This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json) Hash identifier: /ZljUL4sikRYcbOvS5NklPGZnfiHUOGiRyefgpEaAFQ= Subject key identifier: 1B:F0:58:71:49:8D:9A:9C:EC:70:E6:F9:4B:A6:0E:B0:55:18:B5:98 Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Certificate serial: 019B3F7ED74B1549DD8C969775024C5D5E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft Manifest number: 06EE Signing time: Sun 21 Dec 2025 06:00:35 +0000 Manifest this update: Sun 21 Dec 2025 06:00:35 +0000 Manifest next update: Mon 22 Dec 2025 06:00:35 +0000 Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: zcXDYefEgDH36By4qTPDqnIEUXyQp84Q6iKyS/R1Qy4=) 2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d7:4b:15:49:dd:8c:96:97:75:02:4c:5d:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Validity Not Before: Dec 21 06:00:35 2025 GMT Not After : Dec 22 06:00:35 2025 GMT Subject: CN=1bf05871498d9a9cec70e6f94ba60eb05518b598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:60:66:db:c7:a1:1a:c6:ac:f1:87:11:fb: 12:a9:47:a7:92:fd:cd:2f:84:43:88:f7:50:d2:d4: f9:5b:af:d7:c1:64:ce:15:1f:b1:84:2e:a2:bb:6c: af:89:4d:01:d2:a6:b1:d0:88:5e:d2:37:ad:f4:f7: 2c:50:8a:4d:53:c7:06:2f:c3:62:fc:3a:bc:cd:7b: db:ea:14:6a:cb:93:72:06:24:4f:1e:e0:79:3a:76: e9:11:e9:0b:cf:56:e0:bd:ce:f2:ec:50:e1:26:00: dd:4f:76:f7:c7:c0:c2:9d:ee:5b:b8:c8:59:45:1c: 41:ac:49:53:02:90:18:45:75:c9:97:81:08:db:db: 68:4c:08:fc:1b:c5:e9:d0:2e:2b:d1:bf:66:9f:2f: 12:d7:30:01:9d:98:5e:e8:22:41:44:49:e6:db:3e: 69:2b:49:a0:aa:7e:a1:7e:9a:b8:02:9b:6f:c6:b2: 98:c0:ad:46:fb:52:1c:27:fb:99:0c:83:0d:3c:58: 36:d5:78:19:02:0a:63:c7:de:d6:80:b2:5e:28:f7: 3b:f6:a2:b1:65:76:6a:e2:7e:53:92:00:8a:fb:38: 5e:1d:d9:86:4b:17:1b:fe:33:31:44:98:c4:14:30: e5:d4:49:a8:dd:1c:30:ac:63:ae:2d:6b:3f:f9:29: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F0:58:71:49:8D:9A:9C:EC:70:E6:F9:4B:A6:0E:B0:55:18:B5:98 X509v3 Authority Key Identifier: keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1c:e3:20:4a:0e:67:b2:3f:1d:bb:b1:3d:40:21:7f:41:95: 1d:8d:2e:55:a9:ae:fd:26:3d:1f:56:e2:15:34:b0:8b:ba:d3: 99:b5:e6:31:1f:27:61:7e:29:8b:aa:bb:4e:d7:20:2d:82:05: f9:08:f3:5c:2b:6b:67:42:fe:76:a7:dc:f0:bd:77:c5:60:20: fc:15:eb:e7:c8:54:d8:f6:77:41:4c:49:a1:e0:4a:69:d7:9d: 62:47:6e:1b:10:b6:2c:d7:b5:43:dd:18:5b:1b:e3:17:97:24: 2d:f9:08:11:26:53:c2:72:cd:ea:f7:d8:16:75:b1:ac:17:6e: b9:e2:75:ac:8a:02:e3:0b:e2:5f:39:da:51:65:4b:cd:2b:8e: 30:21:52:fb:13:55:f1:da:c4:a2:07:63:8d:7b:75:36:9a:8f: 38:04:ae:0a:d6:aa:ff:7c:e2:c3:1c:1c:d9:de:3a:c5:ea:22: cc:e5:f9:4e:63:cc:10:d5:26:c4:ab:e4:da:c8:b7:c6:1b:17: 3b:3e:aa:cd:75:32:c2:11:05:9c:c1:d6:f2:f4:f2:93:5a:38: 92:ff:b5:ac:b6:de:7c:9e:5f:4e:fd:d6:16:42:6d:6d:6c:dd: 04:2a:bd:c5:6d:f4:56:4e:56:3a:45:91:7d:9d:53:17:f8:3d: 03:06:3e:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftdLFUndjJaXdQJMXV4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZmVlNmMxZjhjYjIyNTAzOTI1YzFlOTI5MmJmZDE4MWNh OTU5ODQwHhcNMjUxMjIxMDYwMDM1WhcNMjUxMjIyMDYwMDM1WjAzMTEwLwYDVQQD EygxYmYwNTg3MTQ5OGQ5YTljZWM3MGU2Zjk0YmE2MGViMDU1MThiNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFgZtvHoRrGrPGHEfsSqUenkv3N L4RDiPdQ0tT5W6/XwWTOFR+xhC6iu2yviU0B0qax0Ihe0jet9PcsUIpNU8cGL8Ni /Dq8zXvb6hRqy5NyBiRPHuB5OnbpEekLz1bgvc7y7FDhJgDdT3b3x8DCne5buMhZ RRxBrElTApAYRXXJl4EI29toTAj8G8Xp0C4r0b9mny8S1zABnZhe6CJBREnm2z5p K0mgqn6hfpq4AptvxrKYwK1G+1IcJ/uZDIMNPFg21XgZAgpjx97WgLJeKPc79qKx ZXZq4n5TkgCK+zheHdmGSxcb/jMxRJjEFDDl1Emo3RwwrGOuLWs/+SkXVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvwWHFJjZqc7HDm+UumDrBVGLWYMB8GA1UdIwQY MBaAFDj+5sH4yyJQOSXB6Skr/RgcqVmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYt YjVlNGE2ZGNlMTk0LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYtYjVlNGE2ZGNlMTk0 LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBzjIEoO Z7I/HbuxPUAhf0GVHY0uVamu/SY9H1biFTSwi7rTmbXmMR8nYX4pi6q7TtcgLYIF +QjzXCtrZ0L+dqfc8L13xWAg/BXr58hU2PZ3QUxJoeBKadedYkduGxC2LNe1Q90Y WxvjF5ckLfkIESZTwnLN6vfYFnWxrBduueJ1rIoC4wviXznaUWVLzSuOMCFS+xNV 8drEogdjjXt1NpqPOASuCtaq/3ziwxwc2d46xeoizOX5TmPMENUmxKvk2si3xhsX Oz6qzXUywhEFnMHW8vTyk1o4kv+1rLbefJ5fTv3WFkJtbWzdBCq9xW30Vk5WOkWR fZ1TF/g9AwY+4w== -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:33 2025 by rpki-client