This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json) Hash identifier: ONwSIeEsjmYpLcX2J6ghGiJDsl3/CqMtLkBYhHV5ePA= Subject key identifier: 9C:80:88:42:BC:D1:51:69:D9:FD:C1:59:06:CE:F4:5F:61:ED:32:88 Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Certificate serial: 019B69C4D626D7EC7B0CF1FF2F77454E6988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft Manifest number: 0EFC Signing time: Mon 29 Dec 2025 11:01:06 +0000 Manifest this update: Mon 29 Dec 2025 11:01:06 +0000 Manifest next update: Tue 30 Dec 2025 11:01:06 +0000 Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: VsKkVqGYYZAwSde80c/GLhsKF/Kmd+3mSfnMzsD+03k=) 2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:d6:26:d7:ec:7b:0c:f1:ff:2f:77:45:4e:69:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Validity Not Before: Dec 29 11:01:06 2025 GMT Not After : Dec 30 11:01:06 2025 GMT Subject: CN=9c808842bcd15169d9fdc15906cef45f61ed3288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:cc:d2:ca:ac:d0:b1:0c:9e:71:db:dc:6e: eb:bb:e8:68:1a:89:ec:2a:e6:19:da:4c:f0:3b:b3: 66:2a:af:a7:56:c1:5c:d3:5b:85:c2:8f:0a:41:4a: 73:92:86:91:ec:31:88:fe:9a:ef:ef:55:51:60:9c: 13:48:bc:92:ff:f9:f8:e7:c6:7a:dc:18:cc:8d:09: 59:3e:36:b9:56:e3:f9:0d:4a:62:fa:d5:9a:d1:53: db:ab:70:19:d1:41:7a:28:a1:98:9a:16:8a:d1:b1: 4c:ea:90:96:aa:ef:ef:30:1b:46:71:58:0d:13:d9: 5e:dc:2a:56:d0:1d:88:de:8d:5d:3b:5c:4b:fc:af: e9:47:0b:c0:ec:2a:b6:e8:fa:2c:b4:2f:a5:25:09: f6:24:b9:55:67:1a:1c:a8:9a:fd:86:b0:a4:dd:1a: 43:b0:d0:57:5d:47:7b:70:2d:d3:3f:8b:76:68:07: 40:48:3e:12:b1:24:50:00:49:b2:5b:a0:a5:ac:08: 3f:bc:c7:93:94:4b:03:78:9a:41:9b:f9:39:86:43: 3a:00:d4:13:6a:e8:73:18:38:3b:04:f1:89:7a:01: 30:97:34:70:ef:48:2f:7c:16:19:f3:d5:48:a0:b6: e7:ae:6d:4e:ae:dd:57:c3:f8:7b:91:da:06:c1:42: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:88:42:BC:D1:51:69:D9:FD:C1:59:06:CE:F4:5F:61:ED:32:88 X509v3 Authority Key Identifier: keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:55:4e:77:b4:70:9b:a1:a1:5f:4f:48:39:01:ba:bb:71:5e: 34:24:52:b7:81:59:07:b4:d5:fa:aa:a0:88:98:c6:f9:6d:1c: 47:07:10:3c:c5:85:c6:25:b1:77:94:7c:c7:49:8d:e7:f4:f7: 05:7e:85:dd:d1:d8:e3:3d:41:ba:1f:57:0c:8e:61:12:cd:36: c8:11:fd:b8:61:39:42:85:a0:ae:16:cb:ff:f1:31:c2:09:33: 09:bc:97:0d:10:4c:18:b2:ad:d3:72:2a:19:4d:cc:11:04:a5: 0d:e2:cd:b3:7c:98:f0:48:50:92:00:46:83:44:df:de:b6:a9: 18:71:57:c7:e4:a5:d1:48:d4:3e:77:b1:37:93:b4:95:04:ed: 5a:6a:46:38:14:1e:b2:eb:41:6f:2d:bf:02:09:b5:ce:24:bb: e1:a1:58:38:76:39:72:6f:df:c3:23:1e:9b:b9:77:ce:07:7a: 92:e8:fb:a2:f4:fa:66:bf:4f:9a:59:7d:82:43:b8:4e:2e:af: 82:9b:f6:17:d0:25:ed:be:f2:08:32:6d:39:76:41:af:57:a0: 4f:93:d7:b9:70:b6:e4:e4:c1:df:72:bb:9b:42:ed:32:37:96: 3e:56:9b:45:ac:f9:5d:f6:42:86:85:37:18:bc:37:3f:72:ff: be:dd:20:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxNYm1+x7DPH/L3dFTmmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj Mzg1YjAwHhcNMjUxMjI5MTEwMTA2WhcNMjUxMjMwMTEwMTA2WjAzMTEwLwYDVQQD Eyg5YzgwODg0MmJjZDE1MTY5ZDlmZGMxNTkwNmNlZjQ1ZjYxZWQzMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+nM0sqs0LEMnnHb3G7ru+hoGons KuYZ2kzwO7NmKq+nVsFc01uFwo8KQUpzkoaR7DGI/prv71VRYJwTSLyS//n458Z6 3BjMjQlZPja5VuP5DUpi+tWa0VPbq3AZ0UF6KKGYmhaK0bFM6pCWqu/vMBtGcVgN E9le3CpW0B2I3o1dO1xL/K/pRwvA7Cq26PostC+lJQn2JLlVZxocqJr9hrCk3RpD sNBXXUd7cC3TP4t2aAdASD4SsSRQAEmyW6ClrAg/vMeTlEsDeJpBm/k5hkM6ANQT auhzGDg7BPGJegEwlzRw70gvfBYZ89VIoLbnrm1Ort1Xw/h7kdoGwUI0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyAiEK80VFp2f3BWQbO9F9h7TKIMB8GA1UdIwQY MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFVOd7Rw m6GhX09IOQG6u3FeNCRSt4FZB7TV+qqgiJjG+W0cRwcQPMWFxiWxd5R8x0mN5/T3 BX6F3dHY4z1Buh9XDI5hEs02yBH9uGE5QoWgrhbL//ExwgkzCbyXDRBMGLKt03Iq GU3MEQSlDeLNs3yY8EhQkgBGg0Tf3rapGHFXx+Sl0UjUPnexN5O0lQTtWmpGOBQe sutBby2/Agm1ziS74aFYOHY5cm/fwyMem7l3zgd6kuj7ovT6Zr9Pmll9gkO4Ti6v gpv2F9Al7b7yCDJtOXZBr1egT5PXuXC25OTB33K7m0LtMjeWPlabRaz5XfZChoU3 GLw3P3L/vt0gYA== -----END CERTIFICATE-----Generated at Mon Dec 29 19:39:36 2025 by rpki-client