This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft File: Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft (raw, json) Hash identifier: dw1xBnSHotzfCAmQU+IjHvRMkdUyodgD3LexwfztwbU= Subject key identifier: AB:76:13:B8:61:E5:11:E2:EA:A0:A5:A4:4E:09:18:10:77:F7:07:41 Authority key identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 Certificate issuer: /CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8 Certificate serial: 019B21749A89C29418053A38EEFEC358B853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 10:00:48 +0000 Manifest this update: Mon 15 Dec 2025 10:00:48 +0000 Manifest next update: Tue 16 Dec 2025 10:00:48 +0000 Files and hashes: 1: Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl (hash: vx5psyyZqQqkCup9+ncBEm7fpVvDETf2UFj0F0x+WeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:9a:89:c2:94:18:05:3a:38:ee:fe:c3:58:b8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8 Validity Not Before: Dec 15 10:00:48 2025 GMT Not After : Dec 16 10:00:48 2025 GMT Subject: CN=ab7613b861e511e2eaa0a5a44e09181077f70741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:cc:b7:1a:ea:dc:3f:81:d0:f6:d0:58:87: 78:f6:6b:88:68:ea:0f:c6:6a:74:a1:00:2c:9b:d1: 76:a1:1b:5d:68:b8:c2:6f:6e:ae:8a:0d:94:3c:20: cc:34:f0:29:fe:eb:39:75:0c:dd:9f:35:54:c3:d6: 80:ed:c0:ac:1d:32:b7:09:a5:c7:51:2d:f7:65:82: 61:8e:e1:41:58:d7:23:b9:66:be:5f:1b:c7:17:29: 28:96:23:c9:e5:4e:51:53:aa:a6:d7:4e:bc:8e:12: cf:4a:cb:05:41:9b:b8:a5:ed:15:64:70:ce:15:b8: 6c:d6:b7:5e:c9:e6:c8:c1:6d:02:7e:d5:98:f5:97: 04:56:74:9d:96:df:61:08:ca:dd:da:0f:eb:26:39: 99:9e:65:4c:53:00:74:d3:1b:36:92:e9:00:b4:dd: e2:c6:ed:e2:5a:f4:45:a3:fd:ec:d9:13:2a:6c:ca: 3e:89:be:b9:07:93:5f:b7:3b:86:6a:d9:40:62:26: 2d:56:45:b2:18:b5:e1:a4:1c:53:25:1d:27:ff:61: 3c:98:f3:00:5c:5d:cc:14:f3:01:75:a0:e5:5e:f9: 7c:a0:34:4c:2b:c9:f6:29:93:33:1f:83:51:aa:c6: 39:39:53:26:82:4f:7a:8d:f8:ac:1d:4e:0c:4b:9d: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:13:B8:61:E5:11:E2:EA:A0:A5:A4:4E:09:18:10:77:F7:07:41 X509v3 Authority Key Identifier: keyid:39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:dc:69:93:06:00:d2:e4:74:9f:8d:5f:76:00:b0:4b:05: 11:00:80:93:2b:c5:e7:6b:b7:bd:19:17:ff:23:1e:06:58:8b: 84:26:33:22:56:59:67:e0:6a:ca:c6:82:b3:8c:7d:66:7f:a2: 3b:4b:71:7b:58:85:8c:a4:3d:00:f6:da:6c:ba:97:a0:45:25: 20:f6:1e:d6:66:43:c2:5a:e1:09:c9:4c:63:22:b6:3e:12:0b: 81:dc:90:10:12:6f:6a:a6:c6:bc:9b:33:18:9a:07:04:84:10: f9:f4:de:8b:05:97:f0:5f:24:01:18:77:2d:39:e0:a4:2f:92: 82:ba:49:e6:ae:25:96:d3:9d:58:b0:29:b2:52:33:9f:37:83: 54:36:ce:a5:44:a1:6a:c9:7f:a6:79:b4:a5:4a:c3:5d:90:ec: fd:97:22:fa:34:3a:2d:a0:c8:59:83:83:6c:19:49:87:2c:15: ea:e8:c7:1e:eb:9a:7b:85:dc:5f:3b:9e:ce:ae:2e:da:32:a6: d2:63:c0:28:3b:b6:70:c7:8f:da:34:6a:bc:0d:dc:5b:11:ea: 19:1c:74:ec:ea:63:d1:96:f8:4d:c8:0f:0e:4b:98:8e:4d:42: 6f:c8:a9:37:3d:f3:ba:4d:41:33:12:c7:fd:fc:65:e2:d4:f9: bf:de:3a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJqJwpQYBTo47v7DWLhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2QxZDViYjg4OTU4YzY5Y2JkZGU5MGE5ZTA1NmI0OGM0 ZmFiZjgwHhcNMjUxMjE1MTAwMDQ4WhcNMjUxMjE2MTAwMDQ4WjAzMTEwLwYDVQQD EyhhYjc2MTNiODYxZTUxMWUyZWFhMGE1YTQ0ZTA5MTgxMDc3ZjcwNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTHMtxrq3D+B0PbQWId49muIaOoP xmp0oQAsm9F2oRtdaLjCb26uig2UPCDMNPAp/us5dQzdnzVUw9aA7cCsHTK3CaXH US33ZYJhjuFBWNcjuWa+XxvHFykoliPJ5U5RU6qm1068jhLPSssFQZu4pe0VZHDO Fbhs1rdeyebIwW0CftWY9ZcEVnSdlt9hCMrd2g/rJjmZnmVMUwB00xs2kukAtN3i xu3iWvRFo/3s2RMqbMo+ib65B5NftzuGatlAYiYtVkWyGLXhpBxTJR0n/2E8mPMA XF3MFPMBdaDlXvl8oDRMK8n2KZMzH4NRqsY5OVMmgk96jfisHU4MS50xCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt2E7hh5RHi6qClpE4JGBB39wdBMB8GA1UdIwQY MBaAFDnNHVu4iVjGnL3ekKngVrSMT6v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMt NDZhODVhMjhlNzQ5LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMtNDZhODVhMjhlNzQ5 LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBXcaZMG ANLkdJ+NX3YAsEsFEQCAkyvF52u3vRkX/yMeBliLhCYzIlZZZ+BqysaCs4x9Zn+i O0txe1iFjKQ9APbabLqXoEUlIPYe1mZDwlrhCclMYyK2PhILgdyQEBJvaqbGvJsz GJoHBIQQ+fTeiwWX8F8kARh3LTngpC+SgrpJ5q4lltOdWLApslIznzeDVDbOpUSh asl/pnm0pUrDXZDs/Zci+jQ6LaDIWYODbBlJhywV6ujHHuuae4XcXzuezq4u2jKm 0mPAKDu2cMeP2jRqvA3cWxHqGRx07Opj0Zb4TcgPDkuYjk1Cb8ipNz3zuk1BMxLH /fxl4tT5v946sw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:02 2025 by rpki-client