This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json) Hash identifier: ornLB8jw7wxDAotnvmeAG5Fttn/a/f4tgaq3ab9zALI= Subject key identifier: 76:7D:54:66:FF:4A:59:58:57:91:F0:14:67:C4:BB:5B:65:86:D7:48 Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Certificate serial: 019AABDD9BBD400EC4DAEDA1D31407CB98CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft Manifest number: 0BC0 Signing time: Sat 22 Nov 2025 14:00:18 +0000 Manifest this update: Sat 22 Nov 2025 14:00:18 +0000 Manifest next update: Sun 23 Nov 2025 14:00:18 +0000 Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=) 2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: lKA10fk4I1KEfImkruWxYW/n9QIgaO8rzuZIQWvnrO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:9b:bd:40:0e:c4:da:ed:a1:d3:14:07:cb:98:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Validity Not Before: Nov 22 14:00:18 2025 GMT Not After : Nov 23 14:00:18 2025 GMT Subject: CN=767d5466ff4a59585791f01467c4bb5b6586d748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:a5:e9:6a:b2:b6:2a:1c:c6:b3:10:ac:4f: 16:90:11:15:93:88:5d:a8:a8:05:d9:4b:9c:96:60: 9b:74:ad:bd:04:29:35:f1:25:81:db:90:3f:b2:fc: d3:eb:6a:ce:a7:7f:41:b5:fd:9f:e4:96:8e:97:92: 2b:46:a5:ea:82:a9:0b:ad:fe:9d:53:b6:be:67:94: 5e:05:fd:5c:85:5a:c7:24:56:99:a7:82:40:73:11: a8:94:36:6f:47:d6:02:be:a6:f7:61:cf:05:3c:40: 53:7b:e8:3c:2b:c6:cf:e8:19:60:ba:9a:25:e4:21: 89:eb:18:05:9c:22:23:53:11:e0:64:43:dd:ce:84: 92:8d:02:77:3f:f4:5e:38:1a:a9:17:38:27:dc:d3: fb:48:3f:7d:e3:03:d4:92:73:fd:97:e0:f4:2f:26: 65:6c:72:34:e9:cb:f7:82:8e:8d:d0:b1:60:fd:15: 5d:24:57:a5:54:dc:68:a0:a7:03:c0:3f:40:90:12: 3d:c6:e0:70:c2:fd:be:db:bb:88:e8:08:d6:ed:57: c9:11:b3:e6:1f:04:f5:0f:f3:32:e4:e8:a5:1c:68: 49:f6:c1:5d:be:20:36:6b:39:a9:87:1c:1b:5e:8e: 14:89:8c:af:fb:a3:4d:8e:0d:21:ae:f1:69:41:71: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7D:54:66:FF:4A:59:58:57:91:F0:14:67:C4:BB:5B:65:86:D7:48 X509v3 Authority Key Identifier: keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f5:1e:6d:7f:b1:e9:eb:36:f6:19:2b:c3:d0:a6:86:4c:38: b4:e5:2b:2e:19:ef:38:1c:f7:1f:b7:50:80:35:18:0c:0c:6d: 46:bc:54:d7:a4:37:37:62:9b:46:ad:be:ea:6f:a8:66:db:60: 29:35:e1:df:3e:62:23:69:b5:10:b6:bb:07:53:ca:fd:2c:3d: 58:2a:81:2f:9d:b7:75:d0:c6:d3:40:e9:b4:3c:cc:67:7c:d6: 08:ce:78:91:31:99:d2:be:99:43:f6:67:13:7d:f6:cf:a1:84: b8:d3:9e:1f:fd:33:71:52:5b:e9:d0:8b:72:dc:47:f3:b9:46: 9e:dd:85:28:ee:e0:64:13:68:4d:aa:18:3c:20:8a:a0:dd:e3: d9:b8:bd:ec:8e:7c:02:ee:77:c2:3c:cc:fa:a0:63:78:b0:72: 29:53:53:aa:63:9a:39:95:84:64:81:44:4c:af:49:b3:2e:bf: 52:cf:49:ee:6f:d0:9c:f9:79:e3:12:e0:9c:91:6b:6c:19:e2: b1:3c:f1:4e:49:84:ad:9c:74:1c:d8:4c:b5:74:6a:d4:03:6e: 96:00:c6:d6:ab:b8:00:45:db:60:d1:4d:11:fb:89:de:5f:c2: 7c:61:38:e6:59:9b:c0:50:05:d2:00:8f:b3:2a:c9:e4:e9:ce: 8a:78:c6:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3Zu9QA7E2u2h0xQHy5jMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTdhMGQyZmM1N2E2N2JiMmI3ZTg1YzNlOGQ3ODE5MmJj YTBmMTgwHhcNMjUxMTIyMTQwMDE4WhcNMjUxMTIzMTQwMDE4WjAzMTEwLwYDVQQD Eyg3NjdkNTQ2NmZmNGE1OTU4NTc5MWYwMTQ2N2M0YmI1YjY1ODZkNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbal6WqytiocxrMQrE8WkBEVk4hd qKgF2UuclmCbdK29BCk18SWB25A/svzT62rOp39Btf2f5JaOl5IrRqXqgqkLrf6d U7a+Z5ReBf1chVrHJFaZp4JAcxGolDZvR9YCvqb3Yc8FPEBTe+g8K8bP6Blgupol 5CGJ6xgFnCIjUxHgZEPdzoSSjQJ3P/ReOBqpFzgn3NP7SD994wPUknP9l+D0LyZl bHI06cv3go6N0LFg/RVdJFelVNxooKcDwD9AkBI9xuBwwv2+27uI6AjW7VfJEbPm HwT1D/My5OilHGhJ9sFdviA2azmphxwbXo4UiYyv+6NNjg0hrvFpQXFBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ9VGb/SllYV5HwFGfEu1tlhtdIMB8GA1UdIwQY MBaAFKTnoNL8V6Z7srfoXD6NeBkryg8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMt YTYxMjZiNTQwOTRkLzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMtYTYxMjZiNTQwOTRk LzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvUebX+x 6es29hkrw9Cmhkw4tOUrLhnvOBz3H7dQgDUYDAxtRrxU16Q3N2KbRq2+6m+oZttg KTXh3z5iI2m1ELa7B1PK/Sw9WCqBL523ddDG00DptDzMZ3zWCM54kTGZ0r6ZQ/Zn E332z6GEuNOeH/0zcVJb6dCLctxH87lGnt2FKO7gZBNoTaoYPCCKoN3j2bi97I58 Au53wjzM+qBjeLByKVNTqmOaOZWEZIFETK9Jsy6/Us9J7m/QnPl54xLgnJFrbBni sTzxTkmErZx0HNhMtXRq1ANulgDG1qu4AEXbYNFNEfuJ3l/CfGE45lmbwFAF0gCP syrJ5OnOinjGxg== -----END CERTIFICATE-----Generated at Sat Nov 22 20:55:43 2025 by rpki-client