This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft File: OXqyKGxnhx2rRXpygyl_yMaIpK8.mft (raw, json) Hash identifier: ub0hQnRS+pLFzw16IO+XJX/PGabMiGzD+d9rIBFSgEs= Subject key identifier: 93:A5:84:B9:A2:5C:D0:1C:21:4B:7E:DA:D5:B9:02:CC:38:9D:9F:62 Authority key identifier: 39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF Certificate issuer: /CN=397ab2286c67871dab457a7283297fc8c688a4af Certificate serial: 019B4C95B8B032881DD3BDA582ED2BC40449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 19:00:38 +0000 Manifest this update: Tue 23 Dec 2025 19:00:38 +0000 Manifest next update: Wed 24 Dec 2025 19:00:38 +0000 Files and hashes: 1: OXqyKGxnhx2rRXpygyl_yMaIpK8.crl (hash: dP0e6uLJQ/LNfcRO+hpy1V8h4Y7MeWCGZwl1c99nnhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:b8:b0:32:88:1d:d3:bd:a5:82:ed:2b:c4:04:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397ab2286c67871dab457a7283297fc8c688a4af Validity Not Before: Dec 23 19:00:38 2025 GMT Not After : Dec 24 19:00:38 2025 GMT Subject: CN=93a584b9a25cd01c214b7edad5b902cc389d9f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:2e:02:7c:b5:6e:ec:c3:2e:89:b7:77:ba: 02:c7:f2:9e:6d:45:74:42:32:61:25:ce:7a:2d:f4: c8:5a:7e:2a:97:82:22:5e:5a:2e:cb:65:09:ae:82: 12:6f:47:74:77:81:89:e7:24:4a:e6:4f:3e:62:31: 63:a4:31:e5:84:4f:30:1d:3d:3b:f6:41:a2:96:7a: 8b:93:18:0c:07:97:82:4b:60:b8:39:f6:2e:27:78: 1b:cf:37:f6:69:dd:b1:5f:15:a6:7c:9d:91:32:2d: ba:83:19:bc:95:6c:9f:62:62:6b:f0:d7:3c:e1:db: 3e:b1:36:ea:96:2f:34:a5:58:93:cb:f9:7b:3a:86: 43:4a:b9:37:db:27:ac:b3:6f:40:3f:0d:59:9c:e8: a0:ba:8d:7f:7b:5c:26:ba:8d:bf:65:d2:58:f0:fc: a0:0a:bd:b0:17:c4:69:7b:81:a4:35:e7:69:ba:9b: 01:27:81:69:67:a1:2a:46:81:95:3b:f4:88:b7:9c: 6f:12:b2:a8:0a:54:46:00:2c:94:5b:22:e8:b4:1a: 63:1b:d6:4a:8b:d5:ec:66:7f:4d:7c:28:09:2b:5f: 87:7f:16:3c:a2:83:11:28:f3:5f:2c:aa:7a:50:05: ed:86:6a:c5:5d:2a:f5:0c:a8:b6:a6:46:98:83:3e: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:84:B9:A2:5C:D0:1C:21:4B:7E:DA:D5:B9:02:CC:38:9D:9F:62 X509v3 Authority Key Identifier: keyid:39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:99:18:6d:75:b0:6c:64:0b:70:67:49:2c:dc:63:c4:1d:d0: c4:6d:e7:fd:a9:5c:ac:02:37:04:ff:43:42:bd:af:7b:b6:40: 82:65:17:f4:9d:d6:b1:2d:33:65:67:4e:79:75:14:6d:58:1e: 3b:2b:a1:17:63:ba:f7:1a:e0:dd:7b:06:42:a0:74:54:15:4a: a5:84:d4:88:c7:b1:df:a1:92:20:8a:c5:65:0d:34:89:63:cc: 5a:5b:a5:9c:8b:bf:b3:11:31:a2:1b:0b:72:00:b0:7d:21:1e: 1c:86:d0:36:c6:b4:86:25:b0:da:bc:a7:30:03:85:29:80:4f: c0:bd:71:45:ac:77:4a:52:15:3f:b8:73:4f:c6:5c:6c:44:e5: 4c:81:9c:06:b5:53:76:a3:5f:28:0f:f0:20:6b:5c:93:a8:41: 0d:7d:6f:40:78:e4:e7:1e:f4:fd:b7:ab:7c:29:a3:d8:bf:00: 01:ea:90:6b:c9:34:7b:de:30:21:95:c0:7f:e0:d2:f0:bf:c0: 37:b0:fe:99:b9:b9:0a:82:eb:1f:1b:3c:6e:4e:a4:e2:92:15: a8:11:e1:5b:35:5c:52:76:21:e1:e5:96:6c:93:f5:a7:1e:74: eb:3e:3c:40:bc:86:19:37:21:4b:a5:20:41:fc:76:7d:92:4a: 91:32:2f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlbiwMogd072lgu0rxARJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2FiMjI4NmM2Nzg3MWRhYjQ1N2E3MjgzMjk3ZmM4YzY4 OGE0YWYwHhcNMjUxMjIzMTkwMDM4WhcNMjUxMjI0MTkwMDM4WjAzMTEwLwYDVQQD Eyg5M2E1ODRiOWEyNWNkMDFjMjE0YjdlZGFkNWI5MDJjYzM4OWQ5ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLguAny1buzDLom3d7oCx/KebUV0 QjJhJc56LfTIWn4ql4IiXlouy2UJroISb0d0d4GJ5yRK5k8+YjFjpDHlhE8wHT07 9kGilnqLkxgMB5eCS2C4OfYuJ3gbzzf2ad2xXxWmfJ2RMi26gxm8lWyfYmJr8Nc8 4ds+sTbqli80pViTy/l7OoZDSrk32yess29APw1ZnOiguo1/e1wmuo2/ZdJY8Pyg Cr2wF8Rpe4GkNedpupsBJ4FpZ6EqRoGVO/SIt5xvErKoClRGACyUWyLotBpjG9ZK i9XsZn9NfCgJK1+HfxY8ooMRKPNfLKp6UAXthmrFXSr1DKi2pkaYgz4a/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOlhLmiXNAcIUt+2tW5Asw4nZ9iMB8GA1UdIwQY MBaAFDl6sihsZ4cdq0V6coMpf8jGiKSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yYjIxMjQtODc5NC00YThiLTk5MzAt MzMyM2ZkMDYwYjliLzEvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yYjIxMjQtODc5NC00YThiLTk5MzAtMzMyM2ZkMDYwYjli LzEvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJkYbXWw bGQLcGdJLNxjxB3QxG3n/alcrAI3BP9DQr2ve7ZAgmUX9J3WsS0zZWdOeXUUbVge OyuhF2O69xrg3XsGQqB0VBVKpYTUiMex36GSIIrFZQ00iWPMWlulnIu/sxExohsL cgCwfSEeHIbQNsa0hiWw2rynMAOFKYBPwL1xRax3SlIVP7hzT8ZcbETlTIGcBrVT dqNfKA/wIGtck6hBDX1vQHjk5x70/berfCmj2L8AAeqQa8k0e94wIZXAf+DS8L/A N7D+mbm5CoLrHxs8bk6k4pIVqBHhWzVcUnYh4eWWbJP1px506z48QLyGGTchS6Ug Qfx2fZJKkTIvIg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:16:21 2025 by rpki-client