This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json) Hash identifier: Fbg/8cRTWtMf8joOrPcu7c3Hf0z/Cc+Sts3vnhNu8iM= Subject key identifier: 5F:D0:02:5C:53:9A:2D:42:14:06:4A:69:37:0A:E5:8F:27:7E:08:26 Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84 Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284 Certificate serial: 019B5C3FFC13C8BB5E462D4764FDC84CC99D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft Manifest number: 0D86 Signing time: Fri 26 Dec 2025 20:00:55 +0000 Manifest this update: Fri 26 Dec 2025 20:00:55 +0000 Manifest next update: Sat 27 Dec 2025 20:00:55 +0000 Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: PnmWoeiwMAGQyay4RS3qvR5BTF4KFQq73Bjw4cyAIU8=) 2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:fc:13:c8:bb:5e:46:2d:47:64:fd:c8:4c:c9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284 Validity Not Before: Dec 26 20:00:55 2025 GMT Not After : Dec 27 20:00:55 2025 GMT Subject: CN=5fd0025c539a2d4214064a69370ae58f277e0826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:91:e3:7b:24:30:81:ce:23:95:bf:8e:74: e0:29:ea:7d:e6:f3:a3:22:44:8e:d6:2c:4c:cd:34: 0f:ea:80:33:5a:08:d5:3d:4b:bf:8a:23:8e:6a:6c: 62:6f:32:fb:ba:24:f4:67:d2:8f:30:98:84:18:93: c6:e9:33:af:98:4c:8c:94:c3:64:ff:e8:b6:3e:70: 16:47:0b:17:3b:91:35:0b:f6:2d:39:d2:27:5c:6c: 72:18:50:42:1d:d3:90:f0:06:53:50:8b:53:d4:b8: 68:2c:15:3d:6f:2d:b2:29:59:f5:4d:54:f3:90:f8: 24:77:e2:30:81:e7:10:74:21:e4:f6:92:ff:26:d8: 79:ee:44:85:31:27:64:01:f1:4e:e5:45:02:a1:38: 92:01:12:53:c0:d0:bc:39:25:70:2b:30:3b:29:11: 82:e6:4a:ba:db:97:88:97:16:a8:24:07:76:75:80: 46:73:fd:f3:06:d8:71:9f:65:f9:65:62:7c:7d:7a: 6e:bf:c1:97:39:15:f1:a7:0a:53:47:85:97:b7:b3: f2:33:c2:a9:7a:b0:f8:49:2c:45:ff:cf:16:ef:f1: ce:97:17:02:ee:fb:b6:91:ac:ab:10:90:09:70:9a: 35:bc:05:a9:ca:08:03:fe:3d:ff:5c:ac:46:94:e4: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D0:02:5C:53:9A:2D:42:14:06:4A:69:37:0A:E5:8F:27:7E:08:26 X509v3 Authority Key Identifier: keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:19:b7:e9:ee:41:45:9f:5c:ea:f0:e0:38:c9:59:64:bc:11: 4d:09:95:3e:fd:c6:6a:3f:b4:91:a8:3c:e0:fc:3b:d4:f4:5c: 96:be:c1:b7:c2:63:b2:f4:5f:a7:61:bd:74:e9:87:18:c3:95: 09:18:1f:98:57:7f:87:f3:76:75:06:d7:7f:7e:9c:9f:b4:ca: 93:99:44:f9:d0:9c:6d:11:f8:1a:17:39:d5:06:1c:9c:ba:17: 4f:79:8c:1b:b5:ec:e3:cb:bd:29:62:01:e8:dc:19:6f:0d:99: 8b:5d:72:96:f9:8e:90:52:f3:b9:ea:17:1c:c0:91:8b:63:99: ec:d4:f7:9b:16:ab:ca:66:ea:16:0e:f6:fc:5a:ca:01:44:fd: 9d:98:14:ad:64:d1:86:18:f9:01:ff:df:21:8d:9e:00:46:54: 02:40:80:81:ff:0f:71:1e:ba:ad:cd:6a:fb:69:d3:91:f4:1f: 9a:30:72:b8:de:24:41:dd:16:5e:6a:01:2f:11:25:94:da:89: 72:0d:81:30:b6:88:ae:29:f4:5b:29:f9:5d:a0:81:d3:f7:05: 97:10:13:3e:67:96:64:0a:c1:fc:87:9c:fd:5a:80:89:5d:82: 6e:91:14:04:35:2b:dd:95:61:fc:58:a2:4d:86:ac:4a:f3:8d: a0:fa:4c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP/wTyLteRi1HZP3ITMmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGM2NzljYmFmOGMyYWQ3YmQ3ZTE1OTA4NmZkZjBhMjdk MmEyODQwHhcNMjUxMjI2MjAwMDU1WhcNMjUxMjI3MjAwMDU1WjAzMTEwLwYDVQQD Eyg1ZmQwMDI1YzUzOWEyZDQyMTQwNjRhNjkzNzBhZTU4ZjI3N2UwODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCR43skMIHOI5W/jnTgKep95vOj IkSO1ixMzTQP6oAzWgjVPUu/iiOOamxibzL7uiT0Z9KPMJiEGJPG6TOvmEyMlMNk /+i2PnAWRwsXO5E1C/YtOdInXGxyGFBCHdOQ8AZTUItT1LhoLBU9by2yKVn1TVTz kPgkd+IwgecQdCHk9pL/Jth57kSFMSdkAfFO5UUCoTiSARJTwNC8OSVwKzA7KRGC 5kq625eIlxaoJAd2dYBGc/3zBthxn2X5ZWJ8fXpuv8GXORXxpwpTR4WXt7PyM8Kp erD4SSxF/88W7/HOlxcC7vu2kayrEJAJcJo1vAWpyggD/j3/XKxGlOTF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/QAlxTmi1CFAZKaTcK5Y8nfggmMB8GA1UdIwQY MBaAFDhMZ5y6+MKte9fhWQhv3won0qKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQt ZTNlYTY0OTRkNGVhLzEvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMmVhYTItY2NiOS00OGUxLTk2MmQtZTNlYTY0OTRkNGVh LzEvT0V4bm5McjR3cTE3MS1GWkNHX2ZDaWZTb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxm36e5B RZ9c6vDgOMlZZLwRTQmVPv3Gaj+0kag84Pw71PRclr7Bt8JjsvRfp2G9dOmHGMOV CRgfmFd/h/N2dQbXf36cn7TKk5lE+dCcbRH4Ghc51QYcnLoXT3mMG7Xs48u9KWIB 6NwZbw2Zi11ylvmOkFLzueoXHMCRi2OZ7NT3mxarymbqFg72/FrKAUT9nZgUrWTR hhj5Af/fIY2eAEZUAkCAgf8PcR66rc1q+2nTkfQfmjByuN4kQd0WXmoBLxEllNqJ cg2BMLaIrin0Wyn5XaCB0/cFlxATPmeWZArB/Iec/VqAiV2CbpEUBDUr3ZVh/Fii TYasSvONoPpMjg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:05:30 2025 by rpki-client