This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json) Hash identifier: 16ZHH4V/dJXxVNcqZj5nTv6fjKRTf4GxTbTpNNe30gs= Subject key identifier: 2D:96:33:C0:F5:46:0D:06:93:B4:AF:A5:C3:EE:02:99:51:C8:AF:E0 Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9 Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9 Certificate serial: 019B405C7F834E0CFA11E625407861057EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 10:02:42 +0000 Manifest this update: Sun 21 Dec 2025 10:02:42 +0000 Manifest next update: Mon 22 Dec 2025 10:02:42 +0000 Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: yKeo1AXxWTTYJfP3eX7+DPDZuYy+80QuasnwiE8u11k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:7f:83:4e:0c:fa:11:e6:25:40:78:61:05:7e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9 Validity Not Before: Dec 21 10:02:42 2025 GMT Not After : Dec 22 10:02:42 2025 GMT Subject: CN=2d9633c0f5460d0693b4afa5c3ee029951c8afe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:83:a1:65:6b:59:de:e8:12:cd:6a:27:30:93: 6d:ea:de:64:23:76:de:c1:44:f6:e9:ea:2b:20:c5: 07:49:a5:b3:be:bf:e4:9b:c2:92:7a:20:e9:75:0e: 83:7f:61:93:ca:13:ca:e9:65:e7:7a:e3:a7:ce:f1: 2c:0e:be:06:c0:29:4d:da:f6:95:bf:ac:c3:9c:7f: db:7f:8d:c0:49:73:13:73:c0:f0:25:54:b0:83:d1: 3e:91:60:72:c9:1a:15:1a:60:15:20:d1:9e:75:73: 56:16:55:2f:2e:d6:c3:ee:d1:d6:db:e6:a2:45:e2: 80:af:c5:21:18:3f:86:58:81:ed:ec:e9:8e:15:67: 28:6c:1d:94:41:36:08:84:bf:7e:9a:4f:cf:45:da: 23:4b:05:c4:68:f4:c8:1c:2f:5e:96:97:50:94:3e: 6e:bc:db:42:f2:8e:1f:9a:fe:f7:d8:0d:86:39:06: d5:84:41:8a:ea:56:dc:a6:78:94:d8:a9:42:fa:16: f1:ec:46:ff:7b:ab:47:36:bb:08:72:ce:f8:45:04: 9a:7f:9e:de:92:a8:b3:49:2d:75:94:5e:06:30:6e: aa:a3:6b:33:6b:53:46:17:50:58:68:bd:02:b0:fd: 07:2a:6c:48:fe:5f:3c:09:80:a1:37:71:60:4f:79: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:33:C0:F5:46:0D:06:93:B4:AF:A5:C3:EE:02:99:51:C8:AF:E0 X509v3 Authority Key Identifier: keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:56:88:4c:49:43:af:dc:d3:5b:d0:8f:e5:00:38:54:1d: 1f:95:a3:fc:8f:71:1b:19:14:be:44:35:0b:78:9c:38:84:0c: f0:b3:ff:66:68:6a:23:e2:7a:2b:d9:3a:cc:96:e3:67:5e:e9: 77:51:d2:1b:b5:47:2c:ba:bc:fe:bc:a2:54:ac:07:ae:75:83: a6:a8:0f:06:b2:c2:00:a8:e0:aa:0e:95:6d:13:52:8b:5d:ac: a0:c7:53:f0:46:93:42:d9:2f:95:fc:6c:a4:25:b6:3c:3e:d8: 7b:f4:a7:c4:d6:34:e0:60:cb:e8:4d:5e:01:4a:fa:b6:58:62: 4e:96:72:ed:0b:39:3f:e3:03:b2:af:4d:c0:31:96:03:68:d9: 31:d1:3e:90:14:bd:53:3f:50:d4:28:e4:28:5f:a5:c9:1d:69: b0:5a:a9:88:2c:7d:c8:1a:a4:dc:0e:2c:6a:7a:c6:b3:be:92: cb:55:68:64:4d:13:d8:c0:ff:52:8c:56:ef:63:5a:85:d1:90: 08:f2:6d:62:aa:85:3e:f1:20:30:ed:b2:23:6c:db:da:ee:30: 0b:4e:ac:5c:d5:8c:66:db:9f:80:e4:5c:3a:ac:44:6e:8c:99: 81:e0:14:d0:f1:85:55:c5:68:74:e3:ca:47:73:24:df:dc:ff: 2e:66:f8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXH+DTgz6EeYlQHhhBX7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj NTVhZjkwHhcNMjUxMjIxMTAwMjQyWhcNMjUxMjIyMTAwMjQyWjAzMTEwLwYDVQQD EygyZDk2MzNjMGY1NDYwZDA2OTNiNGFmYTVjM2VlMDI5OTUxYzhhZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YOhZWtZ3ugSzWonMJNt6t5kI3be wUT26eorIMUHSaWzvr/km8KSeiDpdQ6Df2GTyhPK6WXneuOnzvEsDr4GwClN2vaV v6zDnH/bf43ASXMTc8DwJVSwg9E+kWByyRoVGmAVINGedXNWFlUvLtbD7tHW2+ai ReKAr8UhGD+GWIHt7OmOFWcobB2UQTYIhL9+mk/PRdojSwXEaPTIHC9elpdQlD5u vNtC8o4fmv732A2GOQbVhEGK6lbcpniU2KlC+hbx7Eb/e6tHNrsIcs74RQSaf57e kqizSS11lF4GMG6qo2sza1NGF1BYaL0CsP0HKmxI/l88CYChN3FgT3kFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2WM8D1Rg0Gk7SvpcPuAplRyK/gMB8GA1UdIwQY MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa5WiExJ Q6/c01vQj+UAOFQdH5Wj/I9xGxkUvkQ1C3icOIQM8LP/ZmhqI+J6K9k6zJbjZ17p d1HSG7VHLLq8/ryiVKwHrnWDpqgPBrLCAKjgqg6VbRNSi12soMdT8EaTQtkvlfxs pCW2PD7Ye/SnxNY04GDL6E1eAUr6tlhiTpZy7Qs5P+MDsq9NwDGWA2jZMdE+kBS9 Uz9Q1CjkKF+lyR1psFqpiCx9yBqk3A4sanrGs76Sy1VoZE0T2MD/UoxW72NahdGQ CPJtYqqFPvEgMO2yI2zb2u4wC06sXNWMZtufgORcOqxEboyZgeAU0PGFVcVodOPK R3Mk39z/Lmb4GQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:24 2025 by rpki-client