This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json) Hash identifier: 9nAcJSFB8+siVESNOJNCiPikukzNu6aqCeQIh6vZEFc= Subject key identifier: 22:FA:C2:77:B1:C0:DF:78:08:44:A5:BF:50:94:78:D4:F2:2E:96:8E Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Certificate serial: 019AF509D649C39E94C8B5758929D98658C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft Manifest number: 0C86 Signing time: Sat 06 Dec 2025 19:00:53 +0000 Manifest this update: Sat 06 Dec 2025 19:00:53 +0000 Manifest next update: Sun 07 Dec 2025 19:00:53 +0000 Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: RBBCuqE1aGjverE68t+b7ID5YrHaJ22UsfRM6rgITz8=) 2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=) 3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d6:49:c3:9e:94:c8:b5:75:89:29:d9:86:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Validity Not Before: Dec 6 19:00:53 2025 GMT Not After : Dec 7 19:00:53 2025 GMT Subject: CN=22fac277b1c0df780844a5bf509478d4f22e968e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:78:33:15:e3:7a:d1:77:b4:41:8b:cf:60: a1:cc:0f:3b:99:61:1d:38:39:1e:df:72:75:9b:18: 38:8a:9d:9d:38:6f:23:42:af:fa:c6:57:98:d8:dd: af:97:7b:75:6f:07:7b:c2:fa:ab:12:f7:e6:af:c0: 93:3d:e3:f5:01:e1:22:ad:07:cb:5e:7f:12:03:55: 0f:b1:ef:2f:29:6b:d5:d1:6e:32:4d:7e:51:03:94: 6b:bf:6a:db:4d:ce:2e:2f:7e:db:6d:63:14:6f:93: bb:70:0b:27:61:e0:3c:5f:68:5a:29:1b:45:1b:ad: 9d:60:c7:fd:df:63:5d:34:d4:44:e5:ba:8f:60:50: 20:28:31:aa:85:20:f8:63:ab:fd:b5:22:7d:7c:eb: a6:86:96:99:4c:d6:6a:6a:03:31:a9:d5:2e:1b:09: 53:45:d5:c9:7c:66:09:e8:63:89:6f:99:ce:98:25: 71:79:72:9d:5c:35:9c:fb:73:05:94:f6:23:61:12: 74:70:80:c1:19:1f:7d:67:dd:43:07:4a:a9:09:65: e7:45:3c:0d:3f:9e:30:72:6e:c2:e4:30:c1:e3:60: f6:ae:96:2d:12:4d:2f:40:af:82:0d:0a:60:ab:f2: ea:b6:9b:71:0f:c6:f8:aa:14:bd:57:45:9f:85:7c: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FA:C2:77:B1:C0:DF:78:08:44:A5:BF:50:94:78:D4:F2:2E:96:8E X509v3 Authority Key Identifier: keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:dc:53:ad:a7:f0:25:62:96:f2:1c:95:92:5c:60:ae:14: da:82:6c:7f:79:26:16:6b:a7:2c:cf:6a:6d:7c:4b:a2:e0:7a: c1:4b:85:61:fd:a1:70:ba:46:59:b2:8c:d3:2f:ca:36:ba:7c: 5a:f6:48:b8:37:9e:cf:41:09:b6:66:fd:cd:23:ca:04:ff:ae: 9d:9e:83:c4:3c:9a:12:24:ec:87:af:43:1f:90:14:03:23:f4: 67:00:cc:92:05:9d:76:e8:67:cc:11:f7:30:f2:0e:e5:02:68: bb:bf:a8:34:fb:2f:7e:23:7f:03:66:3f:b4:ec:55:9f:9e:a7: c5:3a:93:a9:c9:e5:6c:08:5d:de:8d:0c:57:bc:32:5c:96:c3: 65:f0:2c:ab:9a:2a:8f:2c:79:d0:8d:11:cf:8e:b2:1a:54:4b: 80:bb:93:31:1e:c6:bd:75:a9:62:fe:d2:31:e7:cf:9e:1c:30: 00:e4:c5:07:ad:d9:df:4c:82:e2:42:87:3f:01:37:6e:a5:9e: c2:63:ea:17:6e:7e:86:ff:dd:77:60:16:c4:47:81:d1:c0:31: 95:9a:ea:8e:3d:5a:54:11:1e:7b:b4:5d:ed:66:72:85:5b:66: 6a:43:79:21:cf:e5:ce:54:dc:38:a1:76:79:b1:1c:1c:cd:57: b0:18:eb:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdZJw56UyLV1iSnZhljAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2 ZGJmMDQwHhcNMjUxMjA2MTkwMDUzWhcNMjUxMjA3MTkwMDUzWjAzMTEwLwYDVQQD EygyMmZhYzI3N2IxYzBkZjc4MDg0NGE1YmY1MDk0NzhkNGYyMmU5NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrl4MxXjetF3tEGLz2ChzA87mWEd ODke33J1mxg4ip2dOG8jQq/6xleY2N2vl3t1bwd7wvqrEvfmr8CTPeP1AeEirQfL Xn8SA1UPse8vKWvV0W4yTX5RA5Rrv2rbTc4uL37bbWMUb5O7cAsnYeA8X2haKRtF G62dYMf932NdNNRE5bqPYFAgKDGqhSD4Y6v9tSJ9fOumhpaZTNZqagMxqdUuGwlT RdXJfGYJ6GOJb5nOmCVxeXKdXDWc+3MFlPYjYRJ0cIDBGR99Z91DB0qpCWXnRTwN P54wcm7C5DDB42D2rpYtEk0vQK+CDQpgq/LqtptxD8b4qhS9V0WfhXyT2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL6wnexwN94CESlv1CUeNTyLpaOMB8GA1UdIwQY MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4bcU62n 8CVilvIclZJcYK4U2oJsf3kmFmunLM9qbXxLouB6wUuFYf2hcLpGWbKM0y/KNrp8 WvZIuDeez0EJtmb9zSPKBP+unZ6DxDyaEiTsh69DH5AUAyP0ZwDMkgWdduhnzBH3 MPIO5QJou7+oNPsvfiN/A2Y/tOxVn56nxTqTqcnlbAhd3o0MV7wyXJbDZfAsq5oq jyx50I0Rz46yGlRLgLuTMR7GvXWpYv7SMefPnhwwAOTFB63Z30yC4kKHPwE3bqWe wmPqF25+hv/dd2AWxEeB0cAxlZrqjj1aVBEee7Rd7WZyhVtmakN5Ic/lzlTcOKF2 ebEcHM1XsBjrMA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:51 2025 by rpki-client