This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json) Hash identifier: vIV60nUHpaTQs+vECcMdRLMR+5EPRVQlfkllhvWz7RI= Subject key identifier: AC:9C:7F:98:9A:B2:B0:8A:D8:B4:61:34:47:9E:B9:6E:60:AD:18:51 Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Certificate serial: 019B416D57D78BB8678B05FB314A1D6BE1BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft Manifest number: 0E7E Signing time: Sun 21 Dec 2025 15:00:43 +0000 Manifest this update: Sun 21 Dec 2025 15:00:43 +0000 Manifest next update: Mon 22 Dec 2025 15:00:43 +0000 Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: Zact4qxEUZ6af7fEsgblbyA87Q6we/NTp3GwtJ6lbG8=) 2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:57:d7:8b:b8:67:8b:05:fb:31:4a:1d:6b:e1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Validity Not Before: Dec 21 15:00:43 2025 GMT Not After : Dec 22 15:00:43 2025 GMT Subject: CN=ac9c7f989ab2b08ad8b46134479eb96e60ad1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:68:02:17:bb:bd:18:a1:f7:b3:8b:f0:a4: c9:70:27:29:ac:ac:49:99:a9:32:f4:89:01:03:da: 93:65:1e:14:a8:d6:c5:75:3e:9b:39:c5:3c:5e:8d: c6:70:c5:12:a4:a2:5a:cf:08:a6:15:40:71:c6:24: d9:24:2d:ee:5f:a3:e5:ff:f8:19:8a:12:7a:02:d4: 6e:15:69:e5:ab:87:8d:de:f8:16:3e:a8:4e:36:94: a3:56:fe:cb:e3:53:b8:a5:b3:b5:0b:d1:22:a6:bb: 97:d2:d2:25:55:94:97:11:90:05:ec:73:d4:56:4b: b3:f4:56:91:d0:a5:2f:c4:fb:da:5a:60:4c:48:85: 02:32:4e:7c:9d:69:4f:ed:b9:76:90:b3:10:3b:72: 46:c6:26:15:0b:fd:fc:ab:8d:b2:97:b4:55:c2:7f: 0c:9c:49:61:8f:18:af:a1:ce:d4:ba:5c:39:6a:35: c8:ef:35:20:72:63:4d:fe:98:fe:f6:75:b6:33:b2: 3a:4c:95:82:c4:67:8e:8e:cd:db:ed:a0:57:2b:99: bc:19:a8:5d:c1:ff:c5:fd:29:33:de:f1:1f:b5:df: 29:a6:d7:97:88:41:8f:97:e6:a9:7a:c0:fd:fd:79: cd:6d:53:45:6b:f3:f3:7b:ba:94:73:d0:71:94:bb: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:7F:98:9A:B2:B0:8A:D8:B4:61:34:47:9E:B9:6E:60:AD:18:51 X509v3 Authority Key Identifier: keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:71:87:87:59:d5:f0:7d:03:1c:22:5a:33:e2:74:63:5a:11: 0b:a1:f5:87:fb:d6:11:03:97:0d:83:c6:d1:54:e2:88:05:87: 27:b3:9d:b7:e9:0e:b5:78:7a:a6:6a:9d:48:46:e6:c4:2d:5e: b6:85:9c:22:6e:da:4b:94:2a:e1:18:52:dc:19:50:ba:11:aa: 76:80:8d:9a:52:b9:80:fc:8a:34:eb:f2:47:e2:ab:9e:55:d5: 20:ed:40:32:f0:64:b9:29:1a:70:33:d0:80:52:82:c9:8c:d1: 66:48:6f:ef:3d:ff:86:d1:e0:90:f8:1e:9e:0a:c3:48:21:38: d6:3c:07:75:6d:79:37:de:c5:7d:fc:ed:b3:dc:3d:7a:87:0c: dd:8f:e8:e3:69:4c:8d:6b:48:de:ce:8a:1f:f9:bd:e1:fc:79: 46:89:78:19:a8:d9:d2:81:2d:c6:7d:ea:bc:e5:ba:a8:69:84: 97:a1:fd:71:8f:1b:ab:3f:01:28:01:28:a6:63:c9:77:b1:5d: aa:f9:4b:ea:f7:bf:47:46:ae:dd:34:5d:c4:bf:13:b3:89:57: 98:52:1a:34:e1:28:a6:c9:82:f9:83:2e:86:07:4e:80:0b:56: 33:f1:39:d6:7b:eb:37:b4:99:24:61:fb:38:ec:25:2e:31:9e: 53:a1:15:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbVfXi7hniwX7MUoda+G9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3 Y2JkYmYwHhcNMjUxMjIxMTUwMDQzWhcNMjUxMjIyMTUwMDQzWjAzMTEwLwYDVQQD EyhhYzljN2Y5ODlhYjJiMDhhZDhiNDYxMzQ0NzllYjk2ZTYwYWQxODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pBoAhe7vRih97OL8KTJcCcprKxJ maky9IkBA9qTZR4UqNbFdT6bOcU8Xo3GcMUSpKJazwimFUBxxiTZJC3uX6Pl//gZ ihJ6AtRuFWnlq4eN3vgWPqhONpSjVv7L41O4pbO1C9EipruX0tIlVZSXEZAF7HPU Vkuz9FaR0KUvxPvaWmBMSIUCMk58nWlP7bl2kLMQO3JGxiYVC/38q42yl7RVwn8M nElhjxivoc7Uulw5ajXI7zUgcmNN/pj+9nW2M7I6TJWCxGeOjs3b7aBXK5m8Gahd wf/F/Skz3vEftd8ppteXiEGPl+apesD9/XnNbVNFa/Pze7qUc9BxlLuDUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKycf5iasrCK2LRhNEeeuW5grRhRMB8GA1UdIwQY MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHGHh1nV 8H0DHCJaM+J0Y1oRC6H1h/vWEQOXDYPG0VTiiAWHJ7Odt+kOtXh6pmqdSEbmxC1e toWcIm7aS5Qq4RhS3BlQuhGqdoCNmlK5gPyKNOvyR+KrnlXVIO1AMvBkuSkacDPQ gFKCyYzRZkhv7z3/htHgkPgengrDSCE41jwHdW15N97Fffzts9w9eocM3Y/o42lM jWtI3s6KH/m94fx5Rol4GajZ0oEtxn3qvOW6qGmEl6H9cY8bqz8BKAEopmPJd7Fd qvlL6ve/R0au3TRdxL8Ts4lXmFIaNOEopsmC+YMuhgdOgAtWM/E51nvrN7SZJGH7 OOwlLjGeU6EVlg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:14:48 2025 by rpki-client