This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: VsFnBUVRv4nXppHyohSQ+bEMphTyewj4GuxikMLO/9c=
Subject key identifier: 5E:54:E1:42:3B:2F:50:5B:22:82:11:02:60:4C:06:B4:41:2A:43:8F
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 019B6BB2B0EEFA94467D0A7D25D6E639F60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0EFD
Signing time: Mon 29 Dec 2025 20:00:31 +0000
Manifest this update: Mon 29 Dec 2025 20:00:31 +0000
Manifest next update: Tue 30 Dec 2025 20:00:31 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: AWsIS5sdKSvFeL0hN8qhADKVfmUhLmlPzR/u2qHki8o=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Dec 2025 15:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6b:b2:b0:ee:fa:94:46:7d:0a:7d:25:d6:e6:39:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Dec 29 20:00:31 2025 GMT
Not After : Dec 30 20:00:31 2025 GMT
Subject: CN=5e54e1423b2f505b22821102604c06b4412a438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:6a:e9:98:5c:92:39:8c:92:30:e4:10:08:
75:f9:a5:17:6c:76:e4:be:6d:07:a8:8f:21:62:6a:
cc:96:c8:19:68:7a:06:8d:9c:4f:c4:92:1a:28:8a:
2f:0d:f4:48:ab:3b:7b:d1:a0:27:2b:52:ed:d4:5c:
c8:e0:52:03:b0:52:bd:41:96:3e:23:dd:c8:1e:5b:
99:93:db:45:eb:49:20:14:e9:9e:3b:bb:14:d0:05:
7e:0e:7d:e2:ac:ba:99:a8:74:46:18:14:4e:00:e8:
e9:a9:84:9c:70:f2:a1:73:cd:32:7f:c7:a4:a0:51:
97:b8:04:ee:88:06:5e:c1:78:08:04:8a:45:df:6f:
e1:fb:f8:7c:a9:f4:17:16:be:d1:06:c2:fb:5f:a0:
ec:48:da:4a:10:e9:f3:e9:20:72:62:bd:9c:88:51:
73:14:5e:38:50:93:70:87:46:d0:46:29:7b:8e:04:
2e:86:66:de:6d:27:e3:10:92:60:c7:f2:af:82:23:
c9:74:cd:65:d7:26:82:56:fe:42:04:38:41:bb:31:
53:5b:d5:00:c8:16:1a:67:3c:cb:90:02:44:1b:e7:
34:1d:da:bf:20:86:e1:69:5e:25:bb:db:82:35:2b:
66:e4:9e:2b:ab:84:b1:36:b4:20:a8:e5:df:39:ed:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:E1:42:3B:2F:50:5B:22:82:11:02:60:4C:06:B4:41:2A:43:8F
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:d4:75:09:3d:e5:72:89:01:32:4f:c7:6d:26:6f:18:cd:
b2:13:40:72:0d:ec:16:68:14:d2:29:94:2c:9d:e4:87:c4:2c:
37:90:86:98:94:b5:60:b7:b9:f1:76:31:36:0e:45:db:3f:97:
06:c8:c0:da:ce:a1:9c:43:94:2c:ea:d5:ee:67:52:97:52:5a:
5c:dc:18:08:bd:78:a9:b1:cd:7e:19:f5:fa:d9:04:95:09:d1:
30:3d:6c:f8:6d:bb:eb:bf:4a:8d:0a:7a:a9:d5:47:13:ef:9f:
4b:b8:ea:12:86:22:e0:ba:9c:51:b6:90:0b:d2:18:e2:41:4d:
fb:a8:0e:ca:f0:40:d6:b4:a2:45:b8:56:f6:1a:c4:d0:42:32:
1c:38:f0:cd:ef:7e:77:87:95:35:17:ed:d8:cc:f2:40:e4:2e:
50:ff:0a:b2:7f:48:0d:8b:e9:42:1a:b6:0b:43:64:49:cc:c3:
19:7a:69:96:36:08:8d:fc:b6:a3:43:8f:40:af:a4:6b:c3:14:
b6:8f:de:7d:24:b9:20:c2:5d:00:8e:84:9f:58:37:5b:ac:d6:
24:2d:8d:18:de:38:ff:00:c4:25:3a:82:bf:55:6e:f3:de:b0:
eb:2c:a2:ba:00:d6:91:70:76:d2:9c:0a:af:19:e8:94:09:8c:
55:27:d0:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtrsrDu+pRGfQp9JdbmOfYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj
Mzg1YjAwHhcNMjUxMjI5MjAwMDMxWhcNMjUxMjMwMjAwMDMxWjAzMTEwLwYDVQQD
Eyg1ZTU0ZTE0MjNiMmY1MDViMjI4MjExMDI2MDRjMDZiNDQxMmE0MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuxq6ZhckjmMkjDkEAh1+aUXbHbk
vm0HqI8hYmrMlsgZaHoGjZxPxJIaKIovDfRIqzt70aAnK1Lt1FzI4FIDsFK9QZY+
I93IHluZk9tF60kgFOmeO7sU0AV+Dn3irLqZqHRGGBROAOjpqYSccPKhc80yf8ek
oFGXuATuiAZewXgIBIpF32/h+/h8qfQXFr7RBsL7X6DsSNpKEOnz6SByYr2ciFFz
FF44UJNwh0bQRil7jgQuhmbebSfjEJJgx/KvgiPJdM1l1yaCVv5CBDhBuzFTW9UA
yBYaZzzLkAJEG+c0Hdq/IIbhaV4lu9uCNStm5J4rq4SxNrQgqOXfOe3jwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5U4UI7L1BbIoIRAmBMBrRBKkOPMB8GA1UdIwQY
MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt
ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky
LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjnUdQk9
5XKJATJPx20mbxjNshNAcg3sFmgU0imULJ3kh8QsN5CGmJS1YLe58XYxNg5F2z+X
BsjA2s6hnEOULOrV7mdSl1JaXNwYCL14qbHNfhn1+tkElQnRMD1s+G27679KjQp6
qdVHE++fS7jqEoYi4LqcUbaQC9IY4kFN+6gOyvBA1rSiRbhW9hrE0EIyHDjwze9+
d4eVNRft2MzyQOQuUP8Ksn9IDYvpQhq2C0NkSczDGXppljYIjfy2o0OPQK+ka8MU
to/efSS5IMJdAI6En1g3W6zWJC2NGN44/wDEJTqCv1Vu896w6yyiugDWkXB20pwK
rxnolAmMVSfQ4A==
-----END CERTIFICATE-----
Generated at Mon Dec 29 21:19:20 2025 by rpki-client