This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json) Hash identifier: lPMBDhPEqNWGaUkLjZfD3Cakj+eS77ZbvVdbWEpEGeo= Subject key identifier: 9E:5B:8B:B8:7E:89:BF:3B:DB:FC:F8:B3:B9:B2:53:AC:EA:8E:C8:A3 Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Certificate serial: 019AF465506D608762076D34461E5F4594F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 16:01:11 +0000 Manifest this update: Sat 06 Dec 2025 16:01:11 +0000 Manifest next update: Sun 07 Dec 2025 16:01:11 +0000 Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: GpdateWc/3HjQ6VmJPD4iIYxrZIr6Nrgak4fPBVy99M=) 2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:50:6d:60:87:62:07:6d:34:46:1e:5f:45:94:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Validity Not Before: Dec 6 16:01:11 2025 GMT Not After : Dec 7 16:01:11 2025 GMT Subject: CN=9e5b8bb87e89bf3bdbfcf8b3b9b253acea8ec8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:39:69:fc:14:d8:f5:11:da:a4:6d:5d:45: 2e:39:d5:66:d1:bc:55:40:09:11:44:84:d9:aa:0d: a2:e6:d4:ce:4e:5e:ea:ab:28:79:cb:06:88:bf:50: e2:9c:a3:87:41:43:51:17:01:f8:cc:aa:4e:48:ca: d3:5a:89:6d:18:fc:41:95:3d:c3:10:ea:2d:b3:35: 0d:96:15:f0:9f:b0:80:20:1f:04:87:38:cf:8b:17: d2:02:9f:c2:f1:6b:a1:e7:af:7c:41:3d:89:0c:be: 72:00:ab:f7:ec:b0:8c:a2:2d:1f:7e:2a:fa:27:cc: fa:f5:e5:50:27:e8:7b:50:5b:4a:21:3e:6c:0e:df: 0a:b5:d1:bb:f7:1b:e4:27:24:1f:cb:a7:cb:cb:79: b8:1e:23:d9:cb:bb:01:99:4b:9b:c3:66:de:2c:91: 85:7e:f2:ea:69:f1:76:86:e9:86:29:4d:e3:6a:0d: 94:5f:14:9c:69:e0:90:28:6c:ad:53:e3:dc:f6:a3: 96:90:cd:2a:ba:7d:cf:88:9e:84:d7:2d:15:05:fc: 18:86:5c:a9:52:3f:d2:fb:bc:e6:8d:8e:72:49:dd: e4:61:83:4c:19:17:11:b9:73:3e:30:de:40:f6:ed: 12:a6:07:1c:31:13:71:f8:29:81:69:3a:54:cd:8b: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5B:8B:B8:7E:89:BF:3B:DB:FC:F8:B3:B9:B2:53:AC:EA:8E:C8:A3 X509v3 Authority Key Identifier: keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:4b:2f:60:c2:50:61:ad:80:11:66:98:03:5f:e2:2f:a7: 24:d5:2b:c8:bb:3d:0e:a7:4c:e6:11:50:aa:c6:fc:21:b1:f3: 2c:a0:5e:94:4a:e7:d1:8a:fe:f4:c3:36:38:a3:b8:37:f6:3d: ce:57:8e:d6:a1:6a:09:28:ac:a9:14:c4:88:df:13:05:2f:e6: 00:77:19:bc:98:5b:8a:76:31:ad:6a:e0:54:e6:d6:db:8f:d1: d9:e0:b0:06:0d:1c:44:d1:d9:ee:4d:ef:84:0b:5d:0f:88:c3: 5f:de:8c:6d:a8:da:96:1b:ab:b3:c5:a9:80:96:3f:28:c8:65: 7a:57:c4:15:02:a4:5b:40:e9:07:d4:03:ec:9f:51:67:6c:63: 13:16:3a:da:cf:e1:57:74:57:43:34:c6:31:88:4e:ae:00:84: e3:74:b0:ad:ef:b6:94:08:95:8d:67:48:54:ff:40:0c:f2:ab: 96:ad:1f:00:d8:40:d0:c9:e0:7e:9e:3d:c4:f2:c8:d6:df:7a: 3e:39:57:68:4e:36:cb:69:53:16:48:f5:8f:0b:0b:64:dd:8b: bf:95:a2:40:81:57:dd:1b:56:0e:9b:61:41:37:47:64:16:e0: 99:c3:bc:ac:78:a8:12:7e:83:61:e2:ee:68:c2:dc:9a:0e:0e: dd:f4:2b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVBtYIdiB200Rh5fRZT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll ZTIxNTQwHhcNMjUxMjA2MTYwMTExWhcNMjUxMjA3MTYwMTExWjAzMTEwLwYDVQQD Eyg5ZTViOGJiODdlODliZjNiZGJmY2Y4YjNiOWIyNTNhY2VhOGVjOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuM5afwU2PUR2qRtXUUuOdVm0bxV QAkRRITZqg2i5tTOTl7qqyh5ywaIv1DinKOHQUNRFwH4zKpOSMrTWoltGPxBlT3D EOotszUNlhXwn7CAIB8EhzjPixfSAp/C8Wuh5698QT2JDL5yAKv37LCMoi0ffir6 J8z69eVQJ+h7UFtKIT5sDt8KtdG79xvkJyQfy6fLy3m4HiPZy7sBmUubw2beLJGF fvLqafF2humGKU3jag2UXxScaeCQKGytU+Pc9qOWkM0qun3PiJ6E1y0VBfwYhlyp Uj/S+7zmjY5ySd3kYYNMGRcRuXM+MN5A9u0SpgccMRNx+CmBaTpUzYvDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5bi7h+ib872/z4s7myU6zqjsijMB8GA1UdIwQY MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa19LL2DC UGGtgBFmmANf4i+nJNUryLs9DqdM5hFQqsb8IbHzLKBelErn0Yr+9MM2OKO4N/Y9 zleO1qFqCSisqRTEiN8TBS/mAHcZvJhbinYxrWrgVObW24/R2eCwBg0cRNHZ7k3v hAtdD4jDX96Mbajalhurs8WpgJY/KMhlelfEFQKkW0DpB9QD7J9RZ2xjExY62s/h V3RXQzTGMYhOrgCE43Swre+2lAiVjWdIVP9ADPKrlq0fANhA0Mngfp49xPLI1t96 PjlXaE42y2lTFkj1jwsLZN2Lv5WiQIFX3RtWDpthQTdHZBbgmcO8rHioEn6DYeLu aMLcmg4O3fQrzw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:46 2025 by rpki-client