This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json) Hash identifier: J2nS568lrmpCK7HlGH98UmiPMEbdjl1U9xGcuc+WbtI= Subject key identifier: CA:D6:A2:42:6C:AF:55:40:BF:58:73:30:64:29:E5:3A:B6:0F:3A:25 Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39 Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39 Certificate serial: 019B32D6E88A3DBC968F9C5155C888596138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft Manifest number: 1353 Signing time: Thu 18 Dec 2025 19:01:43 +0000 Manifest this update: Thu 18 Dec 2025 19:01:43 +0000 Manifest next update: Fri 19 Dec 2025 19:01:43 +0000 Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: ZcA9oVq2EUH6pLoopQbNTczBqnvQGfuwchZ6A3X44M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e8:8a:3d:bc:96:8f:9c:51:55:c8:88:59:61:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39 Validity Not Before: Dec 18 19:01:43 2025 GMT Not After : Dec 19 19:01:43 2025 GMT Subject: CN=cad6a2426caf5540bf5873306429e53ab60f3a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:37:c5:f4:80:7f:10:90:4e:34:2f:04:ce: 7f:d2:52:86:1d:d4:56:a5:a6:d8:cd:15:90:5c:04: e7:1d:be:f9:01:aa:9a:7e:af:5a:89:00:40:27:9d: db:d0:bb:4c:cb:88:fb:b2:cd:66:69:d7:7c:78:7e: b1:fe:b2:26:c9:fd:c1:2c:c0:c1:d2:56:de:8d:44: 3f:03:bd:01:b4:f4:a0:37:21:82:1a:00:df:7b:ff: f4:81:f4:3b:5c:1b:24:fe:29:7e:33:49:48:b5:e1: 57:00:27:92:68:3a:21:67:98:f6:99:fc:de:02:03: aa:32:4c:20:62:c9:35:58:e1:1e:b8:a8:da:4e:7f: 49:7e:aa:33:d9:77:57:67:6f:be:38:bf:b0:8b:c2: a8:e7:7c:61:8d:e2:b1:2b:64:b7:44:36:ad:cb:09: 9f:4a:b7:8c:05:2b:53:71:d7:fc:0a:6a:ba:e8:f6: d3:67:38:da:86:32:fd:cf:d0:7f:65:75:05:f7:7e: ad:bb:68:a4:9d:aa:9b:a8:a4:24:2d:e3:11:18:0a: a2:4f:e3:20:86:59:cc:35:de:14:e4:71:c4:11:c3: a9:e4:f4:ed:ca:a8:ab:f7:8c:6c:aa:aa:8a:d1:f2: 06:16:4e:94:43:ae:0f:a8:33:32:a2:4c:06:b3:da: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:A2:42:6C:AF:55:40:BF:58:73:30:64:29:E5:3A:B6:0F:3A:25 X509v3 Authority Key Identifier: keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a7:6e:7b:c7:84:00:0d:e3:bd:82:b3:28:98:bf:6c:13:03: 83:a5:08:3f:37:29:57:e6:b8:0d:e5:0d:27:a2:ac:43:0d:d5: cb:0e:66:64:db:4d:ec:b9:2d:fd:06:d8:2d:94:f3:c6:76:ea: 31:b8:04:8d:88:fb:7d:1b:e6:f0:69:b2:06:1b:10:1f:f3:99: 56:32:79:a3:b0:2e:eb:d3:a3:31:44:10:79:b5:27:5c:19:c6: 5e:e2:8a:e5:82:2f:4b:af:45:7a:69:83:47:9d:83:25:19:5e: 0c:7f:17:82:4c:a0:17:67:77:5e:f3:75:69:a8:02:22:1a:d5: b2:61:8c:03:79:67:21:7d:06:18:ee:34:c2:6e:e3:be:c8:96: 0e:c4:fa:7f:34:6c:25:21:2f:80:8d:8f:2f:87:81:7f:f1:51: fa:1b:44:67:2a:c0:d5:33:cd:37:d6:52:59:ba:62:c0:c5:df: a8:e3:b1:1b:94:2e:5c:b7:a0:5b:3b:0f:20:cb:6a:4b:5b:00: 8c:5d:e6:14:1b:6a:13:7e:df:56:74:39:6e:13:fc:52:08:5e: fa:70:e6:d8:47:3a:d1:10:52:15:70:20:84:14:eb:fe:bf:7a: aa:0e:2d:3c:40:c3:6a:15:9f:3b:b2:ea:3a:2b:60:e7:83:e3: 61:27:d3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uiKPbyWj5xRVciIWWE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2EzM2U3ZjY3MjVlYjRlZTg3YmE5MWIxZGQyZTFjNDIx NjhjMzkwHhcNMjUxMjE4MTkwMTQzWhcNMjUxMjE5MTkwMTQzWjAzMTEwLwYDVQQD EyhjYWQ2YTI0MjZjYWY1NTQwYmY1ODczMzA2NDI5ZTUzYWI2MGYzYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKw3xfSAfxCQTjQvBM5/0lKGHdRW pabYzRWQXATnHb75Aaqafq9aiQBAJ53b0LtMy4j7ss1madd8eH6x/rImyf3BLMDB 0lbejUQ/A70BtPSgNyGCGgDfe//0gfQ7XBsk/il+M0lIteFXACeSaDohZ5j2mfze AgOqMkwgYsk1WOEeuKjaTn9Jfqoz2XdXZ2++OL+wi8Ko53xhjeKxK2S3RDatywmf SreMBStTcdf8Cmq66PbTZzjahjL9z9B/ZXUF936tu2iknaqbqKQkLeMRGAqiT+Mg hlnMNd4U5HHEEcOp5PTtyqir94xsqqqK0fIGFk6UQ64PqDMyokwGs9rxKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrWokJsr1VAv1hzMGQp5Tq2DzolMB8GA1UdIwQY MBaAFKDKM+f2cl607oe6kbHdLhxCFow5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jNGI0MDEtZTU5NS00YTAwLTkxMjMt ZjIxYWI3ZTllMWY1LzEvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jNGI0MDEtZTU5NS00YTAwLTkxMjMtZjIxYWI3ZTllMWY1 LzEvb01vejVfWnlYclR1aDdxUnNkMHVIRUlXakRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6due8eE AA3jvYKzKJi/bBMDg6UIPzcpV+a4DeUNJ6KsQw3Vyw5mZNtN7Lkt/QbYLZTzxnbq MbgEjYj7fRvm8GmyBhsQH/OZVjJ5o7Au69OjMUQQebUnXBnGXuKK5YIvS69FemmD R52DJRleDH8XgkygF2d3XvN1aagCIhrVsmGMA3lnIX0GGO40wm7jvsiWDsT6fzRs JSEvgI2PL4eBf/FR+htEZyrA1TPNN9ZSWbpiwMXfqOOxG5QuXLegWzsPIMtqS1sA jF3mFBtqE37fVnQ5bhP8Ughe+nDm2Ec60RBSFXAghBTr/r96qg4tPEDDahWfO7Lq Oitg54PjYSfTZw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:51 2025 by rpki-client