb+x3+EpUF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ed:23:21:98:7b:e4:17:f8:b5:85:eb:98:bb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Dec 20 03:00:51 2025 GMT Not After : Dec 21 03:00:51 2025 GMT Subject: CN=b1818c5e105c2d449b1694c139e4c870bed5f8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:af:d5:89:53:05:61:a1:83:61:d9:e8:d0: fe:7d:98:d8:e0:0b:9c:87:d4:eb:e5:29:52:93:29: 97:79:0d:16:f0:c4:a7:1a:5c:80:d6:39:57:ad:a4: 46:ad:30:ef:80:be:94:8c:94:19:1d:3c:88:d0:92: c7:a5:13:44:d9:cc:a2:1c:4d:3a:40:19:2a:2a:7d: ea:c9:3a:b1:80:9c:09:b0:c0:44:63:f1:09:25:ea: cc:15:ba:2e:5b:5f:f8:53:4f:f6:a8:b6:ee:a5:d9: 70:41:6b:0f:d4:85:74:92:0d:e4:58:e9:55:77:bd: 8b:08:cd:9e:88:f6:03:55:d1:2d:23:a7:2c:b2:2d: 1f:e1:69:99:d0:8f:56:9e:a7:26:cf:0d:ae:0b:db: 1a:93:b2:9a:b9:7b:11:67:63:a9:88:0d:bb:3f:da: e5:f6:d3:70:cb:20:02:f3:40:76:34:be:da:ca:32: a1:d3:80:97:e8:82:8e:af:03:a4:73:a2:0d:a5:3e: 85:55:05:68:56:21:d1:7a:89:70:d2:86:16:18:68: 1b:c1:bf:53:e7:42:20:39:94:bf:ec:8c:3b:8d:44: 2d:aa:18:2d:65:31:07:bb:2b:46:cf:d8:55:cf:0f: 09:4b:fe:9a:e6:f1:43:8d:72:20:2c:ee:98:03:38: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:8C:5E:10:5C:2D:44:9B:16:94:C1:39:E4:C8:70:BE:D5:F8:BA X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:76:2b:9b:bb:b8:32:58:69:7e:0c:8c:bb:4c:1a:f6:63:87: 42:6d:08:02:2a:4d:cd:13:6e:09:fc:4f:c6:46:0b:d7:60:5a: f6:0d:ff:a4:83:5f:ca:be:87:7a:a9:f4:99:1c:16:73:51:8e: fc:a7:75:b1:ba:4e:27:76:88:18:3a:ae:56:26:a8:72:d9:17: 6f:23:1b:0c:d8:8a:cd:a0:6e:26:d1:86:88:8d:6b:6c:6f:32: bb:72:fa:ff:f6:0f:ca:a0:9f:52:ad:f2:54:9f:ca:46:50:58: 58:67:b1:e1:73:e4:10:0a:6f:30:af:eb:30:08:2f:2a:10:18: 98:d8:c5:e5:47:bb:1d:16:95:6a:e0:60:35:6b:2b:fa:5b:07: fe:1a:cd:e6:e9:91:3d:1f:d2:c7:f5:3e:2a:2d:1e:f7:7d:2e: d3:74:50:e0:ff:bd:0f:c2:5d:f7:d4:59:f5:5e:e4:85:46:8b: ef:5f:15:be:05:ab:f9:d3:8c:8e:33:75:75:81:48:5b:66:cd: 2b:0f:10:a9:9d:2a:6b:fe:f2:36:70:9e:29:94:f8:03:b9:ec: 3b:b0:eb:b6:bd:00:c4:d1:f8:f0:73:4b:1d:b4:aa:00:ad:80: ac:21:66:fe:6d:7d:69:ee:8e:9f:cf:b7:77:92:ec:93:b4:07: bd:f0:a9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+0jIZh75Bf4tYXrmLvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjUxMjIwMDMwMDUxWhcNMjUxMjIxMDMwMDUxWjAzMTEwLwYDVQQD EyhiMTgxOGM1ZTEwNWMyZDQ0OWIxNjk0YzEzOWU0Yzg3MGJlZDVmOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJmv1YlTBWGhg2HZ6ND+fZjY4Auc h9Tr5SlSkymXeQ0W8MSnGlyA1jlXraRGrTDvgL6UjJQZHTyI0JLHpRNE2cyiHE06 QBkqKn3qyTqxgJwJsMBEY/EJJerMFbouW1/4U0/2qLbupdlwQWsP1IV0kg3kWOlV d72LCM2eiPYDVdEtI6cssi0f4WmZ0I9Wnqcmzw2uC9sak7KauXsRZ2OpiA27P9rl 9tNwyyAC80B2NL7ayjKh04CX6IKOrwOkc6INpT6FVQVoViHReolw0oYWGGgbwb9T 50IgOZS/7Iw7jUQtqhgtZTEHuytGz9hVzw8JS/6a5vFDjXIgLO6YAzgXjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGBjF4QXC1EmxaUwTnkyHC+1fi6MB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXYrm7u4 MlhpfgyMu0wa9mOHQm0IAipNzRNuCfxPxkYL12Ba9g3/pINfyr6Heqn0mRwWc1GO /Kd1sbpOJ3aIGDquViaoctkXbyMbDNiKzaBuJtGGiI1rbG8yu3L6//YPyqCfUq3y VJ/KRlBYWGex4XPkEApvMK/rMAgvKhAYmNjF5Ue7HRaVauBgNWsr+lsH/hrN5umR PR/Sx/U+Ki0e930u03RQ4P+9D8Jd99RZ9V7khUaL718VvgWr+dOMjjN1dYFIW2bN Kw8QqZ0qa/7yNnCeKZT4A7nsO7Drtr0AxNH48HNLHbSqAK2ArCFm/m19ae6On8+3 d5Lsk7QHvfCpnA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:02:58 2025 by rpki-client