This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json) Hash identifier: GVGqfWPw4AJ14XYGA8cagLLtmTTUeb1dujrnmeW7jTQ= Subject key identifier: 96:46:82:CC:D6:82:D9:6F:2D:2C:0B:BA:7B:38:CF:58:8F:0B:3B:BD Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Certificate serial: 019B3CB54D0042BE7AD06A69CFE5D042701E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft Manifest number: 08A4 Signing time: Sat 20 Dec 2025 17:01:13 +0000 Manifest this update: Sat 20 Dec 2025 17:01:13 +0000 Manifest next update: Sun 21 Dec 2025 17:01:13 +0000 Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=) 2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: 451pcSjSYPu788ong0JGjsAOGaQDYF21CwfvWxGuvIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:4d:00:42:be:7a:d0:6a:69:cf:e5:d0:42:70:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Validity Not Before: Dec 20 17:01:13 2025 GMT Not After : Dec 21 17:01:13 2025 GMT Subject: CN=964682ccd682d96f2d2c0bba7b38cf588f0b3bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:b5:a5:5b:53:30:3b:c2:af:f7:48:21:73: 3a:75:f6:6c:5f:90:69:84:d1:4b:3b:3e:88:06:d8: 34:38:23:d9:c8:eb:7c:c4:96:1e:7f:8d:ba:6c:b3: a2:93:06:cb:b5:c4:65:a5:bd:04:e9:09:3a:3e:ea: 03:dc:39:fa:87:e4:05:95:af:65:25:8d:dd:8a:31: 14:1f:dd:00:79:34:31:23:d6:84:10:6c:8b:58:68: 23:08:b4:a5:e8:e7:e0:15:4f:78:95:27:f1:8e:61: ce:f5:54:4a:37:01:21:f4:0f:81:fb:16:68:3a:9c: e8:f1:4e:72:b5:63:b3:74:4a:27:ac:92:ee:68:e1: 81:87:58:80:34:bf:ba:bc:48:ae:b2:1c:1d:b3:d9: bb:0c:9f:54:b8:0e:d6:fa:2a:52:47:a5:00:72:c1: 78:5f:1b:17:d1:e3:f3:62:bb:3c:ce:c3:dd:25:c0: f9:67:f2:ef:d7:19:a1:e7:6a:7e:b7:de:d8:e5:0e: a5:52:3b:0f:af:5d:ff:1e:1e:94:7a:a1:d7:7b:14: e6:4e:be:4f:bc:c3:e9:35:fc:2a:46:6d:71:54:30: 81:fa:bc:ee:e7:db:e0:a9:2a:24:0b:2d:2c:f8:c4: ec:52:1e:91:df:47:79:ce:49:ec:25:6a:41:35:fb: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:46:82:CC:D6:82:D9:6F:2D:2C:0B:BA:7B:38:CF:58:8F:0B:3B:BD X509v3 Authority Key Identifier: keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:01:aa:20:f3:ce:57:af:cc:f2:ae:49:f5:83:8e:6c:2b:31: a9:ac:98:37:40:91:a2:d2:d2:1f:8c:d2:d9:7b:68:a1:22:0c: a4:cf:69:17:9b:17:d7:70:f4:68:c4:8c:00:39:f9:c4:a1:fa: d0:b6:02:41:3f:b8:03:73:aa:a2:66:66:30:2e:ef:53:af:38: ad:d9:2d:cd:85:17:d4:46:a3:e8:1e:ec:e5:1d:49:ca:66:bb: 53:cf:9e:9b:33:20:ba:52:76:b0:a0:2d:7a:da:75:fd:12:7e: b5:bb:32:c1:dc:d7:d7:29:12:27:ad:14:b7:86:a5:5a:5b:df: 3d:5f:3f:97:db:ae:29:fe:75:2e:92:d9:80:84:f8:f2:b1:08: f0:2c:9c:de:42:29:0e:f6:55:a5:87:80:ee:0d:3b:eb:23:01: ad:f4:1e:e4:a5:d9:a9:0c:38:b6:45:48:3f:4e:b2:b0:08:57: b8:73:51:e3:d9:58:0a:68:4d:2a:eb:3d:96:1d:70:50:31:45: 28:57:b1:a9:d5:03:47:cc:e3:d7:0c:44:9c:48:f0:40:25:92: e1:4d:69:0d:92:51:bf:e0:d2:7c:a2:5b:5c:cc:5c:01:a6:9a: 73:54:bc:85:ed:9e:2c:d7:ef:c0:0d:98:2c:51:4d:a4:31:ff: c8:a4:97:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tU0AQr560Gppz+XQQnAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw NGIwY2UwHhcNMjUxMjIwMTcwMTEzWhcNMjUxMjIxMTcwMTEzWjAzMTEwLwYDVQQD Eyg5NjQ2ODJjY2Q2ODJkOTZmMmQyYzBiYmE3YjM4Y2Y1ODhmMGIzYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx161pVtTMDvCr/dIIXM6dfZsX5Bp hNFLOz6IBtg0OCPZyOt8xJYef426bLOikwbLtcRlpb0E6Qk6PuoD3Dn6h+QFla9l JY3dijEUH90AeTQxI9aEEGyLWGgjCLSl6OfgFU94lSfxjmHO9VRKNwEh9A+B+xZo Opzo8U5ytWOzdEonrJLuaOGBh1iANL+6vEiushwds9m7DJ9UuA7W+ipSR6UAcsF4 XxsX0ePzYrs8zsPdJcD5Z/Lv1xmh52p+t97Y5Q6lUjsPr13/Hh6UeqHXexTmTr5P vMPpNfwqRm1xVDCB+rzu59vgqSokCy0s+MTsUh6R30d5zknsJWpBNfuBzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZGgszWgtlvLSwLuns4z1iPCzu9MB8GA1UdIwQY MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQGqIPPO V6/M8q5J9YOObCsxqayYN0CRotLSH4zS2XtooSIMpM9pF5sX13D0aMSMADn5xKH6 0LYCQT+4A3OqomZmMC7vU684rdktzYUX1Eaj6B7s5R1Jyma7U8+emzMgulJ2sKAt etp1/RJ+tbsywdzX1ykSJ60Ut4alWlvfPV8/l9uuKf51LpLZgIT48rEI8Cyc3kIp DvZVpYeA7g076yMBrfQe5KXZqQw4tkVIP06ysAhXuHNR49lYCmhNKus9lh1wUDFF KFexqdUDR8zj1wxEnEjwQCWS4U1pDZJRv+DSfKJbXMxcAaaac1S8he2eLNfvwA2Y LFFNpDH/yKSXJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:55 2025 by rpki-client