This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json) Hash identifier: 2DV5uurdvwuB5/pLrgFtbJPb8DlgxFzVrfJeClK18F0= Subject key identifier: 2C:70:16:04:22:95:C9:08:10:00:D3:9B:2E:B0:86:5A:B9:51:C1:A3 Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Certificate serial: 019B2FD5AFF3E500FCCA8B38FFF8F5F69D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 05:01:31 +0000 Manifest this update: Thu 18 Dec 2025 05:01:31 +0000 Manifest next update: Fri 19 Dec 2025 05:01:31 +0000 Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: HiW/zigQjA4jKBELMSKYQcAL7v4J8dRealNYwAXdqhM=) 2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:af:f3:e5:00:fc:ca:8b:38:ff:f8:f5:f6:9d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Validity Not Before: Dec 18 05:01:31 2025 GMT Not After : Dec 19 05:01:31 2025 GMT Subject: CN=2c7016042295c9081000d39b2eb0865ab951c1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5e:c6:a5:ea:8a:99:f5:18:b5:7a:95:0f:7f: 1b:35:39:3c:06:fd:e3:d4:ae:b6:bc:43:d0:3d:1f: 7f:9a:96:10:b9:25:1f:85:39:9c:e7:58:d0:c7:ee: 1b:4e:5d:9f:4e:4d:c3:ec:22:76:ad:9d:5d:ef:0e: c5:4b:1f:23:8e:db:51:37:35:39:20:dd:0e:d3:cb: 1a:8e:56:ff:d2:4e:49:7f:bf:08:da:8c:dd:ba:f5: 29:5e:82:de:3e:d3:f1:82:6c:52:e4:ee:42:a1:0a: 78:27:6f:93:df:f6:44:8f:90:6a:f9:3a:df:19:4e: 2a:c3:cf:59:f8:97:98:91:b1:2b:a8:8a:58:39:f6: 33:ac:11:37:7e:eb:c1:d4:dc:25:46:21:14:75:62: 97:ea:9d:54:14:18:bc:ae:73:41:52:02:42:be:c7: 6c:a3:17:eb:61:c5:00:d4:db:b5:a0:3f:1e:ba:2b: ef:af:22:56:c8:23:d1:ad:29:1f:97:9c:88:79:6d: 7e:f9:ff:8d:41:24:24:e3:11:b1:d0:ed:33:cd:1e: 5c:e9:0c:43:0a:45:f2:ac:0c:ce:cf:39:c1:1a:6d: fd:14:89:65:86:ab:bf:84:37:e0:db:b3:7c:4a:38: 12:1c:46:07:ad:4f:b3:80:6c:d1:4c:0b:4b:40:eb: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:70:16:04:22:95:C9:08:10:00:D3:9B:2E:B0:86:5A:B9:51:C1:A3 X509v3 Authority Key Identifier: keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:f2:d5:9e:9b:df:34:6e:8c:08:29:46:c6:6b:ab:80:32: 7a:6e:c6:54:9c:c2:af:8b:df:28:c7:71:b9:0a:4d:4d:49:eb: aa:a4:bd:a0:c1:fc:d8:fd:f3:57:29:36:49:5c:b8:ef:b7:29: cc:b1:e9:cf:90:e4:80:91:41:15:48:6f:6b:c7:92:d9:ea:5a: 6d:38:23:5b:7b:c9:17:32:0e:c4:27:a5:78:4c:eb:c2:82:b0: b7:65:4e:77:ad:02:31:39:04:3e:93:3f:ce:14:f4:cf:6c:5f: 79:ba:2e:ed:3f:be:72:42:2a:54:51:ed:07:94:31:c5:e7:ff: 05:ce:e3:9a:be:27:d2:7e:1a:bd:f6:82:8a:18:d4:aa:c9:d6: 6d:07:29:7c:4b:33:0a:d6:f0:db:9c:cc:61:1a:8f:c5:8d:07: 59:81:b1:68:98:e9:e7:1a:6b:a3:56:81:b4:c0:3f:00:3c:fe: 3b:77:b4:0a:b9:6f:ff:da:89:5e:a5:14:e4:69:a0:6d:8f:c5: 0d:54:89:e5:17:f8:a2:09:fb:b9:9c:94:6b:12:2d:50:9f:26: 01:70:3b:96:ed:f0:b8:c7:5c:66:33:be:a2:9c:c6:69:b6:46: d9:c4:43:8b:82:79:d0:9f:9e:b0:3a:e2:03:41:bc:0b:2e:99: 79:2d:4b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1a/z5QD8yos4//j19p0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh MmQ2MTEwHhcNMjUxMjE4MDUwMTMxWhcNMjUxMjE5MDUwMTMxWjAzMTEwLwYDVQQD EygyYzcwMTYwNDIyOTVjOTA4MTAwMGQzOWIyZWIwODY1YWI5NTFjMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7GpeqKmfUYtXqVD38bNTk8Bv3j 1K62vEPQPR9/mpYQuSUfhTmc51jQx+4bTl2fTk3D7CJ2rZ1d7w7FSx8jjttRNzU5 IN0O08sajlb/0k5Jf78I2ozduvUpXoLePtPxgmxS5O5CoQp4J2+T3/ZEj5Bq+Trf GU4qw89Z+JeYkbErqIpYOfYzrBE3fuvB1NwlRiEUdWKX6p1UFBi8rnNBUgJCvsds oxfrYcUA1Nu1oD8euivvryJWyCPRrSkfl5yIeW1++f+NQSQk4xGx0O0zzR5c6QxD CkXyrAzOzznBGm39FIllhqu/hDfg27N8SjgSHEYHrU+zgGzRTAtLQOtTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxwFgQilckIEADTmy6whlq5UcGjMB8GA1UdIwQY MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKfy1Z6b 3zRujAgpRsZrq4Ayem7GVJzCr4vfKMdxuQpNTUnrqqS9oMH82P3zVyk2SVy477cp zLHpz5DkgJFBFUhva8eS2epabTgjW3vJFzIOxCeleEzrwoKwt2VOd60CMTkEPpM/ zhT0z2xfebou7T++ckIqVFHtB5Qxxef/Bc7jmr4n0n4avfaCihjUqsnWbQcpfEsz Ctbw25zMYRqPxY0HWYGxaJjp5xpro1aBtMA/ADz+O3e0Crlv/9qJXqUU5GmgbY/F DVSJ5Rf4ogn7uZyUaxItUJ8mAXA7lu3wuMdcZjO+opzGabZG2cRDi4J50J+esDri A0G8Cy6ZeS1LfQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:40:40 2025 by rpki-client