This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json) Hash identifier: DfaWlGD5oDHeOlJ89meE45K6F/jNawSIjVtxovZJFm4= Subject key identifier: 67:05:99:DA:72:BC:FA:16:21:E7:39:61:F8:13:5C:08:46:8E:90:D3 Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Certificate serial: 019B34C54AFDBF8DB8AA1E7325945252941D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:01:43 +0000 Manifest this update: Fri 19 Dec 2025 04:01:43 +0000 Manifest next update: Sat 20 Dec 2025 04:01:43 +0000 Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: JOY288YrwAl2liRzULvRjVwSvtC7q3SDPDwIzMWu7K4=) 2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:4a:fd:bf:8d:b8:aa:1e:73:25:94:52:52:94:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Validity Not Before: Dec 19 04:01:43 2025 GMT Not After : Dec 20 04:01:43 2025 GMT Subject: CN=670599da72bcfa1621e73961f8135c08468e90d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:18:3e:47:6a:7e:7c:cb:70:ef:43:3b:d4: 53:c2:a9:7d:79:a1:00:17:4c:b9:44:72:ed:7a:9c: b1:a5:6f:67:14:fc:7a:b5:cd:79:a2:90:aa:73:5d: 76:92:7f:41:65:31:4d:74:ed:c0:93:2b:71:30:57: 1b:ff:c5:3f:87:9a:2c:e7:39:9e:35:9e:4e:70:ab: 68:17:14:bc:6e:87:25:77:7b:e1:e5:93:e1:66:ee: 5a:8d:1a:21:8d:77:ed:f5:9d:1c:3c:0b:14:2a:85: c7:77:9d:ac:09:31:f7:41:47:15:8f:b3:f4:89:83: ad:f5:f9:14:36:f0:06:2b:0a:5c:f2:05:ec:49:c5: 80:d4:bc:37:47:a2:d9:5e:e4:dc:36:43:21:46:f6: fc:39:b9:14:80:2f:ef:30:16:78:7a:4a:fb:7b:61: 38:5b:b4:5c:df:f8:8d:33:2c:df:d4:9b:88:7f:a5: 10:32:66:03:46:d2:41:54:61:de:d5:e8:08:15:d5: 60:21:ab:ff:be:a6:1e:a6:a8:87:a8:82:95:0d:cc: 11:92:37:08:1d:bc:b9:e6:6d:74:ac:62:37:52:9a: 95:e6:45:3f:23:80:6e:9b:da:7f:ee:8e:45:f6:0b: e3:b8:1a:f8:03:ea:32:b2:52:88:38:33:fc:69:fb: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:99:DA:72:BC:FA:16:21:E7:39:61:F8:13:5C:08:46:8E:90:D3 X509v3 Authority Key Identifier: keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:b1:21:2c:a4:16:54:7b:62:74:99:bf:d5:64:9a:a8:79: 62:cd:32:22:73:3f:ae:e5:fa:6b:09:26:20:e9:8a:93:19:eb: bd:ba:c3:66:ba:e5:4e:88:32:4b:68:26:79:a9:14:99:9c:36: c9:93:f1:e0:2a:46:87:ee:0d:1a:85:f9:75:b7:63:08:d1:b6: 81:52:90:11:cf:d3:50:1c:ca:b0:bf:e0:87:ce:87:73:d5:04: 42:df:b1:99:15:5f:aa:76:e4:c8:35:40:27:78:06:65:fa:61: 06:9d:da:c7:3a:4c:69:fd:80:51:0e:96:19:26:4d:9d:93:06: 0e:50:e4:11:be:b1:cc:be:53:ed:f1:68:49:23:69:08:b2:15: 17:1c:55:e7:37:ed:32:18:ea:6d:2e:15:9d:fc:6f:66:b2:d9: 4b:f9:c8:55:49:08:a9:f5:9e:74:ec:00:d8:ba:eb:2f:31:e0: 4d:60:40:0b:5f:5c:57:c0:93:f7:68:a2:97:db:c6:b6:84:7a: 5b:01:ea:9b:b9:17:23:a8:57:a7:22:e5:04:70:3b:04:56:17: 67:94:f3:5d:e4:7f:1b:7d:7a:7c:4e:c7:a0:d0:dc:e8:01:0f: 1f:e4:13:23:4b:0d:7c:b2:dd:6f:5a:de:b3:ba:ca:5c:7f:d4: 8a:e2:85:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUr9v424qh5zJZRSUpQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4 YmRhY2YwHhcNMjUxMjE5MDQwMTQzWhcNMjUxMjIwMDQwMTQzWjAzMTEwLwYDVQQD Eyg2NzA1OTlkYTcyYmNmYTE2MjFlNzM5NjFmODEzNWMwODQ2OGU5MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgYPkdqfnzLcO9DO9RTwql9eaEA F0y5RHLtepyxpW9nFPx6tc15opCqc112kn9BZTFNdO3AkytxMFcb/8U/h5os5zme NZ5OcKtoFxS8bocld3vh5ZPhZu5ajRohjXft9Z0cPAsUKoXHd52sCTH3QUcVj7P0 iYOt9fkUNvAGKwpc8gXsScWA1Lw3R6LZXuTcNkMhRvb8ObkUgC/vMBZ4ekr7e2E4 W7Rc3/iNMyzf1JuIf6UQMmYDRtJBVGHe1egIFdVgIav/vqYepqiHqIKVDcwRkjcI Hby55m10rGI3UpqV5kU/I4Bum9p/7o5F9gvjuBr4A+oyslKIODP8afuxxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcFmdpyvPoWIec5YfgTXAhGjpDTMB8GA1UdIwQY MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkqxISyk FlR7YnSZv9Vkmqh5Ys0yInM/ruX6awkmIOmKkxnrvbrDZrrlTogyS2gmeakUmZw2 yZPx4CpGh+4NGoX5dbdjCNG2gVKQEc/TUBzKsL/gh86Hc9UEQt+xmRVfqnbkyDVA J3gGZfphBp3axzpMaf2AUQ6WGSZNnZMGDlDkEb6xzL5T7fFoSSNpCLIVFxxV5zft MhjqbS4VnfxvZrLZS/nIVUkIqfWedOwA2LrrLzHgTWBAC19cV8CT92iil9vGtoR6 WwHqm7kXI6hXpyLlBHA7BFYXZ5TzXeR/G316fE7HoNDc6AEPH+QTI0sNfLLdb1re s7rKXH/UiuKFdA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:34 2025 by rpki-client