This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json) Hash identifier: 5ukODIVUv5ThhD+Yk6WVoa18v9GT87KofbQbR2PnNWc= Subject key identifier: 7C:CE:A9:2E:4B:90:EE:B6:ED:9C:0A:12:13:40:C3:67:F6:20:6D:81 Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Certificate serial: 019B31555D8D99141F73EE433A15C51F1F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 12:00:36 +0000 Manifest this update: Thu 18 Dec 2025 12:00:36 +0000 Manifest next update: Fri 19 Dec 2025 12:00:36 +0000 Files and hashes: 1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: vlI4PPFf6T3BIjPOp/ZOj3hsUrXQh1giesOt4pCbYSg=) 2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:5d:8d:99:14:1f:73:ee:43:3a:15:c5:1f:1f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Validity Not Before: Dec 18 12:00:36 2025 GMT Not After : Dec 19 12:00:36 2025 GMT Subject: CN=7ccea92e4b90eeb6ed9c0a121340c367f6206d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:d1:83:05:8f:d5:97:26:a1:92:3b:8d:c7: eb:98:2b:6d:8b:47:de:31:22:54:44:d9:3f:90:bf: b3:a8:a3:dd:0a:e5:eb:50:08:9e:e7:10:5f:46:6f: 9d:ab:42:b5:53:78:12:98:d3:21:29:62:dd:36:0b: af:2b:9b:42:d0:59:4c:34:97:57:21:8b:69:79:8f: 12:52:46:e0:b3:59:1f:1f:6b:75:ba:5a:f3:4f:0d: 97:61:3f:61:62:d2:8a:be:81:b5:bd:31:bc:d9:99: 72:f7:e6:c9:37:ac:33:e0:6b:1c:84:5f:f2:a1:be: eb:95:3c:c5:f0:13:6a:f4:63:79:12:31:b8:af:31: 1d:8e:1d:20:31:38:9f:4f:ef:87:a1:d1:fa:ef:b7: 11:dd:2a:cd:d4:96:4d:f4:63:4a:4e:2c:18:40:c6: 5f:ae:f8:df:86:7a:82:d0:28:df:68:a7:e6:fd:e5: 37:a2:03:37:26:c4:a6:be:9c:f4:53:24:09:8d:29: 88:f1:7b:c9:d5:4d:9c:8b:6a:44:1a:3c:ec:e7:1b: cf:8d:5b:f3:61:9a:95:09:c1:57:45:25:13:7d:13: 69:c9:80:01:ea:b1:7f:7f:27:44:ed:e6:56:24:60: 77:50:c1:5c:b7:6f:7b:af:5a:ea:db:1d:0e:1c:ac: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CE:A9:2E:4B:90:EE:B6:ED:9C:0A:12:13:40:C3:67:F6:20:6D:81 X509v3 Authority Key Identifier: keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:74:b5:9d:9b:0d:2a:02:6a:39:72:83:8e:f6:8b:f6:94:fc: e0:6a:fc:35:df:8c:50:29:14:e0:9b:32:a3:97:af:b6:0b:22: b0:65:4b:fe:1c:c7:65:a1:7a:e2:e2:f2:48:57:3d:e9:ac:17: ed:f0:15:f8:34:b5:55:30:3d:9b:fb:38:16:2a:95:7e:f1:50: 34:cd:83:a8:97:81:32:ca:45:8b:5b:46:cd:17:e6:f6:f2:5f: b1:14:da:7c:a0:02:a8:5f:6a:e5:ab:66:48:93:b3:66:56:1d: 76:65:b6:43:7b:53:21:df:a2:a0:bd:17:da:06:bf:0f:83:18: 49:62:5e:31:fe:7f:6d:86:0c:79:97:8c:2e:04:d5:3d:59:78: 45:4a:21:11:31:e6:bd:48:aa:28:2e:c1:12:f9:02:05:43:63: 60:13:de:26:f7:cc:25:36:46:cc:c5:dd:94:01:15:9c:16:55: fc:c4:80:8f:45:c6:97:cc:5f:5c:e5:72:ec:35:21:d9:cf:4f: b7:0c:75:af:33:f9:10:ce:2a:a5:1b:64:35:3d:19:a5:f0:5a: 92:e8:27:b5:7f:5f:e6:62:3a:d1:d1:36:5a:41:cf:da:16:ee: 50:c5:a3:28:ad:8e:bd:b7:fa:e3:90:66:c9:bb:80:58:f2:66: 0b:94:7a:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVV2NmRQfc+5DOhXFHx9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2 NWFjZjEwHhcNMjUxMjE4MTIwMDM2WhcNMjUxMjE5MTIwMDM2WjAzMTEwLwYDVQQD Eyg3Y2NlYTkyZTRiOTBlZWI2ZWQ5YzBhMTIxMzQwYzM2N2Y2MjA2ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTjRgwWP1ZcmoZI7jcfrmCtti0fe MSJURNk/kL+zqKPdCuXrUAie5xBfRm+dq0K1U3gSmNMhKWLdNguvK5tC0FlMNJdX IYtpeY8SUkbgs1kfH2t1ulrzTw2XYT9hYtKKvoG1vTG82Zly9+bJN6wz4GschF/y ob7rlTzF8BNq9GN5EjG4rzEdjh0gMTifT++HodH677cR3SrN1JZN9GNKTiwYQMZf rvjfhnqC0CjfaKfm/eU3ogM3JsSmvpz0UyQJjSmI8XvJ1U2ci2pEGjzs5xvPjVvz YZqVCcFXRSUTfRNpyYAB6rF/fydE7eZWJGB3UMFct297r1rq2x0OHKzEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzOqS5LkO627ZwKEhNAw2f2IG2BMB8GA1UdIwQY MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt Njk2OGUyZDgxODI2LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2 LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXS1nZsN KgJqOXKDjvaL9pT84Gr8Nd+MUCkU4Jsyo5evtgsisGVL/hzHZaF64uLySFc96awX 7fAV+DS1VTA9m/s4FiqVfvFQNM2DqJeBMspFi1tGzRfm9vJfsRTafKACqF9q5atm SJOzZlYddmW2Q3tTId+ioL0X2ga/D4MYSWJeMf5/bYYMeZeMLgTVPVl4RUohETHm vUiqKC7BEvkCBUNjYBPeJvfMJTZGzMXdlAEVnBZV/MSAj0XGl8xfXOVy7DUh2c9P twx1rzP5EM4qpRtkNT0ZpfBakugntX9f5mI60dE2WkHP2hbuUMWjKK2Ovbf645Bm ybuAWPJmC5R6cg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:56 2025 by rpki-client