This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json) Hash identifier: fpWjKy1JmhFml/h0ZTedAO4GBFDrKolkA6L5R7dYqB4= Subject key identifier: 9A:5F:28:C7:91:03:B3:EB:D5:26:44:5A:49:49:17:52:BD:0A:9B:B8 Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a Certificate serial: 019B2B53F07E92282AF1FCA284518B9C338F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft Manifest number: 03CF Signing time: Wed 17 Dec 2025 08:01:19 +0000 Manifest this update: Wed 17 Dec 2025 08:01:19 +0000 Manifest next update: Thu 18 Dec 2025 08:01:19 +0000 Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: HK/FOtl9texweTn/x37OgGduKkvPhG/cJ56rLTCquIo=) 2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:f0:7e:92:28:2a:f1:fc:a2:84:51:8b:9c:33:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a Validity Not Before: Dec 17 08:01:19 2025 GMT Not After : Dec 18 08:01:19 2025 GMT Subject: CN=9a5f28c79103b3ebd526445a49491752bd0a9bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:8f:76:8e:18:4c:db:af:95:cb:9d:fb:ba: c2:62:1f:73:83:35:15:1d:fa:10:67:ca:38:fe:1f: 59:1f:e8:71:a8:0b:47:0e:5f:7e:ef:a9:d1:e6:9e: 4c:23:e0:da:8a:4b:2c:08:d6:02:f4:d2:1f:c6:5b: 1a:1c:b7:1f:65:a1:ac:c0:8b:ba:62:1e:dd:db:6b: ea:57:4a:c6:dc:49:ae:e1:e6:4d:d1:b7:bd:68:b0: d9:dc:4e:47:73:8e:fb:ba:3a:e1:d0:f2:e9:12:50: f4:af:3d:85:e8:9b:8b:0f:05:f0:a2:f0:61:ce:1f: f7:45:2f:52:34:6f:20:04:ef:a3:ca:ed:af:d1:c2: e2:ed:c7:ef:4e:94:8f:3b:62:ab:b3:a0:c6:a6:7c: 45:79:f3:71:3b:3b:3f:e2:4f:3e:0b:4d:67:e5:3b: ea:b6:88:38:ba:26:0b:e3:b8:53:f8:df:ab:73:1f: 38:4d:59:25:98:40:0a:cd:5c:1d:30:da:38:7e:73: a3:56:c2:11:d1:43:48:8d:9b:7e:ae:39:b8:b9:ed: 07:d3:d4:91:cd:c4:1c:be:42:07:45:29:04:b5:91: 3a:23:7a:3f:51:f1:cb:26:23:b4:9f:e3:61:6c:49: c9:c9:7f:71:8c:e5:eb:e5:c1:35:61:b1:ab:ee:d7: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:28:C7:91:03:B3:EB:D5:26:44:5A:49:49:17:52:BD:0A:9B:B8 X509v3 Authority Key Identifier: keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:53:09:7b:5c:8e:66:20:41:7f:e2:41:a8:34:25:42:0c: a3:80:64:7a:8d:ba:b2:c5:81:86:92:c7:4f:11:d2:fd:27:83: ba:a0:08:1e:26:80:94:7e:0a:6b:26:62:b5:39:42:2d:15:23: 87:92:d9:00:3d:5e:d7:c9:6e:2b:c0:a2:14:d6:64:51:3d:69: d2:a2:3a:4e:78:b3:c6:64:05:a9:0f:e7:e6:e3:bc:80:b7:c5: f0:0a:11:f7:ba:4d:85:35:87:3f:7e:21:3b:63:3b:01:61:94: d2:b4:3a:f3:2c:d6:c8:dc:2d:e4:91:68:32:3d:e8:1f:81:46: a2:37:1d:78:59:5a:e8:db:c9:8e:07:22:2c:b3:4c:80:89:5e: b1:0a:db:98:23:7a:79:53:6a:66:c1:80:f7:6e:71:47:c0:29: 4d:6b:76:c7:d7:d5:1b:e8:8d:c9:e4:4e:93:96:dc:6d:6a:cd: 6f:9b:67:a9:e4:72:2a:e7:b8:ae:e2:39:3c:2d:9e:e3:dc:88: d3:02:ca:74:38:c1:97:1e:ca:62:ec:9a:30:80:1f:15:56:18: e9:eb:9b:fa:21:75:21:87:24:5f:cf:4e:f4:60:15:82:7c:85: fc:e1:92:e4:7d:f1:79:40:1e:50:a6:62:db:03:93:32:33:2e: 10:d4:3e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU/B+kigq8fyihFGLnDOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1 YTM3MGEwHhcNMjUxMjE3MDgwMTE5WhcNMjUxMjE4MDgwMTE5WjAzMTEwLwYDVQQD Eyg5YTVmMjhjNzkxMDNiM2ViZDUyNjQ0NWE0OTQ5MTc1MmJkMGE5YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O+Pdo4YTNuvlcud+7rCYh9zgzUV HfoQZ8o4/h9ZH+hxqAtHDl9+76nR5p5MI+DaikssCNYC9NIfxlsaHLcfZaGswIu6 Yh7d22vqV0rG3Emu4eZN0be9aLDZ3E5Hc477ujrh0PLpElD0rz2F6JuLDwXwovBh zh/3RS9SNG8gBO+jyu2v0cLi7cfvTpSPO2Krs6DGpnxFefNxOzs/4k8+C01n5Tvq tog4uiYL47hT+N+rcx84TVklmEAKzVwdMNo4fnOjVsIR0UNIjZt+rjm4ue0H09SR zcQcvkIHRSkEtZE6I3o/UfHLJiO0n+NhbEnJyX9xjOXr5cE1YbGr7teAzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpfKMeRA7Pr1SZEWklJF1K9Cpu4MB8GA1UdIwQY MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUtTCXtc jmYgQX/iQag0JUIMo4Bkeo26ssWBhpLHTxHS/SeDuqAIHiaAlH4KayZitTlCLRUj h5LZAD1e18luK8CiFNZkUT1p0qI6TnizxmQFqQ/n5uO8gLfF8AoR97pNhTWHP34h O2M7AWGU0rQ68yzWyNwt5JFoMj3oH4FGojcdeFla6NvJjgciLLNMgIlesQrbmCN6 eVNqZsGA925xR8ApTWt2x9fVG+iNyeROk5bcbWrNb5tnqeRyKue4ruI5PC2e49yI 0wLKdDjBlx7KYuyaMIAfFVYY6eub+iF1IYckX89O9GAVgnyF/OGS5H3xeUAeUKZi 2wOTMjMuENQ+Ww== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:51 2025 by rpki-client