This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json) Hash identifier: dbaBfcIqm445NAl1v6GHuLZOG8o2Ivkv6ViNfzAo53w= Subject key identifier: DC:04:04:52:63:24:9C:D8:49:65:AF:C3:91:45:9D:33:B3:4F:82:B4 Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb Certificate serial: 019B3CB51166F78BAB535B75854A9C15C338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: 0a7wi9UvH98yltuMNEJ5jd9saCrrbSgGBhddKHZ52ug=) 2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:11:66:f7:8b:ab:53:5b:75:85:4a:9c:15:c3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=dc04045263249cd84965afc391459d33b34f82b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:81:5f:91:cc:30:15:12:8d:96:2e:34:48:fe: e4:fa:66:1e:6d:42:89:05:5a:31:bf:f7:ec:8c:41: 91:ee:bc:54:d4:55:ef:8d:a8:d1:64:cf:46:79:ea: eb:16:b6:de:d7:83:58:7f:ee:d5:31:5c:98:8d:5e: d4:6a:5f:96:b9:eb:bf:3c:0a:0a:ae:30:2e:ae:ae: 15:7e:ce:e9:bb:64:e6:94:c2:38:88:f3:43:e2:d9: 43:91:d9:84:9f:1f:5e:d3:a2:ae:0b:1c:2d:49:93: 25:7c:f7:26:98:14:32:be:b1:cb:de:6e:58:da:31: 04:51:d6:60:f5:ee:54:73:2d:7c:44:cd:bf:37:b4: 74:cd:9b:41:29:7b:21:f9:3a:b9:89:3e:99:5d:50: 0b:8a:9f:23:0d:e1:f4:18:78:27:8d:b2:d2:82:a8: 2c:ad:a9:8c:b3:87:88:22:5e:5b:02:8e:32:e4:a5: 07:e4:22:5d:30:f1:49:57:16:78:5c:87:fa:47:a1: 27:12:11:bf:31:d7:1c:ed:20:15:8a:3f:a5:2c:c1: 65:3b:ac:02:4e:c6:d9:84:e8:f1:00:09:08:b6:f6: 36:2c:41:62:86:e1:b1:f4:9a:22:eb:3f:97:a5:de: a4:f8:14:ae:56:1f:fc:46:2b:fb:e7:94:c5:fd:0f: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:04:52:63:24:9C:D8:49:65:AF:C3:91:45:9D:33:B3:4F:82:B4 X509v3 Authority Key Identifier: keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7d:f7:3b:4a:8e:e7:ef:16:e0:2b:b6:b0:fa:e5:f7:f2:ab: 5a:78:d1:ab:3a:36:86:86:62:9d:96:9c:6c:f3:55:2f:bd:49: 19:9b:82:e2:e5:4a:57:60:49:90:c4:ff:25:c3:69:b7:9f:70: ef:f8:af:de:85:b4:2f:c9:c3:58:42:a3:7d:1f:ab:85:83:16: 96:aa:28:2c:0b:a9:9e:90:64:5a:79:6c:dd:b5:f5:92:50:d3: 6e:06:de:ff:46:3c:94:b1:ca:04:ba:99:9b:cf:0b:59:50:ce: bd:b4:c9:9a:7e:e7:cc:13:e0:7d:74:c6:9e:0f:15:de:fa:73: ee:eb:48:cb:36:38:7b:dc:cf:bb:8c:bc:f1:4b:9d:c2:db:45: 6a:ca:ba:f8:04:98:6c:b0:62:ef:e6:fd:cb:f0:7f:48:c6:d2: b1:e2:08:6d:88:ec:8b:f6:af:28:c4:bb:f8:a5:00:73:fa:51: d5:87:eb:70:73:55:1b:d0:21:33:6f:7d:43:1b:19:89:f0:8a: 05:44:d6:96:f1:eb:2f:81:fc:89:83:c5:6a:ce:2b:88:8c:23: 2f:73:d1:f5:71:88:47:fb:31:4b:e3:ba:5b:9a:41:ff:ac:7a: 1b:5c:d8:7e:7e:99:46:c0:d8:c0:6b:85:6a:b0:bc:c8:0c:d4: c6:9b:ca:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRFm94urU1t1hUqcFcM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2 NDRjZGIwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD EyhkYzA0MDQ1MjYzMjQ5Y2Q4NDk2NWFmYzM5MTQ1OWQzM2IzNGY4MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54FfkcwwFRKNli40SP7k+mYebUKJ BVoxv/fsjEGR7rxU1FXvjajRZM9GeerrFrbe14NYf+7VMVyYjV7Ual+Wueu/PAoK rjAurq4Vfs7pu2TmlMI4iPND4tlDkdmEnx9e06KuCxwtSZMlfPcmmBQyvrHL3m5Y 2jEEUdZg9e5Ucy18RM2/N7R0zZtBKXsh+Tq5iT6ZXVALip8jDeH0GHgnjbLSgqgs ramMs4eIIl5bAo4y5KUH5CJdMPFJVxZ4XIf6R6EnEhG/Mdcc7SAVij+lLMFlO6wC TsbZhOjxAAkItvY2LEFihuGx9Joi6z+Xpd6k+BSuVh/8Riv755TF/Q/wQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwEBFJjJJzYSWWvw5FFnTOzT4K0MB8GA1UdIwQY MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan33O0qO 5+8W4Cu2sPrl9/KrWnjRqzo2hoZinZacbPNVL71JGZuC4uVKV2BJkMT/JcNpt59w 7/iv3oW0L8nDWEKjfR+rhYMWlqooLAupnpBkWnls3bX1klDTbgbe/0Y8lLHKBLqZ m88LWVDOvbTJmn7nzBPgfXTGng8V3vpz7utIyzY4e9zPu4y88UudwttFasq6+ASY bLBi7+b9y/B/SMbSseIIbYjsi/avKMS7+KUAc/pR1YfrcHNVG9AhM299QxsZifCK BUTWlvHrL4H8iYPFas4riIwjL3PR9XGIR/sxS+O6W5pB/6x6G1zYfn6ZRsDYwGuF arC8yAzUxpvKrg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:17:34 2025 by rpki-client