This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json) Hash identifier: +42rqrjsgYonFWikanVY1TGj5KM8vS7D4ZXWIW5mzrI= Subject key identifier: FD:92:F7:C4:17:F3:E8:32:FD:C5:1F:70:EF:E7:2E:E0:A7:A6:6C:CE Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e Certificate serial: 019B3344BF882AC62D1BF2E27F0B84A6845B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 21:01:42 +0000 Manifest this update: Thu 18 Dec 2025 21:01:42 +0000 Manifest next update: Fri 19 Dec 2025 21:01:42 +0000 Files and hashes: 1: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: gYblPCgnMrbyo5WEH7nCPOIFL/+3payZMfYKcfiYMp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:bf:88:2a:c6:2d:1b:f2:e2:7f:0b:84:a6:84:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e Validity Not Before: Dec 18 21:01:42 2025 GMT Not After : Dec 19 21:01:42 2025 GMT Subject: CN=fd92f7c417f3e832fdc51f70efe72ee0a7a66cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:4e:d5:13:4f:4b:d6:ba:6e:cb:61:f8:1e: 4c:68:06:42:0d:98:8d:ad:22:2b:44:16:51:ab:83: 9e:76:35:e0:c9:e4:1f:52:27:0f:e5:8d:89:b2:f7: a7:fc:b7:bf:01:89:f6:97:6b:22:0a:1c:85:5d:fc: 63:e9:f1:28:9a:0f:8a:85:b3:6c:70:16:d3:8e:83: d5:d1:39:d8:9f:05:55:f9:fa:33:da:32:0c:f3:24: 6c:9d:33:55:cb:47:74:44:a7:1b:d8:3e:a0:8e:a4: 10:0a:62:ca:83:51:f5:79:5a:6e:49:8c:4f:0a:c3: c2:a9:17:30:3c:59:7c:a7:24:96:d0:70:f7:43:8b: 8a:19:70:94:0f:39:4e:ca:34:1d:f6:22:0d:79:40: 35:67:d5:c8:a8:9e:34:06:69:75:bb:71:31:15:e7: 5c:0b:92:60:4a:15:78:ec:68:37:25:8e:fd:9e:6d: 1f:53:c5:3d:3c:97:d0:ab:63:43:cc:1a:cf:a6:80: 51:7b:a5:12:0b:bf:48:97:66:c2:91:ac:83:ed:8e: 36:99:9b:0a:5f:85:a0:92:f5:58:bf:74:2b:49:ff: 4f:e3:09:76:21:49:c8:d8:30:ea:43:c5:4d:4b:d9: bf:1c:d9:80:ea:af:db:96:df:8a:b7:2a:d3:88:0b: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:F7:C4:17:F3:E8:32:FD:C5:1F:70:EF:E7:2E:E0:A7:A6:6C:CE X509v3 Authority Key Identifier: keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:68:25:40:e8:15:76:dd:d3:3d:b7:a8:e1:02:70:ab:9d:f6: 86:2d:15:2e:b4:5a:06:59:af:57:d0:a0:44:98:33:5c:c3:bf: 5e:a1:10:7d:b6:67:cd:31:ce:a3:81:2a:b9:af:21:72:af:19: ad:bb:4e:a6:d6:e5:be:90:51:66:04:95:5f:4e:6e:3a:fe:06: f4:f0:f1:f3:f3:e9:d0:5f:5c:4d:54:e0:98:74:81:5c:51:6e: 1a:f4:b6:55:0d:89:f5:5f:ac:3b:d5:e3:16:42:ea:4a:f8:13: 81:d8:df:84:17:bc:3d:96:e8:64:b0:f4:74:d2:95:33:b2:bb: 30:7e:f2:fe:af:85:81:93:b3:2c:8e:db:ba:54:46:9c:d8:0a: 11:c6:fc:fb:59:86:98:7c:54:38:cc:d0:99:08:b9:47:cb:a9: 9f:7e:d9:f3:a8:a7:ac:99:66:07:32:16:22:9e:61:21:f6:a7: b8:82:6b:3f:cc:64:60:41:55:4a:a1:0f:8b:24:93:73:14:b9: 28:2e:11:1a:89:40:2b:49:db:00:a3:3c:fe:ab:5f:b2:20:ce: 30:05:c1:63:1d:4f:b0:db:66:4d:29:a9:10:30:5e:15:b8:5c: 92:8f:22:9b:3e:56:a4:fc:3f:bc:48:62:5c:60:c4:7f:73:8c: 23:c1:6f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRL+IKsYtG/LifwuEpoRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWE2MTk5NzU1ZTYzMDBmMDQwMmMyYTA4ZWQ0MzdhMGE3 MzAwMWUwHhcNMjUxMjE4MjEwMTQyWhcNMjUxMjE5MjEwMTQyWjAzMTEwLwYDVQQD EyhmZDkyZjdjNDE3ZjNlODMyZmRjNTFmNzBlZmU3MmVlMGE3YTY2Y2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ChO1RNPS9a6bsth+B5MaAZCDZiN rSIrRBZRq4OedjXgyeQfUicP5Y2Jsven/Le/AYn2l2siChyFXfxj6fEomg+KhbNs cBbTjoPV0TnYnwVV+foz2jIM8yRsnTNVy0d0RKcb2D6gjqQQCmLKg1H1eVpuSYxP CsPCqRcwPFl8pySW0HD3Q4uKGXCUDzlOyjQd9iINeUA1Z9XIqJ40Bml1u3ExFedc C5JgShV47Gg3JY79nm0fU8U9PJfQq2NDzBrPpoBRe6USC79Il2bCkayD7Y42mZsK X4WgkvVYv3QrSf9P4wl2IUnI2DDqQ8VNS9m/HNmA6q/blt+KtyrTiAviPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2S98QX8+gy/cUfcO/nLuCnpmzOMB8GA1UdIwQY MBaAFJDqYZl1XmMA8EAsKgjtQ3oKcwAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTkt YzM5ODA4ZDAzYTE4LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTktYzM5ODA4ZDAzYTE4 LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmglQOgV dt3TPbeo4QJwq532hi0VLrRaBlmvV9CgRJgzXMO/XqEQfbZnzTHOo4Equa8hcq8Z rbtOptblvpBRZgSVX05uOv4G9PDx8/Pp0F9cTVTgmHSBXFFuGvS2VQ2J9V+sO9Xj FkLqSvgTgdjfhBe8PZboZLD0dNKVM7K7MH7y/q+FgZOzLI7bulRGnNgKEcb8+1mG mHxUOMzQmQi5R8upn37Z86inrJlmBzIWIp5hIfanuIJrP8xkYEFVSqEPiySTcxS5 KC4RGolAK0nbAKM8/qtfsiDOMAXBYx1PsNtmTSmpEDBeFbhcko8imz5WpPw/vEhi XGDEf3OMI8Fv/w== -----END CERTIFICATE-----Generated at Thu Dec 18 23:26:26 2025 by rpki-client