This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json) Hash identifier: dckeb7g9NzeSc+0PJ1UxqZFKvwcpBn7vmyDJ4Ye/kVE= Subject key identifier: 32:65:90:6F:34:C5:FE:62:D1:26:38:04:DC:27:3E:7E:E4:DF:0C:3F Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Certificate serial: 019B6BEA00017A069BDB0F56C1A113F1B710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft Manifest number: 0EB4 Signing time: Mon 29 Dec 2025 21:00:55 +0000 Manifest this update: Mon 29 Dec 2025 21:00:55 +0000 Manifest next update: Tue 30 Dec 2025 21:00:55 +0000 Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: 5+WLKP5+GTNZaCUWTEY05HpmC6kuhIoRvHq99XF39n0=) 2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=) 3: _DDyWE_6qVEDbwKdTSOKXXWZzhc.asa (hash: WJa84hCJWVripI8IQcJ6DuU9yIGH2uiiGIsBWDQ40Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:00:01:7a:06:9b:db:0f:56:c1:a1:13:f1:b7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Validity Not Before: Dec 29 21:00:55 2025 GMT Not After : Dec 30 21:00:55 2025 GMT Subject: CN=3265906f34c5fe62d1263804dc273e7ee4df0c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:a5:f2:c3:ca:4d:ee:98:d8:6c:13:9a:56: f9:b5:36:b7:11:a9:5d:40:a1:1f:f5:0b:0a:cd:64: bf:b6:4f:25:40:52:87:00:c9:5b:04:ec:2d:58:21: cf:c5:ed:89:e2:b5:79:6e:34:cd:57:12:68:6c:91: c9:f1:c1:79:da:62:70:e0:7b:dc:43:41:e2:70:e8: df:82:d3:e9:3b:71:c7:07:71:f8:55:4e:df:bd:8c: 2d:87:57:c7:10:cc:03:38:6c:99:ab:78:fa:f5:6f: 63:18:51:11:a5:4f:6c:12:7e:ac:fa:0a:5b:30:b1: 01:71:5a:f7:bc:46:7e:3c:5e:13:b8:dd:c7:20:2b: 8e:32:3d:27:46:a7:ba:53:f4:aa:e7:0c:39:b2:1d: 49:e4:bd:e7:a8:c6:f4:43:b1:80:2e:e6:8d:ed:10: c7:72:7c:f0:52:c1:fe:a6:bc:4c:f6:8b:8c:13:d6: 2e:be:d2:09:1c:88:d9:9f:f2:37:de:59:ab:d9:db: 6d:38:3b:db:c5:7f:64:62:42:ff:16:a0:0f:1e:09: 08:da:3a:e7:d5:4f:d8:56:dc:59:32:51:14:2d:6c: 4f:4e:d5:2c:85:e4:fc:9b:19:79:81:c0:ae:24:3f: 1d:f6:2e:0f:05:c5:ba:17:f8:ca:6f:74:a0:a2:b8: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:65:90:6F:34:C5:FE:62:D1:26:38:04:DC:27:3E:7E:E4:DF:0C:3F X509v3 Authority Key Identifier: keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:f7:48:9b:b5:d6:99:9d:ee:1c:40:39:6a:81:2a:02:59:c8: 30:ec:e0:8d:d8:86:0a:fa:fc:6d:7f:b4:8d:b2:1c:80:f0:d4: ad:e8:cc:e8:36:18:81:24:74:c2:8a:13:a6:54:22:af:0e:26: 6d:20:28:21:93:50:5b:37:db:1d:bd:54:25:9f:b6:cb:fc:7b: 87:af:57:6d:d2:47:6e:5a:c2:39:31:b7:8d:ad:4a:5f:5f:e0: f0:cb:c4:33:43:ed:50:e0:d1:f1:8b:76:b1:d5:61:26:15:5e: b4:6e:06:6c:13:dc:c6:d9:58:04:92:0c:0d:54:91:ae:3b:3d: 31:36:4e:90:69:c2:1c:08:7f:c9:1b:da:a4:00:86:51:8e:8b: 5a:a1:b8:27:54:7b:6f:c7:c4:60:fd:d3:1d:18:5c:52:01:42: fb:c0:b6:08:62:d8:71:41:2d:22:3b:05:fa:72:ee:d6:92:10: fc:ff:d6:d3:09:59:44:0d:b8:3c:d9:bd:8c:42:0c:6b:f5:cf: 3f:2d:df:70:66:cd:e2:d9:52:d4:fe:53:1f:de:7f:3e:cf:15: 99:d9:33:45:09:b5:17:4d:ee:cd:7d:ff:5b:3a:d9:ac:bf:88: 0a:95:52:45:ae:fc:5a:78:ce:4a:0a:9a:b1:0f:72:a9:af:2e: 30:cd:6a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6gABegab2w9WwaET8bcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw MGRkZjUwHhcNMjUxMjI5MjEwMDU1WhcNMjUxMjMwMjEwMDU1WjAzMTEwLwYDVQQD EygzMjY1OTA2ZjM0YzVmZTYyZDEyNjM4MDRkYzI3M2U3ZWU0ZGYwYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1el8sPKTe6Y2GwTmlb5tTa3Eald QKEf9QsKzWS/tk8lQFKHAMlbBOwtWCHPxe2J4rV5bjTNVxJobJHJ8cF52mJw4Hvc Q0HicOjfgtPpO3HHB3H4VU7fvYwth1fHEMwDOGyZq3j69W9jGFERpU9sEn6s+gpb MLEBcVr3vEZ+PF4TuN3HICuOMj0nRqe6U/Sq5ww5sh1J5L3nqMb0Q7GALuaN7RDH cnzwUsH+prxM9ouME9YuvtIJHIjZn/I33lmr2dttODvbxX9kYkL/FqAPHgkI2jrn 1U/YVtxZMlEULWxPTtUsheT8mxl5gcCuJD8d9i4PBcW6F/jKb3SgorgdlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJlkG80xf5i0SY4BNwnPn7k3ww/MB8GA1UdIwQY MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4PdIm7XW mZ3uHEA5aoEqAlnIMOzgjdiGCvr8bX+0jbIcgPDUrejM6DYYgSR0wooTplQirw4m bSAoIZNQWzfbHb1UJZ+2y/x7h69XbdJHblrCOTG3ja1KX1/g8MvEM0PtUODR8Yt2 sdVhJhVetG4GbBPcxtlYBJIMDVSRrjs9MTZOkGnCHAh/yRvapACGUY6LWqG4J1R7 b8fEYP3THRhcUgFC+8C2CGLYcUEtIjsF+nLu1pIQ/P/W0wlZRA24PNm9jEIMa/XP Py3fcGbN4tlS1P5TH95/Ps8VmdkzRQm1F03uzX3/WzrZrL+ICpVSRa78WnjOSgqa sQ9yqa8uMM1qIw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:19:43 2025 by rpki-client