This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json) Hash identifier: ghoXib62K1ysHPRjC5o9/NBrvtyw0wuVmg3LRQH8GR4= Subject key identifier: CB:4E:D9:A3:62:7E:9A:93:E7:F9:F1:DB:E5:BB:5F:37:7F:CA:0F:E5 Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Certificate serial: 019B5C4058C68A239158400F42C0185443BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft Manifest number: 044D Signing time: Fri 26 Dec 2025 20:01:19 +0000 Manifest this update: Fri 26 Dec 2025 20:01:19 +0000 Manifest next update: Sat 27 Dec 2025 20:01:19 +0000 Files and hashes: 1: 0Q3uyZY8RsqjLoJW6u1RmMpyPuo.roa (hash: pCjrPkrrHgp4o152zVnRaCrn6ENjsnKf49PVkjj9gyg=) 2: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=) 3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: fUWeQrap+41t/tELo0RIjfcnAzXy5SBE9n+ZoxCw8PI=) 4: QMLVKgwADSsNbZRXcMe0xSA9x_A.roa (hash: Ml4zII8fhmnXo4EJyRA+v+Cfzf2PU3hifJXp1ALUjlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:58:c6:8a:23:91:58:40:0f:42:c0:18:54:43:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Validity Not Before: Dec 26 20:01:19 2025 GMT Not After : Dec 27 20:01:19 2025 GMT Subject: CN=cb4ed9a3627e9a93e7f9f1dbe5bb5f377fca0fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:20:ea:45:0b:0c:70:df:b2:8e:16:31:43: 0a:d7:1f:c6:fc:0e:39:d0:a6:27:32:af:49:a2:f2: 57:9e:35:88:ec:2a:37:c0:c6:56:38:62:6b:e2:88: af:f9:b6:9d:21:21:a1:af:06:ef:d5:28:ff:5d:57: aa:52:e0:50:a1:bd:14:5a:52:ff:77:29:c7:5c:81: 1f:b4:5c:89:b0:f4:ca:4f:b3:19:40:59:52:cd:1f: 08:56:a2:31:cf:43:fd:84:77:71:0d:55:88:c3:6e: 72:5b:61:cb:1c:64:6c:79:6c:33:73:0a:14:8c:d9: 55:d5:77:05:89:1a:b5:59:05:69:98:8e:7b:b4:b3: 3a:ea:84:17:bd:fa:a2:6f:e8:0e:c5:fa:22:34:6a: 02:14:ec:9b:8a:60:84:5e:e2:47:16:4a:78:84:f1: 96:e5:a3:64:98:d8:ab:b7:a8:8f:f9:75:4c:8f:70: c2:c3:0c:0a:9f:23:4a:95:84:6e:3f:a8:45:5b:57: cb:ea:37:3a:c1:7c:c0:02:a6:dc:b9:70:54:3e:56: 98:f3:31:a9:2a:9b:82:8b:58:d2:f5:85:ea:8b:f3: ff:b6:60:63:58:09:21:fe:5a:13:ee:93:4f:e4:dd: 3d:89:66:c1:5d:24:1e:6f:42:e6:46:11:a7:1e:ef: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4E:D9:A3:62:7E:9A:93:E7:F9:F1:DB:E5:BB:5F:37:7F:CA:0F:E5 X509v3 Authority Key Identifier: keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:23:56:95:43:fc:25:ab:b8:5c:90:a4:21:c1:f8:0b:fa: 3b:28:7d:7c:0e:55:f5:62:5e:2c:68:61:c2:f8:43:91:a0:0f: f9:47:a6:b2:9e:88:45:e8:bd:24:64:38:fd:d2:72:c1:5f:d7: 4f:26:f2:07:48:5c:4b:14:58:9f:91:89:a2:a1:08:8b:79:b5: fa:96:6f:50:e3:c6:fa:26:fd:57:73:14:14:46:4f:89:d4:39: 54:47:1e:4f:21:63:93:7a:75:98:2b:b9:a6:ac:f3:8f:ed:db: 55:5b:d1:04:58:1d:ca:42:d4:d1:13:b3:ae:7b:96:99:fe:95: e6:23:df:2d:9a:22:9e:a2:2c:75:70:78:f1:c0:96:a6:51:64: 87:5f:26:49:f5:2f:bc:77:bb:7c:2b:99:74:e8:d2:9d:2f:40: 42:38:00:98:09:57:1f:58:b3:43:67:71:78:96:cf:cd:e9:7f: d8:ef:f0:94:48:9c:38:de:f8:ff:7d:e4:a6:30:30:41:c0:97: d0:27:4f:98:8d:e1:ae:99:6a:4f:c6:c4:8d:53:95:76:61:1a: 65:47:3e:fd:e9:36:62:b0:1c:16:d4:d9:ce:0b:27:d2:2f:31: c3:d3:5a:58:d9:24:65:18:51:7a:11:36:da:6e:76:49:58:dd: b8:c7:c3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQFjGiiORWEAPQsAYVEO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk MjRkMzgwHhcNMjUxMjI2MjAwMTE5WhcNMjUxMjI3MjAwMTE5WjAzMTEwLwYDVQQD EyhjYjRlZDlhMzYyN2U5YTkzZTdmOWYxZGJlNWJiNWYzNzdmY2EwZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyIg6kULDHDfso4WMUMK1x/G/A45 0KYnMq9JovJXnjWI7Co3wMZWOGJr4oiv+badISGhrwbv1Sj/XVeqUuBQob0UWlL/ dynHXIEftFyJsPTKT7MZQFlSzR8IVqIxz0P9hHdxDVWIw25yW2HLHGRseWwzcwoU jNlV1XcFiRq1WQVpmI57tLM66oQXvfqib+gOxfoiNGoCFOybimCEXuJHFkp4hPGW 5aNkmNirt6iP+XVMj3DCwwwKnyNKlYRuP6hFW1fL6jc6wXzAAqbcuXBUPlaY8zGp KpuCi1jS9YXqi/P/tmBjWAkh/loT7pNP5N09iWbBXSQeb0LmRhGnHu9Q3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtO2aNifpqT5/nx2+W7Xzd/yg/lMB8GA1UdIwQY MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaMjVpVD /CWruFyQpCHB+Av6Oyh9fA5V9WJeLGhhwvhDkaAP+Uemsp6IRei9JGQ4/dJywV/X TybyB0hcSxRYn5GJoqEIi3m1+pZvUOPG+ib9V3MUFEZPidQ5VEceTyFjk3p1mCu5 pqzzj+3bVVvRBFgdykLU0ROzrnuWmf6V5iPfLZoinqIsdXB48cCWplFkh18mSfUv vHe7fCuZdOjSnS9AQjgAmAlXH1izQ2dxeJbPzel/2O/wlEicON74/33kpjAwQcCX 0CdPmI3hrplqT8bEjVOVdmEaZUc+/ek2YrAcFtTZzgsn0i8xw9NaWNkkZRhRehE2 2m52SVjduMfDRQ== -----END CERTIFICATE-----Generated at Sat Dec 27 03:52:32 2025 by rpki-client