This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json) Hash identifier: mQMCRglTZXEtxgeHOjI6pDjkBCbZd944jONutFpE0Pc= Subject key identifier: 13:1E:35:B3:5C:7A:FE:66:B4:14:C7:62:4D:FA:C6:78:BE:FC:89:94 Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d Certificate serial: 019B4DE0DE397163EE67DD0F46001EB8ADD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft Manifest number: 0B50 Signing time: Wed 24 Dec 2025 01:02:21 +0000 Manifest this update: Wed 24 Dec 2025 01:02:21 +0000 Manifest next update: Thu 25 Dec 2025 01:02:21 +0000 Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: QNOnCnL+zyLhWfwtt9h/UBlvjMahXFduqqi4Wu0FeAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:de:39:71:63:ee:67:dd:0f:46:00:1e:b8:ad:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d Validity Not Before: Dec 24 01:02:21 2025 GMT Not After : Dec 25 01:02:21 2025 GMT Subject: CN=131e35b35c7afe66b414c7624dfac678befc8994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:bd:fe:2d:53:d9:54:7c:82:96:25:8a:6c: 36:fa:f3:b5:d9:7c:c8:9c:87:fd:0c:a6:96:a0:b9: d0:fb:3f:c4:cd:4e:3e:ce:b3:b0:cc:21:e3:ef:14: 94:95:61:3d:3b:44:ea:c0:0d:05:21:d7:42:f8:eb: 51:3f:e2:33:c3:3a:fb:f8:d2:ca:01:44:d0:65:5a: 5c:14:a6:67:ff:9f:ce:f9:76:68:fc:fc:e9:9a:ca: 79:e8:49:4d:40:9e:67:b8:03:c1:d5:80:77:9b:31: 88:b5:c9:3b:e1:a7:29:1a:5c:1b:e6:94:d0:1a:7b: 82:cb:4c:6c:3d:f3:d6:ef:cf:07:85:27:9a:30:90: cf:fe:98:15:9f:e4:26:57:57:f5:5a:a1:2d:72:0d: 05:1e:66:12:f7:74:7a:43:0c:9d:89:f7:b9:ba:bd: 37:95:6f:cc:c3:50:83:44:fd:67:0b:43:54:52:db: 3c:0f:7b:12:c3:e5:d4:21:d8:61:4d:eb:94:c3:2e: 26:a8:a1:aa:d2:0f:32:fc:5c:f9:d5:65:a8:3d:c1: f6:7e:ec:34:45:38:c0:d7:11:52:3e:7e:d6:0d:38: bb:0f:27:53:9b:08:59:f4:2e:f7:3f:fc:4f:27:3d: ab:c0:ee:72:c9:3f:5b:68:75:d9:58:54:da:64:42: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1E:35:B3:5C:7A:FE:66:B4:14:C7:62:4D:FA:C6:78:BE:FC:89:94 X509v3 Authority Key Identifier: keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:65:4b:6b:ab:e1:92:87:b4:f1:e7:ee:72:d3:13:50:40:90: f1:ba:c1:0c:66:f0:b3:08:2a:99:17:dd:a2:96:5d:d7:9d:58: 39:37:97:f0:1d:29:60:b6:ce:88:92:ca:9b:c8:11:a4:c6:c1: 3f:60:72:27:b3:c8:d2:2f:e8:53:65:42:e0:51:44:b5:f5:6e: aa:13:76:66:87:ac:59:05:1c:e6:b3:6c:13:29:e4:b5:57:1f: d6:3c:7c:03:62:0b:7b:97:b8:26:c8:48:05:18:5a:a0:37:41: 0a:47:01:55:7f:61:66:8f:70:50:59:2d:8e:c9:1b:d9:f1:2f: 72:f6:69:f8:9f:c1:e6:b6:8e:56:b3:e5:19:3a:5c:23:8d:dc: 08:09:03:f3:e5:0f:9b:78:d3:37:34:1f:d4:bf:2b:f8:70:c7: f3:51:98:59:51:14:da:50:4d:f1:17:63:51:63:50:dd:21:18: 21:10:cb:bd:cc:25:fe:e0:02:d0:7a:ac:4c:ee:83:7e:61:e2: 68:f1:ab:07:de:3d:b2:16:97:da:c4:e6:8d:33:20:45:1b:c1: 55:61:f2:c3:60:c8:dc:4e:af:71:60:0b:a6:77:b2:ea:e0:96: 4f:6c:85:40:b1:c6:d8:8f:dc:08:33:0f:77:f3:44:af:8a:74: 11:30:06:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4N45cWPuZ90PRgAeuK3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2NiZGRmZDc5MjA2ZDY1YzRlZTgxNjhlYWY2ZTcwOTAy MGY5NWQwHhcNMjUxMjI0MDEwMjIxWhcNMjUxMjI1MDEwMjIxWjAzMTEwLwYDVQQD EygxMzFlMzViMzVjN2FmZTY2YjQxNGM3NjI0ZGZhYzY3OGJlZmM4OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv929/i1T2VR8gpYlimw2+vO12XzI nIf9DKaWoLnQ+z/EzU4+zrOwzCHj7xSUlWE9O0TqwA0FIddC+OtRP+Izwzr7+NLK AUTQZVpcFKZn/5/O+XZo/Pzpmsp56ElNQJ5nuAPB1YB3mzGItck74acpGlwb5pTQ GnuCy0xsPfPW788HhSeaMJDP/pgVn+QmV1f1WqEtcg0FHmYS93R6Qwydife5ur03 lW/Mw1CDRP1nC0NUUts8D3sSw+XUIdhhTeuUwy4mqKGq0g8y/Fz51WWoPcH2fuw0 RTjA1xFSPn7WDTi7DydTmwhZ9C73P/xPJz2rwO5yyT9baHXZWFTaZEKJFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMeNbNcev5mtBTHYk36xni+/ImUMB8GA1UdIwQY MBaAFDl8vd/XkgbWXE7oFo6vbnCQIPldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2Mt YTZiMGZkZTIxOTA2LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2MtYTZiMGZkZTIxOTA2 LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2VLa6vh koe08efuctMTUECQ8brBDGbwswgqmRfdopZd151YOTeX8B0pYLbOiJLKm8gRpMbB P2ByJ7PI0i/oU2VC4FFEtfVuqhN2ZoesWQUc5rNsEynktVcf1jx8A2ILe5e4JshI BRhaoDdBCkcBVX9hZo9wUFktjskb2fEvcvZp+J/B5raOVrPlGTpcI43cCAkD8+UP m3jTNzQf1L8r+HDH81GYWVEU2lBN8RdjUWNQ3SEYIRDLvcwl/uAC0HqsTO6DfmHi aPGrB949shaX2sTmjTMgRRvBVWHyw2DI3E6vcWALpney6uCWT2yFQLHG2I/cCDMP d/NEr4p0ETAGwA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:38 2025 by rpki-client