This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json) Hash identifier: MkA6bE+HGylJHiKt06L85hUIkFwnBvU3Mj+yadKYG8E= Subject key identifier: 71:FD:3B:41:94:D1:D7:45:AB:77:08:9F:E1:F1:69:47:CA:56:6D:06 Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Certificate serial: 019AF72EDCC4FB41741AB9E8EF9DADDC680D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft Manifest number: 0F53 Signing time: Sun 07 Dec 2025 05:00:34 +0000 Manifest this update: Sun 07 Dec 2025 05:00:34 +0000 Manifest next update: Mon 08 Dec 2025 05:00:34 +0000 Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: m5VZYZBP1qyTtCKOB1LxnWzAEhjQmK/mcg9x1tTNC4g=) 2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:dc:c4:fb:41:74:1a:b9:e8:ef:9d:ad:dc:68:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Validity Not Before: Dec 7 05:00:34 2025 GMT Not After : Dec 8 05:00:34 2025 GMT Subject: CN=71fd3b4194d1d745ab77089fe1f16947ca566d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:7b:3b:75:69:98:13:5c:23:dc:68:21:77: 84:33:a2:be:ef:92:a2:a6:8b:78:68:8e:fe:d8:d4: dc:90:e2:1a:b9:10:f7:19:34:c5:da:14:25:dd:7c: 62:44:bf:7a:bc:24:72:f5:0d:10:ca:a2:d9:a1:6d: f8:cf:a3:be:8d:2b:a2:a5:76:8f:dd:df:78:74:0e: 8e:bb:71:8b:ef:de:79:b6:b6:f4:63:69:58:92:e7: ff:5b:4f:b8:3f:b1:91:9c:5f:5f:1c:7a:9a:e5:81: a8:4d:74:b7:fa:b7:e5:71:2e:20:c2:7e:ca:d7:d2: a9:81:0c:78:7f:6b:c4:7e:4a:73:47:1b:dc:d6:ce: 7e:28:0f:47:c8:dd:1a:ab:43:b3:9b:de:68:7f:31: c9:c7:a4:f8:46:ba:0a:4e:53:ec:36:7e:db:5c:d8: bc:da:b8:32:ee:35:cb:6f:39:04:5c:92:8d:49:39: 86:0c:6a:3b:86:5f:e6:15:b0:47:35:88:1f:ab:65: 50:46:4a:3d:46:05:ee:46:6c:66:fc:78:cc:a7:9d: b5:44:74:1b:a1:14:19:22:36:23:09:02:1a:8c:b8: 0c:15:44:c5:34:74:64:9b:fa:e0:c0:36:05:25:78: 84:8a:fd:2d:38:ad:5f:a6:75:f7:45:65:b8:72:bb: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FD:3B:41:94:D1:D7:45:AB:77:08:9F:E1:F1:69:47:CA:56:6D:06 X509v3 Authority Key Identifier: keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:75:33:0e:d1:9c:d8:d3:32:3c:2c:65:8a:63:60:ca:78: 8e:af:e2:b2:cb:ea:40:85:de:8b:b9:1d:36:1e:58:cd:22:3e: 78:2e:5d:45:07:a0:d9:24:cb:a2:bb:31:2f:85:73:60:08:19: c6:a4:6c:7e:31:d5:44:95:50:84:22:4d:e9:a6:6b:44:f4:6d: 6e:27:2a:0c:e3:f7:cf:1b:3f:c6:3a:a8:c8:29:f9:42:3f:2d: b3:5a:69:a6:71:53:e4:b9:b3:e2:ee:9b:ec:74:cf:65:fd:cd: bc:8b:a1:cf:59:d4:aa:da:78:91:27:d4:d5:1f:81:13:17:30: 99:50:3b:12:45:00:a6:52:90:20:66:e8:40:96:47:93:cc:be: 62:96:45:0d:c1:56:34:20:2e:21:71:ba:49:4a:a4:4b:a2:7f: cc:35:64:22:d6:89:37:a8:fc:aa:24:c4:65:3a:31:e7:20:12: a9:86:50:9d:00:75:dd:aa:00:de:a0:b7:b6:19:22:01:9b:45: 6f:90:d1:d9:87:5a:35:b8:ca:3d:ff:f2:a5:07:6d:35:bb:a1: 40:b4:c8:b3:fc:a3:e9:6d:32:01:f1:3e:8f:84:70:de:9a:03: 7e:04:5c:3e:94:2d:a0:1e:45:58:94:67:2a:94:20:85:fd:2a: 22:91:de:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LtzE+0F0Grno752t3GgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx NTkzNzgwHhcNMjUxMjA3MDUwMDM0WhcNMjUxMjA4MDUwMDM0WjAzMTEwLwYDVQQD Eyg3MWZkM2I0MTk0ZDFkNzQ1YWI3NzA4OWZlMWYxNjk0N2NhNTY2ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtN7O3VpmBNcI9xoIXeEM6K+75Ki pot4aI7+2NTckOIauRD3GTTF2hQl3XxiRL96vCRy9Q0QyqLZoW34z6O+jSuipXaP 3d94dA6Ou3GL7955trb0Y2lYkuf/W0+4P7GRnF9fHHqa5YGoTXS3+rflcS4gwn7K 19KpgQx4f2vEfkpzRxvc1s5+KA9HyN0aq0Ozm95ofzHJx6T4RroKTlPsNn7bXNi8 2rgy7jXLbzkEXJKNSTmGDGo7hl/mFbBHNYgfq2VQRko9RgXuRmxm/HjMp521RHQb oRQZIjYjCQIajLgMFUTFNHRkm/rgwDYFJXiEiv0tOK1fpnX3RWW4crssOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH9O0GU0ddFq3cIn+HxaUfKVm0GMB8GA1UdIwQY MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5 LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfd1Mw7R nNjTMjwsZYpjYMp4jq/issvqQIXei7kdNh5YzSI+eC5dRQeg2STLorsxL4VzYAgZ xqRsfjHVRJVQhCJN6aZrRPRtbicqDOP3zxs/xjqoyCn5Qj8ts1pppnFT5Lmz4u6b 7HTPZf3NvIuhz1nUqtp4kSfU1R+BExcwmVA7EkUAplKQIGboQJZHk8y+YpZFDcFW NCAuIXG6SUqkS6J/zDVkItaJN6j8qiTEZTox5yASqYZQnQB13aoA3qC3thkiAZtF b5DR2YdaNbjKPf/ypQdtNbuhQLTIs/yj6W0yAfE+j4Rw3poDfgRcPpQtoB5FWJRn KpQghf0qIpHeMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 14:42:54 2025 by rpki-client