This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json) Hash identifier: 0XLxgqOAGzjZPxLCZQdNNhZE1E2Zbisi6r/CBgrsUHc= Subject key identifier: 33:AA:FE:16:31:9D:2B:76:AA:2F:5C:52:ED:E3:4B:4A:0E:B5:9A:8C Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Certificate serial: 019B5F4107B1DF01C7EE7FF4289DC0D7C279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft Manifest number: 0CBD Signing time: Sat 27 Dec 2025 10:00:55 +0000 Manifest this update: Sat 27 Dec 2025 10:00:55 +0000 Manifest next update: Sun 28 Dec 2025 10:00:55 +0000 Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: QHP6qilU5m6v1+K5idVDAZ7XObcRxfJYlnwFwbrhcOU=) 2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=) 3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:07:b1:df:01:c7:ee:7f:f4:28:9d:c0:d7:c2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Validity Not Before: Dec 27 10:00:55 2025 GMT Not After : Dec 28 10:00:55 2025 GMT Subject: CN=33aafe16319d2b76aa2f5c52ede34b4a0eb59a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:76:c2:b7:e4:78:86:89:92:af:93:c4:48: 77:87:b9:1e:ae:a5:b8:94:1c:ec:d9:7d:e7:a4:07: bc:38:cf:16:33:a9:29:c1:9f:3b:31:14:85:5e:20: 7a:d6:0f:f4:31:04:8e:1f:5d:af:70:a0:ca:d0:77: 9d:d4:a2:ab:9b:e6:c3:5a:10:26:5a:eb:76:f2:96: 04:af:b3:c2:6e:84:87:d3:f4:d0:6b:8d:cb:ad:d1: 0f:41:28:76:b2:28:3b:32:5c:17:c2:ea:25:04:1c: 08:0f:e2:b4:53:7b:43:3b:67:bc:68:8d:de:aa:5a: 1d:98:18:f0:28:13:16:97:97:92:9b:76:e7:d4:83: 31:c4:29:e1:84:45:5d:61:ca:92:1d:09:b6:9f:16: 4c:33:f1:43:c5:49:c8:5a:99:a8:99:96:a7:3b:74: b3:68:77:95:fe:1c:c6:41:a7:f3:bd:bd:3a:dd:4a: dd:b5:b3:b9:8a:b5:e7:8e:9f:56:3b:d7:c8:64:c3: 1c:ff:4a:1b:1f:cb:f1:67:f4:26:94:eb:00:02:37: bd:f1:fd:9e:02:58:48:b6:dc:51:40:f3:7e:67:69: 85:57:90:69:b4:7d:0d:9c:01:19:c1:92:ce:50:3d: 46:4c:70:ec:52:d3:06:0f:34:2c:05:9b:2a:ba:93: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:FE:16:31:9D:2B:76:AA:2F:5C:52:ED:E3:4B:4A:0E:B5:9A:8C X509v3 Authority Key Identifier: keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:6e:d2:6f:10:fd:19:d4:ba:75:c7:3a:e4:da:7f:be:b4:be: 81:ad:1b:67:4a:b6:dc:94:47:c1:ec:e5:40:69:98:cf:99:80: 76:44:96:c0:e3:4f:fb:a3:06:06:f1:e7:7f:4d:5d:1a:ab:27: 97:6f:cd:c5:f5:57:de:83:72:24:60:80:6c:f1:8b:5d:f9:fa: ef:34:ea:e2:52:a8:2e:71:73:be:6f:06:b2:58:08:a1:73:50: 1e:7c:27:7a:41:66:18:0e:ca:21:e7:e7:4b:29:95:b6:81:16: 9c:08:53:8e:3c:07:d2:9d:77:c8:23:9a:b5:59:85:2d:2e:79: 97:47:1a:fb:3e:8f:d3:d3:52:79:47:1b:1a:3e:e8:31:b2:5d: 04:c4:e0:44:c8:28:ae:8d:fb:d5:69:25:94:85:58:62:de:b7: 75:9d:f6:24:02:9e:3d:86:2e:35:e4:86:25:d3:9f:43:0d:96: 7d:12:9a:f6:4b:45:c6:33:de:10:44:05:41:c6:fc:aa:d2:f1: 9f:ff:ce:23:a4:aa:b2:2b:72:4b:62:58:56:87:bf:d6:07:2f: 5f:0e:b7:f2:93:ac:13:e4:31:d1:a6:a9:be:46:98:bd:97:4d: 06:cc:f3:63:d8:6b:d8:22:38:c6:88:3a:9a:99:aa:98:92:7a: 87:1d:dd:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQQex3wHH7n/0KJ3A18J5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2 ZGJmMDQwHhcNMjUxMjI3MTAwMDU1WhcNMjUxMjI4MTAwMDU1WjAzMTEwLwYDVQQD EygzM2FhZmUxNjMxOWQyYjc2YWEyZjVjNTJlZGUzNGI0YTBlYjU5YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6B2wrfkeIaJkq+TxEh3h7kerqW4 lBzs2X3npAe8OM8WM6kpwZ87MRSFXiB61g/0MQSOH12vcKDK0Hed1KKrm+bDWhAm Wut28pYEr7PCboSH0/TQa43LrdEPQSh2sig7MlwXwuolBBwID+K0U3tDO2e8aI3e qlodmBjwKBMWl5eSm3bn1IMxxCnhhEVdYcqSHQm2nxZMM/FDxUnIWpmomZanO3Sz aHeV/hzGQafzvb063UrdtbO5irXnjp9WO9fIZMMc/0obH8vxZ/QmlOsAAje98f2e AlhIttxRQPN+Z2mFV5BptH0NnAEZwZLOUD1GTHDsUtMGDzQsBZsqupPj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOq/hYxnSt2qi9cUu3jS0oOtZqMMB8GA1UdIwQY MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdG7SbxD9 GdS6dcc65Np/vrS+ga0bZ0q23JRHwezlQGmYz5mAdkSWwONP+6MGBvHnf01dGqsn l2/NxfVX3oNyJGCAbPGLXfn67zTq4lKoLnFzvm8GslgIoXNQHnwnekFmGA7KIefn SymVtoEWnAhTjjwH0p13yCOatVmFLS55l0ca+z6P09NSeUcbGj7oMbJdBMTgRMgo ro371WkllIVYYt63dZ32JAKePYYuNeSGJdOfQw2WfRKa9ktFxjPeEEQFQcb8qtLx n//OI6SqsityS2JYVoe/1gcvXw638pOsE+Qx0aapvkaYvZdNBszzY9hr2CI4xog6 mpmqmJJ6hx3dbw== -----END CERTIFICATE-----Generated at Sat Dec 27 15:42:10 2025 by rpki-client