This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json) Hash identifier: sTSpr0eY1rh3K2rircFH3xbMoiv2MG0Fo3YvOL143gM= Subject key identifier: 66:47:67:0F:D5:62:4D:0A:1C:51:3A:39:7C:D2:46:D4:D3:34:65:28 Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Certificate serial: 019B59E35A8AB3EF3D2AE0A1B154BCD2350E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft Manifest number: 11D5 Signing time: Fri 26 Dec 2025 09:00:30 +0000 Manifest this update: Fri 26 Dec 2025 09:00:30 +0000 Manifest next update: Sat 27 Dec 2025 09:00:30 +0000 Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: fDmRNRr4XHZm303jos8XgkV9LVtbAXzhJ9pRSKwldP4=) 2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:5a:8a:b3:ef:3d:2a:e0:a1:b1:54:bc:d2:35:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Validity Not Before: Dec 26 09:00:30 2025 GMT Not After : Dec 27 09:00:30 2025 GMT Subject: CN=6647670fd5624d0a1c513a397cd246d4d3346528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:9a:3b:72:6e:91:59:0a:2e:2c:0c:fa:4b: ec:26:5d:27:23:be:d6:d6:72:ee:96:e8:7c:7d:ab: 36:f7:5d:48:06:2d:b4:fa:66:03:f0:e2:b6:2e:20: a7:65:c3:1d:90:5a:48:c4:40:da:fe:a9:fb:0c:77: 83:a7:f4:89:60:32:86:5a:90:6c:31:b9:c6:e7:90: f0:ee:76:be:b3:26:a3:e5:39:10:4a:1b:67:62:a7: 0b:66:bc:ef:db:fa:fe:24:6a:f3:cf:f5:d0:de:97: 59:cb:49:b0:09:90:cc:59:cd:80:06:84:c6:3e:3f: 09:86:77:f2:45:3b:70:de:1b:4d:d5:ff:8d:65:0d: d5:f3:5a:2d:b1:f0:d9:4f:eb:a9:33:da:d3:5c:29: 98:8e:38:af:62:97:2c:4d:31:7e:95:29:f9:a4:97: 89:9f:8c:9f:61:63:e6:b1:7d:02:9f:51:9c:3c:ce: eb:c0:3c:db:a9:21:b9:bf:8c:a8:fb:60:a8:94:9f: 39:90:e5:cf:b6:b6:ea:56:dd:ba:37:59:4a:4c:76: 90:7e:96:13:c1:c5:31:f3:80:32:8b:29:7f:e5:e3: 2e:6c:88:1f:b6:f3:11:41:26:1b:89:1b:39:43:50: fe:bc:7a:9a:9d:18:74:4f:d8:8b:46:76:cb:ab:51: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:67:0F:D5:62:4D:0A:1C:51:3A:39:7C:D2:46:D4:D3:34:65:28 X509v3 Authority Key Identifier: keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:b3:3c:7d:55:bf:7c:10:10:31:20:9a:be:22:7a:66:30: f6:c0:cf:6d:cd:1b:e6:32:d5:22:a1:9f:c9:73:30:67:fc:87: a4:68:68:5c:13:87:d3:6b:8a:b5:04:23:5a:43:ef:a2:bb:15: c2:de:11:0b:1f:b5:23:0a:63:47:9b:cd:ca:26:59:93:5e:41: 07:13:bf:53:48:84:df:f9:bf:f7:1f:5d:b0:74:e3:4f:c5:a4: e1:9e:4b:bd:97:84:2c:87:ea:3a:83:70:95:4a:33:82:09:02: 83:26:08:de:cb:18:01:71:7c:64:13:ac:bf:3f:ea:b3:90:92: c1:32:b4:11:31:61:37:f4:c1:29:67:07:0c:9b:7a:47:c1:8d: f1:18:38:e4:f1:fd:e3:d0:b4:b6:cc:0c:9d:14:60:05:85:bf: 00:a1:a5:26:6e:59:61:71:fb:bb:c2:1c:2d:ee:5c:b1:82:37: aa:9a:e1:ea:96:cc:6d:ab:3b:aa:2a:9d:34:ba:16:49:cb:cc: 10:74:83:65:8e:a9:15:22:20:0b:d8:15:f8:ab:37:64:29:a2: b9:b2:b7:b8:1c:e3:93:1e:c7:37:ee:ea:6d:c8:85:95:ff:12: bf:5b:e1:f6:a1:13:8e:bf:cd:c7:6e:22:a9:18:b2:44:40:62: cb:cd:4b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ41qKs+89KuChsVS80jUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWNkOGM3MWE2ZTMzMjgyYzA0NWQ4Zjg4YzNiMzc4YWNm NDFiZDkwHhcNMjUxMjI2MDkwMDMwWhcNMjUxMjI3MDkwMDMwWjAzMTEwLwYDVQQD Eyg2NjQ3NjcwZmQ1NjI0ZDBhMWM1MTNhMzk3Y2QyNDZkNGQzMzQ2NTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9maO3JukVkKLiwM+kvsJl0nI77W 1nLuluh8fas2911IBi20+mYD8OK2LiCnZcMdkFpIxEDa/qn7DHeDp/SJYDKGWpBs MbnG55Dw7na+syaj5TkQShtnYqcLZrzv2/r+JGrzz/XQ3pdZy0mwCZDMWc2ABoTG Pj8JhnfyRTtw3htN1f+NZQ3V81otsfDZT+upM9rTXCmYjjivYpcsTTF+lSn5pJeJ n4yfYWPmsX0Cn1GcPM7rwDzbqSG5v4yo+2ColJ85kOXPtrbqVt26N1lKTHaQfpYT wcUx84Ayiyl/5eMubIgftvMRQSYbiRs5Q1D+vHqanRh0T9iLRnbLq1Fb4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZHZw/VYk0KHFE6OXzSRtTTNGUoMB8GA1UdIwQY MBaAFKCc2McabjMoLARdj4jDs3is9BvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMt NmU4ZTA3ZDY2YzliLzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZDYzNzUtNDc2NS00ZTBlLTkzNjMtNmU4ZTA3ZDY2Yzli LzEvb0p6WXh4cHVNeWdzQkYyUGlNT3plS3owRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX+zPH1V v3wQEDEgmr4iemYw9sDPbc0b5jLVIqGfyXMwZ/yHpGhoXBOH02uKtQQjWkPvorsV wt4RCx+1IwpjR5vNyiZZk15BBxO/U0iE3/m/9x9dsHTjT8Wk4Z5LvZeELIfqOoNw lUozggkCgyYI3ssYAXF8ZBOsvz/qs5CSwTK0ETFhN/TBKWcHDJt6R8GN8Rg45PH9 49C0tswMnRRgBYW/AKGlJm5ZYXH7u8IcLe5csYI3qprh6pbMbas7qiqdNLoWScvM EHSDZY6pFSIgC9gV+Ks3ZCmiubK3uBzjkx7HN+7qbciFlf8Sv1vh9qETjr/Nx24i qRiyREBiy81LMw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:28 2025 by rpki-client