This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json) Hash identifier: eHsDMY7kbhStfvBV7MY0Z2rzIG/V2Gx+WyFVdI0XTLE= Subject key identifier: 4A:AF:B5:72:85:DF:9D:D0:DB:F9:CB:34:8A:51:DF:98:4A:DB:D2:E6 Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455 Certificate serial: 019B2FD54E5BB9800A4A21C23B5656C05BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft Manifest number: 0F0A Signing time: Thu 18 Dec 2025 05:01:06 +0000 Manifest this update: Thu 18 Dec 2025 05:01:06 +0000 Manifest next update: Fri 19 Dec 2025 05:01:06 +0000 Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=) 2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: QGffmNrWHtu9o0anvP07XgM2SXcu2C7+VfVHRzBQ8l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:4e:5b:b9:80:0a:4a:21:c2:3b:56:56:c0:5b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455 Validity Not Before: Dec 18 05:01:06 2025 GMT Not After : Dec 19 05:01:06 2025 GMT Subject: CN=4aafb57285df9dd0dbf9cb348a51df984adbd2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:19:dc:b4:63:24:c5:a6:10:32:f0:b7:73: 42:13:b1:29:24:9f:27:c3:4b:e3:d6:33:c0:80:2f: 8c:20:ab:30:52:18:19:0f:7b:ba:8f:f4:95:83:ce: ba:a6:8f:8a:bd:b6:ad:6d:81:4b:3f:68:c9:15:d0: 2e:40:6f:9a:84:22:07:b0:c3:6e:27:29:95:26:1d: 22:bc:6f:03:23:8b:db:f2:7a:d7:b7:b3:58:f4:e8: 52:f3:49:e1:08:69:98:dd:f2:6e:18:8b:8c:bb:7a: 9e:07:76:a0:d4:f6:ab:af:87:1b:a6:ac:9f:39:a0: 5f:3b:c5:86:43:a9:65:e8:a9:bd:a7:0d:29:af:ff: fa:d2:86:77:9b:72:d0:6e:79:a1:7a:51:b5:ff:40: 58:0c:97:e4:09:c1:46:64:51:e8:13:ae:a9:98:b8: 14:0e:e8:8b:7a:9e:01:09:d1:86:f0:11:95:ab:8b: ed:bf:a3:b1:ed:24:53:c6:67:2a:78:99:48:3d:e0: c1:32:fc:b1:c6:53:d2:b8:ea:55:87:48:ba:c0:c4: 00:6c:40:9b:c2:9b:ab:b3:18:a2:bf:cd:a0:46:6c: 74:b1:b5:13:0e:3f:3e:75:ae:6e:01:02:ea:34:98: e1:f7:db:8c:1a:2d:27:90:13:7e:83:0b:12:06:2e: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AF:B5:72:85:DF:9D:D0:DB:F9:CB:34:8A:51:DF:98:4A:DB:D2:E6 X509v3 Authority Key Identifier: keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:64:4d:e5:76:c1:bd:d8:06:20:cc:5a:e9:6e:18:66:49: 98:c2:70:68:bb:ab:68:ee:50:9f:92:71:71:ef:44:fe:58:7c: 0a:65:20:29:0f:33:27:b3:05:7f:2e:14:8f:47:c6:73:fc:fa: ca:7c:2e:79:15:2e:25:ee:ee:7f:97:63:e7:d2:c8:0d:57:a1: 05:14:38:97:59:03:e0:9f:2c:3a:14:3e:77:54:c3:9e:cd:5f: 26:aa:87:d4:06:a0:ec:60:47:e7:56:50:be:56:72:cf:37:0a: 88:70:0f:f4:57:6a:c4:fa:a9:a5:42:30:5d:f7:1b:59:37:3a: e2:52:70:97:18:2d:4d:bc:1e:a8:29:3a:84:d7:1f:26:70:d0: 70:e0:de:53:1e:d9:2c:25:dc:19:b8:79:2a:bd:8b:1b:a0:df: b0:a3:3b:d0:f6:24:90:ba:5f:26:fb:5b:19:5c:5a:2d:b3:99: a9:87:fc:d8:97:1e:cf:e6:7e:16:c8:c8:cd:d2:fe:e0:0c:54: 9a:92:51:a6:19:a1:10:40:d2:e3:c0:0b:08:13:09:b9:36:ab: 86:96:60:27:01:ea:62:92:da:f6:21:2f:1d:99:99:3a:54:b8: 96:32:dd:67:ed:35:47:05:a6:48:58:4a:62:d2:54:db:fd:79: ad:53:00:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1U5buYAKSiHCO1ZWwFvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw MTc0NTUwHhcNMjUxMjE4MDUwMTA2WhcNMjUxMjE5MDUwMTA2WjAzMTEwLwYDVQQD Eyg0YWFmYjU3Mjg1ZGY5ZGQwZGJmOWNiMzQ4YTUxZGY5ODRhZGJkMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOgZ3LRjJMWmEDLwt3NCE7EpJJ8n w0vj1jPAgC+MIKswUhgZD3u6j/SVg866po+KvbatbYFLP2jJFdAuQG+ahCIHsMNu JymVJh0ivG8DI4vb8nrXt7NY9OhS80nhCGmY3fJuGIuMu3qeB3ag1Parr4cbpqyf OaBfO8WGQ6ll6Km9pw0pr//60oZ3m3LQbnmhelG1/0BYDJfkCcFGZFHoE66pmLgU DuiLep4BCdGG8BGVq4vtv6Ox7SRTxmcqeJlIPeDBMvyxxlPSuOpVh0i6wMQAbECb wpursxiiv82gRmx0sbUTDj8+da5uAQLqNJjh99uMGi0nkBN+gwsSBi7haQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqvtXKF353Q2/nLNIpR35hK29LmMB8GA1UdIwQY MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4 LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFJkTeV2 wb3YBiDMWuluGGZJmMJwaLuraO5Qn5Jxce9E/lh8CmUgKQ8zJ7MFfy4Uj0fGc/z6 ynwueRUuJe7uf5dj59LIDVehBRQ4l1kD4J8sOhQ+d1TDns1fJqqH1Aag7GBH51ZQ vlZyzzcKiHAP9FdqxPqppUIwXfcbWTc64lJwlxgtTbweqCk6hNcfJnDQcODeUx7Z LCXcGbh5Kr2LG6DfsKM70PYkkLpfJvtbGVxaLbOZqYf82Jcez+Z+FsjIzdL+4AxU mpJRphmhEEDS48ALCBMJuTarhpZgJwHqYpLa9iEvHZmZOlS4ljLdZ+01RwWmSFhK YtJU2/15rVMAYg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:21 2025 by rpki-client