This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json) Hash identifier: gtwiij2mS0wXnRD+fy47l45IpOA6j71iGIVgWLqWgYc= Subject key identifier: B2:CC:8B:1D:83:E2:D9:5B:06:0A:26:5B:2A:22:59:F2:CD:AC:51:48 Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Certificate serial: 019B68E9CFA056374F418EB3EDB54140BDD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft Manifest number: 0DA2 Signing time: Mon 29 Dec 2025 07:01:51 +0000 Manifest this update: Mon 29 Dec 2025 07:01:51 +0000 Manifest next update: Tue 30 Dec 2025 07:01:51 +0000 Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=) 2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: 3gQWYkRTp9YhXhe2OpV6z/WmQk0oe6koCyIEu6MUJlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:cf:a0:56:37:4f:41:8e:b3:ed:b5:41:40:bd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Validity Not Before: Dec 29 07:01:51 2025 GMT Not After : Dec 30 07:01:51 2025 GMT Subject: CN=b2cc8b1d83e2d95b060a265b2a2259f2cdac5148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:cd:fe:32:fa:50:ef:75:f2:b4:58:e8:63: 61:ac:85:43:6a:1a:20:93:60:c5:71:6f:c6:39:4e: 0e:5d:19:e9:af:e0:9a:30:da:28:ba:62:e3:32:d1: 33:24:9f:95:97:a7:15:4f:f9:60:a5:0b:54:7b:b4: b6:7b:79:5f:af:3a:41:17:77:5d:1d:8e:fe:47:2e: 3f:6a:57:0a:b0:94:30:00:ac:97:59:82:cc:08:fd: 2b:02:76:e0:1e:bd:af:ae:15:f1:71:c3:bb:b8:c0: 74:de:c5:32:c4:a3:a8:63:6c:cd:9d:db:de:97:9b: ca:16:8c:4c:bc:2d:84:5a:8e:84:35:75:e3:2c:67: a3:e1:00:23:4f:b0:ae:67:ef:4d:a0:f8:fa:9a:c7: 62:f7:54:5e:4c:86:b0:36:65:a4:95:d0:c6:eb:83: 35:b4:f6:ce:56:a1:a0:3b:6a:32:e3:0f:04:46:f6: b9:fd:00:2d:5c:d7:5f:bb:e7:35:2a:72:45:82:45: 9e:58:5d:63:2f:72:a9:0b:3c:c2:a9:ca:32:f7:9e: 5c:29:1e:ae:8a:3e:83:bc:87:87:6c:38:94:37:ae: 81:aa:fd:b7:37:2c:1e:14:47:1e:08:77:f6:9f:26: e0:85:8e:6a:fc:ef:9c:70:3e:87:69:4f:bf:7d:cc: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:8B:1D:83:E2:D9:5B:06:0A:26:5B:2A:22:59:F2:CD:AC:51:48 X509v3 Authority Key Identifier: keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:38:d7:87:9f:97:85:f0:7c:dd:3b:33:26:76:84:2c:f6: e9:2e:55:5f:0a:7d:c3:ca:51:4d:c7:ac:7b:d5:03:6e:22:a5: 6b:fe:94:bc:5c:17:4f:c8:09:21:24:8a:30:1e:1c:60:dc:cc: 13:82:0a:51:6b:b5:92:99:c7:ac:c4:27:8b:26:3d:67:03:dc: 7d:8a:7d:2f:9e:6c:96:52:5f:be:b4:27:32:1c:7e:f6:3d:b7: f9:83:00:7a:fa:e7:52:8d:0d:39:8b:05:27:de:c1:da:70:d5: c9:b5:e2:61:91:11:73:9b:63:c1:89:97:24:30:74:89:e3:94: be:e3:62:80:2a:0c:f0:ee:cf:6a:f5:73:99:c7:c6:4b:6c:7b: 6c:32:f2:94:07:a3:45:17:df:98:d9:04:d1:d8:9a:e8:2c:89: 91:33:2e:69:ee:28:9b:41:72:b3:d4:42:f1:8b:6c:0b:26:40: 19:91:73:11:1f:58:65:2b:78:e9:28:00:82:3e:d8:63:e0:01: 8d:e7:ad:00:fb:de:72:99:9d:1e:fc:65:b2:5f:84:18:58:c5: d2:2c:fd:d5:e4:d9:eb:f3:6c:52:6d:75:68:59:b6:d1:d6:81: 58:ea:35:21:d0:fd:bd:fa:53:ad:99:51:a3:f7:e0:66:ee:24: 83:30:08:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6c+gVjdPQY6z7bVBQL3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx M2RhNWIwHhcNMjUxMjI5MDcwMTUxWhcNMjUxMjMwMDcwMTUxWjAzMTEwLwYDVQQD EyhiMmNjOGIxZDgzZTJkOTViMDYwYTI2NWIyYTIyNTlmMmNkYWM1MTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56bN/jL6UO918rRY6GNhrIVDahog k2DFcW/GOU4OXRnpr+CaMNooumLjMtEzJJ+Vl6cVT/lgpQtUe7S2e3lfrzpBF3dd HY7+Ry4/alcKsJQwAKyXWYLMCP0rAnbgHr2vrhXxccO7uMB03sUyxKOoY2zNndve l5vKFoxMvC2EWo6ENXXjLGej4QAjT7CuZ+9NoPj6msdi91ReTIawNmWkldDG64M1 tPbOVqGgO2oy4w8ERva5/QAtXNdfu+c1KnJFgkWeWF1jL3KpCzzCqcoy955cKR6u ij6DvIeHbDiUN66Bqv23NyweFEceCHf2nybghY5q/O+ccD6HaU+/fcxMpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLMix2D4tlbBgomWyoiWfLNrFFIMB8GA1UdIwQY MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0 LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1g414ef l4XwfN07MyZ2hCz26S5VXwp9w8pRTcese9UDbiKla/6UvFwXT8gJISSKMB4cYNzM E4IKUWu1kpnHrMQniyY9ZwPcfYp9L55sllJfvrQnMhx+9j23+YMAevrnUo0NOYsF J97B2nDVybXiYZERc5tjwYmXJDB0ieOUvuNigCoM8O7PavVzmcfGS2x7bDLylAej RRffmNkE0dia6CyJkTMuae4om0Fys9RC8YtsCyZAGZFzER9YZSt46SgAgj7YY+AB jeetAPvecpmdHvxlsl+EGFjF0iz91eTZ6/NsUm11aFm20daBWOo1IdD9vfpTrZlR o/fgZu4kgzAIQg== -----END CERTIFICATE-----Generated at Mon Dec 29 12:05:01 2025 by rpki-client