This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json) Hash identifier: RBAjxAY0zWfljGEIgftJ4+IpVdthqvsfDsm5WGB8ROk= Subject key identifier: 5C:43:37:E3:C6:BB:56:A2:98:60:3D:CC:96:F4:E4:A5:7A:F7:3D:C2 Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Certificate serial: 019B3FECF084AD20066D335D3BF242F01410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 08:00:51 +0000 Manifest this update: Sun 21 Dec 2025 08:00:51 +0000 Manifest next update: Mon 22 Dec 2025 08:00:51 +0000 Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=) 2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: j+8LsCr2W1M7GZnxn9QyGOjilAEoVnAntzvwPRFogZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:f0:84:ad:20:06:6d:33:5d:3b:f2:42:f0:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Validity Not Before: Dec 21 08:00:51 2025 GMT Not After : Dec 22 08:00:51 2025 GMT Subject: CN=5c4337e3c6bb56a298603dcc96f4e4a57af73dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:d3:de:31:4e:63:0c:ba:fb:dd:21:0d:e8: 8c:1a:0a:f8:64:41:27:2c:fb:ee:14:09:f3:1f:80: 6a:27:25:9d:c8:03:1d:6d:d6:34:e5:3b:22:b7:9d: 41:12:91:cd:6d:e7:c1:49:45:84:28:d1:63:4c:88: eb:79:89:54:71:5f:38:95:5f:bf:02:11:7f:51:37: 55:c8:ff:b9:be:6a:25:de:a1:1b:ed:f0:31:ec:7a: b2:58:89:86:b6:15:41:a4:3c:71:b9:be:7f:a9:e5: 73:11:55:57:af:a1:15:1f:87:67:5f:be:c6:5e:44: ad:54:e4:5f:18:a6:5a:8b:e0:a5:67:b4:ad:ef:c4: e4:5d:74:2b:f6:9b:44:d1:d4:cc:b7:f3:38:6c:2d: b9:bd:c7:bf:bf:80:d1:9f:5e:0e:cd:b5:82:62:fa: 26:28:0f:94:90:57:ed:55:7a:54:45:e0:0a:89:c2: e3:75:2e:e8:d8:34:3e:46:08:29:a6:09:71:13:34: 3b:ea:5d:b0:69:90:41:73:6a:3a:35:a8:ec:23:8a: 19:87:4e:69:40:ea:b0:37:bb:0b:e0:4b:08:95:1e: b4:74:f4:68:d4:2d:cb:69:b0:3e:ee:e0:c4:a2:f9: 76:79:61:37:9c:4d:d5:f3:94:b7:ee:26:38:f9:51: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:37:E3:C6:BB:56:A2:98:60:3D:CC:96:F4:E4:A5:7A:F7:3D:C2 X509v3 Authority Key Identifier: keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:51:b8:ef:d0:f6:bd:0f:52:47:b5:ae:91:82:b1:64:91: 3e:b4:90:55:9a:39:8a:a3:19:20:03:e1:a0:33:89:18:a7:b1: 0d:80:e2:5a:fa:cb:e3:59:5b:c4:f6:a5:05:61:78:0b:db:f4: c4:e7:09:1d:51:ae:15:d7:53:84:0e:05:73:e8:5f:17:c3:36: 79:22:94:54:69:fd:2a:fa:b1:d9:61:8b:e0:16:89:de:7a:37: 36:07:a2:52:8b:f5:1f:72:cb:c6:88:28:c8:8c:53:c4:9d:4a: 8c:21:42:e4:4d:11:91:27:99:46:6f:1a:e0:41:52:56:9f:a8: ef:30:3e:6a:ce:78:3b:45:81:6c:02:6a:df:9b:c3:f9:31:60: df:4a:83:c4:a7:f6:b3:3a:3f:ea:c3:f0:90:7b:f4:af:cb:92: 88:c3:96:1c:79:04:63:30:98:44:db:70:c1:2d:6e:2f:84:7d: d3:2f:dd:c1:96:04:ce:f3:e2:52:bf:94:f7:96:3b:31:a1:94: bc:08:8d:98:60:5e:5a:34:cd:27:0c:f4:1e:f7:f6:7f:7c:63: a6:50:7e:0c:c6:00:50:17:cc:12:3d:80:32:91:8b:a7:eb:13: b4:6f:84:a9:61:15:ba:e8:35:db:62:3e:b8:7d:9c:a7:3e:e0: a1:e5:95:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7PCErSAGbTNdO/JC8BQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0 YzRiMWEwHhcNMjUxMjIxMDgwMDUxWhcNMjUxMjIyMDgwMDUxWjAzMTEwLwYDVQQD Eyg1YzQzMzdlM2M2YmI1NmEyOTg2MDNkY2M5NmY0ZTRhNTdhZjczZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmADT3jFOYwy6+90hDeiMGgr4ZEEn LPvuFAnzH4BqJyWdyAMdbdY05Tsit51BEpHNbefBSUWEKNFjTIjreYlUcV84lV+/ AhF/UTdVyP+5vmol3qEb7fAx7HqyWImGthVBpDxxub5/qeVzEVVXr6EVH4dnX77G XkStVORfGKZai+ClZ7St78TkXXQr9ptE0dTMt/M4bC25vce/v4DRn14OzbWCYvom KA+UkFftVXpUReAKicLjdS7o2DQ+RggppglxEzQ76l2waZBBc2o6NajsI4oZh05p QOqwN7sL4EsIlR60dPRo1C3LabA+7uDEovl2eWE3nE3V85S37iY4+VGlAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxDN+PGu1aimGA9zJb05KV69z3CMB8GA1UdIwQY MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5 LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX1RuO/Q 9r0PUke1rpGCsWSRPrSQVZo5iqMZIAPhoDOJGKexDYDiWvrL41lbxPalBWF4C9v0 xOcJHVGuFddThA4Fc+hfF8M2eSKUVGn9Kvqx2WGL4BaJ3no3NgeiUov1H3LLxogo yIxTxJ1KjCFC5E0RkSeZRm8a4EFSVp+o7zA+as54O0WBbAJq35vD+TFg30qDxKf2 szo/6sPwkHv0r8uSiMOWHHkEYzCYRNtwwS1uL4R90y/dwZYEzvPiUr+U95Y7MaGU vAiNmGBeWjTNJwz0Hvf2f3xjplB+DMYAUBfMEj2AMpGLp+sTtG+EqWEVuug122I+ uH2cpz7goeWVKw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:23 2025 by rpki-client