This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json) Hash identifier: 8iJlB2cF1F5gsFHUYeGNwLQMOO8Md0Ca0bZyRp1h5fA= Subject key identifier: D8:12:2B:C4:87:C7:48:80:B2:1D:D8:71:B8:0C:64:45:19:0E:A0:B9 Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b Certificate serial: 019AF2402FA4C1FB6E1B21E6CDA0A82ADB81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft Manifest number: 0ECA Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: xyrvw+374CFWVLZfPpVGM1GBtDjprklMGg5EFvbiaYY=) 2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2f:a4:c1:fb:6e:1b:21:e6:cd:a0:a8:2a:db:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=d8122bc487c74880b21dd871b80c6445190ea0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:54:97:d4:34:16:87:4c:ac:93:b0:d8:7a: cb:fd:22:65:bb:54:0f:0c:59:09:aa:59:ea:01:32: d1:d5:ad:37:a0:67:9d:da:41:08:98:cb:21:fa:53: 75:0a:82:6e:1a:bb:18:3d:64:63:ef:fa:5e:4c:40: 1c:56:b7:ab:0a:b7:63:ec:bc:5a:57:60:5b:12:b4: e6:6e:e4:2b:e6:4e:ba:e4:ec:e1:b5:6c:cc:c8:71: 4a:19:ff:1b:63:33:48:e9:b5:f5:8d:e0:e7:c3:29: 65:48:14:80:44:e4:a7:be:ca:a4:f3:5d:c4:a7:de: 8c:b9:86:ca:ac:10:98:92:ec:3e:ba:77:70:1a:49: 57:08:2b:0f:93:16:06:47:31:a7:0a:0a:2b:da:1b: 4a:83:ff:93:f0:29:ce:a9:18:a2:f7:b7:d4:d7:b7: 99:4e:a1:c1:b7:01:e1:97:53:e1:04:61:c2:f5:8e: e7:fa:cb:38:be:2f:10:85:de:63:76:3f:9c:bb:71: b6:6a:90:f7:56:e0:3f:2c:ce:37:d2:19:f6:62:0a: a8:93:64:3a:1e:b4:6d:bf:d1:48:eb:f9:83:d5:08: 52:18:19:f9:93:e1:ef:45:55:d1:41:a4:94:43:12: 7f:42:a0:b4:02:10:31:a4:4b:4f:9a:8a:6d:6c:0d: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:2B:C4:87:C7:48:80:B2:1D:D8:71:B8:0C:64:45:19:0E:A0:B9 X509v3 Authority Key Identifier: keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b6:ae:a7:93:4e:33:7d:e0:4c:53:96:f9:63:a4:cf:18:2d: 92:f8:0d:5d:31:15:d1:0b:73:86:c6:d9:8a:9a:5f:0d:13:58: ad:2e:2c:ec:98:ae:15:eb:f0:1f:19:6a:60:bd:06:45:be:b6: 1d:24:fe:f9:93:bc:0e:09:39:5f:42:71:bf:57:37:16:e3:11: 29:92:0e:11:95:16:6f:44:ca:70:db:17:ed:88:8e:da:fc:d9: d3:50:4b:46:24:e5:e9:1a:82:a5:d3:08:97:26:8c:e9:9d:e9: 60:1b:2d:ae:49:1c:ef:bf:aa:9d:ce:47:dd:4f:a3:f7:ec:15: 78:0c:ae:d9:27:e1:e7:63:f3:41:e4:3d:58:08:d8:04:2e:b7: ed:96:fe:d4:4b:c3:3d:6e:25:0f:2f:8a:c3:c0:66:eb:26:42: 09:51:55:fa:6e:4c:e9:a2:66:92:a9:4f:ec:ab:72:0e:e6:2f: 59:81:e5:c0:9c:00:97:46:e3:7e:80:c6:86:35:5b:b6:2c:12: 81:c0:ed:df:38:1a:74:0d:fb:b9:36:d7:de:f5:a1:27:a2:bc: cd:b1:ec:1e:3c:35:a2:13:43:86:46:24:31:8c:e5:05:0e:44: c4:58:1f:a8:fa:2a:8e:bf:97:93:6c:ef:a3:cd:b6:d5:ca:fd: c9:10:92:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQC+kwftuGyHmzaCoKtuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTMxYTE0OWMyZTZhZTlhY2M3MjljZjdhYzE3MDZkZTNk ZTczOWIwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EyhkODEyMmJjNDg3Yzc0ODgwYjIxZGQ4NzFiODBjNjQ0NTE5MGVhMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAdUl9Q0FodMrJOw2HrL/SJlu1QP DFkJqlnqATLR1a03oGed2kEImMsh+lN1CoJuGrsYPWRj7/peTEAcVrerCrdj7Lxa V2BbErTmbuQr5k665OzhtWzMyHFKGf8bYzNI6bX1jeDnwyllSBSAROSnvsqk813E p96MuYbKrBCYkuw+undwGklXCCsPkxYGRzGnCgor2htKg/+T8CnOqRii97fU17eZ TqHBtwHhl1PhBGHC9Y7n+ss4vi8Qhd5jdj+cu3G2apD3VuA/LM430hn2Ygqok2Q6 HrRtv9FI6/mD1QhSGBn5k+HvRVXRQaSUQxJ/QqC0AhAxpEtPmoptbA2cpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgSK8SHx0iAsh3YcbgMZEUZDqC5MB8GA1UdIwQY MBaAFNDjGhScLmrprMcpz3rBcG3j3nObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNDZlMmItZGU0ZC00YjZmLThkZDct Njk2MjljNTAxOTQzLzEvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kNDZlMmItZGU0ZC00YjZmLThkZDctNjk2MjljNTAxOTQz LzEvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbaup5NO M33gTFOW+WOkzxgtkvgNXTEV0QtzhsbZippfDRNYrS4s7JiuFevwHxlqYL0GRb62 HST++ZO8Dgk5X0Jxv1c3FuMRKZIOEZUWb0TKcNsX7YiO2vzZ01BLRiTl6RqCpdMI lyaM6Z3pYBstrkkc77+qnc5H3U+j9+wVeAyu2Sfh52PzQeQ9WAjYBC637Zb+1EvD PW4lDy+Kw8Bm6yZCCVFV+m5M6aJmkqlP7KtyDuYvWYHlwJwAl0bjfoDGhjVbtiwS gcDt3zgadA37uTbX3vWhJ6K8zbHsHjw1ohNDhkYkMYzlBQ5ExFgfqPoqjr+Xk2zv o8221cr9yRCS9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:08 2025 by rpki-client