This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft File: OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json) Hash identifier: P6ZfzehWTToQKcZiuKpOswpiPbBjS63FkwJSQriDKMg= Subject key identifier: 8A:FC:1C:CF:8D:C9:CC:77:91:4D:2D:BD:BF:A3:6D:91:BD:2A:08:3E Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6 Certificate issuer: /CN=3a82dc5c71cea72c65b026a126789f3886570ba6 Certificate serial: 019B4FCFB1C3CDC4462CD396B8FF9B1124D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 10:02:49 +0000 Manifest this update: Wed 24 Dec 2025 10:02:49 +0000 Manifest next update: Thu 25 Dec 2025 10:02:49 +0000 Files and hashes: 1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: IbRcFyqdPcXowVmkrh6MciE/KJEJyWM/8yPBy9zn2Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:b1:c3:cd:c4:46:2c:d3:96:b8:ff:9b:11:24:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6 Validity Not Before: Dec 24 10:02:49 2025 GMT Not After : Dec 25 10:02:49 2025 GMT Subject: CN=8afc1ccf8dc9cc77914d2dbdbfa36d91bd2a083e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:5e:05:bc:fe:fa:83:6b:53:14:b9:78:fe: e9:7b:bc:69:b7:fe:08:62:32:5a:79:02:0d:e1:05: 12:0d:c9:7c:58:36:e5:c0:1d:da:d5:30:e1:95:de: cc:c1:95:c0:ff:89:db:c4:26:78:93:e9:b6:2d:73: 89:8e:83:86:1d:a8:f7:3d:30:88:34:f6:4d:a3:8c: 8e:bc:e0:dc:43:b5:f1:61:5b:54:54:7e:0d:cb:86: 45:e6:a3:05:44:ff:fc:c9:74:ee:d1:4d:94:3e:75: 64:74:8b:db:2f:8e:3b:a8:85:d9:9c:e1:55:d4:bc: 44:3e:dd:fb:7b:eb:be:b3:02:19:2a:eb:d4:0b:e0: 3b:81:04:e0:3f:92:95:4c:d5:34:64:d9:92:23:a9: c1:af:78:13:87:d9:be:cd:80:14:e2:ea:97:9f:76: 16:e7:a0:7c:92:d7:e7:c6:ee:59:66:af:15:0c:a1: f4:c6:73:69:bc:c6:ec:33:d5:ec:82:64:24:23:dc: ba:b7:48:01:6d:ff:3b:f9:cb:2a:78:86:57:23:16: 06:6b:d3:d2:86:47:cc:ce:3a:22:83:bc:4c:43:13: 06:db:0e:3b:3c:dd:66:ff:44:61:33:eb:07:ce:60: be:90:ea:2b:46:27:55:a9:13:fb:aa:0c:d0:da:8a: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FC:1C:CF:8D:C9:CC:77:91:4D:2D:BD:BF:A3:6D:91:BD:2A:08:3E X509v3 Authority Key Identifier: keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:41:93:e4:57:90:3a:56:e3:55:4f:d9:de:4d:8b:da:f6:de: aa:51:6e:39:75:fb:77:54:56:60:26:f4:20:a4:5a:f8:2e:a9: 4b:df:0b:2d:a5:37:21:ae:b1:49:7a:33:fe:b5:71:c9:dd:ea: 45:e0:7b:cc:9d:39:4d:f1:15:9d:c5:18:d1:b3:ad:16:a6:94: 78:c5:7c:53:ce:24:3a:50:d2:5a:e5:a1:f0:0d:1b:57:fd:11: 7f:02:82:82:97:e1:d7:dd:59:da:88:09:09:d8:a6:74:34:18: 0b:82:c6:31:50:b1:11:bb:3b:f6:a2:e0:a9:1d:a7:f6:10:ba: 4f:e4:3f:ad:e6:ff:e6:cb:e8:4a:cb:5a:05:76:52:e1:4b:ad: 6a:72:fc:e5:45:6c:32:f9:35:36:af:4b:72:84:15:2d:01:11: 11:4b:90:c2:f1:dc:6d:98:1a:69:56:fb:69:88:44:20:57:25: 3f:8d:35:bc:6d:d1:8e:bc:d8:c8:d2:2f:7e:7f:ed:07:52:dc: 76:10:eb:e7:cc:68:52:eb:18:16:8e:cf:2d:50:7a:0d:dc:f5: 72:d2:d1:9d:2a:0c:14:e2:6d:96:6b:d9:ff:53:5f:de:b4:0b: 94:49:c5:8e:6d:f1:6b:25:03:54:fc:64:54:24:ec:b5:ac:0c: 82:c0:b2:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz7HDzcRGLNOWuP+bESTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhODJkYzVjNzFjZWE3MmM2NWIwMjZhMTI2Nzg5ZjM4ODY1 NzBiYTYwHhcNMjUxMjI0MTAwMjQ5WhcNMjUxMjI1MTAwMjQ5WjAzMTEwLwYDVQQD Eyg4YWZjMWNjZjhkYzljYzc3OTE0ZDJkYmRiZmEzNmQ5MWJkMmEwODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppdeBbz++oNrUxS5eP7pe7xpt/4I YjJaeQIN4QUSDcl8WDblwB3a1TDhld7MwZXA/4nbxCZ4k+m2LXOJjoOGHaj3PTCI NPZNo4yOvODcQ7XxYVtUVH4Ny4ZF5qMFRP/8yXTu0U2UPnVkdIvbL447qIXZnOFV 1LxEPt37e+u+swIZKuvUC+A7gQTgP5KVTNU0ZNmSI6nBr3gTh9m+zYAU4uqXn3YW 56B8ktfnxu5ZZq8VDKH0xnNpvMbsM9XsgmQkI9y6t0gBbf87+csqeIZXIxYGa9PS hkfMzjoig7xMQxMG2w47PN1m/0RhM+sHzmC+kOorRidVqRP7qgzQ2oqx2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr8HM+Nycx3kU0tvb+jbZG9Kgg+MB8GA1UdIwQY MBaAFDqC3FxxzqcsZbAmoSZ4nziGVwumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT29MY1hISE9weXhsc0NhaEpuaWZPSVpYQzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNTk1OGMtMTRjYS00MWQ1LThkNDIt ZGMxZmFiNDM5ZTMwLzEvT29MY1hISE9weXhsc0NhaEpuaWZPSVpYQzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kNTk1OGMtMTRjYS00MWQ1LThkNDItZGMxZmFiNDM5ZTMw LzEvT29MY1hISE9weXhsc0NhaEpuaWZPSVpYQzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEGT5FeQ OlbjVU/Z3k2L2vbeqlFuOXX7d1RWYCb0IKRa+C6pS98LLaU3Ia6xSXoz/rVxyd3q ReB7zJ05TfEVncUY0bOtFqaUeMV8U84kOlDSWuWh8A0bV/0RfwKCgpfh191Z2ogJ CdimdDQYC4LGMVCxEbs79qLgqR2n9hC6T+Q/reb/5svoSstaBXZS4UutanL85UVs Mvk1Nq9LcoQVLQEREUuQwvHcbZgaaVb7aYhEIFclP401vG3RjrzYyNIvfn/tB1Lc dhDr58xoUusYFo7PLVB6Ddz1ctLRnSoMFOJtlmvZ/1Nf3rQLlEnFjm3xayUDVPxk VCTstawMgsCyYw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:57 2025 by rpki-client