This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json) Hash identifier: f7OJUC+VfZX2dvfULXUbFhfwDy+4GkHLICcTa7k6lJ4= Subject key identifier: 3C:17:E4:87:E5:12:91:D3:C1:B9:CF:DF:DD:53:5C:42:79:07:84:BE Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Certificate serial: 019B37FCE296B2BA983E6F86399F1A3A785D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 19:01:18 +0000 Manifest this update: Fri 19 Dec 2025 19:01:18 +0000 Manifest next update: Sat 20 Dec 2025 19:01:18 +0000 Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=) 2: kOdUd0BJh7m4b0s0dCs4QgMWNUQ.roa (hash: tZ3TxxDR2EXxSPIMDVq3TJt9N6UyL2XMXlm7RgpGHLk=) 3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: hoIu4c5E0vp08kGM+YqHbiNIpb3epl8LGYsrHOp/r5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:e2:96:b2:ba:98:3e:6f:86:39:9f:1a:3a:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Validity Not Before: Dec 19 19:01:18 2025 GMT Not After : Dec 20 19:01:18 2025 GMT Subject: CN=3c17e487e51291d3c1b9cfdfdd535c42790784be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:f4:ab:ef:ff:be:1f:f3:57:ec:3c:10:d8: 0d:aa:95:c1:f2:d8:89:b7:63:ba:f2:9f:68:c5:92: 79:11:8d:67:e4:a4:ce:e2:12:7e:e3:7c:a7:19:2c: 05:f8:70:78:c3:a2:90:bc:bc:98:7a:61:5b:28:1f: ae:96:02:63:92:62:1e:e9:dd:77:c3:f7:4d:0d:7e: 77:9b:6d:fe:6b:25:a4:2d:96:cd:4e:33:9e:b4:78: e0:0c:8e:76:9a:cb:02:87:9e:0a:87:13:2e:0a:4b: 97:b6:ed:9c:7e:85:96:49:69:f2:4d:89:ec:64:19: 05:76:f9:f0:4f:8c:63:91:f1:45:86:d7:fa:61:eb: 49:d3:05:40:9e:2f:78:87:e7:9c:5c:48:cd:1b:a3: 36:c9:74:93:a7:60:98:8a:2e:e6:49:36:28:4d:b6: 62:ad:71:08:bf:43:32:15:cb:d8:78:a9:6e:77:3e: 6c:5e:4c:2e:4f:fa:b9:9c:1e:b5:12:89:57:17:03: 8d:91:fe:45:9a:84:20:d0:40:4f:b6:37:89:cd:d5: c8:fe:cb:06:01:79:f9:c7:13:66:9d:3a:56:43:e1: 36:f3:44:ce:dd:78:e0:d8:d5:de:59:06:66:f3:69: bb:90:fa:52:ca:ec:69:d4:21:89:26:93:b1:f7:54: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:E4:87:E5:12:91:D3:C1:B9:CF:DF:DD:53:5C:42:79:07:84:BE X509v3 Authority Key Identifier: keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:ed:09:5c:56:e5:79:26:fa:59:f1:e2:46:87:77:64:5c:b7: 91:56:da:4c:d1:d4:7f:2f:e6:fa:ee:45:ba:c3:fc:56:89:c1: 27:83:0e:03:02:48:46:41:7c:a5:5e:c2:30:23:01:94:10:d4: db:0d:67:84:d4:e8:1c:7f:4b:ff:e7:a8:0d:fc:ce:e5:7e:9b: f1:71:10:2e:68:cf:70:f7:f3:87:ab:f7:08:12:c3:cf:bc:96: 98:eb:08:bd:1d:30:b1:fd:30:07:ec:4f:99:f6:f7:7a:19:55: f8:d0:5e:ef:08:cd:34:c8:fe:45:a1:21:aa:39:4b:53:76:05: 38:91:b6:13:b8:e1:0c:11:fa:70:52:7c:cd:da:bd:a5:c3:aa: 00:53:3a:29:77:53:b1:c2:b9:5b:c3:c4:1e:c0:a7:b5:75:f9: 15:d3:cb:5f:59:ae:5f:fd:72:e3:f9:0a:40:4e:db:f5:a4:18: f3:56:59:e7:48:53:ae:24:a5:a3:fa:ca:31:3d:76:18:bb:72: ad:9c:1b:b9:be:66:d8:c4:b0:5a:09:e4:09:fa:05:ea:4b:37: 8e:f8:51:6f:45:0b:28:c1:e2:e9:c1:d6:66:14:e4:76:25:40: 5d:f9:34:d6:70:d3:09:bb:05:ef:07:5f:97:54:e2:42:a0:6c: b9:a0:4e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/OKWsrqYPm+GOZ8aOnhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5 OWVhMzEwHhcNMjUxMjE5MTkwMTE4WhcNMjUxMjIwMTkwMTE4WjAzMTEwLwYDVQQD EygzYzE3ZTQ4N2U1MTI5MWQzYzFiOWNmZGZkZDUzNWM0Mjc5MDc4NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCz0q+//vh/zV+w8ENgNqpXB8tiJ t2O68p9oxZJ5EY1n5KTO4hJ+43ynGSwF+HB4w6KQvLyYemFbKB+ulgJjkmIe6d13 w/dNDX53m23+ayWkLZbNTjOetHjgDI52mssCh54KhxMuCkuXtu2cfoWWSWnyTYns ZBkFdvnwT4xjkfFFhtf6YetJ0wVAni94h+ecXEjNG6M2yXSTp2CYii7mSTYoTbZi rXEIv0MyFcvYeKludz5sXkwuT/q5nB61EolXFwONkf5FmoQg0EBPtjeJzdXI/ssG AXn5xxNmnTpWQ+E280TO3Xjg2NXeWQZm82m7kPpSyuxp1CGJJpOx91RvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwX5IflEpHTwbnP391TXEJ5B4S+MB8GA1UdIwQY MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7e0JXFbl eSb6WfHiRod3ZFy3kVbaTNHUfy/m+u5FusP8VonBJ4MOAwJIRkF8pV7CMCMBlBDU 2w1nhNToHH9L/+eoDfzO5X6b8XEQLmjPcPfzh6v3CBLDz7yWmOsIvR0wsf0wB+xP mfb3ehlV+NBe7wjNNMj+RaEhqjlLU3YFOJG2E7jhDBH6cFJ8zdq9pcOqAFM6KXdT scK5W8PEHsCntXX5FdPLX1muX/1y4/kKQE7b9aQY81ZZ50hTriSlo/rKMT12GLty rZwbub5m2MSwWgnkCfoF6ks3jvhRb0ULKMHi6cHWZhTkdiVAXfk01nDTCbsF7wdf l1TiQqBsuaBOHw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:22:58 2025 by rpki-client