This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json) Hash identifier: DclerjHguImGIcN7dogfspr3e2NM9HYcUY4aw48JyjM= Subject key identifier: 26:BF:5F:33:BA:DA:81:1A:6D:59:69:2E:4F:4A:FF:B4:6D:B5:0B:A4 Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Certificate serial: 019B4324E5681B5F2C4DD70ABEAD04FCEA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 23:00:49 +0000 Manifest this update: Sun 21 Dec 2025 23:00:49 +0000 Manifest next update: Mon 22 Dec 2025 23:00:49 +0000 Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=) 2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 4+VMOhS0JKfVK10KtKFBhqL6cwHiTNl3N+wjmMYBLxY=) 3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:e5:68:1b:5f:2c:4d:d7:0a:be:ad:04:fc:ea:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Validity Not Before: Dec 21 23:00:49 2025 GMT Not After : Dec 22 23:00:49 2025 GMT Subject: CN=26bf5f33bada811a6d59692e4f4affb46db50ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:a9:15:f5:09:4d:7a:7f:4b:01:27:84:84: b6:40:e6:9e:bc:44:c6:fb:5c:7a:f3:29:26:58:8e: b6:b2:0d:39:19:ee:64:91:e4:42:4a:fe:8f:83:f1: c7:18:35:1d:a0:5c:29:e2:9f:ed:2f:91:ea:38:de: 5c:af:e5:72:87:94:22:56:b7:d8:81:5c:57:d6:b3: 47:b3:ed:39:ea:cd:65:fe:3b:64:46:08:c3:88:0a: 50:27:22:52:e8:51:fa:14:1f:a5:02:2d:51:9e:40: 2b:e1:4a:a4:45:6c:b4:ec:1b:6d:31:b6:9b:ad:2c: 47:0f:8d:12:0d:08:92:63:ce:64:b4:e9:df:ae:c2: 44:51:fa:12:40:10:b7:7e:d0:48:cf:da:2c:28:90: ce:f7:02:d7:ab:a8:34:81:de:5c:b3:ab:85:d2:f0: b2:ce:ef:04:08:f7:17:5c:75:45:fa:bd:e6:72:8e: 16:61:f3:90:db:b6:0c:43:38:f3:80:42:2c:80:dd: 4d:8d:e2:24:92:63:17:45:3c:55:60:6d:d0:2a:78: e8:73:cc:86:c9:51:b6:47:b3:4a:00:df:c3:dc:02: e9:8d:f4:70:0e:bb:cc:f0:af:59:44:f2:0d:89:90: 8e:3e:8c:10:91:4d:2e:0c:8e:ef:59:c8:e7:b1:92: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:5F:33:BA:DA:81:1A:6D:59:69:2E:4F:4A:FF:B4:6D:B5:0B:A4 X509v3 Authority Key Identifier: keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b6:ac:ce:19:57:c9:8b:1d:cc:ac:e1:9b:72:cf:25:9e:0d: ee:a4:26:71:e4:8d:51:fa:c8:6a:5f:aa:38:c6:5e:08:68:a4: ad:9d:d2:ab:89:a5:06:c6:b3:35:9c:da:6a:df:09:3f:9e:5d: 21:32:df:bf:37:14:39:97:33:d3:77:df:d8:96:c7:17:18:40: b1:a2:cc:ea:5e:98:f8:84:06:71:f2:41:28:ec:00:d6:b7:d2: 0a:24:12:75:30:c2:59:45:53:0e:13:b2:5b:e3:34:2a:e7:b4: b2:78:b9:4a:c2:45:19:27:3f:6b:6c:ec:17:c5:80:95:87:9e: b4:89:55:ba:59:ae:a0:24:29:7b:1e:28:3f:b5:36:b3:02:2b: 71:aa:e8:35:f9:66:5e:f0:94:d9:06:ed:1f:54:38:66:6e:4d: f0:de:bb:99:ab:71:a2:13:4c:84:e4:b2:82:51:1f:21:2a:84: ce:27:47:9b:25:82:86:fd:9f:0f:ad:b8:13:8b:e6:5c:6e:e7: d0:0f:4b:ff:66:77:e6:10:e1:a3:70:4e:97:2d:6f:b3:06:b7: 1f:4e:c0:dd:21:b2:d5:8e:32:ef:be:0e:16:4c:4c:c8:61:19: 53:f1:c3:2c:d8:58:20:ce:82:95:9b:ed:48:33:76:63:e7:6c: 90:96:0f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJOVoG18sTdcKvq0E/Op0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi YTE0MjUwHhcNMjUxMjIxMjMwMDQ5WhcNMjUxMjIyMjMwMDQ5WjAzMTEwLwYDVQQD EygyNmJmNWYzM2JhZGE4MTFhNmQ1OTY5MmU0ZjRhZmZiNDZkYjUwYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUWpFfUJTXp/SwEnhIS2QOaevETG +1x68ykmWI62sg05Ge5kkeRCSv6Pg/HHGDUdoFwp4p/tL5HqON5cr+Vyh5QiVrfY gVxX1rNHs+056s1l/jtkRgjDiApQJyJS6FH6FB+lAi1RnkAr4UqkRWy07BttMbab rSxHD40SDQiSY85ktOnfrsJEUfoSQBC3ftBIz9osKJDO9wLXq6g0gd5cs6uF0vCy zu8ECPcXXHVF+r3mco4WYfOQ27YMQzjzgEIsgN1NjeIkkmMXRTxVYG3QKnjoc8yG yVG2R7NKAN/D3ALpjfRwDrvM8K9ZRPINiZCOPowQkU0uDI7vWcjnsZKIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa/XzO62oEabVlpLk9K/7RttQukMB8GA1UdIwQY MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt ZjA0Y2MxYzIzMGNmLzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7aszhlX yYsdzKzhm3LPJZ4N7qQmceSNUfrIal+qOMZeCGikrZ3Sq4mlBsazNZzaat8JP55d ITLfvzcUOZcz03ff2JbHFxhAsaLM6l6Y+IQGcfJBKOwA1rfSCiQSdTDCWUVTDhOy W+M0Kue0sni5SsJFGSc/a2zsF8WAlYeetIlVulmuoCQpex4oP7U2swIrcaroNflm XvCU2QbtH1Q4Zm5N8N67matxohNMhOSyglEfISqEzidHmyWChv2fD624E4vmXG7n 0A9L/2Z35hDho3BOly1vswa3H07A3SGy1Y4y774OFkxMyGEZU/HDLNhYIM6ClZvt SDN2Y+dskJYPKA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:12:05 2025 by rpki-client