This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json) Hash identifier: tLYXq7OqjxMsyzxjNQGBHdTo+txzH7IpvSEKeYL3FJ0= Subject key identifier: E4:0A:9D:A6:D6:29:59:A9:F1:6A:CC:C9:28:0B:0B:36:63:86:C7:E3 Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b Certificate serial: 019B443909F41E9C9801F814390419C0B640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft Manifest number: 1755 Signing time: Mon 22 Dec 2025 04:02:27 +0000 Manifest this update: Mon 22 Dec 2025 04:02:27 +0000 Manifest next update: Tue 23 Dec 2025 04:02:27 +0000 Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: aYbCSyTAynq1aV2EepVj6rlrAJw7dlwHgR7vAT1DVzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:09:f4:1e:9c:98:01:f8:14:39:04:19:c0:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b Validity Not Before: Dec 22 04:02:27 2025 GMT Not After : Dec 23 04:02:27 2025 GMT Subject: CN=e40a9da6d62959a9f16accc9280b0b366386c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:e0:35:d4:8e:91:f9:e7:4b:8e:1f:5d:58: 7d:05:dc:90:86:ed:60:20:30:d1:01:67:ee:f4:a7: a9:25:c9:91:f5:9c:46:bd:7d:a2:c4:e6:fd:1e:d6: bd:82:4b:57:97:e5:c6:5b:5b:80:93:6b:9d:eb:10: 4a:ac:b8:f5:46:bf:a6:5c:2f:58:bf:7f:a0:ea:c3: c5:5e:97:62:ef:2c:72:2d:a4:a4:9d:03:92:5f:2b: 8c:0d:ac:bc:e4:9d:e5:75:c3:0b:d3:83:18:44:bd: f8:02:6e:68:39:46:dc:5c:84:f2:75:4f:91:14:a2: 27:9a:b5:ab:81:c7:40:e1:ae:c7:fa:5a:da:e7:bf: 86:1c:93:6d:14:a5:ed:65:f4:bc:dc:87:b0:f6:6a: 5c:27:e8:7d:fb:14:d5:90:32:8c:da:ef:bc:77:a7: 78:b1:7d:38:59:88:fd:f2:6d:b0:8a:e3:1b:0b:82: 05:55:c6:7b:4a:db:ce:84:2a:9c:92:e4:ee:f6:7b: 5c:0e:41:38:aa:f6:42:12:ec:05:5b:22:52:71:c6: 29:77:20:57:25:65:2b:9c:f5:0e:de:a8:1d:a3:de: 42:99:01:3f:7d:0b:c9:4d:55:29:83:1d:2d:a9:48: 08:df:01:54:1b:65:9e:57:7e:86:f9:e0:f7:1a:42: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:9D:A6:D6:29:59:A9:F1:6A:CC:C9:28:0B:0B:36:63:86:C7:E3 X509v3 Authority Key Identifier: keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:58:57:1c:9d:71:06:a9:ec:da:05:ba:c1:8b:33:02:7a: 1f:d8:a4:f4:57:f2:e0:45:68:43:d5:4b:65:32:64:5a:9b:0b: d3:26:ec:a3:36:81:5e:ad:e8:ab:07:63:a8:21:af:9d:09:4d: 55:af:e9:ef:ff:45:da:07:24:97:d6:ce:1a:13:a7:94:af:da: 5a:d8:6a:87:e8:36:16:c8:5a:e5:5e:0f:95:5e:84:34:4a:5b: de:11:3e:a4:bb:96:87:2c:eb:c5:cc:22:d9:62:7f:ad:56:99: 8f:98:ab:e3:07:ca:99:ce:31:1c:14:b6:9a:c6:c6:4f:7e:b1: 9c:10:56:14:10:e7:3d:9b:0c:07:ea:fc:c4:27:eb:49:da:bf: 31:29:b7:9c:59:22:3d:83:10:6b:53:6d:c9:a9:86:2f:34:a8: 8c:ee:97:77:dd:ea:f0:62:0d:86:0b:61:d6:71:ae:9d:f7:7a: 0d:8b:78:8c:5f:48:d2:68:85:13:c3:28:f6:d2:40:09:0a:fb: 21:5d:7c:a8:d3:e5:7d:49:83:08:b5:df:da:f2:44:c4:47:06: ef:01:c7:03:57:0c:54:7f:78:c4:f3:b3:d2:d2:ba:bb:90:29: c9:94:58:9c:11:27:eb:de:db:fd:d5:48:d6:75:97:20:00:90: b9:95:a6:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQn0HpyYAfgUOQQZwLZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk ZjJkNmIwHhcNMjUxMjIyMDQwMjI3WhcNMjUxMjIzMDQwMjI3WjAzMTEwLwYDVQQD EyhlNDBhOWRhNmQ2Mjk1OWE5ZjE2YWNjYzkyODBiMGIzNjYzODZjN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsHgNdSOkfnnS44fXVh9BdyQhu1g IDDRAWfu9KepJcmR9ZxGvX2ixOb9Hta9gktXl+XGW1uAk2ud6xBKrLj1Rr+mXC9Y v3+g6sPFXpdi7yxyLaSknQOSXyuMDay85J3ldcML04MYRL34Am5oOUbcXITydU+R FKInmrWrgcdA4a7H+lra57+GHJNtFKXtZfS83Iew9mpcJ+h9+xTVkDKM2u+8d6d4 sX04WYj98m2wiuMbC4IFVcZ7StvOhCqckuTu9ntcDkE4qvZCEuwFWyJSccYpdyBX JWUrnPUO3qgdo95CmQE/fQvJTVUpgx0tqUgI3wFUG2WeV36G+eD3GkKlEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQKnabWKVmp8WrMySgLCzZjhsfjMB8GA1UdIwQY MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav1YVxyd cQap7NoFusGLMwJ6H9ik9Ffy4EVoQ9VLZTJkWpsL0ybsozaBXq3oqwdjqCGvnQlN Va/p7/9F2gckl9bOGhOnlK/aWthqh+g2Fsha5V4PlV6ENEpb3hE+pLuWhyzrxcwi 2WJ/rVaZj5ir4wfKmc4xHBS2msbGT36xnBBWFBDnPZsMB+r8xCfrSdq/MSm3nFki PYMQa1NtyamGLzSojO6Xd93q8GINhgth1nGunfd6DYt4jF9I0miFE8Mo9tJACQr7 IV18qNPlfUmDCLXf2vJExEcG7wHHA1cMVH94xPOz0tK6u5ApyZRYnBEn697b/dVI 1nWXIACQuZWmzQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:36:02 2025 by rpki-client