This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json) Hash identifier: sOAFa51+lPTHd9mn+Ckxwt6qtUFNktlgLmjdQ3T5tV8= Subject key identifier: E5:B8:4A:84:47:F9:C5:10:B8:8E:32:F3:AD:E8:00:56:94:65:76:53 Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4 Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4 Certificate serial: 019B42EEE8C7ECEC4CFF778F6FB5F096EE12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft Manifest number: 0F01 Signing time: Sun 21 Dec 2025 22:01:51 +0000 Manifest this update: Sun 21 Dec 2025 22:01:51 +0000 Manifest next update: Mon 22 Dec 2025 22:01:51 +0000 Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: 0U169ntm7ftPXZvWaH5y+DcqVGgUzWjPDUV3/DJ0G2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:e8:c7:ec:ec:4c:ff:77:8f:6f:b5:f0:96:ee:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4 Validity Not Before: Dec 21 22:01:51 2025 GMT Not After : Dec 22 22:01:51 2025 GMT Subject: CN=e5b84a8447f9c510b88e32f3ade8005694657653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:3d:d8:3c:a3:2f:5e:8e:d2:78:9f:71:48: 2d:ec:45:fb:06:2d:f9:b0:97:e6:40:3a:62:68:e2: 5b:1e:f9:56:72:8e:4d:86:6c:ac:4d:d5:bd:42:e7: 3d:41:77:08:d9:f7:34:69:d1:78:7c:0d:d0:e8:44: 01:62:e9:53:70:77:87:05:7e:9f:c6:91:59:38:7d: 03:9b:3f:59:9d:5a:d3:a8:e0:aa:ae:48:cc:95:52: 49:3c:fa:c4:66:0a:9b:20:0d:ed:35:0f:f1:c0:9a: ab:4b:9f:00:6a:c7:1a:60:21:10:f9:15:f6:0b:de: ab:ea:02:a9:9d:af:3e:0b:32:2e:9d:ea:7e:e9:6b: 90:56:6f:a1:fa:b6:92:4b:57:c8:65:3c:7b:7a:77: eb:2c:e4:ce:66:55:6b:de:49:0a:dd:52:67:48:a6: 35:8b:d6:3c:12:69:8a:98:55:9a:70:49:32:12:15: 2a:88:de:61:26:e5:cf:93:96:85:53:38:22:8e:52: e9:36:0e:cf:0e:ee:0f:ea:1e:15:d6:31:96:5a:a7: 9d:ea:af:82:33:89:10:fd:fa:db:63:3f:df:16:5a: c0:30:19:98:5b:3f:a2:f6:e0:83:35:e8:e3:c8:5a: 98:e5:70:71:00:bc:ff:aa:96:5f:3f:5d:7e:21:06: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:4A:84:47:F9:C5:10:B8:8E:32:F3:AD:E8:00:56:94:65:76:53 X509v3 Authority Key Identifier: keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:14:68:05:cf:3d:a2:ec:54:fd:4b:fa:97:65:10:af:d6: 5b:2d:a0:ff:e4:c7:2d:b2:8e:02:32:0e:ff:3a:fa:1d:17:3f: 90:a6:38:a3:da:87:8b:db:fd:77:fe:c2:ef:75:e2:1f:0c:02: 95:a3:c3:50:5b:05:8b:3a:d4:6c:9f:2c:12:55:f1:0d:19:1e: 4e:f9:7f:ed:92:20:50:6e:6c:52:c3:34:98:03:9c:4b:e9:42: 58:f7:96:c2:cd:2d:12:98:cc:dd:80:46:ee:8f:13:bb:9e:cd: e5:42:2d:7b:3b:42:ba:c9:15:49:c7:1b:70:1f:86:d9:4d:91: e5:a9:64:af:1c:ad:dc:62:1d:ba:07:b8:92:30:c2:07:b7:21: 06:86:c0:b2:9b:08:4f:fa:59:c2:bc:11:c6:12:9a:a1:f6:1e: 1c:99:02:54:61:2c:05:5f:60:18:72:64:c7:04:a6:c4:7c:71: c2:11:42:52:21:13:d8:1f:50:62:61:7e:3f:0d:16:ab:85:46: 92:01:0f:db:f7:93:32:12:27:57:00:62:20:8c:8a:1a:7d:e6: c1:53:83:d0:8f:79:e6:d4:e0:95:0c:2b:93:c2:3c:3c:98:5d: 38:a7:09:73:26:17:2d:7a:87:1f:d0:c9:3c:87:fd:e2:03:69: b0:33:82:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7ujH7OxM/3ePb7Xwlu4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWExZDQ0NjI5MzgzY2FkZmM3NTE3ZGVmN2RlMjkyOTVh ZTM5YjQwHhcNMjUxMjIxMjIwMTUxWhcNMjUxMjIyMjIwMTUxWjAzMTEwLwYDVQQD EyhlNWI4NGE4NDQ3ZjljNTEwYjg4ZTMyZjNhZGU4MDA1Njk0NjU3NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfE92DyjL16O0nifcUgt7EX7Bi35 sJfmQDpiaOJbHvlWco5NhmysTdW9Quc9QXcI2fc0adF4fA3Q6EQBYulTcHeHBX6f xpFZOH0Dmz9ZnVrTqOCqrkjMlVJJPPrEZgqbIA3tNQ/xwJqrS58AascaYCEQ+RX2 C96r6gKpna8+CzIunep+6WuQVm+h+raSS1fIZTx7enfrLOTOZlVr3kkK3VJnSKY1 i9Y8EmmKmFWacEkyEhUqiN5hJuXPk5aFUzgijlLpNg7PDu4P6h4V1jGWWqed6q+C M4kQ/frbYz/fFlrAMBmYWz+i9uCDNejjyFqY5XBxALz/qpZfP11+IQa6WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW4SoRH+cUQuI4y863oAFaUZXZTMB8GA1UdIwQY MBaAFKKqHURik4PK38dRfe994pKVrjm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUt NzQ5MTc1YjE3OGYxLzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUtNzQ5MTc1YjE3OGYx LzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmwUaAXP PaLsVP1L+pdlEK/WWy2g/+THLbKOAjIO/zr6HRc/kKY4o9qHi9v9d/7C73XiHwwC laPDUFsFizrUbJ8sElXxDRkeTvl/7ZIgUG5sUsM0mAOcS+lCWPeWws0tEpjM3YBG 7o8Tu57N5UIteztCuskVSccbcB+G2U2R5alkrxyt3GIduge4kjDCB7chBobAspsI T/pZwrwRxhKaofYeHJkCVGEsBV9gGHJkxwSmxHxxwhFCUiET2B9QYmF+Pw0Wq4VG kgEP2/eTMhInVwBiIIyKGn3mwVOD0I955tTglQwrk8I8PJhdOKcJcyYXLXqHH9DJ PIf94gNpsDOCZQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:27 2025 by rpki-client