This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json) Hash identifier: xCpk6ilSpVY+pe4+aUrbrpCmp1x0USfj77rt/hrt85k= Subject key identifier: 2A:31:35:71:93:16:AA:4F:48:F7:58:FD:FB:2D:6A:9C:33:91:A4:C2 Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019B101377BAB903949CEE8CDDBA60F312C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft Manifest number: 0B5A Signing time: Fri 12 Dec 2025 01:01:09 +0000 Manifest this update: Fri 12 Dec 2025 01:01:09 +0000 Manifest next update: Sat 13 Dec 2025 01:01:09 +0000 Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 8llajJP59/4Ub8ewKrshUTo8uxMQKR2pyJnW3gXT/wo=) 2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=) 3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:77:ba:b9:03:94:9c:ee:8c:dd:ba:60:f3:12:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Dec 12 01:01:09 2025 GMT Not After : Dec 13 01:01:09 2025 GMT Subject: CN=2a3135719316aa4f48f758fdfb2d6a9c3391a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:dc:35:fe:83:68:f3:32:be:ee:30:ad:61: b0:b5:39:6d:75:18:db:5d:86:11:0f:9d:6c:65:47: 5e:4f:7a:3b:a1:75:93:da:f0:35:5f:05:fb:62:e7: 75:54:21:f7:6a:8c:c9:2f:f3:e5:78:53:09:fe:b2: f2:1f:2a:f4:bd:1f:d5:67:87:c2:10:ff:57:77:c8: 5b:d2:f3:93:e8:05:5e:3b:00:7a:4f:d9:b7:67:f9: b3:9a:67:e8:3b:3e:4b:20:6a:80:6f:2f:a0:c3:72: 7b:41:1a:3c:a2:71:4e:a6:af:9c:1b:1c:80:fb:30: e9:28:47:81:09:a2:f9:f7:40:b8:eb:f8:6d:a9:f5: 58:f1:47:2c:59:48:d2:58:81:09:ab:d4:35:e4:00: dd:c5:d2:d4:f9:75:6d:c5:32:7e:ae:cd:ff:cc:08: 44:2f:b5:9a:7e:be:a2:62:6f:cc:81:44:92:13:48: 1a:fe:d4:65:d6:db:a3:29:2b:87:cd:27:43:2f:7c: 62:79:a8:d5:99:73:42:f3:45:2b:ba:79:94:08:3e: 6a:ac:46:6a:37:d3:b2:05:0d:99:6d:da:55:3d:74: 25:c9:4e:43:11:f4:2d:52:e7:b8:1d:82:33:4b:84: d9:d2:2e:d8:1c:0d:0b:6a:ce:80:3c:41:74:7f:e3: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:31:35:71:93:16:AA:4F:48:F7:58:FD:FB:2D:6A:9C:33:91:A4:C2 X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:93:da:57:21:05:6a:28:88:9b:43:c1:38:9c:a8:40:b4:f1: 5c:41:0c:47:57:94:62:6a:1c:e3:7d:46:f9:2d:0a:2e:bc:45: 4f:a4:5d:a0:03:46:14:dc:03:7d:b8:f8:12:9a:e9:cb:99:b0: 00:97:d1:fa:e8:90:32:66:bd:59:31:5d:75:7a:c0:31:1c:09: bc:fa:7a:f6:d9:f7:4b:61:e4:cb:2f:d9:06:26:e5:34:6e:4a: 1f:3b:28:f7:d9:d6:f4:e4:6d:d4:68:08:3a:f5:43:47:05:bd: 77:6e:55:ec:ee:5e:f8:8a:c5:17:a0:37:1b:0b:6c:98:a2:4f: 6b:cb:5a:77:d0:60:76:65:c2:98:16:db:10:8d:7d:d2:34:70: 04:4f:3f:11:66:3a:8b:9f:dc:89:34:83:c6:23:3e:2b:0e:ad: 7c:16:84:6b:69:68:86:aa:f9:49:cd:d8:d0:8e:b6:ac:41:81: 4b:d5:5d:64:7b:a9:bf:ef:72:fd:63:b8:5e:b7:1a:25:ed:1e: 99:67:0e:cc:b2:28:b8:dc:21:6c:22:4f:2f:76:cc:b2:3f:01: 85:a4:5d:7d:0e:4e:fa:5c:49:ea:70:b0:6c:11:51:51:5e:4c: e8:5d:a7:42:fd:87:0d:28:3f:0a:35:51:bb:cf:51:c1:4b:6e: 6d:28:48:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE3e6uQOUnO6M3bpg8xLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjUxMjEyMDEwMTA5WhcNMjUxMjEzMDEwMTA5WjAzMTEwLwYDVQQD EygyYTMxMzU3MTkzMTZhYTRmNDhmNzU4ZmRmYjJkNmE5YzMzOTFhNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztvcNf6DaPMyvu4wrWGwtTltdRjb XYYRD51sZUdeT3o7oXWT2vA1XwX7Yud1VCH3aozJL/PleFMJ/rLyHyr0vR/VZ4fC EP9Xd8hb0vOT6AVeOwB6T9m3Z/mzmmfoOz5LIGqAby+gw3J7QRo8onFOpq+cGxyA +zDpKEeBCaL590C46/htqfVY8UcsWUjSWIEJq9Q15ADdxdLU+XVtxTJ+rs3/zAhE L7Wafr6iYm/MgUSSE0ga/tRl1tujKSuHzSdDL3xieajVmXNC80UrunmUCD5qrEZq N9OyBQ2ZbdpVPXQlyU5DEfQtUue4HYIzS4TZ0i7YHA0Las6APEF0f+MlDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoxNXGTFqpPSPdY/fstapwzkaTCMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJPaVyEF aiiIm0PBOJyoQLTxXEEMR1eUYmoc431G+S0KLrxFT6RdoANGFNwDfbj4Eprpy5mw AJfR+uiQMma9WTFddXrAMRwJvPp69tn3S2Hkyy/ZBiblNG5KHzso99nW9ORt1GgI OvVDRwW9d25V7O5e+IrFF6A3GwtsmKJPa8tad9BgdmXCmBbbEI190jRwBE8/EWY6 i5/ciTSDxiM+Kw6tfBaEa2lohqr5Sc3Y0I62rEGBS9VdZHupv+9y/WO4XrcaJe0e mWcOzLIouNwhbCJPL3bMsj8BhaRdfQ5O+lxJ6nCwbBFRUV5M6F2nQv2HDSg/CjVR u89RwUtubShIJg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:39 2025 by rpki-client