This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json) Hash identifier: ngJRxc1hGlnXYSsH33gCiDAL1eMrJhKtD8aH5DK3T6k= Subject key identifier: B6:B2:46:73:F8:CA:57:44:DA:0B:39:18:36:7E:B3:09:A8:F6:07:BC Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Certificate serial: 019B51F36361BDCA48866F81DA5CE1B7D431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft Manifest number: 0F82 Signing time: Wed 24 Dec 2025 20:01:03 +0000 Manifest this update: Wed 24 Dec 2025 20:01:03 +0000 Manifest next update: Thu 25 Dec 2025 20:01:03 +0000 Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: mf/6XLLUfXhnsBOl4eFiBc6IUyz5O0/xC8LQ6/d4/Bw=) 2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:63:61:bd:ca:48:86:6f:81:da:5c:e1:b7:d4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Validity Not Before: Dec 24 20:01:03 2025 GMT Not After : Dec 25 20:01:03 2025 GMT Subject: CN=b6b24673f8ca5744da0b3918367eb309a8f607bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:50:08:6d:c6:27:ee:99:64:c8:ea:d8:da: c5:e2:01:ca:74:4c:16:a8:2e:2a:4b:e4:1f:aa:b1: d8:82:a5:c3:76:b1:26:9c:8e:43:ad:b5:f4:52:b1: ca:0a:8d:fd:8d:8c:98:37:3f:93:2b:59:3d:d3:7f: 18:58:f9:bf:21:7a:b5:f8:e1:f4:08:94:16:b3:0b: bf:30:9a:f4:ba:1e:a0:6b:4c:aa:22:35:25:9e:7b: e4:95:65:7e:99:91:23:e5:f8:11:89:58:8f:7c:e5: fe:d0:c6:3a:64:b7:7f:a8:d1:0f:13:b4:21:a7:1f: 79:6f:24:24:af:75:3f:32:4d:d2:8c:0c:21:d8:a4: c6:a0:0b:0e:83:31:24:32:ef:28:61:fe:5a:8b:99: 4c:b0:e3:ea:50:b3:7b:f3:82:9a:bb:65:d4:bd:9b: 44:c3:b6:03:a0:89:47:7d:af:fb:90:94:be:06:13: 79:d3:b0:9d:69:6e:01:ff:e4:81:93:f0:62:cc:20: 57:63:f3:ac:64:be:90:dd:81:fc:00:bd:c2:b8:9c: 78:86:ec:97:e5:f1:67:5f:79:a8:94:1e:9b:f1:70: e8:3b:2c:12:03:0b:3f:c3:1f:dd:03:e1:63:d9:a9: 60:4f:b1:57:5f:5d:b6:aa:de:0d:d9:2d:a3:8f:8b: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B2:46:73:F8:CA:57:44:DA:0B:39:18:36:7E:B3:09:A8:F6:07:BC X509v3 Authority Key Identifier: keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f6:f6:20:cb:c5:21:87:0b:04:80:46:04:82:7d:f0:29:76: 01:0e:c6:61:12:c8:dd:31:d7:19:11:37:ad:d4:78:d9:a1:2c: d6:c1:82:e2:29:39:8e:21:a0:05:f5:b4:80:20:0b:1f:d8:c9: 1f:89:00:83:8a:1c:23:f5:8f:34:2c:54:e3:53:e7:1a:3c:9f: 31:03:b1:c8:3e:65:f6:c0:92:ab:50:fd:42:74:72:c5:31:1f: 64:91:16:f2:90:a7:4a:7c:59:ab:c5:93:c6:4e:19:8a:3f:41: 21:ad:0b:0d:be:9d:87:6e:1e:e1:de:0a:9b:a3:79:3c:a4:cb: b7:18:ee:47:7f:91:45:41:06:14:9d:4e:e1:d7:6d:13:75:86: f4:cf:dc:59:b7:81:70:51:ea:a4:c8:af:53:46:79:a4:93:3f: cb:0b:08:4b:39:3d:72:f8:66:55:5a:4a:8f:29:c5:08:70:62: 36:02:b0:46:71:57:84:bf:8f:82:ee:1e:da:d4:1b:20:f4:36: 45:ea:44:dd:50:e5:9f:c1:03:65:88:f1:f2:59:4a:15:d2:2e: 37:5a:b7:70:a8:f5:06:14:3e:44:f5:a2:ec:9f:03:6d:5c:44: d3:bb:45:11:c9:3f:68:e3:10:fe:c6:6f:a2:2d:95:ab:26:8c: e8:00:9a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR82NhvcpIhm+B2lzht9QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx NTkzNzgwHhcNMjUxMjI0MjAwMTAzWhcNMjUxMjI1MjAwMTAzWjAzMTEwLwYDVQQD EyhiNmIyNDY3M2Y4Y2E1NzQ0ZGEwYjM5MTgzNjdlYjMwOWE4ZjYwN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt5QCG3GJ+6ZZMjq2NrF4gHKdEwW qC4qS+QfqrHYgqXDdrEmnI5DrbX0UrHKCo39jYyYNz+TK1k9038YWPm/IXq1+OH0 CJQWswu/MJr0uh6ga0yqIjUlnnvklWV+mZEj5fgRiViPfOX+0MY6ZLd/qNEPE7Qh px95byQkr3U/Mk3SjAwh2KTGoAsOgzEkMu8oYf5ai5lMsOPqULN784Kau2XUvZtE w7YDoIlHfa/7kJS+BhN507CdaW4B/+SBk/BizCBXY/OsZL6Q3YH8AL3CuJx4huyX 5fFnX3molB6b8XDoOywSAws/wx/dA+Fj2algT7FXX122qt4N2S2jj4v+5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLayRnP4yldE2gs5GDZ+swmo9ge8MB8GA1UdIwQY MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5 LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/b2IMvF IYcLBIBGBIJ98Cl2AQ7GYRLI3THXGRE3rdR42aEs1sGC4ik5jiGgBfW0gCALH9jJ H4kAg4ocI/WPNCxU41PnGjyfMQOxyD5l9sCSq1D9QnRyxTEfZJEW8pCnSnxZq8WT xk4Zij9BIa0LDb6dh24e4d4Km6N5PKTLtxjuR3+RRUEGFJ1O4ddtE3WG9M/cWbeB cFHqpMivU0Z5pJM/ywsISzk9cvhmVVpKjynFCHBiNgKwRnFXhL+Pgu4e2tQbIPQ2 RepE3VDln8EDZYjx8llKFdIuN1q3cKj1BhQ+RPWi7J8DbVxE07tFEck/aOMQ/sZv oi2VqyaM6ACaeQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:02:39 2025 by rpki-client