This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json) Hash identifier: 1dbwO4BuSiH6SDr252WevgyXYfSw6/0HXX3QJ9mO3VM= Subject key identifier: 78:BF:D6:16:3E:38:10:BE:74:36:23:67:EC:9B:01:07:F5:87:08:0A Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90 Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90 Certificate serial: 019B563E3133929CE55221B704393DB9B77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft Manifest number: 1667 Signing time: Thu 25 Dec 2025 16:01:14 +0000 Manifest this update: Thu 25 Dec 2025 16:01:14 +0000 Manifest next update: Fri 26 Dec 2025 16:01:14 +0000 Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: Nl1l1QTkyweC8eBhSu4eBnmx9UZ9UlAB5sLUTHQNA8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3e:31:33:92:9c:e5:52:21:b7:04:39:3d:b9:b7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90 Validity Not Before: Dec 25 16:01:14 2025 GMT Not After : Dec 26 16:01:14 2025 GMT Subject: CN=78bfd6163e3810be74362367ec9b0107f587080a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:4e:ba:52:85:d6:8d:6e:ff:f2:f4:51:59: c3:10:ee:46:95:c3:48:90:32:f4:6f:fe:bb:4d:e2: 23:27:2a:57:db:ea:3f:c2:8d:12:5f:8e:e5:3d:6c: ed:88:c0:f5:bc:20:72:03:3c:d9:18:6e:5a:86:63: 5b:7e:b6:e4:fd:39:d7:6b:ba:fc:a7:83:2f:4d:b3: 5a:76:93:58:b4:8e:cc:b4:f5:18:9a:26:e2:87:0f: 6f:25:20:37:f6:7e:d5:94:69:54:f5:c0:cc:c1:d7: d0:4d:e9:09:e2:a1:96:1c:d0:5d:51:c2:cc:4d:8e: 6d:51:94:e7:d2:5a:b7:02:42:cb:e4:87:20:53:5c: 23:93:6e:5c:eb:34:d3:b7:a5:e4:5e:d5:05:7e:62: ac:16:a2:ac:9d:ef:6f:80:4c:65:19:0b:9c:fd:5f: 67:a6:a8:d4:72:c1:bb:66:6f:6a:c2:21:3c:fd:15: cf:9a:1c:de:93:88:51:81:93:67:5f:c5:9e:2f:a8: 37:9d:a7:f8:3e:01:de:67:2e:1d:df:ef:6b:e3:b3: d2:5e:9d:f3:8e:df:27:46:8a:6c:74:69:d3:a5:9d: 37:17:0a:b6:ac:53:6b:83:36:f4:5e:a5:f2:8f:f3: a6:f9:82:04:9a:43:00:2d:b3:97:0c:76:28:fe:31: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:D6:16:3E:38:10:BE:74:36:23:67:EC:9B:01:07:F5:87:08:0A X509v3 Authority Key Identifier: keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a5:8f:31:0e:e2:6d:d0:42:24:33:0a:15:45:8a:39:ff:bd: b5:be:56:2c:81:7e:0d:c7:f4:ae:e2:4d:34:50:cc:ef:99:75: 12:0e:3a:43:a4:96:75:d1:bd:eb:4e:e4:9f:fc:5c:97:45:4e: ac:17:48:e1:b5:ac:89:3a:41:c8:32:c0:e8:85:c4:e5:00:98: ce:0b:cc:22:18:c0:23:45:e6:e5:63:26:66:97:78:1f:14:a5: e9:8e:9e:08:17:3e:39:f6:8e:15:f6:83:fd:cc:10:bb:ac:e3: fd:ad:80:7f:9f:c8:87:7a:22:60:f9:01:6c:f4:cb:39:02:00: 5d:d3:83:86:c6:86:ef:6e:70:8b:18:e8:83:f6:f1:39:cf:ff: 7c:41:0e:31:cc:0c:d1:d3:3c:80:04:5f:b4:ee:df:3f:61:60: 12:ac:28:22:0d:99:05:67:86:47:86:73:b9:0f:1c:31:28:ef: cd:a7:2a:a0:44:9a:6a:4a:0b:ff:ee:e2:01:cd:3f:9c:d2:03: ac:82:f3:b8:bf:75:71:96:85:06:a4:f6:9e:ae:81:ab:45:6b: b7:2c:02:d1:68:b9:85:81:3c:96:1e:cc:e5:63:1f:8a:08:d5: 83:d0:ec:70:c8:b1:a7:9f:eb:29:a8:a9:ea:ae:3e:b1:f9:41: 4e:db:91:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPjEzkpzlUiG3BDk9ubd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDhlNGE1YjJiYWU2MjM1NDk5OTEzZGNiZWMwNGRmY2E1 MzFlOTAwHhcNMjUxMjI1MTYwMTE0WhcNMjUxMjI2MTYwMTE0WjAzMTEwLwYDVQQD Eyg3OGJmZDYxNjNlMzgxMGJlNzQzNjIzNjdlYzliMDEwN2Y1ODcwODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh1OulKF1o1u//L0UVnDEO5GlcNI kDL0b/67TeIjJypX2+o/wo0SX47lPWztiMD1vCByAzzZGG5ahmNbfrbk/TnXa7r8 p4MvTbNadpNYtI7MtPUYmibihw9vJSA39n7VlGlU9cDMwdfQTekJ4qGWHNBdUcLM TY5tUZTn0lq3AkLL5IcgU1wjk25c6zTTt6XkXtUFfmKsFqKsne9vgExlGQuc/V9n pqjUcsG7Zm9qwiE8/RXPmhzek4hRgZNnX8WeL6g3naf4PgHeZy4d3+9r47PSXp3z jt8nRopsdGnTpZ03Fwq2rFNrgzb0XqXyj/Om+YIEmkMALbOXDHYo/jHq1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHi/1hY+OBC+dDYjZ+ybAQf1hwgKMB8GA1UdIwQY MBaAFDlI5KWyuuYjVJmRPcvsBN/KUx6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1Vqa3BiSzY1aU5VbVpFOXktd0UzOHBUSHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMWMzZjMtN2E0MC00MzJjLWI0MWUt ZjY1MGU1MDdhNzZkLzEvT1Vqa3BiSzY1aU5VbVpFOXktd0UzOHBUSHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iMWMzZjMtN2E0MC00MzJjLWI0MWUtZjY1MGU1MDdhNzZk LzEvT1Vqa3BiSzY1aU5VbVpFOXktd0UzOHBUSHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqWPMQ7i bdBCJDMKFUWKOf+9tb5WLIF+Dcf0ruJNNFDM75l1Eg46Q6SWddG9607kn/xcl0VO rBdI4bWsiTpByDLA6IXE5QCYzgvMIhjAI0Xm5WMmZpd4HxSl6Y6eCBc+OfaOFfaD /cwQu6zj/a2Af5/Ih3oiYPkBbPTLOQIAXdODhsaG725wixjog/bxOc//fEEOMcwM 0dM8gARftO7fP2FgEqwoIg2ZBWeGR4ZzuQ8cMSjvzacqoESaakoL/+7iAc0/nNID rILzuL91cZaFBqT2nq6Bq0VrtywC0Wi5hYE8lh7M5WMfigjVg9DscMixp5/rKaip 6q4+sflBTtuRkQ== -----END CERTIFICATE-----Generated at Thu Dec 25 20:00:00 2025 by rpki-client