This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json) Hash identifier: HwqfiPyk+9tUDCCDgb/Bez7SLNJnD6S0qIOzTx08fXE= Subject key identifier: 22:80:19:92:1F:3E:7D:E4:9B:A9:74:FB:C9:1E:96:81:F6:98:7A:29 Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Certificate serial: 019B3B6BA52D181AAECD64FF9321CD01766F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft Manifest number: 043C Signing time: Sat 20 Dec 2025 11:01:08 +0000 Manifest this update: Sat 20 Dec 2025 11:01:08 +0000 Manifest next update: Sun 21 Dec 2025 11:01:08 +0000 Files and hashes: 1: 0Q3uyZY8RsqjLoJW6u1RmMpyPuo.roa (hash: pCjrPkrrHgp4o152zVnRaCrn6ENjsnKf49PVkjj9gyg=) 2: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=) 3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: d/sxLbLAPMO7cEWy8fbiNb3AnrqSehngKBS6hYdRcN0=) 4: QMLVKgwADSsNbZRXcMe0xSA9x_A.roa (hash: Ml4zII8fhmnXo4EJyRA+v+Cfzf2PU3hifJXp1ALUjlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a5:2d:18:1a:ae:cd:64:ff:93:21:cd:01:76:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Validity Not Before: Dec 20 11:01:08 2025 GMT Not After : Dec 21 11:01:08 2025 GMT Subject: CN=228019921f3e7de49ba974fbc91e9681f6987a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:6a:1b:69:29:ec:5e:5a:a5:ff:0f:5e:ae: b0:34:21:1f:f4:05:be:5d:fc:a7:29:84:ff:a7:d8: e7:16:a0:9d:c9:87:72:8a:dc:85:22:52:bb:59:90: a4:20:44:56:b1:e6:19:99:90:21:50:a9:01:be:09: c7:c6:ee:a7:90:c6:dd:ef:ce:73:bd:96:b5:c5:ee: 85:10:78:54:e6:f8:2d:b8:80:05:7f:e3:ea:27:fa: b3:2e:8c:94:41:51:84:4a:8f:94:ad:b3:e1:1a:8b: 55:a9:0d:65:fb:15:16:d8:97:1a:55:58:77:ee:24: 4c:d3:5e:36:b5:c8:95:c6:49:6b:61:5a:82:f7:36: 86:fb:ab:2b:13:96:cb:41:12:cb:8c:3b:70:63:e3: 46:aa:89:1e:97:cf:eb:4e:35:17:e6:f2:be:4e:82: 8a:50:6f:52:a6:fe:44:8d:ea:b5:4b:8a:9b:d4:b8: 8a:dc:b3:04:e8:2c:a7:42:77:59:dc:03:05:c5:2e: 2c:9d:b1:0d:aa:e8:ea:b6:7f:54:91:cf:62:fd:d2: 80:2d:32:c5:80:92:c3:08:f9:c9:20:83:93:81:08: 8a:0d:36:93:f9:c4:ee:6e:a0:d0:ee:35:96:18:b0: 91:24:93:d5:76:14:bd:e4:fe:30:b4:12:9c:35:cb: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:19:92:1F:3E:7D:E4:9B:A9:74:FB:C9:1E:96:81:F6:98:7A:29 X509v3 Authority Key Identifier: keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d4:67:1e:fc:43:47:48:6d:6d:2f:a2:f5:9b:5d:2e:4f:29: 5b:50:dc:60:50:0e:cd:5f:49:7f:2f:d7:3a:ed:34:3b:3c:ea: 4a:ca:50:60:38:31:81:2b:2d:70:27:e4:ef:9e:93:7c:9d:e0: ed:7e:5b:34:1e:e5:ec:1b:ec:56:84:a0:10:1b:3e:ec:ff:fa: 9a:96:7c:0b:af:57:07:72:b8:a5:d1:f7:44:9a:92:30:65:bd: 7b:22:eb:f9:07:75:aa:9f:f8:6e:57:ad:39:13:bf:82:81:0a: e9:d9:cb:df:d3:1a:f0:98:aa:b2:15:ae:2d:f1:b8:a5:4a:f2: 75:28:3c:3f:e1:a5:ad:15:b3:ec:11:a2:37:24:f1:61:3c:5a: 9b:2e:8b:be:6f:46:7b:69:c4:96:1b:0a:4b:5c:90:6e:7c:73: fb:e7:0b:57:2d:c7:3e:09:98:c9:81:22:30:37:65:60:c6:07: 37:87:54:66:fe:22:0f:3f:b0:db:db:40:c9:e2:0d:32:28:6b: c9:e3:cd:e6:3f:f7:43:73:c6:ca:a2:4d:cd:c3:87:9b:ba:49: d5:0f:f2:6f:34:aa:7d:5f:e1:a1:84:51:33:ce:35:c0:5b:c2: 1d:b6:c1:7d:c9:d2:1b:b5:89:12:43:61:96:45:7b:a1:2e:47: 97:d3:06:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6UtGBquzWT/kyHNAXZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk MjRkMzgwHhcNMjUxMjIwMTEwMTA4WhcNMjUxMjIxMTEwMTA4WjAzMTEwLwYDVQQD EygyMjgwMTk5MjFmM2U3ZGU0OWJhOTc0ZmJjOTFlOTY4MWY2OTg3YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxRqG2kp7F5apf8PXq6wNCEf9AW+ XfynKYT/p9jnFqCdyYdyityFIlK7WZCkIERWseYZmZAhUKkBvgnHxu6nkMbd785z vZa1xe6FEHhU5vgtuIAFf+PqJ/qzLoyUQVGESo+UrbPhGotVqQ1l+xUW2JcaVVh3 7iRM0142tciVxklrYVqC9zaG+6srE5bLQRLLjDtwY+NGqokel8/rTjUX5vK+ToKK UG9Spv5Ejeq1S4qb1LiK3LME6CynQndZ3AMFxS4snbENqujqtn9Ukc9i/dKALTLF gJLDCPnJIIOTgQiKDTaT+cTubqDQ7jWWGLCRJJPVdhS95P4wtBKcNcuB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKAGZIfPn3km6l0+8keloH2mHopMB8GA1UdIwQY MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9RnHvxD R0htbS+i9ZtdLk8pW1DcYFAOzV9Jfy/XOu00OzzqSspQYDgxgSstcCfk756TfJ3g 7X5bNB7l7BvsVoSgEBs+7P/6mpZ8C69XB3K4pdH3RJqSMGW9eyLr+Qd1qp/4blet ORO/goEK6dnL39Ma8JiqshWuLfG4pUrydSg8P+GlrRWz7BGiNyTxYTxamy6Lvm9G e2nElhsKS1yQbnxz++cLVy3HPgmYyYEiMDdlYMYHN4dUZv4iDz+w29tAyeINMihr yePN5j/3Q3PGyqJNzcOHm7pJ1Q/ybzSqfV/hoYRRM841wFvCHbbBfcnSG7WJEkNh lkV7oS5Hl9MG2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:03:35 2025 by rpki-client