This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json) Hash identifier: qTIpQA34oBANAbYOeCurOMFsphXDtzemeD+FzIfal4M= Subject key identifier: 0D:DD:F5:0B:B8:2C:A5:1B:DB:6B:9F:0A:F7:00:24:F5:09:51:7E:B6 Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b Certificate serial: 019B36B4E09C5EFD41DE9B84D98CD9F4525A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 13:03:02 +0000 Manifest this update: Fri 19 Dec 2025 13:03:02 +0000 Manifest next update: Sat 20 Dec 2025 13:03:02 +0000 Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: H3GVdLzRqTAeKUISrIpzydWhPH4c7yLl1W7DzIvQo58=) 2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:e0:9c:5e:fd:41:de:9b:84:d9:8c:d9:f4:52:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b Validity Not Before: Dec 19 13:03:02 2025 GMT Not After : Dec 20 13:03:02 2025 GMT Subject: CN=0dddf50bb82ca51bdb6b9f0af70024f509517eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:71:71:15:bf:72:ea:97:6e:3b:10:32:6a: e0:16:05:4b:8e:96:dc:bb:1c:dd:23:90:b3:5a:90: 31:f5:bc:ef:0f:62:14:ed:65:f5:f0:11:2b:91:23: 82:df:c7:26:9c:65:6d:1f:a3:95:6c:6f:79:84:33: 69:36:b7:03:85:22:62:0b:c3:95:37:fe:b8:e8:0c: 46:25:23:38:62:bb:f2:93:c4:35:de:b6:a0:72:9e: 92:4b:04:a2:29:a3:e3:89:14:b9:64:3f:30:e3:a2: 58:b0:c9:a4:22:ac:cf:a6:db:25:8a:2a:67:d5:03: 3a:39:5e:77:40:85:a9:b7:a7:5a:c4:ec:a5:cf:8f: 2c:9d:81:d5:f8:8e:cb:d6:a9:2d:bc:98:c8:a3:72: ec:49:c0:e5:08:73:7d:a7:19:cc:64:4d:26:3a:f7: 5d:11:d4:b4:e8:0d:f4:8e:40:59:56:70:d1:4b:17: ff:42:14:b3:a1:ad:86:e6:12:60:0f:e2:82:d2:4d: 56:01:6e:dd:5e:42:44:7c:75:10:8c:e2:c7:7d:55: 8b:57:aa:31:98:7c:f6:56:f4:d5:98:b7:ca:1e:f0: 75:f0:79:64:4e:fa:eb:b7:52:2b:f1:42:ea:1d:ca: bf:c6:63:f6:95:15:6f:e1:ec:59:fd:e7:f6:f3:76: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DD:F5:0B:B8:2C:A5:1B:DB:6B:9F:0A:F7:00:24:F5:09:51:7E:B6 X509v3 Authority Key Identifier: keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ed:a2:b8:2a:5d:e4:73:d3:5f:49:02:82:7b:c7:4f:30:7f: 52:65:ed:08:af:fe:55:01:d1:33:6b:62:6d:08:d1:96:88:1e: 7e:d5:b9:b2:71:2b:0b:9d:68:2a:91:db:c4:27:48:de:5f:06: d2:36:52:46:34:79:0d:60:2f:6f:7c:13:6b:dd:90:02:b7:e8: 85:91:b9:c0:91:ea:10:38:95:8e:46:85:6e:b0:0a:31:f0:ac: b6:e9:6b:35:53:39:66:89:75:0c:aa:7a:a8:50:f6:10:d4:0a: b2:b0:23:83:c5:1a:ee:ca:5d:ee:cc:13:50:57:3f:eb:3a:08: 1d:87:93:a0:96:be:5b:a4:69:c1:27:e1:3a:b4:bf:db:e0:25: a0:93:15:0c:3d:ad:02:ba:b3:9e:a6:50:55:78:cf:77:b9:27: cf:eb:f5:d7:c0:00:66:77:da:b1:cf:5f:b5:c8:2f:0d:54:40: 35:fb:aa:0e:7a:5f:f4:f0:52:4b:c5:13:94:f6:74:b1:8b:bf: 91:80:f4:46:b5:b6:80:e9:59:4e:d0:98:83:ba:38:b4:9c:93: b2:df:e8:89:ac:ba:e1:30:51:c4:73:48:c4:4a:82:6c:3c:de: b8:67:41:45:23:1d:3e:ba:f6:2c:b0:01:4c:3c:6d:78:9e:be: d0:c9:ff:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tOCcXv1B3puE2YzZ9FJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTBlN2E0NTQ5YTU3MWY2OGI2ODhkYWQ0ZjVjZWQ4ZTUy OTA2OGIwHhcNMjUxMjE5MTMwMzAyWhcNMjUxMjIwMTMwMzAyWjAzMTEwLwYDVQQD EygwZGRkZjUwYmI4MmNhNTFiZGI2YjlmMGFmNzAwMjRmNTA5NTE3ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5hxcRW/cuqXbjsQMmrgFgVLjpbc uxzdI5CzWpAx9bzvD2IU7WX18BErkSOC38cmnGVtH6OVbG95hDNpNrcDhSJiC8OV N/646AxGJSM4Yrvyk8Q13ragcp6SSwSiKaPjiRS5ZD8w46JYsMmkIqzPptsliipn 1QM6OV53QIWpt6daxOylz48snYHV+I7L1qktvJjIo3LsScDlCHN9pxnMZE0mOvdd EdS06A30jkBZVnDRSxf/QhSzoa2G5hJgD+KC0k1WAW7dXkJEfHUQjOLHfVWLV6ox mHz2VvTVmLfKHvB18HlkTvrrt1Ir8ULqHcq/xmP2lRVv4exZ/ef283YEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3d9Qu4LKUb22ufCvcAJPUJUX62MB8GA1UdIwQY MBaAFDiQ56RUmlcfaLaI2tT1ztjlKQaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTIt OTQ4MTJjN2Y0NDllLzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTItOTQ4MTJjN2Y0NDll LzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu2iuCpd 5HPTX0kCgnvHTzB/UmXtCK/+VQHRM2tibQjRlogeftW5snErC51oKpHbxCdI3l8G 0jZSRjR5DWAvb3wTa92QArfohZG5wJHqEDiVjkaFbrAKMfCstulrNVM5Zol1DKp6 qFD2ENQKsrAjg8Ua7spd7swTUFc/6zoIHYeToJa+W6RpwSfhOrS/2+AloJMVDD2t ArqznqZQVXjPd7knz+v118AAZnfasc9ftcgvDVRANfuqDnpf9PBSS8UTlPZ0sYu/ kYD0RrW2gOlZTtCYg7o4tJyTst/oiay64TBRxHNIxEqCbDzeuGdBRSMdPrr2LLAB TDxteJ6+0Mn/NQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:07:18 2025 by rpki-client