This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json) Hash identifier: 71jEWliN5Tu5l+dznAo3nJ3l3wc9im5XlFoJhvLA2SA= Subject key identifier: 54:B6:53:0C:D0:B3:76:70:F8:D8:5E:75:5C:CB:50:09:3A:96:99:5C Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Certificate serial: 019B503C6FDB9665921AA1384B1857D40F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 12:01:36 +0000 Manifest this update: Wed 24 Dec 2025 12:01:36 +0000 Manifest next update: Thu 25 Dec 2025 12:01:36 +0000 Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=) 2: GAcb3_GTi9es4ti94Ex9da8Yuuo.roa (hash: hXt1K6MNNmm3FVbMZur0tZVjSZe1csXYHc6pvZG31yI=) 3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=) 4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 9CbwNZzGx9r6BemsHQm9KTMmsbvaKReglaXa6tVRYAs=) 5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=) 6: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=) 7: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:6f:db:96:65:92:1a:a1:38:4b:18:57:d4:0f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Validity Not Before: Dec 24 12:01:36 2025 GMT Not After : Dec 25 12:01:36 2025 GMT Subject: CN=54b6530cd0b37670f8d85e755ccb50093a96995c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:1d:14:7b:1a:a0:02:50:f6:20:7d:27:50: 75:25:d0:38:81:8e:bc:cb:ab:36:93:da:a7:d0:c0: fe:3b:c8:46:e9:ad:56:dd:f8:23:8d:87:50:ca:a8: 71:e4:5a:b3:6d:21:cf:39:26:87:91:ab:33:f4:ee: 40:ba:31:49:38:71:50:1d:66:8b:bb:78:42:70:48: ba:49:dc:b5:c8:d4:fe:b4:60:0f:7e:27:e8:19:57: 3e:30:3e:e1:7c:9a:9e:d3:c4:e2:2c:33:55:6c:6c: da:9f:29:b7:e1:de:4f:64:64:e4:40:fa:03:47:1e: 32:5e:4b:53:9f:af:55:ed:26:ee:1a:bb:17:6c:73: d0:4b:a3:c4:e4:44:54:08:66:60:7b:2b:96:51:8e: c6:41:13:16:b2:63:0b:ba:7c:30:5f:51:72:47:a8: 43:b4:54:e5:d3:7d:57:6b:21:09:67:66:31:7b:ea: fe:dd:28:55:f4:96:db:c1:42:14:82:e8:81:76:43: 26:e2:c4:35:b6:8d:3e:63:b5:b7:25:fd:d7:62:d5: 88:19:3a:75:ab:23:a2:0f:b5:4c:d4:2b:73:ca:12: 16:f1:a5:15:19:f5:ab:26:dd:76:8a:6d:4a:55:24: 69:1c:cb:24:0a:f1:8a:ad:92:19:3f:57:50:b4:2b: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B6:53:0C:D0:B3:76:70:F8:D8:5E:75:5C:CB:50:09:3A:96:99:5C X509v3 Authority Key Identifier: keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:c4:16:38:df:ad:dc:a9:26:b9:55:95:0b:5d:23:d7:6d: 43:14:46:fd:bf:df:ec:5e:5c:bb:61:c9:8e:7b:88:23:e6:ca: 20:91:fb:48:cd:f0:24:23:da:c9:26:9b:47:87:1f:1c:a8:23: fa:e2:a9:70:c8:24:05:44:12:c1:6d:5c:aa:ec:b6:e3:85:b6: fd:ce:b9:78:d5:4a:41:40:9b:0d:f9:a5:8c:9f:20:0d:38:a5: ad:8b:01:6d:e1:3b:b7:3a:73:dd:db:ae:0b:8c:5b:fc:61:8a: f3:c1:5c:67:e2:73:10:35:cd:42:77:c9:6b:b6:4a:ee:d8:e4: b2:5b:a0:73:9b:8d:7b:74:7c:8d:3d:f0:57:15:4a:8d:26:43: 60:b8:15:2b:9f:5b:42:cd:fe:4f:cc:31:e8:d2:a9:68:5a:bf: 42:3e:a4:e7:c7:44:65:00:11:13:33:bf:29:28:4c:1c:05:c7: d3:da:c3:79:0a:9b:02:9a:e3:df:15:29:ca:4c:5a:01:78:4c: 22:f0:ed:ab:c0:c6:1c:72:60:10:90:a1:4c:16:0e:3c:64:1a: f1:13:ea:80:be:e9:63:8a:3d:e6:21:4f:6c:69:03:88:8b:c2: e0:21:ac:ab:be:8e:38:08:1a:00:cc:ba:2a:d9:c9:04:45:db: 1d:ad:8b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPG/blmWSGqE4SxhX1A9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4 YmZiYjUwHhcNMjUxMjI0MTIwMTM2WhcNMjUxMjI1MTIwMTM2WjAzMTEwLwYDVQQD Eyg1NGI2NTMwY2QwYjM3NjcwZjhkODVlNzU1Y2NiNTAwOTNhOTY5OTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsEdFHsaoAJQ9iB9J1B1JdA4gY68 y6s2k9qn0MD+O8hG6a1W3fgjjYdQyqhx5FqzbSHPOSaHkasz9O5AujFJOHFQHWaL u3hCcEi6Sdy1yNT+tGAPfifoGVc+MD7hfJqe08TiLDNVbGzanym34d5PZGTkQPoD Rx4yXktTn69V7SbuGrsXbHPQS6PE5ERUCGZgeyuWUY7GQRMWsmMLunwwX1FyR6hD tFTl031XayEJZ2Yxe+r+3ShV9JbbwUIUguiBdkMm4sQ1to0+Y7W3Jf3XYtWIGTp1 qyOiD7VM1CtzyhIW8aUVGfWrJt12im1KVSRpHMskCvGKrZIZP1dQtCtRvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS2UwzQs3Zw+NhedVzLUAk6lplcMB8GA1UdIwQY MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5 LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiXEFjjf rdypJrlVlQtdI9dtQxRG/b/f7F5cu2HJjnuII+bKIJH7SM3wJCPaySabR4cfHKgj +uKpcMgkBUQSwW1cquy244W2/c65eNVKQUCbDfmljJ8gDTilrYsBbeE7tzpz3duu C4xb/GGK88FcZ+JzEDXNQnfJa7ZK7tjkslugc5uNe3R8jT3wVxVKjSZDYLgVK59b Qs3+T8wx6NKpaFq/Qj6k58dEZQAREzO/KShMHAXH09rDeQqbAprj3xUpykxaAXhM IvDtq8DGHHJgEJChTBYOPGQa8RPqgL7pY4o95iFPbGkDiIvC4CGsq76OOAgaAMy6 KtnJBEXbHa2LHA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:19 2025 by rpki-client