This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json) Hash identifier: VsFnBUVRv4nXppHyohSQ+bEMphTyewj4GuxikMLO/9c= Subject key identifier: 5E:54:E1:42:3B:2F:50:5B:22:82:11:02:60:4C:06:B4:41:2A:43:8F Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Certificate serial: 019B6BB2B0EEFA94467D0A7D25D6E639F60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft Manifest number: 0EFD Signing time: Mon 29 Dec 2025 20:00:31 +0000 Manifest this update: Mon 29 Dec 2025 20:00:31 +0000 Manifest next update: Tue 30 Dec 2025 20:00:31 +0000 Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: AWsIS5sdKSvFeL0hN8qhADKVfmUhLmlPzR/u2qHki8o=) 2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:b0:ee:fa:94:46:7d:0a:7d:25:d6:e6:39:f6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Validity Not Before: Dec 29 20:00:31 2025 GMT Not After : Dec 30 20:00:31 2025 GMT Subject: CN=5e54e1423b2f505b22821102604c06b4412a438f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:6a:e9:98:5c:92:39:8c:92:30:e4:10:08: 75:f9:a5:17:6c:76:e4:be:6d:07:a8:8f:21:62:6a: cc:96:c8:19:68:7a:06:8d:9c:4f:c4:92:1a:28:8a: 2f:0d:f4:48:ab:3b:7b:d1:a0:27:2b:52:ed:d4:5c: c8:e0:52:03:b0:52:bd:41:96:3e:23:dd:c8:1e:5b: 99:93:db:45:eb:49:20:14:e9:9e:3b:bb:14:d0:05: 7e:0e:7d:e2:ac:ba:99:a8:74:46:18:14:4e:00:e8: e9:a9:84:9c:70:f2:a1:73:cd:32:7f:c7:a4:a0:51: 97:b8:04:ee:88:06:5e:c1:78:08:04:8a:45:df:6f: e1:fb:f8:7c:a9:f4:17:16:be:d1:06:c2:fb:5f:a0: ec:48:da:4a:10:e9:f3:e9:20:72:62:bd:9c:88:51: 73:14:5e:38:50:93:70:87:46:d0:46:29:7b:8e:04: 2e:86:66:de:6d:27:e3:10:92:60:c7:f2:af:82:23: c9:74:cd:65:d7:26:82:56:fe:42:04:38:41:bb:31: 53:5b:d5:00:c8:16:1a:67:3c:cb:90:02:44:1b:e7: 34:1d:da:bf:20:86:e1:69:5e:25:bb:db:82:35:2b: 66:e4:9e:2b:ab:84:b1:36:b4:20:a8:e5:df:39:ed: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:54:E1:42:3B:2F:50:5B:22:82:11:02:60:4C:06:B4:41:2A:43:8F X509v3 Authority Key Identifier: keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:39:d4:75:09:3d:e5:72:89:01:32:4f:c7:6d:26:6f:18:cd: b2:13:40:72:0d:ec:16:68:14:d2:29:94:2c:9d:e4:87:c4:2c: 37:90:86:98:94:b5:60:b7:b9:f1:76:31:36:0e:45:db:3f:97: 06:c8:c0:da:ce:a1:9c:43:94:2c:ea:d5:ee:67:52:97:52:5a: 5c:dc:18:08:bd:78:a9:b1:cd:7e:19:f5:fa:d9:04:95:09:d1: 30:3d:6c:f8:6d:bb:eb:bf:4a:8d:0a:7a:a9:d5:47:13:ef:9f: 4b:b8:ea:12:86:22:e0:ba:9c:51:b6:90:0b:d2:18:e2:41:4d: fb:a8:0e:ca:f0:40:d6:b4:a2:45:b8:56:f6:1a:c4:d0:42:32: 1c:38:f0:cd:ef:7e:77:87:95:35:17:ed:d8:cc:f2:40:e4:2e: 50:ff:0a:b2:7f:48:0d:8b:e9:42:1a:b6:0b:43:64:49:cc:c3: 19:7a:69:96:36:08:8d:fc:b6:a3:43:8f:40:af:a4:6b:c3:14: b6:8f:de:7d:24:b9:20:c2:5d:00:8e:84:9f:58:37:5b:ac:d6: 24:2d:8d:18:de:38:ff:00:c4:25:3a:82:bf:55:6e:f3:de:b0: eb:2c:a2:ba:00:d6:91:70:76:d2:9c:0a:af:19:e8:94:09:8c: 55:27:d0:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsrDu+pRGfQp9JdbmOfYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj Mzg1YjAwHhcNMjUxMjI5MjAwMDMxWhcNMjUxMjMwMjAwMDMxWjAzMTEwLwYDVQQD Eyg1ZTU0ZTE0MjNiMmY1MDViMjI4MjExMDI2MDRjMDZiNDQxMmE0MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuxq6ZhckjmMkjDkEAh1+aUXbHbk vm0HqI8hYmrMlsgZaHoGjZxPxJIaKIovDfRIqzt70aAnK1Lt1FzI4FIDsFK9QZY+ I93IHluZk9tF60kgFOmeO7sU0AV+Dn3irLqZqHRGGBROAOjpqYSccPKhc80yf8ek oFGXuATuiAZewXgIBIpF32/h+/h8qfQXFr7RBsL7X6DsSNpKEOnz6SByYr2ciFFz FF44UJNwh0bQRil7jgQuhmbebSfjEJJgx/KvgiPJdM1l1yaCVv5CBDhBuzFTW9UA yBYaZzzLkAJEG+c0Hdq/IIbhaV4lu9uCNStm5J4rq4SxNrQgqOXfOe3jwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5U4UI7L1BbIoIRAmBMBrRBKkOPMB8GA1UdIwQY MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjnUdQk9 5XKJATJPx20mbxjNshNAcg3sFmgU0imULJ3kh8QsN5CGmJS1YLe58XYxNg5F2z+X BsjA2s6hnEOULOrV7mdSl1JaXNwYCL14qbHNfhn1+tkElQnRMD1s+G27679KjQp6 qdVHE++fS7jqEoYi4LqcUbaQC9IY4kFN+6gOyvBA1rSiRbhW9hrE0EIyHDjwze9+ d4eVNRft2MzyQOQuUP8Ksn9IDYvpQhq2C0NkSczDGXppljYIjfy2o0OPQK+ka8MU to/efSS5IMJdAI6En1g3W6zWJC2NGN44/wDEJTqCv1Vu896w6yyiugDWkXB20pwK rxnolAmMVSfQ4A== -----END CERTIFICATE-----Generated at Mon Dec 29 21:19:20 2025 by rpki-client