This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json) Hash identifier: 7QgskgeyNImeu30O+YuhBYWP4KjVvG+8yl+XBT7mudI= Subject key identifier: 3B:C5:30:FF:86:C4:F0:11:17:79:29:61:A7:15:73:32:93:1B:F6:D2 Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019B3CEC44C675EF304DD1F389C9C4617C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft Manifest number: 0E06 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=) 2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: ucK0o2KXEynMtIQBpEUFusqxamsmojRkebS9lL9t5Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:44:c6:75:ef:30:4d:d1:f3:89:c9:c4:61:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=3bc530ff86c4f01117792961a7157332931bf6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:da:2e:90:73:82:38:21:07:87:ed:1e:6b: aa:6b:d0:79:c8:3c:6f:27:21:cf:45:80:47:96:e6: f3:bd:5c:df:0c:ff:eb:83:07:7c:24:93:5a:1d:5f: 75:da:e6:25:dd:7d:43:e9:f1:d9:42:e6:81:31:25: 23:35:5b:f0:ce:ae:99:7d:5a:18:b9:8c:ba:d5:f3: 0c:55:99:20:1a:05:05:99:9e:88:ba:43:69:58:f8: f0:1e:3f:77:9c:7c:31:5e:e0:e5:71:e4:9a:f6:26: 4c:d8:9b:81:d8:a3:f2:29:d5:a0:fa:e9:5e:fb:f1: e1:2f:52:e8:e4:b5:53:ab:64:ce:86:05:d9:91:da: 8b:04:b3:83:ff:5a:9e:f0:97:2c:64:8e:06:58:c8: 30:15:27:ca:91:79:56:77:5e:cf:5e:43:23:05:87: 13:52:1c:bc:d4:1e:37:eb:c3:ea:e2:1d:76:a2:83: a4:94:5c:2a:e0:66:88:38:d1:93:d2:4b:9a:5b:c1: 21:8e:26:c9:8b:83:52:a0:f1:fb:21:e0:cd:da:f6: 97:4e:e5:aa:33:a5:f9:d3:53:36:79:3b:ed:a2:38: b8:33:3c:09:28:fe:16:98:c0:e9:41:c8:17:62:1b: 45:a7:11:95:46:c4:cf:21:8b:c6:29:70:88:f6:9d: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C5:30:FF:86:C4:F0:11:17:79:29:61:A7:15:73:32:93:1B:F6:D2 X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:95:d6:2d:6e:4f:6d:3b:29:c4:c3:0f:04:cc:61:f6:7a:eb: 37:3b:b9:5b:b0:f6:24:bb:ad:32:27:b6:11:0f:ef:7f:ca:b7: e9:e7:df:f7:f8:41:07:4e:4a:8b:54:1d:d4:6a:20:43:70:07: b2:59:43:39:a8:87:d1:e6:1e:58:be:65:2f:ca:72:77:2f:f7: cd:36:4e:5a:a5:a7:31:c4:88:4f:3f:03:3e:d1:4f:9c:37:23: 52:b3:ec:c6:4f:2d:e8:e9:20:aa:b2:fb:9d:25:7b:4c:eb:43: cc:be:71:f2:a6:91:13:7d:ec:ea:14:4c:1c:cf:d5:ab:8b:19: 07:75:d4:d9:68:8f:c6:84:75:5b:33:07:d1:55:2d:37:98:4c: df:61:5e:90:f7:c6:bd:94:b3:2a:7f:fc:06:e7:6c:92:44:02: b8:bd:82:ba:9a:5f:ee:ca:e2:41:eb:4d:88:c3:cc:b1:34:b4: 9b:a9:d5:f7:6f:a9:41:a0:ff:db:f2:b3:0e:a5:d1:4a:ac:f9: 94:fc:a1:b6:56:56:a2:34:14:ea:0d:e8:42:b9:cd:2f:12:89: 86:9a:b6:1c:49:1d:76:d8:03:ba:7e:73:42:f2:20:ac:f4:b1: 65:fc:0e:e9:dd:d9:23:09:c6:c4:60:85:52:21:11:aa:8c:d1: 76:d6:e7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87ETGde8wTdHzicnEYXxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD EygzYmM1MzBmZjg2YzRmMDExMTc3OTI5NjFhNzE1NzMzMjkzMWJmNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos/aLpBzgjghB4ftHmuqa9B5yDxv JyHPRYBHlubzvVzfDP/rgwd8JJNaHV912uYl3X1D6fHZQuaBMSUjNVvwzq6ZfVoY uYy61fMMVZkgGgUFmZ6IukNpWPjwHj93nHwxXuDlceSa9iZM2JuB2KPyKdWg+ule +/HhL1Lo5LVTq2TOhgXZkdqLBLOD/1qe8JcsZI4GWMgwFSfKkXlWd17PXkMjBYcT Uhy81B4368Pq4h12ooOklFwq4GaIONGT0kuaW8EhjibJi4NSoPH7IeDN2vaXTuWq M6X501M2eTvtoji4MzwJKP4WmMDpQcgXYhtFpxGVRsTPIYvGKXCI9p18LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvFMP+GxPARF3kpYacVczKTG/bSMB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6JXWLW5P bTspxMMPBMxh9nrrNzu5W7D2JLutMie2EQ/vf8q36eff9/hBB05Ki1Qd1GogQ3AH sllDOaiH0eYeWL5lL8pydy/3zTZOWqWnMcSITz8DPtFPnDcjUrPsxk8t6OkgqrL7 nSV7TOtDzL5x8qaRE33s6hRMHM/Vq4sZB3XU2WiPxoR1WzMH0VUtN5hM32FekPfG vZSzKn/8BudskkQCuL2Cuppf7sriQetNiMPMsTS0m6nV92+pQaD/2/KzDqXRSqz5 lPyhtlZWojQU6g3oQrnNLxKJhpq2HEkddtgDun5zQvIgrPSxZfwO6d3ZIwnGxGCF UiERqozRdtbnBg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:38 2025 by rpki-client