This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json) Hash identifier: KivgzXpOR4bGlVgi0dzk0ASfsxRPY2X6vIR7VnCDOvo= Subject key identifier: 2C:06:F7:28:61:F8:04:33:B6:C1:B2:9B:33:F3:3E:5A:2F:BE:71:22 Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41 Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41 Certificate serial: 019B5976712A390744EE30F78E62CFE1FE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft Manifest number: 1284 Signing time: Fri 26 Dec 2025 07:01:32 +0000 Manifest this update: Fri 26 Dec 2025 07:01:32 +0000 Manifest next update: Sat 27 Dec 2025 07:01:32 +0000 Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: Sgjkr/RrrkwlH9Tf3H1YoibR3BWBTmFaF7KF058eVYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:71:2a:39:07:44:ee:30:f7:8e:62:cf:e1:fe:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41 Validity Not Before: Dec 26 07:01:32 2025 GMT Not After : Dec 27 07:01:32 2025 GMT Subject: CN=2c06f72861f80433b6c1b29b33f33e5a2fbe7122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:18:ea:ef:9f:b3:dc:32:35:3e:e0:51:2d:fa: 59:77:b2:e1:0a:dc:4a:ca:24:bb:fa:9f:e4:79:47: 39:4b:2d:50:bc:85:cc:64:7c:b1:a3:b7:8a:52:f7: 58:22:b8:3a:ea:82:24:8a:a2:67:7b:bd:bf:cb:5d: d5:f7:67:dd:a3:f8:3d:18:66:9e:53:ae:f1:bf:57: 91:66:93:79:ee:d1:02:34:f7:96:5b:ff:09:e7:60: dd:11:f5:4b:f8:2c:cb:b7:3c:50:ea:25:82:e4:c8: af:23:55:7f:c5:10:2f:c3:d3:02:40:77:b4:27:a9: 5a:dc:de:50:3f:c7:aa:91:e3:79:11:92:d1:08:d8: 8b:57:a2:e2:83:a1:ee:a9:18:12:36:1e:74:ad:19: 5a:a8:a8:1b:44:c7:a8:7d:22:2b:2b:94:ad:d5:34: 79:e7:d7:42:d2:9e:ca:23:ce:02:e5:f3:0e:f6:40: f4:d2:af:2f:3b:b0:f9:c5:27:ea:bb:4e:a4:df:6c: 02:a5:29:4c:b0:a2:f4:dc:0b:4b:87:08:59:0f:ee: 8b:a2:a4:da:24:a1:f6:a7:2d:67:06:e4:ea:55:69: 39:84:09:0f:94:5f:72:26:51:ae:05:25:86:37:ec: cf:99:32:f2:dd:ff:12:89:47:e2:cb:15:70:bf:f8: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:F7:28:61:F8:04:33:B6:C1:B2:9B:33:F3:3E:5A:2F:BE:71:22 X509v3 Authority Key Identifier: keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:16:78:82:8f:46:ce:99:89:72:0c:ac:55:b4:26:c1:7a:8f: 86:e6:12:d3:5f:b7:71:56:fc:2e:23:80:b0:65:60:2a:0e:5a: dc:28:75:6a:37:27:d9:f5:ba:f2:3b:f4:f8:dd:67:2d:ca:93: 72:e7:83:f9:8b:2d:7c:c6:5f:d4:cb:11:72:37:c3:ad:1d:be: 3f:13:cf:c6:55:11:99:c4:23:56:da:9d:bf:37:20:5c:53:a7: e8:34:6e:2c:af:66:4c:54:6f:7b:b0:78:ad:ef:ce:6e:6c:fb: 75:30:9e:d6:ab:00:3c:5c:77:9d:ae:c5:ad:8f:84:97:40:03: 8a:06:dc:a6:75:21:7d:56:12:12:66:8c:37:ad:0e:ae:b2:bf: be:36:fe:4b:5a:04:7a:fb:8b:78:11:3f:3f:c8:70:ec:47:7f: e8:ee:7d:6c:c0:60:76:17:63:80:99:e2:00:b5:de:70:48:7e: 40:58:d6:6c:48:32:8e:92:99:a9:e0:b0:96:3b:68:25:f5:91: c9:04:aa:d3:5b:6c:43:da:be:c1:f3:7d:b3:25:01:49:d7:b8: 15:50:00:4d:cb:24:8a:4a:6a:42:d1:34:25:c3:75:ff:02:a6: cb:71:0a:ab:5b:1c:8a:15:5d:6f:79:fb:9b:3a:b5:8a:e3:59: 00:e3:06:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnEqOQdE7jD3jmLP4f5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTI5ZWE5ODg3ZjllMmZlNmE5NDVhOTdkNDgyMTZiYzE2 YTRiNDEwHhcNMjUxMjI2MDcwMTMyWhcNMjUxMjI3MDcwMTMyWjAzMTEwLwYDVQQD EygyYzA2ZjcyODYxZjgwNDMzYjZjMWIyOWIzM2YzM2U1YTJmYmU3MTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hjq75+z3DI1PuBRLfpZd7LhCtxK yiS7+p/keUc5Sy1QvIXMZHyxo7eKUvdYIrg66oIkiqJne72/y13V92fdo/g9GGae U67xv1eRZpN57tECNPeWW/8J52DdEfVL+CzLtzxQ6iWC5MivI1V/xRAvw9MCQHe0 J6la3N5QP8eqkeN5EZLRCNiLV6Lig6HuqRgSNh50rRlaqKgbRMeofSIrK5St1TR5 59dC0p7KI84C5fMO9kD00q8vO7D5xSfqu06k32wCpSlMsKL03AtLhwhZD+6LoqTa JKH2py1nBuTqVWk5hAkPlF9yJlGuBSWGN+zPmTLy3f8SiUfiyxVwv/h85wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwG9yhh+AQztsGymzPzPlovvnEiMB8GA1UdIwQY MBaAFKFSnqmIf54v5qlFqX1IIWvBaktBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjkt NWIxZWFhYzY3MDMwLzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjktNWIxZWFhYzY3MDMw LzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxZ4go9G zpmJcgysVbQmwXqPhuYS01+3cVb8LiOAsGVgKg5a3Ch1ajcn2fW68jv0+N1nLcqT cueD+YstfMZf1MsRcjfDrR2+PxPPxlURmcQjVtqdvzcgXFOn6DRuLK9mTFRve7B4 re/Obmz7dTCe1qsAPFx3na7FrY+El0ADigbcpnUhfVYSEmaMN60OrrK/vjb+S1oE evuLeBE/P8hw7Ed/6O59bMBgdhdjgJniALXecEh+QFjWbEgyjpKZqeCwljtoJfWR yQSq01tsQ9q+wfN9syUBSde4FVAATcskikpqQtE0JcN1/wKmy3EKq1scihVdb3n7 mzq1iuNZAOMGRw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:41 2025 by rpki-client