This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json) Hash identifier: +9Z+IyeRHgDWmFNMM776Pc3OrpWQ8ucUv/hw1peSGJE= Subject key identifier: A7:BB:79:53:1A:DE:1C:DE:7C:37:97:70:D6:BA:6F:FC:5B:BB:32:62 Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f Certificate serial: 019B3C7F05797EBDFCBCDFBEAE7A3CD0FCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft Manifest number: 024D Signing time: Sat 20 Dec 2025 16:01:55 +0000 Manifest this update: Sat 20 Dec 2025 16:01:55 +0000 Manifest next update: Sun 21 Dec 2025 16:01:55 +0000 Files and hashes: 1: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (hash: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=) 2: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: P7Wa5IilyEvXdlyxg54QpmqnRvWo/pXg3iEiZbClaDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:05:79:7e:bd:fc:bc:df:be:ae:7a:3c:d0:fc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f Validity Not Before: Dec 20 16:01:55 2025 GMT Not After : Dec 21 16:01:55 2025 GMT Subject: CN=a7bb79531ade1cde7c379770d6ba6ffc5bbb3262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:ff:f9:fa:63:d8:2f:79:c0:60:55:49:2b: 75:22:9a:53:c7:cf:eb:96:9a:9a:31:2e:12:a5:7a: 03:bc:6a:f6:24:11:e0:06:38:e6:01:c6:90:e6:dd: fe:72:86:23:fb:01:1e:69:6b:bd:ca:12:b1:42:55: c7:1a:4f:f0:29:74:cd:37:cf:e6:ca:06:70:a2:3b: 2f:9a:71:64:f1:dd:8f:05:cc:8a:25:a4:52:ee:4b: d3:00:9d:bd:b8:b1:0c:be:0f:09:77:ad:c4:f3:dd: a6:2d:3c:6d:5e:cd:1d:d8:a6:4d:0b:b0:bc:4f:72: 05:38:6f:f8:f2:67:05:7f:a3:b8:04:05:cf:50:c9: 05:cc:3b:7d:0b:2b:6a:b7:00:23:0c:f5:cf:3d:f8: 5d:de:6a:4e:33:92:97:d9:4d:6b:59:da:50:27:dc: af:5c:b8:76:01:4b:f1:10:ae:d5:02:df:d3:0b:7a: 27:8e:9a:78:84:22:45:f5:a3:6a:43:a4:5a:00:1a: c0:6e:97:2d:39:76:4b:18:ef:ff:54:5f:e5:7e:28: 9b:07:9c:bf:31:7e:17:77:e0:84:87:44:63:37:bc: e7:70:c4:4c:2b:c0:a0:37:f6:1b:11:4c:b7:06:12: 5a:c1:f5:a9:5f:28:cc:b7:64:07:73:3e:d6:48:43: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BB:79:53:1A:DE:1C:DE:7C:37:97:70:D6:BA:6F:FC:5B:BB:32:62 X509v3 Authority Key Identifier: keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cc:32:76:00:ff:d7:36:d2:e9:e8:96:93:fb:c7:ef:65:19: e3:99:10:f4:78:6a:5c:79:69:b0:da:a1:15:9c:36:e6:56:4e: 58:19:58:41:83:e3:86:b0:b8:94:8d:f5:0f:7f:de:d7:84:60: d4:27:97:1f:d3:69:a1:9c:48:4f:d1:a3:c9:d1:e3:51:40:f6: f9:c4:0b:74:82:27:d5:46:f0:57:88:48:a4:9d:60:dd:25:6b: 03:4a:b8:36:ba:98:5d:37:f1:9d:c4:6c:f5:1e:c1:8e:c6:77: f6:74:7a:de:14:4f:66:ce:72:cf:26:ea:ae:3f:e4:9f:3e:5c: 99:a4:98:c5:74:95:05:29:db:53:5e:36:80:42:f7:66:c2:43: 26:44:c4:f1:97:cf:4f:ab:e6:00:d7:90:3d:5f:82:36:4e:c9: 9c:14:aa:18:3a:7f:f9:87:11:90:25:5c:19:1f:24:3f:3a:a1: 5a:54:e0:3c:f3:dd:02:87:05:b6:30:48:02:05:7f:71:94:5f: e2:25:46:76:49:9b:79:fa:9b:be:f1:7b:c4:3a:58:a1:ef:62: 12:54:ab:3a:c3:ee:ae:cb:34:a6:4e:30:70:1b:de:56:2b:23: 58:1e:cf:eb:73:e0:8f:d4:c3:ee:08:40:45:ad:30:ec:43:58: 9b:42:a3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwV5fr38vN++rno80PzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Mjc5MDJlZWNhNTJhOWYwODE0MDA4OGY1NThlNDUyZTBl Yzk1NWYwHhcNMjUxMjIwMTYwMTU1WhcNMjUxMjIxMTYwMTU1WjAzMTEwLwYDVQQD EyhhN2JiNzk1MzFhZGUxY2RlN2MzNzk3NzBkNmJhNmZmYzViYmIzMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9H/+fpj2C95wGBVSSt1IppTx8/r lpqaMS4SpXoDvGr2JBHgBjjmAcaQ5t3+coYj+wEeaWu9yhKxQlXHGk/wKXTNN8/m ygZwojsvmnFk8d2PBcyKJaRS7kvTAJ29uLEMvg8Jd63E892mLTxtXs0d2KZNC7C8 T3IFOG/48mcFf6O4BAXPUMkFzDt9CytqtwAjDPXPPfhd3mpOM5KX2U1rWdpQJ9yv XLh2AUvxEK7VAt/TC3onjpp4hCJF9aNqQ6RaABrAbpctOXZLGO//VF/lfiibB5y/ MX4Xd+CEh0RjN7zncMRMK8CgN/YbEUy3BhJawfWpXyjMt2QHcz7WSEMchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe7eVMa3hzefDeXcNa6b/xbuzJiMB8GA1UdIwQY MBaAFDgnkC7spSqfCBQAiPVY5FLg7JVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgt NzdkYjMyNjQ3Y2E5LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgtNzdkYjMyNjQ3Y2E5 LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMwydgD/ 1zbS6eiWk/vH72UZ45kQ9HhqXHlpsNqhFZw25lZOWBlYQYPjhrC4lI31D3/e14Rg 1CeXH9NpoZxIT9GjydHjUUD2+cQLdIIn1UbwV4hIpJ1g3SVrA0q4NrqYXTfxncRs 9R7BjsZ39nR63hRPZs5yzybqrj/knz5cmaSYxXSVBSnbU142gEL3ZsJDJkTE8ZfP T6vmANeQPV+CNk7JnBSqGDp/+YcRkCVcGR8kPzqhWlTgPPPdAocFtjBIAgV/cZRf 4iVGdkmbefqbvvF7xDpYoe9iElSrOsPurss0pk4wcBveVisjWB7P63Pgj9TD7ghA Ra0w7ENYm0Kjpw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:36:48 2025 by rpki-client