This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json) Hash identifier: fCUyfI29BDojHLye4zLBJ7jkJKLUnD5jBdKrUPN8LyQ= Subject key identifier: C1:79:C6:9E:ED:8C:83:92:05:B3:9C:7C:EE:51:9D:16:40:02:B5:8D Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Certificate serial: 019B345659D1A6EE5C3E43901744A61EADBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft Manifest number: 1314 Signing time: Fri 19 Dec 2025 02:00:32 +0000 Manifest this update: Fri 19 Dec 2025 02:00:32 +0000 Manifest next update: Sat 20 Dec 2025 02:00:32 +0000 Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: mpneUjgGO6fOXbGAReYNsHKNHRULdSD3pbVHN51p2tc=) 2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:59:d1:a6:ee:5c:3e:43:90:17:44:a6:1e:ad:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Validity Not Before: Dec 19 02:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c179c69eed8c839205b39c7cee519d164002b58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:48:d1:6e:2e:32:6f:cd:0c:76:1e:7d:6d: 10:76:a8:de:cb:81:03:a9:be:a4:17:64:5f:e9:23: 18:32:f5:2c:8e:0f:86:b3:76:ca:c0:c8:b4:be:4f: 4f:a3:f2:d4:20:48:30:9e:f6:98:c8:c4:bd:7a:5d: e3:13:76:8b:30:7a:c1:85:e2:86:80:1c:f8:b6:a5: 6a:52:c7:96:84:56:04:7e:8c:17:83:11:16:93:cb: ae:2c:5c:78:0a:98:78:06:b9:5e:67:8f:e7:c2:2c: 8c:72:31:ca:f5:fc:e7:6c:4c:9a:3c:b3:73:76:4b: 91:c6:a9:c0:0f:bd:a6:b2:02:d4:04:fc:5a:af:83: cf:1d:79:f0:2b:80:34:80:62:df:cb:e9:c5:13:93: 9e:8e:93:91:52:7e:e0:27:c2:ea:77:9e:1f:bf:43: ef:4f:5f:38:6a:f2:e4:77:37:5e:84:c4:1e:da:59: f7:2f:c2:52:d0:74:8e:5e:12:b4:51:7d:f6:a8:58: ac:b2:15:63:40:1c:ca:2d:06:17:40:d1:69:4e:a2: ff:9b:80:7b:53:ba:8f:91:ba:4e:5a:07:01:b9:ee: 89:43:d9:0d:85:42:c0:67:56:f2:a0:c3:e0:59:2a: a5:de:8a:94:a7:69:5a:f6:c5:c4:58:e4:38:cc:18: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:C6:9E:ED:8C:83:92:05:B3:9C:7C:EE:51:9D:16:40:02:B5:8D X509v3 Authority Key Identifier: keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:42:52:33:13:b4:6d:b8:a9:32:71:6c:23:81:8d:ec:b8:35: dc:af:73:87:c1:9d:f5:08:bc:e7:af:cc:6e:42:67:48:e0:ff: 40:66:69:87:95:05:05:fc:c0:b2:e8:d3:72:22:d2:e8:49:2d: 06:58:41:dc:27:7c:f9:2f:a2:69:f3:4b:62:e5:eb:59:64:f3: 11:47:70:2f:25:e6:32:4c:42:0a:90:8a:af:34:a7:d0:03:08: 3f:9d:c8:50:22:df:73:f7:15:e0:16:2b:3d:aa:60:f7:88:26: 80:bc:fb:f6:f9:d0:54:4d:0e:86:d4:7f:9d:ac:ff:07:31:63: a2:e3:93:7f:da:17:02:83:32:91:78:60:85:d8:ad:33:40:da: ca:19:4c:fa:4d:0a:e4:f9:20:79:a5:67:75:8b:10:5c:2f:77: 08:ef:fc:4d:b8:2a:73:cc:6d:72:c0:f3:55:65:66:67:08:17: 65:63:e4:05:36:9b:1e:7b:7e:68:a1:75:55:c1:e2:67:81:ef: 9e:36:9c:e4:fd:58:7b:e8:7e:d4:fb:8a:ef:6f:18:eb:d1:d9: 0d:c5:e2:5b:24:79:f8:a2:58:fd:df:24:ba:f5:fa:84:c0:74: cf:27:92:10:45:f5:56:15:85:7a:fa:42:88:81:2c:a4:6a:0c: c5:b5:4a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlnRpu5cPkOQF0SmHq29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0 YjI0ZGYwHhcNMjUxMjE5MDIwMDMyWhcNMjUxMjIwMDIwMDMyWjAzMTEwLwYDVQQD EyhjMTc5YzY5ZWVkOGM4MzkyMDViMzljN2NlZTUxOWQxNjQwMDJiNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI5I0W4uMm/NDHYefW0Qdqjey4ED qb6kF2Rf6SMYMvUsjg+Gs3bKwMi0vk9Po/LUIEgwnvaYyMS9el3jE3aLMHrBheKG gBz4tqVqUseWhFYEfowXgxEWk8uuLFx4Cph4BrleZ4/nwiyMcjHK9fznbEyaPLNz dkuRxqnAD72msgLUBPxar4PPHXnwK4A0gGLfy+nFE5OejpORUn7gJ8Lqd54fv0Pv T184avLkdzdehMQe2ln3L8JS0HSOXhK0UX32qFisshVjQBzKLQYXQNFpTqL/m4B7 U7qPkbpOWgcBue6JQ9kNhULAZ1byoMPgWSql3oqUp2la9sXEWOQ4zBiGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF5xp7tjIOSBbOcfO5RnRZAArWNMB8GA1UdIwQY MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5 LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEJSMxO0 bbipMnFsI4GN7Lg13K9zh8Gd9Qi856/MbkJnSOD/QGZph5UFBfzAsujTciLS6Ekt BlhB3Cd8+S+iafNLYuXrWWTzEUdwLyXmMkxCCpCKrzSn0AMIP53IUCLfc/cV4BYr Papg94gmgLz79vnQVE0OhtR/naz/BzFjouOTf9oXAoMykXhghditM0DayhlM+k0K 5PkgeaVndYsQXC93CO/8Tbgqc8xtcsDzVWVmZwgXZWPkBTabHnt+aKF1VcHiZ4Hv njac5P1Ye+h+1PuK728Y69HZDcXiWyR5+KJY/d8kuvX6hMB0zyeSEEX1VhWFevpC iIEspGoMxbVK6g== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:10 2025 by rpki-client