This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json) Hash identifier: FuLnAHgKBVjUY1tkBlDVLfgDDuXniYpWXo7SNKmzIVA= Subject key identifier: EF:82:F2:46:84:2E:D1:1B:1A:02:62:9C:AD:08:86:C8:4C:94:61:03 Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Certificate serial: 019ACC7C202959650DA1A640080EE725CB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft Manifest number: 1750 Signing time: Fri 28 Nov 2025 22:01:18 +0000 Manifest this update: Fri 28 Nov 2025 22:01:18 +0000 Manifest next update: Sat 29 Nov 2025 22:01:18 +0000 Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: KMpCLAK7oXRjtSgbJlpu2jn/5RcG7NtwZJMSLviggRY=) 2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:7c:20:29:59:65:0d:a1:a6:40:08:0e:e7:25:cb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Validity Not Before: Nov 28 22:01:18 2025 GMT Not After : Nov 29 22:01:18 2025 GMT Subject: CN=ef82f246842ed11b1a02629cad0886c84c946103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:42:d8:b7:da:68:41:06:f4:a5:7e:4b:b5: 8b:1f:3c:fd:d3:c9:9b:28:fc:01:c0:f3:70:b5:53: ef:31:b4:43:fa:31:89:7a:3d:b1:8d:50:59:db:da: f8:37:5b:4b:45:a4:41:8a:af:fe:41:68:cb:2f:99: 0f:2a:c2:bd:fd:6d:b1:3e:43:e7:d8:d2:5c:4b:de: 70:06:ac:94:b6:ec:2a:6a:d7:bd:06:f8:4a:64:5b: c6:5c:66:26:d8:94:35:e6:45:f7:53:53:7a:38:84: 86:64:20:63:54:92:3e:32:74:ce:36:99:81:e0:94: 17:4a:79:79:36:9f:ad:99:5e:83:ce:0c:2c:4a:7c: 94:e0:f3:4f:56:95:00:72:2a:ca:8c:04:fe:66:73: b3:0e:f7:f1:6b:50:56:ad:d8:a1:61:d3:d4:4f:62: 25:a9:36:a0:97:f0:1d:8e:e5:67:f1:a2:01:f8:27: 8d:fa:d9:68:96:5b:41:0c:a4:db:f2:47:f3:2d:e0: c8:75:ff:b3:f8:58:83:6c:d2:a0:64:ac:f9:d6:e4: b9:9c:10:39:6f:f9:8b:f6:fd:a9:71:5f:05:44:08: 45:20:84:f7:c8:67:17:2c:8f:90:ac:36:a3:46:04: dd:13:28:b5:0c:63:0b:dd:2e:37:79:39:d1:93:fd: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:82:F2:46:84:2E:D1:1B:1A:02:62:9C:AD:08:86:C8:4C:94:61:03 X509v3 Authority Key Identifier: keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9d:7f:ea:3a:be:fa:b7:74:4a:2f:6c:3d:3e:82:3c:bf:b1: be:a5:15:f1:ae:f7:0d:0e:8e:49:f4:82:b7:1f:0d:d7:7e:a6: e2:64:99:29:3f:77:b3:bd:20:5e:5d:1e:d9:1a:4a:46:9e:7a: 58:4d:6c:f0:24:a8:f2:2e:63:e3:bc:fc:15:4b:6a:ee:43:99: 4d:ee:d0:ab:4f:33:9c:ef:60:b4:69:87:83:69:cb:97:c8:0a: 51:0b:7e:b2:65:9a:4f:bc:ae:29:8c:88:ca:07:60:4f:2c:82: 2b:88:f6:24:5d:29:a6:e5:12:2d:fd:96:e4:e7:df:37:47:74: d8:62:e5:f0:4d:22:e8:dc:5d:87:3b:96:34:f3:2b:fe:fa:e2: 7e:76:29:c8:2c:22:32:7a:1c:4f:b4:11:3f:2e:70:04:17:a0: cb:20:aa:f2:52:aa:69:ba:24:b2:b6:77:b7:76:f4:58:89:1d: e3:7a:e9:67:24:94:32:92:f7:3a:39:9b:63:bc:21:f1:c3:54: 0b:72:20:89:6f:47:72:16:7e:ef:82:28:d0:9d:c2:c7:fb:51: 6c:5c:0e:a3:e3:ee:6f:c5:53:0e:a8:fb:1a:ed:4b:4a:50:ab: ff:f3:f5:58:2d:3e:f5:7c:4a:b1:03:de:45:69:3b:ef:5a:da: 73:09:b4:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrMfCApWWUNoaZACA7nJcsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4 YmRhY2YwHhcNMjUxMTI4MjIwMTE4WhcNMjUxMTI5MjIwMTE4WjAzMTEwLwYDVQQD EyhlZjgyZjI0Njg0MmVkMTFiMWEwMjYyOWNhZDA4ODZjODRjOTQ2MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pC2LfaaEEG9KV+S7WLHzz908mb KPwBwPNwtVPvMbRD+jGJej2xjVBZ29r4N1tLRaRBiq/+QWjLL5kPKsK9/W2xPkPn 2NJcS95wBqyUtuwqate9BvhKZFvGXGYm2JQ15kX3U1N6OISGZCBjVJI+MnTONpmB 4JQXSnl5Np+tmV6DzgwsSnyU4PNPVpUAcirKjAT+ZnOzDvfxa1BWrdihYdPUT2Il qTagl/AdjuVn8aIB+CeN+tlolltBDKTb8kfzLeDIdf+z+FiDbNKgZKz51uS5nBA5 b/mL9v2pcV8FRAhFIIT3yGcXLI+QrDajRgTdEyi1DGML3S43eTnRk/3r1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+C8kaELtEbGgJinK0IhshMlGEDMB8GA1UdIwQY MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ1/6jq+ +rd0Si9sPT6CPL+xvqUV8a73DQ6OSfSCtx8N136m4mSZKT93s70gXl0e2RpKRp56 WE1s8CSo8i5j47z8FUtq7kOZTe7Qq08znO9gtGmHg2nLl8gKUQt+smWaT7yuKYyI ygdgTyyCK4j2JF0ppuUSLf2W5OffN0d02GLl8E0i6NxdhzuWNPMr/vrifnYpyCwi MnocT7QRPy5wBBegyyCq8lKqaboksrZ3t3b0WIkd43rpZySUMpL3OjmbY7wh8cNU C3IgiW9HchZ+74Io0J3Cx/tRbFwOo+Pub8VTDqj7Gu1LSlCr//P1WC0+9XxKsQPe RWk771racwm0nw== -----END CERTIFICATE-----Generated at Fri Nov 28 23:37:03 2025 by rpki-client