This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json) Hash identifier: fXT0wUarcTPYp2E1pI2KcgPfKDn4rexrYlQfo1GhWCE= Subject key identifier: C7:97:94:E7:C1:61:15:22:66:00:BC:73:D7:83:77:78:3C:4F:F3:9C Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Certificate serial: 019AF208C432937F30465B255E5429CE54EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: ipQxHc2C7J4qj8QrJUj5ddyDQY84hSdXXNLCYvuJoX4=) 2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c4:32:93:7f:30:46:5b:25:5e:54:29:ce:54:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=c79794e7c16115226600bc73d78377783c4ff39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:12:50:32:8a:6e:6d:2a:55:a8:f3:93:7a: c7:79:33:a6:2d:bc:23:48:76:84:ee:ac:56:61:27: 73:90:b4:b7:13:85:19:c9:fb:fc:06:ef:e2:31:75: 5d:19:67:18:ad:b0:8b:ef:41:ba:54:e7:f8:dc:27: d7:84:0b:83:11:a8:78:1f:43:72:8d:11:9d:ea:c8: f5:68:ae:70:64:b0:58:4b:cf:23:95:60:04:e3:da: 31:1a:27:c0:38:f3:83:b3:46:cb:62:ec:96:4c:67: 74:56:d9:39:47:de:34:50:3c:a3:36:2f:c6:de:2d: ec:d9:61:c0:e3:6e:e6:eb:e4:b4:bf:71:d9:d3:81: a2:ce:9e:5e:de:d1:39:7f:df:1c:61:ac:81:a8:d4: 5e:bf:3f:bf:9d:27:55:8f:3a:71:60:f2:0a:3b:ef: 1c:3e:78:52:c4:16:d5:08:cd:ed:6b:e0:ed:82:61: bd:d6:c5:1b:26:f3:f7:a9:de:d6:4a:3a:48:f1:b5: ad:c1:5f:86:65:7d:59:f8:e7:e2:57:ff:eb:41:58: 20:3f:87:ae:87:fa:3a:a4:e7:16:bc:06:6f:14:5e: cd:c9:aa:0f:f1:bd:1e:4a:fd:00:da:cf:df:e9:69: 61:e1:6c:7f:ef:41:95:35:8f:10:72:03:30:ea:54: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:94:E7:C1:61:15:22:66:00:BC:73:D7:83:77:78:3C:4F:F3:9C X509v3 Authority Key Identifier: keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:69:85:a5:48:3d:2a:ef:8b:89:5f:f4:60:bf:b7:df:d4:68: 30:48:00:09:11:bc:fc:74:ad:27:b7:a6:92:93:ef:83:eb:6b: a3:71:66:d6:28:fa:96:7d:c1:17:aa:83:b6:f7:ee:4d:09:57: 36:98:53:c5:ab:72:21:3a:ae:6a:f6:df:30:69:ef:52:fb:d3: a5:76:73:36:36:14:08:83:59:90:a7:d3:7c:ee:02:ba:09:5e: 7e:7b:ac:e7:8c:f9:34:66:d3:40:6a:38:cf:02:57:11:04:25: d0:20:ba:0e:4b:c2:78:25:86:cb:37:43:f5:3e:79:28:66:31: 67:ba:6f:e6:79:32:b3:59:3d:f5:9d:a2:53:9c:27:24:76:28: 98:1d:9b:95:8f:23:a2:d2:7c:1e:5e:b9:11:ee:11:a6:d0:79: 4c:18:9e:97:94:c5:b2:38:50:bb:f5:0c:35:ed:6d:61:ee:53: 1b:d4:a6:5f:d2:5b:ce:e7:9a:c8:8e:18:cb:ba:19:12:69:92: ca:06:2a:3e:e9:0c:84:94:b2:22:e5:97:3f:c7:9c:b8:44:16: 57:40:d0:c6:95:50:3d:1d:66:96:56:c9:d1:cc:72:bb:f5:b5: f8:0f:ff:df:5b:0a:64:83:32:20:cc:13:55:3d:d5:c0:80:22: 66:13:dc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMQyk38wRlslXlQpzlTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh MmQ2MTEwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhjNzk3OTRlN2MxNjExNTIyNjYwMGJjNzNkNzgzNzc3ODNjNGZmMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDUSUDKKbm0qVajzk3rHeTOmLbwj SHaE7qxWYSdzkLS3E4UZyfv8Bu/iMXVdGWcYrbCL70G6VOf43CfXhAuDEah4H0Ny jRGd6sj1aK5wZLBYS88jlWAE49oxGifAOPODs0bLYuyWTGd0Vtk5R940UDyjNi/G 3i3s2WHA427m6+S0v3HZ04Gizp5e3tE5f98cYayBqNRevz+/nSdVjzpxYPIKO+8c PnhSxBbVCM3ta+DtgmG91sUbJvP3qd7WSjpI8bWtwV+GZX1Z+OfiV//rQVggP4eu h/o6pOcWvAZvFF7NyaoP8b0eSv0A2s/f6Wlh4Wx/70GVNY8QcgMw6lR+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeXlOfBYRUiZgC8c9eDd3g8T/OcMB8GA1UdIwQY MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmmFpUg9 Ku+LiV/0YL+339RoMEgACRG8/HStJ7emkpPvg+tro3Fm1ij6ln3BF6qDtvfuTQlX NphTxatyITquavbfMGnvUvvTpXZzNjYUCINZkKfTfO4Cuglefnus54z5NGbTQGo4 zwJXEQQl0CC6DkvCeCWGyzdD9T55KGYxZ7pv5nkys1k99Z2iU5wnJHYomB2blY8j otJ8Hl65Ee4RptB5TBiel5TFsjhQu/UMNe1tYe5TG9SmX9JbzueayI4Yy7oZEmmS ygYqPukMhJSyIuWXP8ecuEQWV0DQxpVQPR1mllbJ0cxyu/W1+A//31sKZIMyIMwT VT3VwIAiZhPcmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:37 2025 by rpki-client