This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json) Hash identifier: WRr8Jou2jPyAp8GjRlNOjx2vDanxEZUpYituy3z39as= Subject key identifier: 46:1E:5D:5D:95:04:6B:07:6D:96:2A:93:C0:53:8C:BD:8F:CD:EA:23 Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f Certificate serial: 019AF577746C1F85547112A3950578EFFE41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:00:37 +0000 Manifest this update: Sat 06 Dec 2025 21:00:37 +0000 Manifest next update: Sun 07 Dec 2025 21:00:37 +0000 Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=) 2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: 8mjsptJ49NO15XU+oIHBRxqynRsHR2oO0LzhCzgjSbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:74:6c:1f:85:54:71:12:a3:95:05:78:ef:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f Validity Not Before: Dec 6 21:00:37 2025 GMT Not After : Dec 7 21:00:37 2025 GMT Subject: CN=461e5d5d95046b076d962a93c0538cbd8fcdea23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:f1:cf:7b:4d:dd:d8:c9:d9:57:e0:d9:c6: 1d:f4:11:59:cd:e5:47:3e:db:e1:ac:41:85:39:38: f8:66:71:99:b9:5f:f5:ae:4c:84:03:e4:32:79:29: 0b:99:09:fd:a5:66:37:c7:98:ee:b3:a7:a8:12:1f: 50:d0:77:1a:2b:e1:02:d9:5b:ac:e5:c0:ba:7c:c4: 8b:4d:f4:d5:64:7b:19:f9:f7:be:62:db:34:b5:65: 0d:ba:0b:0c:cc:3d:5c:16:28:b5:0f:4e:e5:92:9b: 15:05:c7:fe:90:2c:12:8f:60:a9:60:2f:96:c3:68: c3:ea:fa:2b:33:b3:2a:3f:f3:bc:a9:1a:d8:90:e5: 8b:a3:af:13:b6:aa:39:8b:9c:33:bf:6f:a6:2f:c3: 75:4e:1d:e3:64:53:dd:99:e1:81:46:10:46:94:f7: 9e:c9:f0:05:ab:4a:08:21:95:92:e5:ae:d9:65:c9: 05:c2:b9:a3:ad:5b:99:50:2a:50:8e:fe:a0:35:aa: 75:48:83:71:f3:61:52:73:a0:74:97:4a:ae:9c:78: 59:33:d4:f8:b5:20:34:fa:6b:d4:c3:cd:2e:9e:99: d8:1a:12:06:07:5d:b2:67:ee:62:fc:e0:7d:61:b4: a2:42:5b:7c:3f:b2:83:3f:e8:e7:ab:2e:8a:0a:91: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1E:5D:5D:95:04:6B:07:6D:96:2A:93:C0:53:8C:BD:8F:CD:EA:23 X509v3 Authority Key Identifier: keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:72:80:5b:68:da:9e:34:e6:ed:c0:07:d8:58:2f:9f:25:18: 5e:4d:84:36:4f:31:b3:95:d0:5e:34:f4:f2:5e:6d:94:9f:05: f1:7e:3b:e6:5b:49:6a:ff:24:82:3b:05:96:3f:8e:db:d4:bd: 51:4b:70:b6:d3:35:52:5a:dd:47:bc:56:59:f2:b6:68:67:b4: 40:da:27:dd:31:d0:02:04:ff:d2:93:1d:93:82:83:83:8e:e9: 15:dc:8c:72:47:3f:df:e3:a0:0e:a9:89:9f:0c:87:58:5e:3a: c4:a5:d9:97:ef:d9:cf:9c:c5:2b:d7:84:2f:d5:b7:e9:4b:57: 0e:b9:95:a6:0a:d3:98:5d:c5:5e:fa:60:46:53:46:11:84:55: 96:5b:8a:bb:44:39:96:c2:ab:e2:0d:25:0d:ca:1f:ae:d6:05: e2:29:57:d0:54:23:b1:d5:2a:61:3c:3a:25:75:a6:4b:9c:3b: 49:3c:30:88:50:39:20:60:fc:56:f3:8d:27:a8:d3:7a:24:2f: 7d:c3:c8:9f:06:83:e5:c4:1d:6b:09:e6:4f:81:88:a2:c1:38: 5f:f6:ad:e0:1a:26:d2:46:a4:30:d0:09:3b:c8:7c:df:1d:2e: 01:58:19:25:61:3d:b1:46:cb:3c:7f:70:31:80:d3:5c:78:66: 54:01:a7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3RsH4VUcRKjlQV47/5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj YjViMGYwHhcNMjUxMjA2MjEwMDM3WhcNMjUxMjA3MjEwMDM3WjAzMTEwLwYDVQQD Eyg0NjFlNWQ1ZDk1MDQ2YjA3NmQ5NjJhOTNjMDUzOGNiZDhmY2RlYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJnxz3tN3djJ2Vfg2cYd9BFZzeVH PtvhrEGFOTj4ZnGZuV/1rkyEA+QyeSkLmQn9pWY3x5jus6eoEh9Q0HcaK+EC2Vus 5cC6fMSLTfTVZHsZ+fe+Yts0tWUNugsMzD1cFii1D07lkpsVBcf+kCwSj2CpYC+W w2jD6vorM7MqP/O8qRrYkOWLo68Ttqo5i5wzv2+mL8N1Th3jZFPdmeGBRhBGlPee yfAFq0oIIZWS5a7ZZckFwrmjrVuZUCpQjv6gNap1SINx82FSc6B0l0qunHhZM9T4 tSA0+mvUw80unpnYGhIGB12yZ+5i/OB9YbSiQlt8P7KDP+jnqy6KCpGDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYeXV2VBGsHbZYqk8BTjL2PzeojMB8GA1UdIwQY MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnKAW2ja njTm7cAH2FgvnyUYXk2ENk8xs5XQXjT08l5tlJ8F8X475ltJav8kgjsFlj+O29S9 UUtwttM1UlrdR7xWWfK2aGe0QNon3THQAgT/0pMdk4KDg47pFdyMckc/3+OgDqmJ nwyHWF46xKXZl+/Zz5zFK9eEL9W36UtXDrmVpgrTmF3FXvpgRlNGEYRVlluKu0Q5 lsKr4g0lDcofrtYF4ilX0FQjsdUqYTw6JXWmS5w7STwwiFA5IGD8VvONJ6jTeiQv fcPInwaD5cQdawnmT4GIosE4X/at4Bom0kakMNAJO8h83x0uAVgZJWE9sUbLPH9w MYDTXHhmVAGn5w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:32 2025 by rpki-client