This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json) Hash identifier: xTzRY5gtVs8FiJjsqIprPC9k8HEaKvkpLaYyw4pH9ew= Subject key identifier: BE:85:0A:29:E3:A9:B0:8A:EE:E8:D2:CB:0D:81:FD:FB:8F:C0:A3:F0 Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Certificate serial: 019B3FB64ACCCC602E622A10C41924599129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft Manifest number: 10EF Signing time: Sun 21 Dec 2025 07:01:09 +0000 Manifest this update: Sun 21 Dec 2025 07:01:09 +0000 Manifest next update: Mon 22 Dec 2025 07:01:09 +0000 Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: od/1BOO5p5CcAGP1vnk4JR1NqQBdxwFxAsNjwZ3BLLc=) 2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:4a:cc:cc:60:2e:62:2a:10:c4:19:24:59:91:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Validity Not Before: Dec 21 07:01:09 2025 GMT Not After : Dec 22 07:01:09 2025 GMT Subject: CN=be850a29e3a9b08aeee8d2cb0d81fdfb8fc0a3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:3f:2d:15:54:48:2a:0a:80:00:f7:4c:4e: 8f:ba:e7:38:f7:f2:0e:65:f1:d1:a5:b3:1b:4b:fd: 2a:da:02:b1:03:c8:7e:e6:f4:77:17:65:dc:04:ef: 90:9d:1e:64:bd:84:e5:e0:dd:c2:f4:e0:90:af:93: 45:61:57:10:43:e4:6b:f5:52:66:73:bc:65:af:05: c6:0a:7a:70:ff:1e:da:65:25:f8:8c:87:ac:d6:e5: 57:1d:d6:c0:12:e9:5e:03:f9:70:05:31:ea:7f:e9: 16:d5:23:fe:97:6c:e8:c9:72:ec:cb:fe:16:64:59: 3e:f2:f5:fa:d0:8e:30:d6:8f:b2:9f:e1:5e:1a:75: 42:2a:f3:7e:86:5d:27:73:82:1b:5d:99:43:b1:f2: 03:13:6b:29:bc:90:2c:0f:9c:b9:af:a1:2d:8f:13: 36:1f:6b:16:b6:3c:81:e4:6f:0e:4e:bf:48:49:eb: df:0d:4f:fc:5a:43:f9:2f:1a:f9:a3:70:2d:68:21: 09:a0:49:e2:b7:86:bb:91:a9:57:66:cc:4c:df:95: e6:55:87:b6:7a:8f:17:94:8b:37:e2:78:e8:5f:74: 75:94:e5:02:d0:23:40:48:05:73:b2:e1:05:8f:1a: e8:08:94:5a:de:b7:c2:b3:43:75:2e:c7:0d:78:46: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:0A:29:E3:A9:B0:8A:EE:E8:D2:CB:0D:81:FD:FB:8F:C0:A3:F0 X509v3 Authority Key Identifier: keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3e:19:28:9e:ab:65:e2:b4:3c:65:9c:65:4a:75:32:fc:a7: 87:4e:e8:2e:e4:0d:02:d3:19:ae:0d:6d:fe:94:73:c8:0c:73: 4b:69:66:bf:05:16:cd:0e:6c:f1:0f:4f:c9:ad:61:a1:14:7b: 7e:af:13:6b:c1:9a:2c:28:6a:f1:65:45:d3:48:75:67:7a:81: ed:28:02:e8:30:d2:78:94:ca:6f:99:21:41:3c:d5:f9:f2:97: 3a:9c:f9:c4:2f:90:02:f3:27:8d:65:f6:c1:e2:6c:00:9e:1d: b1:ed:6a:0d:1d:92:39:3b:81:db:7f:56:c8:2a:14:3f:49:a8: 48:24:88:f7:bd:d7:d3:5f:de:07:09:0b:cd:5f:9e:4c:15:bc: d2:43:48:2f:ac:5d:d6:4d:aa:69:d5:83:d8:bb:91:95:33:fe: ab:07:54:96:c7:a1:31:97:be:04:ef:2e:d6:db:d6:83:5f:83: c9:24:5d:a0:4c:d2:57:6e:20:b7:d8:cf:4f:ae:b7:d8:8c:36: 98:c7:7c:24:e5:92:d3:b3:4e:0e:67:04:51:dc:db:78:17:dd: 80:d5:49:dd:61:a9:4a:7c:39:1d:d6:53:6a:80:41:3b:0b:60: 5c:e5:b6:1a:f6:da:5e:82:6b:4a:52:96:2d:a6:18:5b:d3:7b: ca:ab:ef:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkrMzGAuYioQxBkkWZEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll ZTIxNTQwHhcNMjUxMjIxMDcwMTA5WhcNMjUxMjIyMDcwMTA5WjAzMTEwLwYDVQQD EyhiZTg1MGEyOWUzYTliMDhhZWVlOGQyY2IwZDgxZmRmYjhmYzBhM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBo/LRVUSCoKgAD3TE6Puuc49/IO ZfHRpbMbS/0q2gKxA8h+5vR3F2XcBO+QnR5kvYTl4N3C9OCQr5NFYVcQQ+Rr9VJm c7xlrwXGCnpw/x7aZSX4jIes1uVXHdbAEuleA/lwBTHqf+kW1SP+l2zoyXLsy/4W ZFk+8vX60I4w1o+yn+FeGnVCKvN+hl0nc4IbXZlDsfIDE2spvJAsD5y5r6EtjxM2 H2sWtjyB5G8OTr9ISevfDU/8WkP5Lxr5o3AtaCEJoEnit4a7kalXZsxM35XmVYe2 eo8XlIs34njoX3R1lOUC0CNASAVzsuEFjxroCJRa3rfCs0N1LscNeEZVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6FCinjqbCK7ujSyw2B/fuPwKPwMB8GA1UdIwQY MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT4ZKJ6r ZeK0PGWcZUp1Mvynh07oLuQNAtMZrg1t/pRzyAxzS2lmvwUWzQ5s8Q9Pya1hoRR7 fq8Ta8GaLChq8WVF00h1Z3qB7SgC6DDSeJTKb5khQTzV+fKXOpz5xC+QAvMnjWX2 weJsAJ4dse1qDR2SOTuB239WyCoUP0moSCSI973X01/eBwkLzV+eTBW80kNIL6xd 1k2qadWD2LuRlTP+qwdUlsehMZe+BO8u1tvWg1+DySRdoEzSV24gt9jPT6632Iw2 mMd8JOWS07NODmcEUdzbeBfdgNVJ3WGpSnw5HdZTaoBBOwtgXOW2GvbaXoJrSlKW LaYYW9N7yqvvdA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:40:36 2025 by rpki-client