This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json) Hash identifier: wlNhukJ3+8l/uglxLBCKlZYTC78ZncilpVo5pQdbNs0= Subject key identifier: 41:17:36:55:3C:80:34:9D:3D:ED:A3:19:01:81:48:92:07:27:61:79 Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Certificate serial: 019B3DFE48240B494A2EECBD6563252A6FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft Manifest number: 1319 Signing time: Sat 20 Dec 2025 23:00:33 +0000 Manifest this update: Sat 20 Dec 2025 23:00:33 +0000 Manifest next update: Sun 21 Dec 2025 23:00:33 +0000 Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: NVWOFdvwoBxnfOWt/2bGRPYjiq8svOOyaYQTqfeHJbc=) 2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:48:24:0b:49:4a:2e:ec:bd:65:63:25:2a:6f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Validity Not Before: Dec 20 23:00:33 2025 GMT Not After : Dec 21 23:00:33 2025 GMT Subject: CN=411736553c80349d3deda3190181489207276179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:73:e0:ae:49:37:1a:b7:91:0e:7d:d3:39:e8: 60:94:5f:0f:69:99:6a:f7:aa:6a:72:9e:52:e7:18: 0f:99:bf:31:6c:74:a3:ee:a0:8f:29:38:d3:fa:47: 34:55:2f:bb:48:be:88:1c:d3:f8:52:8f:eb:f2:0b: 4f:fe:fb:61:c0:38:0d:a8:1e:44:32:67:ef:44:73: c3:59:8c:96:14:10:cb:47:9c:d6:85:ef:81:ff:e7: c8:ab:d2:6e:2e:7f:4a:c3:e3:32:aa:1d:a2:d4:14: 76:2f:73:d5:c1:72:98:18:8a:cd:d3:27:a5:41:d3: d3:ec:bb:72:f9:e2:16:7d:f6:0d:cc:28:2f:a9:5c: 85:a0:96:a5:0d:2b:82:61:55:dc:88:f8:fd:c7:2e: bb:73:2b:58:99:2d:7f:a6:ca:d4:db:63:ab:59:82: 6a:a6:4d:f4:89:a5:4d:e3:c7:54:92:78:ce:97:d2: d9:e4:bb:fb:6b:c7:46:99:95:e6:5e:f8:fa:21:d6: 91:ea:4a:e9:89:75:0a:2e:7d:c4:28:ca:5b:4f:99: c2:25:ce:49:91:6d:02:1b:1b:61:81:0c:fe:8e:92: 70:9c:4e:59:2a:5c:9b:35:17:ae:9e:e2:02:9e:f7: cf:da:e0:ea:59:2b:f3:48:40:0b:71:b7:e1:dc:74: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:36:55:3C:80:34:9D:3D:ED:A3:19:01:81:48:92:07:27:61:79 X509v3 Authority Key Identifier: keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0e:22:d4:dc:6c:f7:c1:fc:45:43:54:9d:61:50:2c:84:e9: 9a:6c:63:b4:a4:05:8b:2e:95:3e:fa:cd:2b:de:48:d5:79:c2: 58:56:ce:c4:f2:27:a6:ed:60:6d:e3:73:fb:c4:c0:d4:a2:d1: 57:ad:36:a1:67:83:20:e4:3b:bc:e2:f7:f3:71:08:05:8f:7b: 03:c5:cb:ed:47:c6:f0:86:26:ab:67:4b:ae:0e:41:14:b8:74: 10:bf:b7:7a:6d:c2:6c:c2:58:f6:d2:dc:13:11:f6:43:c1:c1: ea:2a:d7:48:75:24:1c:a3:c9:89:72:03:c0:45:30:cd:52:7b: 0c:c7:ed:16:6d:ca:71:b3:3d:a0:e8:28:cb:c5:36:2b:0d:71: 55:16:ed:9e:e2:d6:13:f6:47:54:17:8d:a2:c4:d7:42:a0:83: 80:b4:3b:e3:0f:af:63:62:db:0f:18:d2:11:cf:2e:f2:9c:8f: f7:19:69:fe:42:91:4d:3c:8b:4a:86:54:e4:79:ce:22:ef:16: a2:2e:73:82:6a:d0:b3:d9:ef:c7:5f:05:94:f5:a8:bb:65:d2: f3:fb:f2:14:65:65:df:40:3b:e1:67:49:47:dd:9c:98:a1:69: 57:0c:dc:20:34:40:ad:b6:56:2e:8b:3f:2a:75:3f:72:94:ac: 9e:8d:6c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/kgkC0lKLuy9ZWMlKm/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0 YjI0ZGYwHhcNMjUxMjIwMjMwMDMzWhcNMjUxMjIxMjMwMDMzWjAzMTEwLwYDVQQD Eyg0MTE3MzY1NTNjODAzNDlkM2RlZGEzMTkwMTgxNDg5MjA3Mjc2MTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XPgrkk3GreRDn3TOehglF8PaZlq 96pqcp5S5xgPmb8xbHSj7qCPKTjT+kc0VS+7SL6IHNP4Uo/r8gtP/vthwDgNqB5E MmfvRHPDWYyWFBDLR5zWhe+B/+fIq9JuLn9Kw+Myqh2i1BR2L3PVwXKYGIrN0yel QdPT7Lty+eIWffYNzCgvqVyFoJalDSuCYVXciPj9xy67cytYmS1/psrU22OrWYJq pk30iaVN48dUknjOl9LZ5Lv7a8dGmZXmXvj6IdaR6krpiXUKLn3EKMpbT5nCJc5J kW0CGxthgQz+jpJwnE5ZKlybNReunuICnvfP2uDqWSvzSEALcbfh3HTKbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEXNlU8gDSdPe2jGQGBSJIHJ2F5MB8GA1UdIwQY MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5 LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACA4i1Nxs 98H8RUNUnWFQLITpmmxjtKQFiy6VPvrNK95I1XnCWFbOxPInpu1gbeNz+8TA1KLR V602oWeDIOQ7vOL383EIBY97A8XL7UfG8IYmq2dLrg5BFLh0EL+3em3CbMJY9tLc ExH2Q8HB6irXSHUkHKPJiXIDwEUwzVJ7DMftFm3KcbM9oOgoy8U2Kw1xVRbtnuLW E/ZHVBeNosTXQqCDgLQ74w+vY2LbDxjSEc8u8pyP9xlp/kKRTTyLSoZU5HnOIu8W oi5zgmrQs9nvx18FlPWou2XS8/vyFGVl30A74WdJR92cmKFpVwzcIDRArbZWLos/ KnU/cpSsno1srQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:34 2025 by rpki-client