This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json) Hash identifier: tJDtptRntwJwTuo35vY1AQ12Zbg5k+qXiUBvF7/j2+8= Subject key identifier: E4:7A:00:46:94:B8:01:9B:4E:10:3A:04:AC:BC:8A:A6:E1:4B:02:D8 Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019B0F37B7DCED3238D55B8F35103A4E2209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft Manifest number: 0E56 Signing time: Thu 11 Dec 2025 21:01:08 +0000 Manifest this update: Thu 11 Dec 2025 21:01:08 +0000 Manifest next update: Fri 12 Dec 2025 21:01:08 +0000 Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=) 2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: odKsp/v0A08ur7wFE3K4hdIOco2OjIcJJZahwmbGDpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b7:dc:ed:32:38:d5:5b:8f:35:10:3a:4e:22:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Dec 11 21:01:08 2025 GMT Not After : Dec 12 21:01:08 2025 GMT Subject: CN=e47a004694b8019b4e103a04acbc8aa6e14b02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:2f:9d:de:c5:06:c9:3f:a2:ab:39:39:a2: eb:cc:c6:69:47:d4:7a:71:a3:d1:96:b5:c8:87:3e: 72:34:a8:2d:7a:04:3b:d6:9e:ac:0e:e5:fc:92:3e: a6:00:63:77:8b:54:53:02:a2:7f:f1:23:60:0e:41: cd:0a:c3:07:43:35:00:99:2b:c3:46:a8:cd:17:59: 9f:47:d9:c5:56:a0:d9:4d:4e:59:cb:24:07:e7:15: a2:87:39:e5:e0:00:38:ae:b7:27:02:79:04:30:02: ec:66:83:b1:f4:7c:3d:cb:be:cf:9b:ff:8f:b9:d7: a7:48:a2:b4:e6:1d:0c:05:f3:f5:be:0f:62:8a:35: 68:0d:11:96:05:83:61:45:42:18:83:0d:08:45:a8: fc:1b:0d:de:d6:25:a4:ff:88:c5:6d:de:da:d7:10: ff:41:88:ae:95:60:d9:50:ca:d9:f1:85:cc:b6:93: ad:d4:28:81:21:c1:ce:0b:25:25:d7:a7:fb:aa:4f: 78:10:1e:f9:da:86:b0:44:e0:62:ea:0d:7e:1e:64: b5:8a:a3:93:52:98:a6:87:ce:71:ab:93:a6:89:0c: 21:52:04:50:f0:b4:7c:be:e4:6f:11:c9:eb:d2:f1: c6:9d:f8:4c:ea:40:db:1a:66:43:34:3f:e4:32:c0: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7A:00:46:94:B8:01:9B:4E:10:3A:04:AC:BC:8A:A6:E1:4B:02:D8 X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:23:6e:fb:51:a6:50:de:e2:2b:7b:71:40:78:27:a3:ed:02: 30:ff:41:d5:f2:6d:60:db:49:1c:1b:06:cb:88:cd:05:ad:6a: 5c:2a:5c:dd:f4:9a:e6:6b:f9:18:37:3c:7b:c2:aa:4a:ec:a4: 50:ce:97:a2:3b:8e:cb:81:64:00:a9:d6:99:7c:b0:da:12:79: 2e:c0:db:24:89:4a:2d:c2:d6:e2:12:60:60:49:f6:a7:f9:ff: 12:77:e6:a7:71:02:ed:34:80:1c:62:c9:f7:72:85:38:16:37: 00:b1:71:51:90:4b:7a:e6:75:49:ea:94:32:48:d6:3f:00:3d: b8:f4:87:13:f7:1f:89:ca:c8:76:04:b3:ec:ad:53:8d:b1:23: a5:33:c0:e2:51:be:2f:43:86:c1:a0:90:8e:6e:8d:a6:38:1c: 1f:80:b4:b1:c3:44:9f:6a:b4:1f:7b:57:c8:ca:09:31:95:b7: 59:f4:d5:09:c7:8b:0b:eb:04:ea:30:63:12:3f:8a:72:1d:f7: a0:49:1d:43:96:a9:67:6b:9a:96:76:17:2f:17:41:2b:dc:c5: 32:95:ec:a7:3d:d0:24:d5:fa:c1:37:96:e9:3d:5a:b3:cb:9b: 8a:2e:a4:77:8d:15:3e:59:04:bb:eb:d6:8b:88:5c:11:fa:f3: b9:6c:ab:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7fc7TI41VuPNRA6TiIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjUxMjExMjEwMTA4WhcNMjUxMjEyMjEwMTA4WjAzMTEwLwYDVQQD EyhlNDdhMDA0Njk0YjgwMTliNGUxMDNhMDRhY2JjOGFhNmUxNGIwMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP4vnd7FBsk/oqs5OaLrzMZpR9R6 caPRlrXIhz5yNKgtegQ71p6sDuX8kj6mAGN3i1RTAqJ/8SNgDkHNCsMHQzUAmSvD RqjNF1mfR9nFVqDZTU5ZyyQH5xWihznl4AA4rrcnAnkEMALsZoOx9Hw9y77Pm/+P udenSKK05h0MBfP1vg9iijVoDRGWBYNhRUIYgw0IRaj8Gw3e1iWk/4jFbd7a1xD/ QYiulWDZUMrZ8YXMtpOt1CiBIcHOCyUl16f7qk94EB752oawROBi6g1+HmS1iqOT Upimh85xq5OmiQwhUgRQ8LR8vuRvEcnr0vHGnfhM6kDbGmZDND/kMsCqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOR6AEaUuAGbThA6BKy8iqbhSwLYMB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByNu+1Gm UN7iK3txQHgno+0CMP9B1fJtYNtJHBsGy4jNBa1qXCpc3fSa5mv5GDc8e8KqSuyk UM6XojuOy4FkAKnWmXyw2hJ5LsDbJIlKLcLW4hJgYEn2p/n/Enfmp3EC7TSAHGLJ 93KFOBY3ALFxUZBLeuZ1SeqUMkjWPwA9uPSHE/cficrIdgSz7K1TjbEjpTPA4lG+ L0OGwaCQjm6NpjgcH4C0scNEn2q0H3tXyMoJMZW3WfTVCceLC+sE6jBjEj+Kch33 oEkdQ5apZ2ualnYXLxdBK9zFMpXspz3QJNX6wTeW6T1as8ubii6kd40VPlkEu+vW i4hcEfrzuWyrpQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:30 2025 by rpki-client