This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft File: OZ17KbLru-43WSMgfh2FZU8LV7o.mft (raw, json) Hash identifier: AgzmJgfw716lRX8T7CUgfMI/dCYC1LbSq9BVtYPPoC4= Subject key identifier: 65:16:DC:4B:12:9A:3E:AE:36:AD:BA:71:82:82:A3:0D:E9:5B:FC:80 Authority key identifier: 39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA Certificate issuer: /CN=399d7b29b2ebbbee375923207e1d85654f0b57ba Certificate serial: 019B5A1A549874FAAFA9C632167FFE9B84B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft Manifest number: 03E1 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: OZ17KbLru-43WSMgfh2FZU8LV7o.crl (hash: +/3fd5rnNTZfQ/QTQHpDwa+jX8lnwH8xGOkdTv0iI1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:54:98:74:fa:af:a9:c6:32:16:7f:fe:9b:84:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399d7b29b2ebbbee375923207e1d85654f0b57ba Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=6516dc4b129a3eae36adba718282a30de95bfc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:22:94:be:98:4a:d6:7b:80:c4:45:fa:77: 78:80:a2:7c:12:4f:c7:43:d6:ec:33:dc:23:4d:49: a4:f9:78:19:62:cc:b1:bb:30:00:77:cd:8d:00:45: bf:d0:22:a1:3a:f4:53:78:56:54:49:4c:9b:53:ba: 90:47:ee:7d:6e:f1:6e:0b:5e:dd:de:e9:f6:81:3c: 38:09:4c:c1:13:2a:91:2a:eb:99:ad:59:21:df:c8: 67:f0:a0:07:4a:60:82:d4:c6:53:9b:97:fc:3c:10: 2d:5f:cf:06:03:c7:ed:f8:bc:e4:45:49:8e:a9:6c: 3c:12:8f:c7:b2:fd:69:62:25:f5:49:37:5f:ca:c1: 5e:a4:ce:f2:9e:e0:0d:4e:5a:85:c1:85:a8:50:c3: 19:94:f3:e6:8c:6e:b9:7a:bd:20:29:c7:1f:e0:88: 92:c8:f7:b4:cc:6d:3c:59:95:d5:b9:27:6d:d9:20: 18:e9:05:16:91:80:a5:2e:61:74:69:16:61:b6:d0: 88:0b:14:ad:4b:6b:97:b0:fe:74:a8:d6:bf:de:9b: 94:f7:69:92:e6:48:b0:94:ce:29:af:ba:cb:39:ff: 0e:f8:f0:bd:b7:17:c5:12:bf:cd:de:76:db:13:59: 48:83:39:f3:54:a4:4c:ae:8d:23:a0:b4:03:59:32: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:DC:4B:12:9A:3E:AE:36:AD:BA:71:82:82:A3:0D:E9:5B:FC:80 X509v3 Authority Key Identifier: keyid:39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:7e:31:4b:a5:1d:51:59:a1:a4:e5:7c:34:a0:0d:9b:fc: ee:d3:9b:98:a8:31:ed:6a:33:ad:1d:ca:4b:b5:65:67:59:93: dc:bb:3c:3b:e3:bc:90:5f:50:98:ac:89:ef:b8:2f:92:5f:b3: d0:48:c6:4f:68:0e:30:1f:e4:aa:df:2d:60:0f:11:8f:2c:fe: d1:fc:d6:7f:82:d2:73:04:7a:11:7f:1c:65:c9:9c:bb:88:93: 4d:87:56:c6:e3:cc:57:aa:a0:ab:9d:32:5e:43:10:37:12:a6: a3:47:eb:33:02:48:c3:14:82:3c:7f:8d:16:c3:eb:4e:61:53: d3:ab:ff:e0:4f:56:b9:46:52:1e:e6:e5:19:8c:a8:0d:e5:e2: f6:d8:7f:7b:ee:9e:ee:87:c2:44:8e:f5:2b:42:a1:40:1a:fb: d4:45:b2:07:0e:d0:28:66:30:7a:0c:00:24:16:fe:7c:83:c5: 54:5d:11:3f:1d:4b:fb:bd:cf:05:e3:ae:7a:dd:96:78:f8:5a: 2d:7c:c2:8d:f1:0d:5e:74:25:cb:b6:cd:b8:cb:27:66:53:63: 08:4f:0f:84:14:5e:58:8e:dd:75:b4:2a:96:be:5d:89:47:6e: 9a:58:32:8c:70:78:e2:8b:4c:cc:81:84:14:45:ed:37:20:9d: 1d:cd:94:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlSYdPqvqcYyFn/+m4S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OWQ3YjI5YjJlYmJiZWUzNzU5MjMyMDdlMWQ4NTY1NGYw YjU3YmEwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD Eyg2NTE2ZGM0YjEyOWEzZWFlMzZhZGJhNzE4MjgyYTMwZGU5NWJmYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4kilL6YStZ7gMRF+nd4gKJ8Ek/H Q9bsM9wjTUmk+XgZYsyxuzAAd82NAEW/0CKhOvRTeFZUSUybU7qQR+59bvFuC17d 3un2gTw4CUzBEyqRKuuZrVkh38hn8KAHSmCC1MZTm5f8PBAtX88GA8ft+LzkRUmO qWw8Eo/Hsv1pYiX1STdfysFepM7ynuANTlqFwYWoUMMZlPPmjG65er0gKccf4IiS yPe0zG08WZXVuSdt2SAY6QUWkYClLmF0aRZhttCICxStS2uXsP50qNa/3puU92mS 5kiwlM4pr7rLOf8O+PC9txfFEr/N3nbbE1lIgznzVKRMro0joLQDWTJGuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUW3EsSmj6uNq26cYKCow3pW/yAMB8GA1UdIwQY MBaAFDmdeymy67vuN1kjIH4dhWVPC1e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zOTFjOGQtNmFjNi00YzA2LTlhNDAt YTZiNWE4YmUxMTEzLzEvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zOTFjOGQtNmFjNi00YzA2LTlhNDAtYTZiNWE4YmUxMTEz LzEvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM45+MUul HVFZoaTlfDSgDZv87tObmKgx7WozrR3KS7VlZ1mT3Ls8O+O8kF9QmKyJ77gvkl+z 0EjGT2gOMB/kqt8tYA8Rjyz+0fzWf4LScwR6EX8cZcmcu4iTTYdWxuPMV6qgq50y XkMQNxKmo0frMwJIwxSCPH+NFsPrTmFT06v/4E9WuUZSHublGYyoDeXi9th/e+6e 7ofCRI71K0KhQBr71EWyBw7QKGYwegwAJBb+fIPFVF0RPx1L+73PBeOuet2WePha LXzCjfENXnQly7bNuMsnZlNjCE8PhBReWI7ddbQqlr5diUdumlgyjHB44otMzIGE FEXtNyCdHc2USA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:01 2025 by rpki-client