This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json) Hash identifier: VOy4Mp6bPrtLDlMb+6FcxzXFM/2RrUqpzftuJGXS6Kw= Subject key identifier: 98:B7:A6:2B:DC:F2:F2:F1:00:6E:3D:F8:D8:A8:1F:8B:EB:9F:E9:79 Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Certificate serial: 019B3D59D05D40DE18F65AD7BD25B3B8DD06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft Manifest number: 0DC5 Signing time: Sat 20 Dec 2025 20:00:54 +0000 Manifest this update: Sat 20 Dec 2025 20:00:54 +0000 Manifest next update: Sun 21 Dec 2025 20:00:54 +0000 Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: xRt4dK9wqMtj7nqeK/C3NyUMSkdADeG4srrT67FNsuM=) 2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d0:5d:40:de:18:f6:5a:d7:bd:25:b3:b8:dd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Validity Not Before: Dec 20 20:00:54 2025 GMT Not After : Dec 21 20:00:54 2025 GMT Subject: CN=98b7a62bdcf2f2f1006e3df8d8a81f8beb9fe979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:94:c9:7d:3d:37:f2:95:05:88:28:bb:26: 18:23:2b:1e:34:86:42:ef:48:9a:7f:71:21:91:1b: 18:a3:37:b2:96:c1:2f:e4:0f:20:e8:21:a1:e4:d3: d2:e3:6b:9f:e0:d0:f7:72:a7:57:83:4e:6e:3a:df: 0d:58:c5:0f:18:92:6b:e5:63:28:00:5c:08:a7:11: fb:4a:3b:7f:33:3b:9d:f7:88:36:90:ef:58:e5:8a: c4:be:91:b6:4a:e8:d6:d5:18:b2:1c:21:ce:aa:36: 2d:f2:16:fc:76:33:02:2c:ac:14:2e:5c:7b:7a:56: bf:2f:e6:17:d0:c8:40:3f:69:85:48:dd:8e:f1:3e: ab:b4:b6:a2:65:f1:05:97:9f:da:33:f3:54:5e:1e: 9a:a4:58:a5:9c:ae:d0:1c:84:0a:b0:53:da:85:5f: a5:e1:09:72:28:56:96:57:f6:85:90:74:b0:0c:46: 27:f3:7e:a2:89:40:a5:db:0a:8f:28:b4:58:dc:99: 1c:6b:21:15:93:1b:bf:20:a5:5a:ed:2e:1f:62:63: be:58:a2:19:c3:26:63:68:9b:28:2c:ed:fa:ac:7c: f5:76:47:3d:a2:47:7c:4c:76:0b:43:29:62:7f:ef: c0:3f:25:d3:fb:fa:c3:1e:25:79:2b:9b:8a:a1:05: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:A6:2B:DC:F2:F2:F1:00:6E:3D:F8:D8:A8:1F:8B:EB:9F:E9:79 X509v3 Authority Key Identifier: keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:66:2c:cb:0b:d0:dc:b7:94:ab:31:b3:92:b7:43:07:e0:d4: 4c:d1:f7:72:eb:f1:6d:25:cc:2e:8e:f7:73:89:ce:bf:80:e7: 79:7d:c0:bc:e2:5b:6d:fb:2e:38:76:85:26:3c:f0:ea:24:a9: 13:aa:a3:8d:0e:c9:6e:0b:b9:2c:c5:44:90:89:96:c8:80:0f: 42:f9:20:d6:9a:1c:6f:43:d3:71:c4:d0:a2:6e:49:d4:18:d8: 25:1b:25:01:07:6e:b2:ee:b6:71:73:c2:90:9a:a3:b1:cd:31: 31:c2:90:f9:03:ee:cb:dc:07:c5:4a:ae:f3:f1:88:22:cf:b7: 08:8e:b2:0f:41:6d:ca:02:0b:b2:e5:48:a6:01:eb:34:4a:1d: 83:f5:43:54:75:51:33:eb:1e:99:15:b8:e8:bb:03:f5:db:c8: f0:a9:23:ca:26:19:49:36:d9:26:b8:53:43:11:87:0c:4e:7c: 86:3d:a7:f4:e5:ed:03:16:1a:b9:55:3b:c7:40:20:d6:da:3c: e0:23:28:21:93:07:1e:f8:ae:11:f7:e6:55:22:3f:fc:44:b2: 47:0b:d0:43:a4:40:1b:35:00:5a:71:e7:d1:29:1d:6f:5b:a2: a4:ee:16:ac:d1:c1:13:d2:d7:22:14:98:3e:07:5c:e9:ec:cb: 88:36:3d:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdBdQN4Y9lrXvSWzuN0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3 ZmM4YjQwHhcNMjUxMjIwMjAwMDU0WhcNMjUxMjIxMjAwMDU0WjAzMTEwLwYDVQQD Eyg5OGI3YTYyYmRjZjJmMmYxMDA2ZTNkZjhkOGE4MWY4YmViOWZlOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWUyX09N/KVBYgouyYYIyseNIZC 70iaf3EhkRsYozeylsEv5A8g6CGh5NPS42uf4ND3cqdXg05uOt8NWMUPGJJr5WMo AFwIpxH7Sjt/Mzud94g2kO9Y5YrEvpG2SujW1RiyHCHOqjYt8hb8djMCLKwULlx7 ela/L+YX0MhAP2mFSN2O8T6rtLaiZfEFl5/aM/NUXh6apFilnK7QHIQKsFPahV+l 4QlyKFaWV/aFkHSwDEYn836iiUCl2wqPKLRY3JkcayEVkxu/IKVa7S4fYmO+WKIZ wyZjaJsoLO36rHz1dkc9okd8THYLQylif+/APyXT+/rDHiV5K5uKoQVHLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi3pivc8vLxAG49+NioH4vrn+l5MB8GA1UdIwQY MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt ZDQ0NmYxZjgzYWU5LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5 LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmYsywvQ 3LeUqzGzkrdDB+DUTNH3cuvxbSXMLo73c4nOv4DneX3AvOJbbfsuOHaFJjzw6iSp E6qjjQ7Jbgu5LMVEkImWyIAPQvkg1pocb0PTccTQom5J1BjYJRslAQdusu62cXPC kJqjsc0xMcKQ+QPuy9wHxUqu8/GIIs+3CI6yD0FtygILsuVIpgHrNEodg/VDVHVR M+semRW46LsD9dvI8KkjyiYZSTbZJrhTQxGHDE58hj2n9OXtAxYauVU7x0Ag1to8 4CMoIZMHHviuEffmVSI//ESyRwvQQ6RAGzUAWnHn0Skdb1uipO4WrNHBE9LXIhSY Pgdc6ezLiDY9oA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:50 2025 by rpki-client