This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json) Hash identifier: 1BQt+LE5PsI7NC06y7B3VYpeHmAKTLzDFS8N40amSnY= Subject key identifier: F4:2A:A4:E3:0B:F5:7A:03:0B:E8:0F:62:40:D2:46:6D:8D:CB:18:67 Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Certificate serial: 019AF61CED1D1326A4DBDAA9DE63C7405784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft Manifest number: 0E76 Signing time: Sun 07 Dec 2025 00:01:21 +0000 Manifest this update: Sun 07 Dec 2025 00:01:21 +0000 Manifest next update: Mon 08 Dec 2025 00:01:21 +0000 Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: P8TVkXUcDqfUE1D3B5YsfGslS20IlrXtFhawdCd4EyA=) 2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:ed:1d:13:26:a4:db:da:a9:de:63:c7:40:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Validity Not Before: Dec 7 00:01:21 2025 GMT Not After : Dec 8 00:01:21 2025 GMT Subject: CN=f42aa4e30bf57a030be80f6240d2466d8dcb1867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:60:3e:b5:28:0e:b1:24:a7:67:56:df:57: 13:1f:ec:81:5a:55:a7:17:d8:e0:58:8e:9c:67:bf: e9:ab:37:e9:00:a7:12:4b:a6:ce:a2:0c:e2:ff:c6: 1f:ed:8d:b6:d0:17:b1:a5:eb:8e:8c:4e:57:74:d8: b6:af:d7:cf:5b:98:c9:71:1b:a2:d3:a6:4a:c6:0c: 7e:31:04:ce:08:ba:a7:42:c9:ae:9c:50:a7:db:08: b6:ce:61:95:55:6f:b1:ab:1a:d3:c7:3e:26:81:93: df:de:a0:b0:18:a3:ad:a8:86:ca:44:89:fd:44:17: 45:ec:95:62:74:51:18:ed:d4:d3:df:09:4c:d3:d4: 77:73:a2:65:67:74:cd:b9:46:46:57:3f:19:f7:b6: c8:21:56:37:61:ce:ea:6d:0d:b8:a1:f7:78:4a:b9: 95:7f:18:e4:02:aa:65:5c:38:27:4d:85:a0:7b:39: 1c:e5:bf:26:9a:29:d6:48:63:c1:ea:92:5e:d8:f8: 58:83:67:2c:f1:5d:04:78:c9:38:a2:03:8b:9a:d4: 11:6a:d4:c3:c4:f2:2e:42:19:1b:49:71:8e:cd:58: 6a:16:dc:0e:ee:f2:63:4e:1c:8a:b2:d0:24:e5:1e: 3c:9d:d8:67:65:83:9c:16:b8:2d:df:b5:24:d3:a0: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:A4:E3:0B:F5:7A:03:0B:E8:0F:62:40:D2:46:6D:8D:CB:18:67 X509v3 Authority Key Identifier: keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e2:0f:11:38:d4:12:87:77:5d:81:2b:e4:93:18:1f:1c:c3: af:ed:e9:45:ba:96:9f:ad:51:cb:40:78:a2:66:02:c3:d0:88: 50:bc:11:27:15:ec:f2:05:2a:2d:a8:15:58:4e:b9:9f:e0:b0: 6f:41:4f:33:e6:55:a9:97:93:d7:f5:c4:d5:14:a7:06:77:e9: dc:0f:d1:8f:e4:bd:bc:1c:12:f6:e8:77:c1:f2:62:e5:4d:89: db:d3:75:54:11:ca:29:4f:68:1b:64:c5:4f:e0:e0:9b:58:2b: 8e:13:9a:cb:e0:41:bd:7a:c3:95:01:77:d5:a0:f3:07:25:74: c4:21:89:3b:db:aa:24:dc:ce:15:da:80:4d:aa:fd:ec:d8:20: 5e:ae:58:2a:b5:3f:d8:e6:73:46:67:0d:08:c0:ba:31:d1:f0: 3e:f2:a1:df:91:f1:a5:7e:5e:12:cf:92:c4:04:38:b7:c8:a2: 0b:9f:84:fb:36:81:f4:c0:e1:a6:27:b8:53:ff:a3:5f:64:e1: 1d:6a:6c:e4:d9:1b:eb:c1:36:66:f5:97:7d:5a:76:32:9c:a0: e0:4d:a8:1e:77:f7:f7:4a:0c:3c:d9:e5:71:07:ee:22:82:71: 13:cd:e4:98:71:35:99:85:61:ba:d3:fa:2f:53:a9:12:02:8d: b8:81:05:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HO0dEyak29qp3mPHQFeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw MGRkZjUwHhcNMjUxMjA3MDAwMTIxWhcNMjUxMjA4MDAwMTIxWjAzMTEwLwYDVQQD EyhmNDJhYTRlMzBiZjU3YTAzMGJlODBmNjI0MGQyNDY2ZDhkY2IxODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDlgPrUoDrEkp2dW31cTH+yBWlWn F9jgWI6cZ7/pqzfpAKcSS6bOogzi/8Yf7Y220BexpeuOjE5XdNi2r9fPW5jJcRui 06ZKxgx+MQTOCLqnQsmunFCn2wi2zmGVVW+xqxrTxz4mgZPf3qCwGKOtqIbKRIn9 RBdF7JVidFEY7dTT3wlM09R3c6JlZ3TNuUZGVz8Z97bIIVY3Yc7qbQ24ofd4SrmV fxjkAqplXDgnTYWgezkc5b8mminWSGPB6pJe2PhYg2cs8V0EeMk4ogOLmtQRatTD xPIuQhkbSXGOzVhqFtwO7vJjThyKstAk5R48ndhnZYOcFrgt37Uk06CZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQqpOML9XoDC+gPYkDSRm2NyxhnMB8GA1UdIwQY MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuIPETjU Eod3XYEr5JMYHxzDr+3pRbqWn61Ry0B4omYCw9CIULwRJxXs8gUqLagVWE65n+Cw b0FPM+ZVqZeT1/XE1RSnBnfp3A/Rj+S9vBwS9uh3wfJi5U2J29N1VBHKKU9oG2TF T+Dgm1grjhOay+BBvXrDlQF31aDzByV0xCGJO9uqJNzOFdqATar97NggXq5YKrU/ 2OZzRmcNCMC6MdHwPvKh35HxpX5eEs+SxAQ4t8iiC5+E+zaB9MDhpie4U/+jX2Th HWps5Nkb68E2ZvWXfVp2Mpyg4E2oHnf390oMPNnlcQfuIoJxE83kmHE1mYVhutP6 L1OpEgKNuIEFSA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:54 2025 by rpki-client