This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json) Hash identifier: j0Xav+/hqjAHxG801hfZvz7F8HC4kDMg0Qhe8gdlT6s= Subject key identifier: F7:DA:F5:F0:66:EC:4E:35:EE:B9:22:68:16:12:A6:86:81:EF:66:34 Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8 Certificate serial: 019B5975BE0F45AF13D30E10ACA889BC27C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft Manifest number: 103B Signing time: Fri 26 Dec 2025 07:00:47 +0000 Manifest this update: Fri 26 Dec 2025 07:00:47 +0000 Manifest next update: Sat 27 Dec 2025 07:00:47 +0000 Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: GYm6uLDmD5AQfWgq+gbgxpflptkkm536gHjZwLsGhds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:be:0f:45:af:13:d3:0e:10:ac:a8:89:bc:27:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8 Validity Not Before: Dec 26 07:00:47 2025 GMT Not After : Dec 27 07:00:47 2025 GMT Subject: CN=f7daf5f066ec4e35eeb922681612a68681ef6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:ab:dc:7e:70:46:d8:97:b7:e8:ac:da:c9: 48:7a:4f:3f:66:cd:33:e1:64:a1:18:37:a1:82:14: 67:35:4a:8d:67:c9:42:d8:45:ed:d9:26:07:4a:b6: c7:29:83:15:b1:09:53:bf:a4:e8:b4:91:54:1d:20: dc:3b:f6:8d:ed:e2:1e:d6:3c:17:91:93:8d:9a:8a: 92:d2:5c:c8:e2:ca:bd:33:75:58:b2:3c:e3:48:5a: 71:fb:e8:33:7f:ff:8c:9c:bd:10:2f:4a:42:4a:96: 9d:25:47:eb:46:b6:86:53:8b:1c:67:71:e3:9d:b9: e4:b8:e7:9b:a5:24:00:aa:44:12:cb:11:c8:46:a6: 59:3c:8d:81:2b:59:98:7b:08:fd:3f:b2:0c:6d:a6: 11:3a:96:05:f8:c8:78:49:77:2f:a7:cd:df:2f:fa: f0:07:a4:6d:41:96:b9:14:f0:06:d5:94:3c:cf:7d: ca:92:c6:0c:11:0a:64:fc:17:8a:e2:0e:7f:fe:0b: f0:ad:17:2a:63:21:37:ec:c9:b9:c1:ca:59:b2:e7: dd:63:af:9b:4d:e2:e0:5a:6e:8b:a9:c9:94:c9:b0: 36:b7:4c:c0:5e:c2:9e:db:11:fa:2d:7c:38:1a:f4: 10:60:3f:35:a8:24:f4:7e:0a:56:80:8d:42:c2:66: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:F5:F0:66:EC:4E:35:EE:B9:22:68:16:12:A6:86:81:EF:66:34 X509v3 Authority Key Identifier: keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:08:5a:05:61:31:9f:88:e5:fe:65:14:c1:1e:b6:74:af:f2: 59:21:f2:29:6c:29:cb:b7:f5:8c:88:b0:54:ca:0a:1e:a6:b3: e1:3f:3f:da:54:11:b9:91:71:9c:b5:80:83:f5:25:e1:48:00: 6e:e9:44:e1:eb:cb:7e:57:f9:a0:0a:a0:31:96:51:52:7b:78: 70:5a:e2:54:19:36:41:fb:cd:36:0a:4d:50:35:f5:aa:cb:3b: 8a:35:51:a7:ab:6a:74:b6:87:41:f5:8b:30:3a:e4:2a:82:b8: 78:c0:e0:a5:a9:34:33:a0:c0:52:8f:e9:de:b4:e0:33:03:b7: 2d:73:78:d9:4c:b3:5a:83:08:21:5e:57:0b:35:98:f5:c4:c6: bd:1a:8e:61:0f:02:8a:ad:d6:2c:d3:8e:63:97:35:3e:de:db: c8:cb:a0:e0:4d:ab:01:05:38:cd:d9:bf:69:34:7a:ab:18:16: 00:2f:42:1b:34:f1:82:56:82:bd:96:b2:5a:1e:a9:b6:4b:f2: 9f:2b:7f:fb:83:4c:c3:e7:25:9f:dd:d4:3c:c2:fc:9d:d1:8e: a7:90:00:c9:84:96:af:d1:55:c6:2f:e4:29:7f:c8:80:0e:b4: 96:7f:ae:40:7d:f0:85:85:4c:b3:24:27:d1:54:b1:2b:de:c7: 81:24:e0:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdb4PRa8T0w4QrKiJvCfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjFjM2YyZjYxNTgxMTBlODBlOTJlMmEzMjIxZDY5NWMy N2E3ZDgwHhcNMjUxMjI2MDcwMDQ3WhcNMjUxMjI3MDcwMDQ3WjAzMTEwLwYDVQQD EyhmN2RhZjVmMDY2ZWM0ZTM1ZWViOTIyNjgxNjEyYTY4NjgxZWY2NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu6r3H5wRtiXt+is2slIek8/Zs0z 4WShGDehghRnNUqNZ8lC2EXt2SYHSrbHKYMVsQlTv6TotJFUHSDcO/aN7eIe1jwX kZONmoqS0lzI4sq9M3VYsjzjSFpx++gzf/+MnL0QL0pCSpadJUfrRraGU4scZ3Hj nbnkuOebpSQAqkQSyxHIRqZZPI2BK1mYewj9P7IMbaYROpYF+Mh4SXcvp83fL/rw B6RtQZa5FPAG1ZQ8z33KksYMEQpk/BeK4g5//gvwrRcqYyE37Mm5wcpZsufdY6+b TeLgWm6LqcmUybA2t0zAXsKe2xH6LXw4GvQQYD81qCT0fgpWgI1CwmZ4HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfa9fBm7E417rkiaBYSpoaB72Y0MB8GA1UdIwQY MBaAFKMhw/L2FYEQ6A6S4qMiHWlcJ6fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYt Y2ZmNDYxZTBkZjM0LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYtY2ZmNDYxZTBkZjM0 LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAhaBWEx n4jl/mUUwR62dK/yWSHyKWwpy7f1jIiwVMoKHqaz4T8/2lQRuZFxnLWAg/Ul4UgA bulE4evLflf5oAqgMZZRUnt4cFriVBk2QfvNNgpNUDX1qss7ijVRp6tqdLaHQfWL MDrkKoK4eMDgpak0M6DAUo/p3rTgMwO3LXN42UyzWoMIIV5XCzWY9cTGvRqOYQ8C iq3WLNOOY5c1Pt7byMug4E2rAQU4zdm/aTR6qxgWAC9CGzTxglaCvZayWh6ptkvy nyt/+4NMw+cln93UPML8ndGOp5AAyYSWr9FVxi/kKX/IgA60ln+uQH3whYVMsyQn 0VSxK97HgSTgoA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:01 2025 by rpki-client