This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json) Hash identifier: B7OPq6+KSw6i/rikulzT/CG/GG7BXnJUkS4RfE0JwnA= Subject key identifier: 02:37:19:60:50:67:77:C5:8A:FD:A9:9A:C5:3C:49:FE:25:68:CF:A0 Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Certificate serial: 019B4693E9B212234C6F02DCE707E81C2899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft Manifest number: 03CA Signing time: Mon 22 Dec 2025 15:00:57 +0000 Manifest this update: Mon 22 Dec 2025 15:00:57 +0000 Manifest next update: Tue 23 Dec 2025 15:00:57 +0000 Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: Bk00aZBy0AYWDBIUHPjCFSJEbjC0z8JYgxxWP5w55L8=) 2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:e9:b2:12:23:4c:6f:02:dc:e7:07:e8:1c:28:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Validity Not Before: Dec 22 15:00:57 2025 GMT Not After : Dec 23 15:00:57 2025 GMT Subject: CN=02371960506777c58afda99ac53c49fe2568cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:45:36:0f:97:41:1d:2d:0b:f5:ba:65:c2: 70:ef:99:e4:ea:a1:64:aa:7e:eb:ae:35:3a:8e:04: 9d:1e:55:67:99:05:d7:9d:fd:d0:ec:27:39:47:0d: 46:d5:85:1f:e5:1d:e5:3d:b3:e9:69:19:d0:a6:ea: da:65:83:b5:9b:4f:f5:6c:74:0f:e2:08:c6:93:be: 6a:1c:d9:4a:cc:ef:6c:94:60:c6:1d:66:8b:9e:99: f6:88:f3:6b:d0:2d:fc:a1:ea:48:1d:63:db:99:6e: 78:55:9d:25:1c:9b:c7:87:a0:d2:0d:3f:a9:8a:95: bc:a4:14:12:4e:a8:40:95:68:b9:0d:4d:1e:06:1f: e9:e2:ec:f2:e0:c4:23:96:8b:0d:c0:7d:1d:a8:c6: 3d:60:2e:f9:9a:5a:98:f1:bf:08:a3:e2:52:27:c6: b0:c7:ec:6e:5d:58:64:65:41:3b:80:c4:e0:36:c3: d9:1d:21:60:36:7b:bd:7c:45:e2:be:62:ab:53:cb: 6e:57:dd:ba:aa:bb:4a:bf:bb:ef:f2:e9:74:4e:e4: 8f:5b:fe:22:15:9b:a9:9c:43:da:cb:ce:38:ab:4c: 9f:cf:0a:83:ac:2e:6a:44:37:f6:7c:e4:ed:39:aa: 4b:e5:db:52:73:ed:aa:a8:a0:ae:41:ca:98:78:c6: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:37:19:60:50:67:77:C5:8A:FD:A9:9A:C5:3C:49:FE:25:68:CF:A0 X509v3 Authority Key Identifier: keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e8:79:e4:62:5e:82:e2:3f:96:30:42:85:5e:38:53:4e:fc: 47:02:7a:9d:e6:0e:1b:27:13:92:14:69:00:ee:0e:6e:2e:c9: 51:92:05:76:70:15:54:83:36:a2:39:f1:4f:3d:48:5d:31:d1: 72:cd:fb:62:70:7a:4e:9d:fc:ee:3b:ed:44:d5:da:30:74:b1: f4:c5:87:88:e2:60:39:13:8e:07:77:ac:1c:36:b1:59:67:4e: c2:4f:15:58:eb:00:54:58:cf:63:0f:e5:d9:51:d8:7d:fc:1a: d3:e1:75:0c:24:74:2d:6e:bc:e2:46:f5:c7:d2:54:44:b2:8e: 68:44:13:3e:8a:bf:cc:0f:e3:d5:c0:0d:b7:a8:88:4e:10:de: 1a:98:7f:9c:fb:9d:07:69:60:48:5a:61:e6:11:00:c5:ba:7b: 82:d4:ba:a1:21:1e:e3:5c:c5:27:fd:6b:8c:44:ec:4d:67:75: d3:4d:32:de:6e:b0:1f:d6:a4:80:46:c6:20:70:4b:d3:f7:ed: 17:bd:6c:f3:2c:6c:da:90:d0:d9:e4:d6:e8:1c:5a:d5:07:2a: 49:3c:b4:62:3f:2f:ef:5e:12:79:c7:55:b3:4f:2a:74:b9:95: a4:92:31:e7:bd:c7:d2:e7:ae:79:31:1b:8b:72:c1:e2:08:72: 26:f1:f5:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk+myEiNMbwLc5wfoHCiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1 YTM1YjIwHhcNMjUxMjIyMTUwMDU3WhcNMjUxMjIzMTUwMDU3WjAzMTEwLwYDVQQD EygwMjM3MTk2MDUwNjc3N2M1OGFmZGE5OWFjNTNjNDlmZTI1NjhjZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW5FNg+XQR0tC/W6ZcJw75nk6qFk qn7rrjU6jgSdHlVnmQXXnf3Q7Cc5Rw1G1YUf5R3lPbPpaRnQpuraZYO1m0/1bHQP 4gjGk75qHNlKzO9slGDGHWaLnpn2iPNr0C38oepIHWPbmW54VZ0lHJvHh6DSDT+p ipW8pBQSTqhAlWi5DU0eBh/p4uzy4MQjlosNwH0dqMY9YC75mlqY8b8Io+JSJ8aw x+xuXVhkZUE7gMTgNsPZHSFgNnu9fEXivmKrU8tuV926qrtKv7vv8ul0TuSPW/4i FZupnEPay844q0yfzwqDrC5qRDf2fOTtOapL5dtSc+2qqKCuQcqYeMZQ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI3GWBQZ3fFiv2pmsU8Sf4laM+gMB8GA1UdIwQY MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5 LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+h55GJe guI/ljBChV44U078RwJ6neYOGycTkhRpAO4Obi7JUZIFdnAVVIM2ojnxTz1IXTHR cs37YnB6Tp387jvtRNXaMHSx9MWHiOJgOROOB3esHDaxWWdOwk8VWOsAVFjPYw/l 2VHYffwa0+F1DCR0LW684kb1x9JURLKOaEQTPoq/zA/j1cANt6iIThDeGph/nPud B2lgSFph5hEAxbp7gtS6oSEe41zFJ/1rjETsTWd1000y3m6wH9akgEbGIHBL0/ft F71s8yxs2pDQ2eTW6Bxa1QcqSTy0Yj8v714SecdVs08qdLmVpJIx573H0ueueTEb i3LB4ghyJvH1AQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:30 2025 by rpki-client