This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json) Hash identifier: HvSDja7Sjq3DH2rR0KfMOWcMl9yYOmrQPp+tK9UzAiI= Subject key identifier: C1:33:E8:19:20:43:7F:4C:C1:D1:B1:E3:64:0D:31:CB:DA:14:86:75 Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Certificate serial: 019B3C46CDAA7D21E6E9F453A54AAACD4D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft Manifest number: 03AD Signing time: Sat 20 Dec 2025 15:00:31 +0000 Manifest this update: Sat 20 Dec 2025 15:00:31 +0000 Manifest next update: Sun 21 Dec 2025 15:00:31 +0000 Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: pt6r7V0ciymvfDRHYd7q6PDuM8xI3F+9BFHbNSBzJHc=) 2: nQ2QOCXNiBhA_oIbltotIC2riD4.roa (hash: 1MmZzBOdKL/dvmTjwcqKsATX+RAPJW/TTlWipI0mLW4=) 3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:cd:aa:7d:21:e6:e9:f4:53:a5:4a:aa:cd:4d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Validity Not Before: Dec 20 15:00:31 2025 GMT Not After : Dec 21 15:00:31 2025 GMT Subject: CN=c133e81920437f4cc1d1b1e3640d31cbda148675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:52:9a:c2:26:e7:14:cf:89:bc:45:da:da: 45:5f:a7:68:a8:54:b9:77:01:b6:cd:a7:a0:24:ba: b4:3c:81:f9:ba:90:ed:cc:7e:b6:09:42:2f:ff:42: 0b:62:1e:88:20:4d:59:4a:da:7a:d1:2f:38:2c:69: a8:d8:06:90:11:94:37:be:08:b2:5e:f2:5d:50:33: 92:d9:66:7c:0b:94:1c:bc:e2:4b:12:25:94:9e:0b: 96:5a:10:97:af:c8:63:b7:8e:5c:5c:87:60:b4:b5: 87:5d:ce:ca:62:ad:da:6f:cc:c4:58:2e:80:b7:f4: 1b:49:75:1b:03:a0:f1:b9:6c:eb:92:f6:c2:cc:98: 42:e7:3f:ac:93:94:fd:a0:9f:58:23:fd:d0:71:82: af:b6:39:a8:55:98:f3:f1:4c:a7:0d:51:c7:e4:b0: 34:c5:6f:70:09:0f:44:e2:ef:b9:29:b7:64:c5:04: 95:bf:37:bd:91:28:27:30:9a:67:55:6d:4e:c5:dc: 5f:1b:7c:f5:7b:6b:73:f7:3f:b4:2f:c8:39:cd:78: 98:3d:04:cd:17:88:ec:44:77:1a:5f:80:19:95:59: c0:b0:57:c8:6c:2f:3a:34:74:7f:63:f7:6f:03:8f: ef:29:c5:62:77:4d:61:65:e5:c9:7c:88:60:ab:60: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:E8:19:20:43:7F:4C:C1:D1:B1:E3:64:0D:31:CB:DA:14:86:75 X509v3 Authority Key Identifier: keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:37:eb:40:1d:20:26:52:db:3b:8d:8a:cf:38:ea:a2:55:2e: 87:fb:7b:63:e0:e1:34:11:59:15:8c:fe:e9:45:37:9e:a4:93: dc:6b:bf:39:e3:08:01:6f:15:6c:64:77:a7:9a:86:7a:ef:05: 83:4c:73:ee:d0:40:eb:3a:a8:78:3d:26:06:0f:bf:22:fd:e6: ed:43:10:4a:d2:e9:bd:13:be:ff:b2:7a:e0:02:0a:31:c0:07: d2:f7:a7:a5:a6:a6:9e:d5:f9:54:2d:ca:cb:09:3e:54:93:03: 55:9c:3d:e2:e8:d9:08:bc:1a:1b:04:a4:62:59:2d:cb:7f:39: 08:7b:c3:50:76:32:65:34:2f:d5:dc:05:0b:f3:f7:a5:1c:58: 37:12:76:62:eb:06:dc:09:5b:fe:d9:a3:7a:55:b5:1e:e8:01: cd:99:78:2f:44:a0:3b:a9:6e:ff:09:52:05:35:11:d0:45:2a: 24:ff:b4:3b:60:f1:65:8c:96:51:27:e8:7b:2e:bc:6b:ba:ac: 5d:cf:c2:54:72:f9:12:ea:f4:e3:03:4b:ec:1f:98:ad:24:2e: 5a:2d:1c:26:8e:63:c2:5c:26:b3:97:00:c7:e9:16:97:9c:7f: 47:c8:e8:01:53:3a:60:30:8b:03:d1:17:f5:11:3f:9f:d2:e6: 0a:24:2c:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rs2qfSHm6fRTpUqqzU1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey YTlkNjQwHhcNMjUxMjIwMTUwMDMxWhcNMjUxMjIxMTUwMDMxWjAzMTEwLwYDVQQD EyhjMTMzZTgxOTIwNDM3ZjRjYzFkMWIxZTM2NDBkMzFjYmRhMTQ4Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dRSmsIm5xTPibxF2tpFX6doqFS5 dwG2zaegJLq0PIH5upDtzH62CUIv/0ILYh6IIE1ZStp60S84LGmo2AaQEZQ3vgiy XvJdUDOS2WZ8C5QcvOJLEiWUnguWWhCXr8hjt45cXIdgtLWHXc7KYq3ab8zEWC6A t/QbSXUbA6DxuWzrkvbCzJhC5z+sk5T9oJ9YI/3QcYKvtjmoVZjz8UynDVHH5LA0 xW9wCQ9E4u+5KbdkxQSVvze9kSgnMJpnVW1OxdxfG3z1e2tz9z+0L8g5zXiYPQTN F4jsRHcaX4AZlVnAsFfIbC86NHR/Y/dvA4/vKcVid01hZeXJfIhgq2AsBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEz6BkgQ39MwdGx42QNMcvaFIZ1MB8GA1UdIwQY MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt MWQ2N2MzMjQ1MDFmLzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjfrQB0g JlLbO42KzzjqolUuh/t7Y+DhNBFZFYz+6UU3nqST3Gu/OeMIAW8VbGR3p5qGeu8F g0xz7tBA6zqoeD0mBg+/Iv3m7UMQStLpvRO+/7J64AIKMcAH0venpaamntX5VC3K ywk+VJMDVZw94ujZCLwaGwSkYlkty385CHvDUHYyZTQv1dwFC/P3pRxYNxJ2YusG 3Alb/tmjelW1HugBzZl4L0SgO6lu/wlSBTUR0EUqJP+0O2DxZYyWUSfoey68a7qs Xc/CVHL5Eur04wNL7B+YrSQuWi0cJo5jwlwms5cAx+kWl5x/R8joAVM6YDCLA9EX 9RE/n9LmCiQsug== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:02 2025 by rpki-client