This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json) Hash identifier: wnJnANI57Oh60LBaHC7HCrjjJ6WLHQDD5PORAYXpVoQ= Subject key identifier: 18:B8:44:0B:5E:DD:D8:3C:36:97:4C:A4:97:BC:B2:FF:56:6B:54:9C Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f Certificate serial: 019B5D53FF3EF14FC8E966AA64CC186BE5A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft Manifest number: 1796 Signing time: Sat 27 Dec 2025 01:02:24 +0000 Manifest this update: Sat 27 Dec 2025 01:02:24 +0000 Manifest next update: Sun 28 Dec 2025 01:02:24 +0000 Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: tDYzYrBQX5HltQN9iVJ4N/FeBaWveJ1ym0x+t+9mrCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:ff:3e:f1:4f:c8:e9:66:aa:64:cc:18:6b:e5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f Validity Not Before: Dec 27 01:02:24 2025 GMT Not After : Dec 28 01:02:24 2025 GMT Subject: CN=18b8440b5eddd83c36974ca497bcb2ff566b549c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:04:f2:af:eb:e5:90:a7:63:40:4f:5e:05: f7:fa:52:c6:76:51:fc:1d:f5:47:23:11:bd:ec:50: 46:91:6c:d2:29:21:c7:2b:8a:5f:5d:97:b6:ec:b4: a6:d6:91:aa:84:15:57:9f:0f:7f:61:40:f8:0e:00: 87:de:d6:d1:93:9f:df:b4:05:34:83:d0:cc:3c:c0: 14:83:fd:00:c1:c5:1c:df:e2:55:ae:55:b1:a9:da: cf:37:a7:a8:9c:fe:50:c3:c7:92:ca:0a:00:85:ea: e3:d1:a2:94:5b:eb:af:df:5c:3b:c7:c0:86:11:89: be:a5:f4:c4:c4:83:10:48:a6:77:63:a0:59:28:c3: 4d:34:20:44:38:8e:38:5b:8b:f0:04:82:a3:dc:9f: 50:be:f4:34:c8:cc:26:f3:40:2e:e2:27:c6:5f:61: 74:c7:a7:67:d1:df:42:6a:1b:0d:09:b5:14:b4:ef: ea:16:90:6f:5b:19:3f:2e:46:1e:cd:0d:bb:ee:10: aa:d4:97:f0:18:ac:52:c5:6f:f6:be:e4:d7:26:e6: 60:df:a7:2a:b6:0f:7b:48:cc:d8:8d:09:bf:f0:28: a2:50:49:c9:55:83:ca:bb:6d:92:d4:77:0e:9e:c6: ee:39:dd:d3:cf:d2:df:a8:84:f6:bf:cb:7a:55:0c: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:44:0B:5E:DD:D8:3C:36:97:4C:A4:97:BC:B2:FF:56:6B:54:9C X509v3 Authority Key Identifier: keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e2:b6:3b:72:28:34:7f:c6:29:b5:fa:4f:40:d0:f3:60:23: 67:ae:08:05:ef:64:6c:d1:e7:9e:0d:cd:89:90:a8:a3:fd:d8: 66:1d:a3:04:b7:84:0d:e5:a2:ff:2f:10:2d:e0:c4:8d:46:fa: 58:1f:3e:93:00:36:4c:85:70:43:04:ab:e8:3f:49:25:99:79: 45:9e:01:d6:91:dc:be:1a:21:4f:52:c7:b6:17:b2:1f:b6:7d: 16:33:fa:59:cc:6a:84:dc:6f:b0:9d:04:ea:f1:be:0f:d9:f6: e1:58:b1:67:22:7e:62:b4:41:d5:59:04:3d:d8:22:a2:53:b7: a7:28:78:43:05:1c:ca:5f:53:1f:24:77:32:c3:b5:c8:49:9a: 95:90:86:31:82:a0:d5:ee:5e:95:92:52:e6:d0:65:20:25:c8: 21:1a:91:90:16:12:06:d0:bb:b4:67:3d:90:57:18:ff:48:b1: da:7b:a4:c5:ec:2c:e3:35:87:b0:50:45:04:21:05:ae:8c:c5: 76:c6:e6:bd:b8:a0:fb:e4:8f:9f:85:06:27:7a:4e:7a:39:73: 58:82:1c:29:5b:4d:88:56:1a:9b:1f:ba:e4:97:04:83:28:80: dc:f7:84:e5:64:e3:bc:84:44:4a:1e:89:90:2d:93:a9:8d:bf: 8f:56:ec:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU/8+8U/I6WaqZMwYa+WjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTI0NDYyNjk3YTI3ZmU3YWI5NGI2YWNhOTA2NzkzMWQ5 MjEwMmYwHhcNMjUxMjI3MDEwMjI0WhcNMjUxMjI4MDEwMjI0WjAzMTEwLwYDVQQD EygxOGI4NDQwYjVlZGRkODNjMzY5NzRjYTQ5N2JjYjJmZjU2NmI1NDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5AE8q/r5ZCnY0BPXgX3+lLGdlH8 HfVHIxG97FBGkWzSKSHHK4pfXZe27LSm1pGqhBVXnw9/YUD4DgCH3tbRk5/ftAU0 g9DMPMAUg/0AwcUc3+JVrlWxqdrPN6eonP5Qw8eSygoAherj0aKUW+uv31w7x8CG EYm+pfTExIMQSKZ3Y6BZKMNNNCBEOI44W4vwBIKj3J9QvvQ0yMwm80Au4ifGX2F0 x6dn0d9CahsNCbUUtO/qFpBvWxk/LkYezQ277hCq1JfwGKxSxW/2vuTXJuZg36cq tg97SMzYjQm/8CiiUEnJVYPKu22S1HcOnsbuOd3Tz9LfqIT2v8t6VQx8KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi4RAte3dg8NpdMpJe8sv9Wa1ScMB8GA1UdIwQY MBaAFKFSRGJpeif+erlLasqQZ5MdkhAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGIt NGIxYWY0MTRmZDAwLzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGItNGIxYWY0MTRmZDAw LzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+K2O3Io NH/GKbX6T0DQ82AjZ64IBe9kbNHnng3NiZCoo/3YZh2jBLeEDeWi/y8QLeDEjUb6 WB8+kwA2TIVwQwSr6D9JJZl5RZ4B1pHcvhohT1LHtheyH7Z9FjP6WcxqhNxvsJ0E 6vG+D9n24VixZyJ+YrRB1VkEPdgiolO3pyh4QwUcyl9THyR3MsO1yEmalZCGMYKg 1e5elZJS5tBlICXIIRqRkBYSBtC7tGc9kFcY/0ix2nukxews4zWHsFBFBCEFrozF dsbmvbig++SPn4UGJ3pOejlzWIIcKVtNiFYamx+65JcEgyiA3PeE5WTjvIRESh6J kC2TqY2/j1bspg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:04:17 2025 by rpki-client