This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json) Hash identifier: Ah/Nlzi27ob8zuZfiPOIF1NuZrfAIepqkA+EJcsmTWA= Subject key identifier: 6C:6B:02:1C:AF:7E:E5:2D:C8:08:A2:F7:85:5F:94:20:FE:74:27:4A Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019B2399B30C013B26F8198C228369A236E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 20:00:33 +0000 Manifest this update: Mon 15 Dec 2025 20:00:33 +0000 Manifest next update: Tue 16 Dec 2025 20:00:33 +0000 Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=) 2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=) 3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: bZfcd5p5u7SqgCkPbhoQAkFw3pEj6Qni31eCZLiX+L8=) 4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:b3:0c:01:3b:26:f8:19:8c:22:83:69:a2:36:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Dec 15 20:00:33 2025 GMT Not After : Dec 16 20:00:33 2025 GMT Subject: CN=6c6b021caf7ee52dc808a2f7855f9420fe74274a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:01:09:7c:65:5a:9c:c8:0e:69:a3:28:ea: a6:a2:c7:43:15:3a:2c:07:11:a6:55:fa:43:0a:64: dc:d8:e2:51:e2:d0:c6:db:ec:be:5b:e1:6f:11:1a: da:f9:9d:93:03:79:14:6a:6a:f3:2a:9e:b6:32:6c: b7:e8:a9:83:68:48:c8:ce:c0:73:50:f5:13:fd:00: 53:ef:c5:e7:01:88:3c:c5:b2:9e:c5:c5:2c:16:a7: d4:8d:f3:f9:1d:b9:2d:0e:79:9e:a0:5b:d4:46:5f: 15:74:6a:d7:19:00:18:64:b0:98:20:78:5b:cd:ed: d8:3f:8b:6e:8c:84:05:41:f5:1d:e7:6c:36:9d:4b: a5:12:a9:17:be:b8:42:27:50:9f:8a:15:5b:84:6f: d1:cb:19:92:0f:d6:29:a4:90:c0:27:1b:fe:10:62: 5e:23:ed:15:ff:8a:e8:25:32:40:2f:26:52:12:2d: 88:49:dc:68:c5:3d:b2:d2:67:67:8e:f1:cb:c6:cc: 0d:40:63:9e:62:7b:a2:69:f3:39:48:ee:7d:c5:d2: fc:52:13:5c:6d:fe:7e:7d:a7:7a:da:9c:10:ab:a9: a9:6e:0b:c8:59:42:38:e3:d3:3f:17:d4:01:7c:60: a3:52:e6:3a:70:22:aa:a6:30:46:22:b0:39:ed:00: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:02:1C:AF:7E:E5:2D:C8:08:A2:F7:85:5F:94:20:FE:74:27:4A X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c0:f9:d4:a9:91:32:ca:35:b7:31:1d:18:53:fa:dc:21:49: 46:34:a7:cc:cb:b6:e6:c0:9e:07:3d:b0:82:48:9b:b5:83:24: 82:84:ea:5b:f3:b9:de:21:0b:64:7b:d3:66:76:b2:6c:f8:97: c7:2c:56:ce:3c:45:f9:ca:50:ed:5f:c7:3a:d0:57:34:fa:7f: b8:f9:79:57:30:54:67:4c:77:22:b6:d5:b8:51:c5:8c:47:77: e9:38:54:7a:06:17:49:b1:53:97:01:cd:23:19:0e:f8:a3:d5: c0:c2:1a:aa:25:69:8d:e2:aa:21:55:46:7c:8d:62:24:66:8e: 3f:1f:e5:fd:b2:d7:08:f1:93:a1:8d:75:6d:c1:8b:42:d7:69: a4:17:2b:a5:1f:bb:6f:85:d4:eb:b1:0c:c6:d4:45:98:92:48: b3:d7:b3:92:fa:7b:1a:33:c6:a7:20:b2:39:f8:03:2b:88:84: 3c:e4:69:a0:be:84:8f:84:4b:f3:af:e2:2a:7c:d3:1b:fa:be: c7:c3:5c:29:d9:4a:7f:35:83:13:cc:03:a7:17:0c:4b:27:1b: c1:a8:db:5a:6c:2e:8d:b5:0c:74:3e:42:9f:50:1a:e4:1a:76: df:ab:67:30:4d:54:0c:81:00:e5:0a:7d:af:92:1c:98:67:88: f8:32:a6:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmbMMATsm+BmMIoNpojbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjUxMjE1MjAwMDMzWhcNMjUxMjE2MjAwMDMzWjAzMTEwLwYDVQQD Eyg2YzZiMDIxY2FmN2VlNTJkYzgwOGEyZjc4NTVmOTQyMGZlNzQyNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zsBCXxlWpzIDmmjKOqmosdDFTos BxGmVfpDCmTc2OJR4tDG2+y+W+FvERra+Z2TA3kUamrzKp62Mmy36KmDaEjIzsBz UPUT/QBT78XnAYg8xbKexcUsFqfUjfP5HbktDnmeoFvURl8VdGrXGQAYZLCYIHhb ze3YP4tujIQFQfUd52w2nUulEqkXvrhCJ1CfihVbhG/RyxmSD9YppJDAJxv+EGJe I+0V/4roJTJALyZSEi2ISdxoxT2y0mdnjvHLxswNQGOeYnuiafM5SO59xdL8UhNc bf5+fad62pwQq6mpbgvIWUI449M/F9QBfGCjUuY6cCKqpjBGIrA57QD16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxrAhyvfuUtyAii94VflCD+dCdKMB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8D51KmR Mso1tzEdGFP63CFJRjSnzMu25sCeBz2wgkibtYMkgoTqW/O53iELZHvTZnaybPiX xyxWzjxF+cpQ7V/HOtBXNPp/uPl5VzBUZ0x3IrbVuFHFjEd36ThUegYXSbFTlwHN IxkO+KPVwMIaqiVpjeKqIVVGfI1iJGaOPx/l/bLXCPGToY11bcGLQtdppBcrpR+7 b4XU67EMxtRFmJJIs9ezkvp7GjPGpyCyOfgDK4iEPORpoL6Ej4RL86/iKnzTG/q+ x8NcKdlKfzWDE8wDpxcMSycbwajbWmwujbUMdD5Cn1Aa5Bp236tnME1UDIEA5Qp9 r5IcmGeI+DKmoA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:38 2025 by rpki-client