This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json) Hash identifier: LfSdv88Xdlax+0k2XChxS40Bxhg+jXpXHWXBd8AgyJk= Subject key identifier: 8B:82:38:3D:21:49:5F:1E:D0:E5:86:17:CC:A8:D0:EF:E5:C6:03:9C Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Certificate serial: 019AF16474F7AE8EC77C8CBD4BAA06B7629D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft Manifest number: 087D Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=) 2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: WNaNp4bSXufg5ocfT1PmybX2VfScche2rTgQDo7N7+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:74:f7:ae:8e:c7:7c:8c:bd:4b:aa:06:b7:62:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=8b82383d21495f1ed0e58617cca8d0efe5c6039c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:14:fd:33:a1:2c:7c:62:9a:bd:ff:76:91: 72:d7:19:4d:e7:58:88:16:89:d7:e5:80:ca:77:3d: 57:c3:55:be:07:39:c8:c4:08:f0:56:87:54:37:63: 40:58:97:db:58:66:44:49:85:04:6d:4d:c8:2a:88: 50:bb:9b:05:3f:22:0f:a1:c6:10:4e:8f:39:45:e2: ae:24:da:8a:ae:4a:20:da:22:55:0f:c2:2e:18:5a: 94:96:6e:32:11:37:a7:e3:62:ae:29:ba:74:1d:e4: 1c:b1:72:ed:62:cb:e5:aa:27:6a:73:09:23:a1:e0: 5d:b0:41:5e:a3:63:9c:7e:be:7c:5c:33:ed:c8:06: b3:ed:66:54:cd:50:3a:ff:34:27:27:7b:e6:8b:d0: 15:6c:60:76:e3:76:f5:48:91:56:11:b2:de:ac:24: ed:b6:9c:75:34:5d:8c:65:71:fc:99:b1:08:63:15: 4c:20:86:97:ba:72:a3:a4:29:4d:aa:21:06:4f:bb: 65:c4:bf:8a:09:64:dd:fc:86:2f:a3:79:b4:f2:8a: a0:30:e3:5e:b7:69:47:77:15:33:9f:6a:61:eb:e3: 3d:ac:ec:ab:ad:6e:f3:d3:8f:51:21:06:f3:b8:52: 51:fd:c9:8f:58:c1:b9:26:9b:7e:4b:37:fc:73:12: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:38:3D:21:49:5F:1E:D0:E5:86:17:CC:A8:D0:EF:E5:C6:03:9C X509v3 Authority Key Identifier: keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:de:9d:00:ee:f5:c3:f9:e4:53:47:66:56:91:9c:8f:f4: 5e:27:68:ef:aa:96:a4:f2:2a:64:2e:39:c7:c6:e7:d0:f7:0f: 90:1c:87:78:9d:7e:8f:28:67:c4:57:97:b1:30:d7:ff:49:6e: d5:2b:03:34:93:50:03:98:48:79:76:63:78:f4:4c:25:74:24: 20:a0:55:63:4a:56:bb:b4:5c:a4:d7:e9:03:fa:10:d6:87:0d: c6:d6:85:4e:85:76:39:6b:f7:6a:59:4d:cd:7f:44:25:9f:a0: b0:d1:71:1d:5c:1c:d9:1e:2d:c4:2c:7a:01:99:d3:4f:41:a5: ba:be:03:29:69:3f:49:39:52:eb:b2:b0:9c:10:e1:a3:23:4d: ee:c2:a5:57:0c:64:df:8a:b4:23:bb:0c:d2:a0:37:11:4e:ea: fe:ac:d7:af:ac:f5:72:96:b1:69:cb:78:37:13:d3:43:b6:c1: c0:e6:76:b6:37:eb:9a:03:a8:64:66:88:82:86:63:db:a6:c0: 5c:f6:09:93:66:70:cc:2a:dd:20:02:93:26:36:62:68:da:0f: ea:ce:14:8d:f7:d4:bd:6e:3c:4c:68:57:cb:b3:1a:1a:fc:18: 0b:14:aa:e1:8d:09:a8:53:1b:ab:46:07:9d:58:1a:1d:bf:97: 96:f7:c3:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHT3ro7HfIy9S6oGt2KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw NGIwY2UwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg4YjgyMzgzZDIxNDk1ZjFlZDBlNTg2MTdjY2E4ZDBlZmU1YzYwMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEkU/TOhLHximr3/dpFy1xlN51iI FonX5YDKdz1Xw1W+BznIxAjwVodUN2NAWJfbWGZESYUEbU3IKohQu5sFPyIPocYQ To85ReKuJNqKrkog2iJVD8IuGFqUlm4yETen42KuKbp0HeQcsXLtYsvlqidqcwkj oeBdsEFeo2Ocfr58XDPtyAaz7WZUzVA6/zQnJ3vmi9AVbGB243b1SJFWEbLerCTt tpx1NF2MZXH8mbEIYxVMIIaXunKjpClNqiEGT7tlxL+KCWTd/IYvo3m08oqgMONe t2lHdxUzn2ph6+M9rOyrrW7z049RIQbzuFJR/cmPWMG5Jpt+Szf8cxJW+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuCOD0hSV8e0OWGF8yo0O/lxgOcMB8GA1UdIwQY MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMevenQDu 9cP55FNHZlaRnI/0Xido76qWpPIqZC45x8bn0PcPkByHeJ1+jyhnxFeXsTDX/0lu 1SsDNJNQA5hIeXZjePRMJXQkIKBVY0pWu7RcpNfpA/oQ1ocNxtaFToV2OWv3allN zX9EJZ+gsNFxHVwc2R4txCx6AZnTT0Glur4DKWk/STlS67KwnBDhoyNN7sKlVwxk 34q0I7sM0qA3EU7q/qzXr6z1cpaxact4NxPTQ7bBwOZ2tjfrmgOoZGaIgoZj26bA XPYJk2ZwzCrdIAKTJjZiaNoP6s4UjffUvW48TGhXy7MaGvwYCxSq4Y0JqFMbq0YH nVgaHb+XlvfD2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:40 2025 by rpki-client