This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft File: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json) Hash identifier: wTtFjAa4K8s56fijxmZ6v5BnrswxJ66XIlDu+Si5FEA= Subject key identifier: 48:57:B1:0D:C7:F3:5B:27:8D:F6:DD:FF:32:7B:82:A1:16:1F:9D:08 Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2 Certificate issuer: /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2 Certificate serial: 019B4DE095632A61E324A5CFED270FAE14FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft Manifest number: 1775 Signing time: Wed 24 Dec 2025 01:02:02 +0000 Manifest this update: Wed 24 Dec 2025 01:02:02 +0000 Manifest next update: Thu 25 Dec 2025 01:02:02 +0000 Files and hashes: 1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: GpKuWBhyA+4kSlrmj9H3IVtsSaaONufUq9MDoNXRICQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:95:63:2a:61:e3:24:a5:cf:ed:27:0f:ae:14:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2 Validity Not Before: Dec 24 01:02:02 2025 GMT Not After : Dec 25 01:02:02 2025 GMT Subject: CN=4857b10dc7f35b278df6ddff327b82a1161f9d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:ad:84:28:00:fd:67:69:76:c7:c0:0f:39: 91:72:49:51:79:b8:54:ed:e4:6e:37:2a:0f:aa:dd: 55:d9:ae:d1:f8:1f:2e:c2:93:a9:c3:92:b9:0f:27: cb:d2:c4:ba:39:21:b9:fb:10:27:5d:be:43:99:95: 5c:58:c8:5a:c5:87:5c:69:ea:76:1f:33:b8:f8:62: c5:c5:55:ea:0b:b8:62:95:08:87:e3:4c:5c:45:5b: d9:89:3f:ca:7b:70:1c:e0:db:fe:85:13:b1:90:73: 54:6d:05:f1:6e:fe:bb:43:a7:fe:cf:28:4c:a9:53: 8c:4d:a2:d0:30:ef:bb:cc:8b:ab:1a:86:9e:3b:2e: cb:66:f6:c0:31:da:d3:04:98:a4:11:d9:96:cc:73: 5f:00:9d:77:0c:ff:bc:19:0a:cd:2e:c6:26:78:90: f3:8b:a0:70:de:a7:3c:0e:7d:12:ea:31:df:48:91: 83:d3:88:6e:98:76:a6:ca:ad:00:ab:d9:4d:d3:8a: c3:36:78:11:4e:88:37:fe:8a:a3:44:16:2e:dd:c5: f2:09:fb:6f:f8:ce:1f:2e:ea:bf:97:c5:e4:ec:cc: 9e:49:cc:6d:98:08:56:a6:91:ef:37:cc:97:fb:5b: 83:4c:59:79:56:b8:f8:24:34:86:a9:32:c2:cf:a7: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:B1:0D:C7:F3:5B:27:8D:F6:DD:FF:32:7B:82:A1:16:1F:9D:08 X509v3 Authority Key Identifier: keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:b0:d6:32:56:86:3d:b6:e1:89:2b:60:2a:53:7f:52:b3: 5a:91:61:55:1c:f5:ce:27:1e:08:ac:50:b3:0f:16:80:7a:d2: a5:56:4d:b8:e7:28:07:5f:9d:a0:dd:12:00:84:d2:d7:e2:ee: 67:db:7c:66:5f:a2:62:51:ff:db:e1:33:72:89:82:a1:9b:af: 52:61:6b:94:d5:ea:2a:c2:5a:78:a0:cc:43:1f:93:b5:c4:a8: 5d:80:ca:96:9d:65:86:5d:ed:68:2f:76:7e:6b:01:d6:b8:14: 2f:da:6d:dc:1b:d0:91:03:b8:ea:5f:cb:7c:4b:33:1f:62:e6: b9:cb:bc:4d:bb:84:53:da:17:40:66:1e:1c:9c:3b:90:5c:80: 12:21:77:e3:b7:53:38:8f:b5:0d:9e:1d:57:e9:23:7d:d0:4f: 52:ea:0b:36:0d:ef:c9:dc:11:c3:af:9f:ea:87:64:58:45:46: 2c:b6:b0:98:e8:2d:49:01:6a:2d:ab:9f:6d:61:77:0d:95:7f: f3:ca:b5:af:74:e5:46:31:8f:66:fe:2a:d9:39:66:d9:8c:04: 9f:82:c5:e3:32:1b:6c:2b:f6:60:28:18:67:44:a3:c8:21:0f: 3f:04:39:e2:96:d4:bc:b1:cf:c7:88:47:d0:aa:5d:88:12:a2: 82:d2:6e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4JVjKmHjJKXP7ScPrhT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTFlNmVhNTI3ZGMzODVhNzlhM2UwODgyN2RiZjY5MGM5 MWM0YzIwHhcNMjUxMjI0MDEwMjAyWhcNMjUxMjI1MDEwMjAyWjAzMTEwLwYDVQQD Eyg0ODU3YjEwZGM3ZjM1YjI3OGRmNmRkZmYzMjdiODJhMTE2MWY5ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAuthCgA/WdpdsfADzmRcklRebhU 7eRuNyoPqt1V2a7R+B8uwpOpw5K5DyfL0sS6OSG5+xAnXb5DmZVcWMhaxYdcaep2 HzO4+GLFxVXqC7hilQiH40xcRVvZiT/Ke3Ac4Nv+hROxkHNUbQXxbv67Q6f+zyhM qVOMTaLQMO+7zIurGoaeOy7LZvbAMdrTBJikEdmWzHNfAJ13DP+8GQrNLsYmeJDz i6Bw3qc8Dn0S6jHfSJGD04humHamyq0Aq9lN04rDNngRTog3/oqjRBYu3cXyCftv +M4fLuq/l8Xk7MyeScxtmAhWppHvN8yX+1uDTFl5Vrj4JDSGqTLCz6dh1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhXsQ3H81snjfbd/zJ7gqEWH50IMB8GA1UdIwQY MBaAFGjh5upSfcOFp5o+CIJ9v2kMkcTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4Mzkt MTdkMDk3ZmY4OWMyLzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4MzktMTdkMDk3ZmY4OWMy LzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTKw1jJW hj224YkrYCpTf1KzWpFhVRz1ziceCKxQsw8WgHrSpVZNuOcoB1+doN0SAITS1+Lu Z9t8Zl+iYlH/2+EzcomCoZuvUmFrlNXqKsJaeKDMQx+TtcSoXYDKlp1lhl3taC92 fmsB1rgUL9pt3BvQkQO46l/LfEszH2Lmucu8TbuEU9oXQGYeHJw7kFyAEiF347dT OI+1DZ4dV+kjfdBPUuoLNg3vydwRw6+f6odkWEVGLLawmOgtSQFqLaufbWF3DZV/ 88q1r3TlRjGPZv4q2Tlm2YwEn4LF4zIbbCv2YCgYZ0SjyCEPPwQ54pbUvLHPx4hH 0KpdiBKigtJuLg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:57 2025 by rpki-client