This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json) Hash identifier: yfZIXGDBeoMxYcKTbaUrNbdQZRZMZeNxyctaz/nFyNk= Subject key identifier: 7D:BC:5B:D0:C7:91:B8:94:D8:28:C4:C2:7E:1A:A8:3B:2F:97:A4:7D Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Certificate serial: 019B3F11C51D305907FD857429F9FD5ED6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 04:01:27 +0000 Manifest this update: Sun 21 Dec 2025 04:01:27 +0000 Manifest next update: Mon 22 Dec 2025 04:01:27 +0000 Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=) 2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: K+bNa1cUVBJqg0ka6xIV1U59/O1LwSigwmtqp6iEC6o=) 3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:c5:1d:30:59:07:fd:85:74:29:f9:fd:5e:d6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Validity Not Before: Dec 21 04:01:27 2025 GMT Not After : Dec 22 04:01:27 2025 GMT Subject: CN=7dbc5bd0c791b894d828c4c27e1aa83b2f97a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:27:2e:a7:1d:77:91:17:bb:96:24:59:4e: 62:f3:a0:f7:09:13:b3:28:f0:2b:f2:82:97:6d:21: f5:52:e1:6f:46:c2:3d:1f:66:58:c5:b4:8e:15:26: 2f:9e:b9:fc:11:7c:77:49:47:6d:5c:a6:8a:f2:5f: 60:72:83:b2:a6:e2:74:d7:0e:fa:42:d0:07:7b:d2: 4a:f8:35:28:35:85:e2:0f:84:82:49:98:78:48:40: 56:98:81:77:2e:c9:94:61:2b:93:9b:20:fc:e1:ee: 12:77:3f:03:6a:d3:87:78:b8:55:9b:24:3b:62:65: 05:a2:a4:26:86:79:17:0f:63:4e:1d:18:b1:10:cd: 9e:36:45:3f:97:a4:d6:33:38:6e:28:ff:f0:96:df: 83:2f:26:b9:e7:ad:c3:c5:2e:58:e6:c4:07:f9:33: 7c:8d:00:05:c7:e1:12:99:30:b1:c0:27:ba:a2:6a: 01:a4:9f:52:98:69:9d:9a:07:90:fb:c8:2a:ae:6f: b6:21:4b:11:bf:fc:6e:cf:6e:fa:d3:f4:e3:b2:ba: ef:7c:e2:f8:0f:2e:ad:0a:28:74:ed:e1:35:73:c8: dd:9c:83:5a:ac:d0:cf:da:2f:ee:95:ee:df:77:2f: a9:26:48:e4:a0:8d:83:7d:64:42:39:b5:0d:40:54: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:5B:D0:C7:91:B8:94:D8:28:C4:C2:7E:1A:A8:3B:2F:97:A4:7D X509v3 Authority Key Identifier: keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:fe:ae:6a:0b:66:65:12:97:5f:d6:aa:0c:37:d6:81:3a:cb: 15:ef:1b:cb:b9:5d:f7:f3:9e:bf:3c:0a:ab:95:26:41:c1:42: 76:47:ab:1a:01:c0:52:4d:23:6b:fd:ed:37:61:02:a2:65:14: b1:18:18:1e:a7:31:d3:76:6e:66:2e:72:8f:7a:46:58:1e:c6: c5:8c:01:a7:a0:a0:e7:b0:23:3e:fb:c9:7b:81:d0:d4:46:f9: 3d:12:53:59:19:a0:59:d6:4c:fe:30:68:18:c4:17:e0:db:05: 59:bc:28:ff:19:99:2c:28:4d:b6:42:4b:d7:1e:1b:f1:59:a2: 91:eb:18:1a:55:1d:47:97:75:6f:fb:9a:cf:35:12:d9:97:81: ab:40:05:e0:a6:69:2e:ae:4b:ef:9d:51:0e:aa:9d:b2:01:6e: 05:0a:77:79:dc:c9:06:54:5e:e4:64:f9:02:a8:d6:89:de:e0: 45:1a:fd:b7:22:44:a9:47:9f:7e:1c:3c:0c:d5:84:bc:0e:18: 6e:7b:27:28:12:51:24:4c:62:c3:69:eb:fd:7d:d1:21:93:89: 49:9e:7b:9a:b4:4c:59:c6:d9:20:42:21:b6:37:7e:8c:a9:55: 31:8f:c2:f3:c6:3a:30:35:7f:95:54:e6:d4:59:4c:2b:b8:16: 96:d5:7e:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcUdMFkH/YV0Kfn9XtbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3 M2UyNjgwHhcNMjUxMjIxMDQwMTI3WhcNMjUxMjIyMDQwMTI3WjAzMTEwLwYDVQQD Eyg3ZGJjNWJkMGM3OTFiODk0ZDgyOGM0YzI3ZTFhYTgzYjJmOTdhNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRgnLqcdd5EXu5YkWU5i86D3CROz KPAr8oKXbSH1UuFvRsI9H2ZYxbSOFSYvnrn8EXx3SUdtXKaK8l9gcoOypuJ01w76 QtAHe9JK+DUoNYXiD4SCSZh4SEBWmIF3LsmUYSuTmyD84e4Sdz8DatOHeLhVmyQ7 YmUFoqQmhnkXD2NOHRixEM2eNkU/l6TWMzhuKP/wlt+DLya5563DxS5Y5sQH+TN8 jQAFx+ESmTCxwCe6omoBpJ9SmGmdmgeQ+8gqrm+2IUsRv/xuz2760/TjsrrvfOL4 Dy6tCih07eE1c8jdnINarNDP2i/ule7fdy+pJkjkoI2DfWRCObUNQFRAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH28W9DHkbiU2CjEwn4aqDsvl6R9MB8GA1UdIwQY MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyf6uagtm ZRKXX9aqDDfWgTrLFe8by7ld9/OevzwKq5UmQcFCdkerGgHAUk0ja/3tN2EComUU sRgYHqcx03ZuZi5yj3pGWB7GxYwBp6Cg57AjPvvJe4HQ1Eb5PRJTWRmgWdZM/jBo GMQX4NsFWbwo/xmZLChNtkJL1x4b8VmikesYGlUdR5d1b/uazzUS2ZeBq0AF4KZp Lq5L751RDqqdsgFuBQp3edzJBlRe5GT5AqjWid7gRRr9tyJEqUeffhw8DNWEvA4Y bnsnKBJRJExiw2nr/X3RIZOJSZ57mrRMWcbZIEIhtjd+jKlVMY/C88Y6MDV/lVTm 1FlMK7gWltV+iQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:28 2025 by rpki-client