This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json) Hash identifier: f8RFyBgbzySW9Hee04iQ8wj4ftUFT38lUJJsclun/to= Subject key identifier: E9:36:3F:AE:39:75:9F:E4:83:08:47:01:C4:6A:09:85:D0:78:7E:5B Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455 Certificate serial: 019B33B27579CFF0AD5724C2D9B56F21CA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft Manifest number: 0F0C Signing time: Thu 18 Dec 2025 23:01:31 +0000 Manifest this update: Thu 18 Dec 2025 23:01:31 +0000 Manifest next update: Fri 19 Dec 2025 23:01:31 +0000 Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=) 2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: FC8ANSUvKZmOGJCV+eDCqT2v8pvOs35ztLxcW2myu38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:75:79:cf:f0:ad:57:24:c2:d9:b5:6f:21:ca:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455 Validity Not Before: Dec 18 23:01:31 2025 GMT Not After : Dec 19 23:01:31 2025 GMT Subject: CN=e9363fae39759fe483084701c46a0985d0787e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:8d:28:a4:54:27:f0:85:e0:36:54:ea:76: b2:6f:e5:aa:c9:7c:8f:04:89:f4:9e:14:42:0a:a1: e4:4f:4b:f2:52:a4:26:4e:ac:8b:8c:b3:86:e1:36: 24:5b:0f:5f:a4:ab:ea:c6:a9:3d:7b:97:3e:6f:84: 4f:ec:f4:98:3b:06:2f:80:8f:5c:d9:0e:c8:89:91: 5f:3c:15:57:69:d7:5d:20:4a:da:84:2a:d5:9a:d5: 6d:d1:2d:08:62:94:5f:f0:1f:c4:66:65:a7:65:2b: 03:9d:b1:12:0d:1d:81:3b:a7:95:4e:94:af:59:f9: d4:38:57:35:39:a9:41:a6:c4:99:f1:23:f6:dc:d0: cd:60:c1:c9:36:fe:99:ef:6f:80:84:82:19:14:2d: 5e:85:8a:00:02:11:c2:41:e3:6e:80:94:e5:16:73: ee:9d:a8:91:98:1a:2f:7f:0b:5e:b1:f4:be:f2:9d: 5f:af:67:96:4c:8f:14:72:42:b6:42:0f:da:8e:a1: c0:f8:2a:96:9b:43:66:18:b2:7b:ff:47:d6:c2:78: 25:f7:85:d4:1e:3a:2c:81:e2:9f:cc:bc:5f:c0:ab: 75:ed:62:08:8a:b9:bc:56:98:a7:a1:5c:00:ab:51: df:e0:96:16:42:0a:be:37:ff:49:db:27:9a:11:f1: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:36:3F:AE:39:75:9F:E4:83:08:47:01:C4:6A:09:85:D0:78:7E:5B X509v3 Authority Key Identifier: keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:76:25:bf:55:58:5c:cc:3f:7e:75:77:72:88:61:d5:85: ce:fb:da:9d:d9:e4:ce:72:99:75:99:e2:df:f8:b7:f8:cd:ea: 12:cc:a1:6b:a8:09:30:c4:86:6f:2b:4d:b6:0a:6a:17:0e:c2: 83:77:fd:78:da:34:04:8f:1b:26:1b:e4:09:46:ee:97:6b:6a: 84:06:86:37:1a:16:ea:db:1f:b8:71:1c:18:23:8f:d9:d9:78: 31:49:5d:b9:72:d1:d0:df:10:68:df:99:a4:e8:08:7a:3c:ee: 47:fd:47:97:d0:b8:52:5e:cb:c7:54:ab:c3:c3:d0:af:1c:b4: bd:5b:f3:03:46:a2:2b:a7:9a:3e:70:c6:4b:9e:07:a1:73:3a: 05:2c:20:4b:00:c1:e7:e3:55:cd:bb:ba:12:0e:a0:5a:f2:58: 5d:ce:19:e5:f1:b3:52:68:0b:4c:ce:09:3e:e4:58:c5:71:4e: ab:3a:00:0a:f8:ad:48:67:c8:3a:b8:7b:a5:8a:d3:9d:80:58: 58:39:38:86:3a:c3:84:a2:14:7e:53:86:85:fe:66:26:67:15: 8c:7c:df:3d:96:ba:47:19:54:1d:0f:49:6b:a1:80:ca:d9:ca: 27:e0:02:20:ca:9e:2e:a8:b5:c9:c1:1b:c9:03:b0:cb:9d:d6: bd:0a:39:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsnV5z/CtVyTC2bVvIcqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw MTc0NTUwHhcNMjUxMjE4MjMwMTMxWhcNMjUxMjE5MjMwMTMxWjAzMTEwLwYDVQQD EyhlOTM2M2ZhZTM5NzU5ZmU0ODMwODQ3MDFjNDZhMDk4NWQwNzg3ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92NKKRUJ/CF4DZU6nayb+WqyXyP BIn0nhRCCqHkT0vyUqQmTqyLjLOG4TYkWw9fpKvqxqk9e5c+b4RP7PSYOwYvgI9c 2Q7IiZFfPBVXadddIErahCrVmtVt0S0IYpRf8B/EZmWnZSsDnbESDR2BO6eVTpSv WfnUOFc1OalBpsSZ8SP23NDNYMHJNv6Z72+AhIIZFC1ehYoAAhHCQeNugJTlFnPu naiRmBovfwtesfS+8p1fr2eWTI8UckK2Qg/ajqHA+CqWm0NmGLJ7/0fWwngl94XU HjosgeKfzLxfwKt17WIIirm8VpinoVwAq1Hf4JYWQgq+N/9J2yeaEfE5OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk2P645dZ/kgwhHAcRqCYXQeH5bMB8GA1UdIwQY MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4 LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb52Jb9V WFzMP351d3KIYdWFzvvandnkznKZdZni3/i3+M3qEsyha6gJMMSGbytNtgpqFw7C g3f9eNo0BI8bJhvkCUbul2tqhAaGNxoW6tsfuHEcGCOP2dl4MUlduXLR0N8QaN+Z pOgIejzuR/1Hl9C4Ul7Lx1Srw8PQrxy0vVvzA0aiK6eaPnDGS54HoXM6BSwgSwDB 5+NVzbu6Eg6gWvJYXc4Z5fGzUmgLTM4JPuRYxXFOqzoACvitSGfIOrh7pYrTnYBY WDk4hjrDhKIUflOGhf5mJmcVjHzfPZa6RxlUHQ9Ja6GAytnKJ+ACIMqeLqi1ycEb yQOwy53WvQo5Mw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:27 2025 by rpki-client