This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json) Hash identifier: R1J6pMhdqkBPB/et1U+7mnlAp766lae2x7rG0N7GwyI= Subject key identifier: 71:42:AE:8A:49:CB:C1:FA:BC:8F:02:EA:03:B5:81:7A:3B:1A:9D:BF Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27 Certificate serial: 019B2BF88EB4507CC1364678E7D41727E4C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft Manifest number: 13B3 Signing time: Wed 17 Dec 2025 11:01:08 +0000 Manifest this update: Wed 17 Dec 2025 11:01:08 +0000 Manifest next update: Thu 18 Dec 2025 11:01:08 +0000 Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: atC0mZND4BDv9yfMHr/JhhUVKZYLD2z9gwBvs+Ef7EY=) 2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=) 3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:8e:b4:50:7c:c1:36:46:78:e7:d4:17:27:e4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27 Validity Not Before: Dec 17 11:01:08 2025 GMT Not After : Dec 18 11:01:08 2025 GMT Subject: CN=7142ae8a49cbc1fabc8f02ea03b5817a3b1a9dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:2f:b3:50:87:62:5d:bc:17:ae:2f:80:33: 8e:d7:76:a0:0b:38:46:d0:4d:3c:f9:ba:55:41:8b: 75:d3:a2:62:cd:14:ad:91:c5:53:9c:92:25:e6:57: ed:b5:22:ff:70:8a:7a:43:39:7e:49:2c:2f:02:b6: a4:e3:f6:12:12:1a:ba:f1:da:23:c3:92:e3:75:20: f0:a6:c0:d1:46:95:8b:1e:c6:47:c9:3e:42:2d:e1: 40:34:5f:9a:eb:bf:81:f4:d7:b4:e3:a6:95:a9:1a: 4f:29:94:a8:e7:0d:32:c7:9a:23:1f:2f:6c:64:c4: e0:9e:13:ef:ee:53:13:c2:4d:e6:78:06:7c:40:82: 7b:ab:a1:fd:a9:e1:02:89:54:b4:22:e9:0c:9b:1c: 28:80:d4:65:64:20:9c:df:85:86:fc:d0:a3:aa:dc: d4:c1:17:a1:ff:d7:95:c0:76:55:10:c5:6f:cd:63: 91:a2:5f:00:43:f7:86:60:ca:78:77:9b:48:9a:cc: f7:b5:12:e0:38:1b:fa:2e:cc:da:66:17:43:7b:c0: 5b:cf:0d:66:17:29:f0:6b:84:11:cd:20:7b:62:03: 6b:da:cf:73:e8:a5:48:17:0c:17:b6:3b:3e:a1:3b: 6c:75:61:b5:79:0e:ca:e3:d5:87:f4:fb:e1:0b:8d: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:42:AE:8A:49:CB:C1:FA:BC:8F:02:EA:03:B5:81:7A:3B:1A:9D:BF X509v3 Authority Key Identifier: keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:bc:36:df:25:17:81:a0:d2:76:8f:57:d8:1b:65:de:c6:f2: 55:52:21:aa:d4:9f:fc:13:e0:5d:d3:6c:d6:34:98:c6:3b:2a: 38:a4:93:0d:ad:cf:0f:82:2b:a0:a7:d0:2d:41:53:24:5f:e6: 22:6c:05:bc:ce:b9:dc:cf:7e:85:b5:aa:ca:cb:9f:56:02:1e: a1:c5:79:b4:0e:9b:06:96:36:10:e2:ee:2c:cd:c2:41:cd:58: f4:7e:09:f4:f6:67:18:f9:0c:de:d1:6f:55:36:b0:67:b9:e0: 63:b6:a4:06:ab:1f:56:93:76:70:0e:c9:ae:e7:7f:9c:8e:c3: 57:7b:8d:d6:dc:33:20:77:7c:dd:00:a6:23:f7:7a:ff:9c:43: 01:54:85:04:15:98:02:fd:60:fe:2e:ec:45:aa:f9:22:8f:a5: 5a:41:3b:23:be:21:a0:cd:35:8f:95:f5:1c:6e:60:cf:2b:7c: 15:ea:ec:6e:9e:fd:eb:c9:17:e3:0f:14:5c:b4:2f:b3:1d:4a: 09:f0:77:50:cb:36:69:b3:54:dd:15:f1:5d:de:1a:a0:93:89: db:78:9c:80:14:50:4a:a5:13:cd:90:dd:b0:39:97:7c:94:00: 17:0c:4e:f6:98:58:76:24:45:6e:3a:9d:19:2b:92:8b:09:54: 72:40:91:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+I60UHzBNkZ459QXJ+THMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh ZWFjMjcwHhcNMjUxMjE3MTEwMTA4WhcNMjUxMjE4MTEwMTA4WjAzMTEwLwYDVQQD Eyg3MTQyYWU4YTQ5Y2JjMWZhYmM4ZjAyZWEwM2I1ODE3YTNiMWE5ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwvs1CHYl28F64vgDOO13agCzhG 0E08+bpVQYt106JizRStkcVTnJIl5lfttSL/cIp6Qzl+SSwvArak4/YSEhq68doj w5LjdSDwpsDRRpWLHsZHyT5CLeFANF+a67+B9Ne046aVqRpPKZSo5w0yx5ojHy9s ZMTgnhPv7lMTwk3meAZ8QIJ7q6H9qeECiVS0IukMmxwogNRlZCCc34WG/NCjqtzU wReh/9eVwHZVEMVvzWORol8AQ/eGYMp4d5tImsz3tRLgOBv6LszaZhdDe8Bbzw1m Fynwa4QRzSB7YgNr2s9z6KVIFwwXtjs+oTtsdWG1eQ7K49WH9PvhC41H3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFCropJy8H6vI8C6gO1gXo7Gp2/MB8GA1UdIwQY MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7w23yUX gaDSdo9X2Btl3sbyVVIhqtSf/BPgXdNs1jSYxjsqOKSTDa3PD4IroKfQLUFTJF/m ImwFvM653M9+hbWqysufVgIeocV5tA6bBpY2EOLuLM3CQc1Y9H4J9PZnGPkM3tFv VTawZ7ngY7akBqsfVpN2cA7Jrud/nI7DV3uN1twzIHd83QCmI/d6/5xDAVSFBBWY Av1g/i7sRar5Io+lWkE7I74hoM01j5X1HG5gzyt8Fersbp7968kX4w8UXLQvsx1K CfB3UMs2abNU3RXxXd4aoJOJ23icgBRQSqUTzZDdsDmXfJQAFwxO9phYdiRFbjqd GSuSiwlUckCRTg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:53 2025 by rpki-client