This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json) Hash identifier: 5F4XvyU4NemyGR7fYUs2G1Pc7S/xGV5MNFzY9X7nPwk= Subject key identifier: 37:C9:58:47:A4:BD:56:A0:4C:83:DA:26:D1:EE:8D:A8:C7:3C:F2:FC Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c Certificate serial: 019B3D232755B709DE16224DD6B08178F65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 19:01:12 +0000 Manifest this update: Sat 20 Dec 2025 19:01:12 +0000 Manifest next update: Sun 21 Dec 2025 19:01:12 +0000 Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: S1zxVOgDt7/ilrnQwxEuZc4YARG8fC5+V8dj9B54lRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:27:55:b7:09:de:16:22:4d:d6:b0:81:78:f6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c Validity Not Before: Dec 20 19:01:12 2025 GMT Not After : Dec 21 19:01:12 2025 GMT Subject: CN=37c95847a4bd56a04c83da26d1ee8da8c73cf2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:fb:57:13:7d:11:8d:61:ed:c5:f7:3c:44: 84:38:be:9e:26:04:40:dc:25:78:d6:ea:db:49:6e: c7:69:4d:6e:f6:53:95:8d:06:81:8c:39:4c:e4:6b: 95:4a:a8:de:c2:83:25:c8:08:8e:39:5e:0d:5a:99: b3:6a:cd:24:61:b8:16:3e:22:c2:08:0d:f3:56:dd: 12:1a:0e:28:8d:6c:8d:13:d9:45:0a:c1:23:fb:b2: 23:ea:45:d6:d3:6e:f1:71:c2:e2:06:7a:6b:40:58: 47:96:6c:2e:cd:b4:20:fd:f9:5f:ef:85:46:05:b6: c3:02:ed:74:d3:19:ee:e1:cd:48:67:ec:39:0f:88: 14:f6:ac:59:f8:de:39:c0:19:da:4f:35:2a:9b:fe: d3:39:a7:1f:a9:d8:0b:b1:e1:04:18:54:36:2b:81: 40:a6:49:ab:9c:4e:d1:0d:54:e0:3d:ef:e9:02:04: bf:b9:c0:20:dd:7b:4e:52:77:33:7d:cf:05:9d:d0: 39:f0:fd:1c:19:97:7c:0c:0c:82:e3:b9:02:83:5e: e4:20:be:a4:35:ab:93:93:43:98:27:10:bd:29:87: a7:ad:59:d1:70:f0:09:0a:f1:a4:ea:bd:30:e0:c3: e9:62:cf:96:0b:9a:3c:94:98:e6:ff:48:83:8a:97: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C9:58:47:A4:BD:56:A0:4C:83:DA:26:D1:EE:8D:A8:C7:3C:F2:FC X509v3 Authority Key Identifier: keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a8:3d:c2:4e:b5:dc:ed:66:90:83:30:3c:d5:1c:ed:86:63: 69:e0:45:9f:7b:42:25:47:32:5b:72:2b:17:44:21:d7:26:18: 24:99:04:25:d4:6a:18:95:22:82:3a:99:ac:70:64:ba:20:02: c7:87:1b:b3:4b:d1:68:02:59:51:9f:16:cd:7b:37:57:23:73: 3c:0c:d2:af:df:f8:24:0e:bc:44:83:df:83:bd:72:68:05:f8: 24:2b:80:0f:7a:d1:1f:97:6b:e0:ab:c2:9f:5d:fd:40:52:66: c2:2f:24:79:37:40:eb:ad:b1:c5:67:6b:b8:e7:c1:23:b0:14: cb:f7:77:23:f7:d5:1c:9e:19:44:12:0c:df:99:52:6e:d4:b2: 27:e3:28:24:83:71:35:d8:0b:02:df:53:f7:65:ac:cd:54:e2: ad:cd:58:58:5b:b9:fd:05:41:65:50:f0:24:82:68:47:18:40: b3:93:4d:46:aa:09:d2:5a:c3:40:bc:b0:4d:b6:b6:e4:5b:79: f1:ed:02:23:1f:68:dd:77:fc:ba:38:a2:65:39:f3:0a:5e:82: b4:ac:d3:6c:06:81:5c:70:05:ec:1d:c7:f9:00:de:90:57:24: f6:03:4f:f7:d1:6c:2a:6f:74:ef:7c:2f:30:cd:a4:d4:78:4d: c7:5c:f1:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IydVtwneFiJN1rCBePZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYjM3M2JmOGU0NzcyNzc1ZTdjOGZjNWZiZDMyOWNkZWU0 NGEzMmMwHhcNMjUxMjIwMTkwMTEyWhcNMjUxMjIxMTkwMTEyWjAzMTEwLwYDVQQD EygzN2M5NTg0N2E0YmQ1NmEwNGM4M2RhMjZkMWVlOGRhOGM3M2NmMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sn7VxN9EY1h7cX3PESEOL6eJgRA 3CV41urbSW7HaU1u9lOVjQaBjDlM5GuVSqjewoMlyAiOOV4NWpmzas0kYbgWPiLC CA3zVt0SGg4ojWyNE9lFCsEj+7Ij6kXW027xccLiBnprQFhHlmwuzbQg/flf74VG BbbDAu100xnu4c1IZ+w5D4gU9qxZ+N45wBnaTzUqm/7TOacfqdgLseEEGFQ2K4FA pkmrnE7RDVTgPe/pAgS/ucAg3XtOUnczfc8FndA58P0cGZd8DAyC47kCg17kIL6k NauTk0OYJxC9KYenrVnRcPAJCvGk6r0w4MPpYs+WC5o8lJjm/0iDipcxTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfJWEekvVagTIPaJtHujajHPPL8MB8GA1UdIwQY MBaAFKCzc7+OR3J3XnyPxfvTKc3uRKMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MDcyMTMtYjI2NC00ODUzLTkzNDMt ZWU1NTg1YWUxM2I3LzEvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80MDcyMTMtYjI2NC00ODUzLTkzNDMtZWU1NTg1YWUxM2I3 LzEvb0xOenY0NUhjbmRlZklfRi05TXB6ZTVFb3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKg9wk61 3O1mkIMwPNUc7YZjaeBFn3tCJUcyW3IrF0Qh1yYYJJkEJdRqGJUigjqZrHBkuiAC x4cbs0vRaAJZUZ8WzXs3VyNzPAzSr9/4JA68RIPfg71yaAX4JCuAD3rRH5dr4KvC n139QFJmwi8keTdA662xxWdruOfBI7AUy/d3I/fVHJ4ZRBIM35lSbtSyJ+MoJINx NdgLAt9T92WszVTirc1YWFu5/QVBZVDwJIJoRxhAs5NNRqoJ0lrDQLywTba25Ft5 8e0CIx9o3Xf8ujiiZTnzCl6CtKzTbAaBXHAF7B3H+QDekFck9gNP99FsKm9073wv MM2k1HhNx1zxGA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:18 2025 by rpki-client