This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json) Hash identifier: Z9kP7DUKIgWkQBdCkJS1rE2AHvxuYMR/vgZJ0ecpRxM= Subject key identifier: AA:D2:47:5A:D2:EB:8E:1E:C3:C9:F1:E9:9A:28:73:6F:A2:CF:19:5D Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Certificate serial: 019B3E6E0E185B455A4AAADEB5D2AE59CBB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft Manifest number: 0CAC Signing time: Sun 21 Dec 2025 01:02:38 +0000 Manifest this update: Sun 21 Dec 2025 01:02:38 +0000 Manifest next update: Mon 22 Dec 2025 01:02:38 +0000 Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: YX7sqnqndu0UkXk7IIsbQgfu/puxXOWFa40qgy1HVzg=) 2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=) 3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:0e:18:5b:45:5a:4a:aa:de:b5:d2:ae:59:cb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Validity Not Before: Dec 21 01:02:38 2025 GMT Not After : Dec 22 01:02:38 2025 GMT Subject: CN=aad2475ad2eb8e1ec3c9f1e99a28736fa2cf195d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:7e:be:87:df:dd:1c:75:0b:7a:3b:98:60: 9b:e1:a1:3b:cb:94:b7:a6:7b:f2:cc:32:52:02:fb: f8:3f:76:a4:a6:5d:8e:08:c7:9b:ec:7d:47:40:97: f4:cd:e0:3a:98:64:8c:6f:88:3c:c5:ee:aa:8c:c0: d0:6c:b1:8f:15:81:d0:b7:05:2e:32:0c:5d:2f:10: 40:c5:b8:0c:dc:50:dd:18:d6:74:f0:e2:36:d2:88: d0:88:9b:44:91:21:9c:df:df:ff:66:2e:4d:9a:1f: d4:af:83:5e:c8:75:bb:da:30:d6:ec:59:11:04:81: 1d:dd:fc:67:99:da:68:85:ed:d5:89:32:22:44:81: b8:69:cb:fb:b0:85:36:53:fd:2c:e4:a3:c6:1d:45: 69:98:f7:45:26:2b:cc:8e:a5:40:32:ed:e0:e4:e1: f4:7e:42:c1:9a:16:36:75:81:05:c7:1f:68:83:43: 01:55:22:f7:9a:51:c3:34:c8:c1:bf:03:de:2d:16: 13:98:40:4d:dc:d9:a2:cc:3a:71:09:81:e1:e8:a7: 9f:20:32:50:62:97:0d:78:c8:b8:24:2d:bf:1f:6a: 54:83:ff:af:63:cf:19:fa:ef:a4:d1:73:a0:8f:09: 43:e0:ff:57:91:8e:f5:f8:74:97:2b:e8:ea:cc:f2: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:47:5A:D2:EB:8E:1E:C3:C9:F1:E9:9A:28:73:6F:A2:CF:19:5D X509v3 Authority Key Identifier: keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:31:e9:03:76:1b:8b:ad:57:ba:8e:64:0f:99:32:7d:24:e3: 3b:a7:34:28:48:58:2c:66:4c:0e:fe:5a:c8:3b:96:b8:3f:90: 86:c1:ba:8c:82:06:ad:03:03:53:6c:1a:44:1a:f2:cb:9b:1a: 1c:19:1f:fd:db:3f:4c:a7:30:0d:c4:74:34:40:79:e6:86:72: 01:76:b2:f3:30:5d:ab:50:61:47:c7:71:d1:40:99:03:6b:1a: b6:b2:a5:ee:d0:99:6f:23:fc:a1:d8:f3:5e:0d:16:55:37:1e: 0d:36:00:73:af:63:cc:c3:d6:80:4a:73:b2:42:38:23:a9:1e: 6e:a8:cc:29:7d:b5:9d:86:90:4e:65:d7:ae:77:13:5f:40:9e: f7:61:f5:e8:49:a5:4f:ad:62:c8:ec:f7:b5:ff:1d:3f:a6:db: 68:07:12:77:8f:ed:ed:38:5d:a9:a2:34:51:12:19:3e:97:ae: 14:e5:4c:52:f4:39:af:77:fc:be:7a:91:d9:75:04:22:7e:f0: 42:37:46:55:6b:92:df:22:a5:11:75:10:9c:40:72:99:10:3a: 20:0d:21:9b:7b:40:74:12:90:db:7d:7c:25:8f:61:fe:30:e9: 65:ad:5b:06:f6:58:d3:1e:d1:4a:d4:ec:2b:d8:0c:22:d2:46: e6:64:a9:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bg4YW0VaSqretdKuWcuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2 ZGJmMDQwHhcNMjUxMjIxMDEwMjM4WhcNMjUxMjIyMDEwMjM4WjAzMTEwLwYDVQQD EyhhYWQyNDc1YWQyZWI4ZTFlYzNjOWYxZTk5YTI4NzM2ZmEyY2YxOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcZ+voff3Rx1C3o7mGCb4aE7y5S3 pnvyzDJSAvv4P3akpl2OCMeb7H1HQJf0zeA6mGSMb4g8xe6qjMDQbLGPFYHQtwUu MgxdLxBAxbgM3FDdGNZ08OI20ojQiJtEkSGc39//Zi5Nmh/Ur4NeyHW72jDW7FkR BIEd3fxnmdpohe3ViTIiRIG4acv7sIU2U/0s5KPGHUVpmPdFJivMjqVAMu3g5OH0 fkLBmhY2dYEFxx9og0MBVSL3mlHDNMjBvwPeLRYTmEBN3NmizDpxCYHh6KefIDJQ YpcNeMi4JC2/H2pUg/+vY88Z+u+k0XOgjwlD4P9XkY71+HSXK+jqzPJzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrSR1rS644ew8nx6Zooc2+izxldMB8GA1UdIwQY MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzHpA3Yb i61Xuo5kD5kyfSTjO6c0KEhYLGZMDv5ayDuWuD+QhsG6jIIGrQMDU2waRBryy5sa HBkf/ds/TKcwDcR0NEB55oZyAXay8zBdq1BhR8dx0UCZA2satrKl7tCZbyP8odjz Xg0WVTceDTYAc69jzMPWgEpzskI4I6kebqjMKX21nYaQTmXXrncTX0Ce92H16Eml T61iyOz3tf8dP6bbaAcSd4/t7ThdqaI0URIZPpeuFOVMUvQ5r3f8vnqR2XUEIn7w QjdGVWuS3yKlEXUQnEBymRA6IA0hm3tAdBKQ2318JY9h/jDpZa1bBvZY0x7RStTs K9gMItJG5mSpvg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:11 2025 by rpki-client