This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json) Hash identifier: pMy7dsWcWXk3aJdCEXqS6lhVK3aUVaU/2rfirb6GlmA= Subject key identifier: 71:6D:FF:EC:4E:6D:EA:C3:73:2B:87:38:28:5D:00:28:8D:96:55:87 Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Certificate serial: 019B4E1622E89C52AE5D0EAAE6B110D8AD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 02:00:31 +0000 Manifest this update: Wed 24 Dec 2025 02:00:31 +0000 Manifest next update: Thu 25 Dec 2025 02:00:31 +0000 Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=) 2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: MwOHwo1381V5j28TPXu17/buQod7o2uVgPQuIxAA+YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:22:e8:9c:52:ae:5d:0e:aa:e6:b1:10:d8:ad:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Dec 25 02:00:31 2025 GMT Subject: CN=716dffec4e6deac3732b8738285d00288d965587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:41:6e:17:54:06:a0:53:b2:69:2e:86:58: 89:cc:33:b5:49:64:19:84:f0:f4:25:72:74:a7:ad: 8e:70:17:99:51:c4:ef:1a:bc:29:8f:82:f1:b5:01: 10:f8:8d:4b:8c:da:a4:a5:3f:95:d0:ef:f0:e6:a6: f5:30:2e:3f:a3:cc:4c:e4:86:81:fb:b2:d6:b2:4b: 50:f2:fc:7f:8b:de:a0:46:0f:17:11:d2:e6:64:b7: e4:31:a2:ae:14:4d:6f:24:96:e4:c3:d5:ba:2b:f1: 85:35:bb:16:fb:c8:21:f4:40:d5:36:5a:60:08:49: ee:85:b2:4e:74:47:ae:74:39:d2:d1:b1:b2:af:79: 45:16:de:40:11:a0:a5:19:15:a8:98:7a:7d:fc:2e: eb:6b:f2:7c:e6:c9:62:94:ba:bf:c5:0c:f5:c6:6e: 26:a1:8c:1c:97:d4:c2:53:e4:7c:5e:73:05:3a:f3: 1d:1d:a2:5d:f6:3b:7d:22:be:6d:93:b5:99:b8:ff: f2:e8:29:c3:a9:af:df:ec:2f:d2:c0:c9:dc:fe:34: 47:4a:44:1e:0d:e2:88:08:cf:69:cc:cd:82:5e:8b: 9f:d1:d8:3b:35:c1:d9:a1:e8:b1:3e:bf:f8:d7:6a: fd:8d:08:b8:5f:18:f6:f1:dc:4b:e3:43:09:b4:6d: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:FF:EC:4E:6D:EA:C3:73:2B:87:38:28:5D:00:28:8D:96:55:87 X509v3 Authority Key Identifier: keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:78:31:10:13:6c:a9:22:c0:2f:37:92:b4:a9:4d:ac:56:a1: 6f:ec:e2:82:40:5b:96:9e:43:7a:a3:fd:0a:5d:b6:6b:b6:60: 5c:6e:85:fc:4b:c6:14:e3:d0:d7:2c:3c:fe:71:c6:c4:16:94: 16:93:d1:92:5b:5b:3a:32:d2:f0:cd:28:5c:95:55:6b:93:84: 26:5b:38:c2:a9:d3:1a:06:b9:e2:91:b4:05:5d:9a:5d:40:4b: 26:b0:c7:5e:5b:16:a7:80:48:35:6b:69:ad:ba:c0:27:c9:b1: d6:ce:54:a7:9d:b9:40:7f:ce:16:74:28:24:8f:0e:b2:34:db: f3:f9:48:20:4c:78:fc:8a:16:6c:ba:c6:d6:62:60:00:3b:91: ce:36:9d:eb:c7:29:2d:77:f8:9c:9c:bc:dc:3a:39:c2:bf:44: 8c:07:e1:ba:7d:1c:80:8d:21:89:ad:7e:2b:4c:1b:42:e4:e4: 7b:e8:b1:ee:43:54:cc:47:5b:1e:eb:58:90:81:8b:99:e8:8b: 7d:b2:76:a5:bf:2c:62:37:33:b4:51:9d:dc:ce:71:65:8f:b8: de:1b:f4:d8:d3:74:0b:4b:55:7b:a8:82:7b:d7:ad:fa:1c:96: 89:48:1b:dc:23:8e:2e:65:f2:14:81:0b:b2:86:45:32:c4:fd: 38:ef:66:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFiLonFKuXQ6q5rEQ2K1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk NTBmZDMwHhcNMjUxMjI0MDIwMDMxWhcNMjUxMjI1MDIwMDMxWjAzMTEwLwYDVQQD Eyg3MTZkZmZlYzRlNmRlYWMzNzMyYjg3MzgyODVkMDAyODhkOTY1NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq01BbhdUBqBTsmkuhliJzDO1SWQZ hPD0JXJ0p62OcBeZUcTvGrwpj4LxtQEQ+I1LjNqkpT+V0O/w5qb1MC4/o8xM5IaB +7LWsktQ8vx/i96gRg8XEdLmZLfkMaKuFE1vJJbkw9W6K/GFNbsW+8gh9EDVNlpg CEnuhbJOdEeudDnS0bGyr3lFFt5AEaClGRWomHp9/C7ra/J85slilLq/xQz1xm4m oYwcl9TCU+R8XnMFOvMdHaJd9jt9Ir5tk7WZuP/y6CnDqa/f7C/SwMnc/jRHSkQe DeKICM9pzM2CXouf0dg7NcHZoeixPr/412r9jQi4Xxj28dxL40MJtG3D2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFt/+xOberDcyuHOChdACiNllWHMB8GA1UdIwQY MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgngxEBNs qSLALzeStKlNrFahb+zigkBblp5DeqP9Cl22a7ZgXG6F/EvGFOPQ1yw8/nHGxBaU FpPRkltbOjLS8M0oXJVVa5OEJls4wqnTGga54pG0BV2aXUBLJrDHXlsWp4BINWtp rbrAJ8mx1s5Up525QH/OFnQoJI8OsjTb8/lIIEx4/IoWbLrG1mJgADuRzjad68cp LXf4nJy83Do5wr9EjAfhun0cgI0hia1+K0wbQuTke+ix7kNUzEdbHutYkIGLmeiL fbJ2pb8sYjcztFGd3M5xZY+43hv02NN0C0tVe6iCe9et+hyWiUgb3COOLmXyFIEL soZFMsT9OO9mDQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:09 2025 by rpki-client