This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft File: OWpY9F0OyAFfoyauWP9YAzKJv50.mft (raw, json) Hash identifier: y1hzAOJUdk0F1We1luTBSeuTeAm2oX27a+2Pvv3LYy4= Subject key identifier: BB:56:AE:D1:09:AA:A7:0A:D2:4B:38:DD:34:43:12:79:D3:78:1A:A1 Authority key identifier: 39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D Certificate issuer: /CN=396a58f45d0ec8015fa326ae58ff58033289bf9d Certificate serial: 019B1E3C854C450E6CA9710F053F602BC639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 19:00:41 +0000 Manifest this update: Sun 14 Dec 2025 19:00:41 +0000 Manifest next update: Mon 15 Dec 2025 19:00:41 +0000 Files and hashes: 1: OWpY9F0OyAFfoyauWP9YAzKJv50.crl (hash: df+yHLi4O6azDM0t61ozCItKtuhkEW2GdpDrTySryBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:85:4c:45:0e:6c:a9:71:0f:05:3f:60:2b:c6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396a58f45d0ec8015fa326ae58ff58033289bf9d Validity Not Before: Dec 14 19:00:41 2025 GMT Not After : Dec 15 19:00:41 2025 GMT Subject: CN=bb56aed109aaa70ad24b38dd34431279d3781aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:b0:29:7f:c4:dc:13:69:5b:ec:94:c4:a8: f0:ca:77:af:db:f3:a9:b6:42:e5:2d:c7:51:ba:00: b6:bb:38:d5:3c:41:1d:51:89:cd:c4:1d:2d:ab:80: 4f:cb:03:0f:af:89:51:64:35:23:48:15:5d:6e:e1: ed:49:6c:09:a8:7e:07:3b:4c:68:2e:56:73:1c:e8: 2f:ae:dd:b3:87:36:ce:c2:42:e9:cd:b4:36:3c:c9: fa:7d:fc:e8:bd:b9:e8:31:49:57:1b:72:53:81:4b: 9f:1b:63:83:e1:0c:e6:2f:af:d6:ef:ff:de:ff:a0: 9a:3f:1b:11:4a:c8:e6:8a:b2:f1:89:7f:ac:90:66: c3:2e:57:92:b9:00:0d:52:ed:f2:e3:ec:bb:f1:cd: b5:6c:8c:91:26:ed:4c:62:10:16:25:3b:6a:9a:cf: ff:3f:b8:20:ad:e3:25:1d:2a:ef:ef:b6:42:0d:a1: dd:f8:ee:4e:15:58:db:ee:e0:b1:9b:44:93:d6:56: 05:01:9b:16:36:1d:f1:f1:72:2a:bb:d7:96:cc:1a: 4c:6f:bb:fa:8e:a7:1a:d6:a1:d1:17:8d:e7:2b:33: 0c:b0:82:fa:e7:e9:b3:34:06:b0:58:61:ad:99:86: 0d:b4:cc:c0:dc:ce:d8:71:ed:80:c6:c0:f0:57:be: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:56:AE:D1:09:AA:A7:0A:D2:4B:38:DD:34:43:12:79:D3:78:1A:A1 X509v3 Authority Key Identifier: keyid:39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:46:33:fb:ec:68:3b:93:06:48:7d:65:a2:86:6a:e3:90: bb:4f:0e:c1:58:2a:67:59:58:11:f9:2f:62:f6:78:48:ff:90: d4:2c:29:dd:3e:5d:c6:e8:ec:15:f9:a2:12:9e:d6:7b:c9:4f: 42:99:19:c4:f2:1d:9d:8f:aa:75:56:a2:91:da:07:79:08:3d: 33:dd:a2:56:17:df:d9:5e:24:7e:41:73:d6:ce:6f:e5:fb:54: d8:11:06:82:a9:61:02:95:11:f5:3b:15:55:1d:14:7e:4a:3c: 90:e2:ca:bf:0f:17:65:3e:5f:ea:5a:3a:24:2a:b5:7a:8b:48: 56:c5:23:9b:0c:ae:df:1f:30:d4:be:78:f9:f2:5b:fa:9d:df: b8:84:2a:9a:d5:ed:0e:f2:4e:ab:66:a5:56:9a:38:d9:83:11: 99:da:ce:00:01:d0:6b:b4:67:07:b9:50:80:50:52:13:71:ac: af:63:dd:19:d6:0f:b7:09:64:3e:41:90:1a:b7:57:0c:c9:c9: d8:54:25:34:e7:f5:7e:e2:69:3a:f2:67:94:b5:e3:0b:b8:e7: ef:bc:51:fb:6b:ff:fb:92:cc:f4:ae:54:68:3b:40:e6:af:dc: 3c:6b:6a:50:ea:5d:d5:97:db:6e:cb:16:50:74:79:ab:fa:a8: be:d8:86:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePIVMRQ5sqXEPBT9gK8Y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NmE1OGY0NWQwZWM4MDE1ZmEzMjZhZTU4ZmY1ODAzMzI4 OWJmOWQwHhcNMjUxMjE0MTkwMDQxWhcNMjUxMjE1MTkwMDQxWjAzMTEwLwYDVQQD EyhiYjU2YWVkMTA5YWFhNzBhZDI0YjM4ZGQzNDQzMTI3OWQzNzgxYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIGwKX/E3BNpW+yUxKjwynev2/Op tkLlLcdRugC2uzjVPEEdUYnNxB0tq4BPywMPr4lRZDUjSBVdbuHtSWwJqH4HO0xo LlZzHOgvrt2zhzbOwkLpzbQ2PMn6ffzovbnoMUlXG3JTgUufG2OD4QzmL6/W7//e /6CaPxsRSsjmirLxiX+skGbDLleSuQANUu3y4+y78c21bIyRJu1MYhAWJTtqms// P7ggreMlHSrv77ZCDaHd+O5OFVjb7uCxm0ST1lYFAZsWNh3x8XIqu9eWzBpMb7v6 jqca1qHRF43nKzMMsIL65+mzNAawWGGtmYYNtMzA3M7Yce2AxsDwV77EoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtWrtEJqqcK0ks43TRDEnnTeBqhMB8GA1UdIwQY MBaAFDlqWPRdDsgBX6Mmrlj/WAMyib+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTVjMzQtOTVmOS00OTVlLWIxYzgt NDc0ZjJjZjZlNjJhLzEvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OTVjMzQtOTVmOS00OTVlLWIxYzgtNDc0ZjJjZjZlNjJh LzEvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG1GM/vs aDuTBkh9ZaKGauOQu08OwVgqZ1lYEfkvYvZ4SP+Q1Cwp3T5dxujsFfmiEp7We8lP QpkZxPIdnY+qdVaikdoHeQg9M92iVhff2V4kfkFz1s5v5ftU2BEGgqlhApUR9TsV VR0Ufko8kOLKvw8XZT5f6lo6JCq1eotIVsUjmwyu3x8w1L54+fJb+p3fuIQqmtXt DvJOq2alVpo42YMRmdrOAAHQa7RnB7lQgFBSE3Gsr2PdGdYPtwlkPkGQGrdXDMnJ 2FQlNOf1fuJpOvJnlLXjC7jn77xR+2v/+5LM9K5UaDtA5q/cPGtqUOpd1ZfbbssW UHR5q/qovtiGAQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:19 2025 by rpki-client