This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json) Hash identifier: eBCPWhp7vtgMwoz4h/IVyFoqGF9JDY4TWfPmYHtoxgU= Subject key identifier: 37:A6:4B:31:C1:95:18:A9:01:68:08:4A:18:4E:EA:B5:44:42:09:6D Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Certificate serial: 019B3F7F4F9A3DD7189EC53AAEDAE746EBAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft Manifest number: 0ECE Signing time: Sun 21 Dec 2025 06:01:06 +0000 Manifest this update: Sun 21 Dec 2025 06:01:06 +0000 Manifest next update: Mon 22 Dec 2025 06:01:06 +0000 Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=) 2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=) 3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: ZZuzrhcKX0lWE7R6f4Ditihrr1iKDzRJOFA8HbL30UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4f:9a:3d:d7:18:9e:c5:3a:ae:da:e7:46:eb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Validity Not Before: Dec 21 06:01:06 2025 GMT Not After : Dec 22 06:01:06 2025 GMT Subject: CN=37a64b31c19518a90168084a184eeab54442096d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:3f:50:a5:3a:5c:0b:6c:91:af:04:e5:e3: 6e:39:bb:d9:93:de:f9:45:58:a1:ff:73:e5:9b:e4: 33:89:98:35:d4:9b:17:7c:3a:a9:3f:1d:b6:55:05: cd:da:3c:7a:91:1b:b0:69:6a:03:c9:05:bd:b8:d6: 8c:ae:c1:a9:d4:02:ad:25:d0:c7:2c:6c:fd:9f:1c: 1d:63:79:42:7d:0e:2f:83:1c:1a:c9:7b:69:32:be: ea:8d:b5:74:e4:4f:39:28:2f:1c:5d:3d:6f:85:29: 99:e7:b9:cb:26:eb:e7:de:ab:c4:c8:cf:5a:28:44: e9:6b:13:4d:43:3d:69:53:d5:75:45:7d:63:d5:73: 3d:62:66:c9:a8:37:0c:d8:64:21:63:cb:af:cb:15: e6:89:83:83:b4:a8:34:f9:96:be:08:69:9c:63:f6: 44:48:7d:a4:53:d9:e8:00:66:8a:4a:e8:e6:b2:b0: 61:57:03:20:40:d1:3c:9f:f5:dc:c3:d6:01:5f:d1: 37:b2:ae:fa:aa:d9:03:62:b0:90:ab:89:cf:06:10: cf:b5:29:78:21:1c:15:d7:62:3a:c7:d8:13:3a:ce: 4f:ce:e7:d0:ee:50:8e:2a:02:10:58:d1:db:b8:dd: 62:54:44:fb:96:ee:ae:8e:79:65:fd:d7:ca:b9:a1: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A6:4B:31:C1:95:18:A9:01:68:08:4A:18:4E:EA:B5:44:42:09:6D X509v3 Authority Key Identifier: keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:04:16:08:4e:46:c5:64:e1:f6:d0:df:46:7f:59:4d:82:c9: b3:1a:5e:fb:18:f6:15:65:2c:5e:1f:a7:82:1e:76:86:20:65: 03:1e:2b:ba:82:b6:8c:0b:b0:d7:53:45:3a:f1:7b:e8:c0:95: a7:36:5d:26:eb:80:a0:de:0d:5f:13:a4:16:ba:8c:79:7d:1c: 03:1e:c1:78:63:1f:ad:7a:af:ae:77:c2:ad:88:77:54:27:44: 03:b8:c3:99:bc:9a:29:e6:9c:b9:f7:f6:d7:71:f9:c6:7f:43: 97:7a:dc:45:18:68:2a:5b:a4:52:b1:7e:3c:79:d0:b0:a7:d8: 13:b9:00:dd:fd:9e:74:94:8e:18:1b:0d:3f:be:69:22:1f:72: 58:e9:48:c8:89:a4:2d:40:1a:91:98:7b:30:79:74:02:5e:97: 8b:53:8b:3d:6f:36:bc:a1:a0:f9:42:7e:29:c4:1b:b0:88:43: bd:c7:ed:a8:92:0c:fb:f2:9e:4a:f9:43:8a:e0:a7:6c:0e:13: 46:65:dd:7a:9c:c2:0c:32:5f:a8:3b:bc:16:17:65:12:c8:66: d1:bc:dd:3f:e3:f5:71:20:72:29:7e:c6:92:af:91:7d:e4:37: 9d:3b:95:a8:dd:b3:ae:e2:8c:67:ba:50:29:13:53:10:0f:08: 3c:61:52:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0+aPdcYnsU6rtrnRuusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1 MWIxMTEwHhcNMjUxMjIxMDYwMTA2WhcNMjUxMjIyMDYwMTA2WjAzMTEwLwYDVQQD EygzN2E2NGIzMWMxOTUxOGE5MDE2ODA4NGExODRlZWFiNTQ0NDIwOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0g/UKU6XAtska8E5eNuObvZk975 RVih/3Plm+QziZg11JsXfDqpPx22VQXN2jx6kRuwaWoDyQW9uNaMrsGp1AKtJdDH LGz9nxwdY3lCfQ4vgxwayXtpMr7qjbV05E85KC8cXT1vhSmZ57nLJuvn3qvEyM9a KETpaxNNQz1pU9V1RX1j1XM9YmbJqDcM2GQhY8uvyxXmiYODtKg0+Za+CGmcY/ZE SH2kU9noAGaKSujmsrBhVwMgQNE8n/Xcw9YBX9E3sq76qtkDYrCQq4nPBhDPtSl4 IRwV12I6x9gTOs5PzufQ7lCOKgIQWNHbuN1iVET7lu6ujnll/dfKuaGgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDemSzHBlRipAWgIShhO6rVEQgltMB8GA1UdIwQY MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAQWCE5G xWTh9tDfRn9ZTYLJsxpe+xj2FWUsXh+ngh52hiBlAx4ruoK2jAuw11NFOvF76MCV pzZdJuuAoN4NXxOkFrqMeX0cAx7BeGMfrXqvrnfCrYh3VCdEA7jDmbyaKeacuff2 13H5xn9Dl3rcRRhoKlukUrF+PHnQsKfYE7kA3f2edJSOGBsNP75pIh9yWOlIyImk LUAakZh7MHl0Al6Xi1OLPW82vKGg+UJ+KcQbsIhDvcftqJIM+/KeSvlDiuCnbA4T RmXdepzCDDJfqDu8FhdlEshm0bzdP+P1cSByKX7Gkq+RfeQ3nTuVqN2zruKMZ7pQ KRNTEA8IPGFSSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:59 2025 by rpki-client