This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json) Hash identifier: S1Ij/MiaPMQFC/GbQ1594hyfjX1S6onD3zFKZtCDjb8= Subject key identifier: 1E:50:98:C5:07:DD:2C:93:B5:BE:21:1B:34:17:56:BD:AA:F1:8B:68 Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0 Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0 Certificate serial: 019B6CC629D292DBF8E8FA35AA666A1BC30E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 01:01:24 +0000 Manifest this update: Tue 30 Dec 2025 01:01:24 +0000 Manifest next update: Wed 31 Dec 2025 01:01:24 +0000 Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: bOpZydq1Bk97rnatBST7Qph8psrP/0wTMBVOOXjdzZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:29:d2:92:db:f8:e8:fa:35:aa:66:6a:1b:c3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0 Validity Not Before: Dec 30 01:01:24 2025 GMT Not After : Dec 31 01:01:24 2025 GMT Subject: CN=1e5098c507dd2c93b5be211b341756bdaaf18b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:e7:14:d0:03:43:9a:c2:33:4d:54:29:c1: 29:59:ba:77:eb:9a:98:40:55:79:6b:d9:73:6b:20: 54:4d:e7:d1:3a:97:cc:e8:7d:a2:c1:13:39:90:61: b1:c0:d7:2c:57:42:c7:eb:b2:6e:23:90:8b:74:c4: 0a:d0:20:0a:01:19:0a:0c:f7:fd:29:56:ff:e6:50: fb:72:69:3f:1d:cb:85:dc:f3:1b:61:84:26:2b:63: fe:84:cf:32:35:c5:b0:34:df:ff:9b:4b:5f:2b:4f: e1:82:4e:22:78:9c:4c:b6:73:23:94:2a:c1:59:17: 67:38:51:b9:ce:87:1f:9c:83:7c:65:f6:26:cc:18: b6:d7:05:08:97:9a:c4:f6:63:59:d8:e7:fd:e6:6d: 30:87:f1:f4:11:9b:3e:58:31:db:05:33:8e:ed:92: e9:30:13:e7:32:97:b0:04:5d:b5:0d:97:99:97:0e: 36:98:e1:86:0c:13:ca:8b:c1:cd:e2:89:72:7a:c7: 91:06:1d:b7:ca:51:e5:4c:48:36:de:8a:6a:1d:7b: 54:dd:d3:37:f2:7c:ae:7c:04:8a:f3:b4:80:ef:c5: b3:78:ef:5c:3e:26:15:82:2f:1e:37:39:af:f0:6d: e4:a3:66:36:a1:34:c0:9e:ce:70:96:8d:50:85:e3: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:98:C5:07:DD:2C:93:B5:BE:21:1B:34:17:56:BD:AA:F1:8B:68 X509v3 Authority Key Identifier: keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:07:7b:d6:e8:a1:9e:46:97:ac:91:c5:0b:18:73:03:d9:59: 66:d2:d8:5e:58:11:1c:51:ca:2e:81:66:9a:40:03:1b:1c:f0: ba:85:47:d9:d1:78:f4:8c:38:04:28:97:28:03:b0:32:4c:07: 08:9c:39:b3:79:79:e4:39:0b:c9:5b:9c:b7:cc:eb:1a:aa:58: 4b:a3:b9:f4:cb:eb:15:68:ff:39:c9:20:d2:aa:94:97:c6:24: a9:72:40:ec:87:75:7e:11:a2:be:0e:0a:5b:73:ce:55:23:88: 14:26:aa:94:06:bc:cf:8e:65:53:f2:0f:7c:73:e9:1f:a8:52: a7:90:1e:71:79:c2:50:61:9e:c3:ca:0d:ec:5f:14:b3:3f:a0: c1:75:de:81:4a:87:d2:d0:f8:1f:99:76:4c:e5:8d:09:5a:04: 0f:84:7c:02:83:75:49:e0:3a:04:70:73:fb:65:34:8f:df:74: 39:73:4f:3e:36:a4:6c:3c:23:db:85:9d:86:3e:d6:a2:01:82: 2d:21:29:a7:a1:6d:64:f6:80:4d:ef:10:aa:3e:a6:bc:e3:0f: 3f:41:50:4c:f6:90:b1:ff:0e:64:b6:31:86:83:04:62:1a:e1: 16:15:7f:56:e0:c1:60:24:ce:47:db:f3:6a:aa:30:30:df:9d: 20:67:fc:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxinSktv46Po1qmZqG8MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTBmZTkzZjQ3ZjgzODc5YWUyY2I4MzU0ODhjZDlmN2Q2 OTliYzAwHhcNMjUxMjMwMDEwMTI0WhcNMjUxMjMxMDEwMTI0WjAzMTEwLwYDVQQD EygxZTUwOThjNTA3ZGQyYzkzYjViZTIxMWIzNDE3NTZiZGFhZjE4YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzznFNADQ5rCM01UKcEpWbp365qY QFV5a9lzayBUTefROpfM6H2iwRM5kGGxwNcsV0LH67JuI5CLdMQK0CAKARkKDPf9 KVb/5lD7cmk/HcuF3PMbYYQmK2P+hM8yNcWwNN//m0tfK0/hgk4ieJxMtnMjlCrB WRdnOFG5zocfnIN8ZfYmzBi21wUIl5rE9mNZ2Of95m0wh/H0EZs+WDHbBTOO7ZLp MBPnMpewBF21DZeZlw42mOGGDBPKi8HN4olyeseRBh23ylHlTEg23opqHXtU3dM3 8nyufASK87SA78WzeO9cPiYVgi8eNzmv8G3ko2Y2oTTAns5wlo1QhePTbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5QmMUH3SyTtb4hGzQXVr2q8YtoMB8GA1UdIwQY MBaAFKCQ/pP0f4OHmuLLg1SIzZ99aZvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjIt MjU3ODFlMTE2NzgyLzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjItMjU3ODFlMTE2Nzgy LzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQd71uih nkaXrJHFCxhzA9lZZtLYXlgRHFHKLoFmmkADGxzwuoVH2dF49Iw4BCiXKAOwMkwH CJw5s3l55DkLyVuct8zrGqpYS6O59MvrFWj/Ockg0qqUl8YkqXJA7Id1fhGivg4K W3POVSOIFCaqlAa8z45lU/IPfHPpH6hSp5AecXnCUGGew8oN7F8Usz+gwXXegUqH 0tD4H5l2TOWNCVoED4R8AoN1SeA6BHBz+2U0j990OXNPPjakbDwj24Wdhj7WogGC LSEpp6FtZPaATe8Qqj6mvOMPP0FQTPaQsf8OZLYxhoMEYhrhFhV/VuDBYCTOR9vz aqowMN+dIGf8Ow== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:33 2025 by rpki-client