This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json) Hash identifier: JVD1Smyhs1sVGMm4tACa8SaKmeXVLrkX91eqmhrc010= Subject key identifier: 0F:65:86:07:57:1B:D7:4E:23:32:BD:A3:83:10:06:66:CF:91:31:DB Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Certificate serial: 019AF163F6F86A2CA1D7F5CE0C4CF1F5DBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=) 2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: /oUmReIGFJhBknYvHme8owVl8XP6EMM6+4EabmVNsZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f6:f8:6a:2c:a1:d7:f5:ce:0c:4c:f1:f5:db:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=0f658607571bd74e2332bda383100666cf9131db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:22:ae:56:11:e3:ba:e4:b1:04:0e:ee:a4: d8:fe:da:f0:4d:63:5c:62:bb:8c:4c:eb:0d:c5:2c: 99:7c:1b:20:07:c4:83:c0:92:17:9f:2e:90:1d:46: 62:c8:5f:ea:ab:3b:ab:76:50:9e:48:d9:89:f7:cd: 1f:bf:21:55:c5:f4:e7:f5:bb:47:f5:f9:b1:c3:55: e8:3e:d5:a0:a1:39:e2:5e:61:31:38:7e:59:56:e9: 34:52:c4:fd:70:1c:bd:db:b6:4b:d6:6e:8a:dd:c6: 91:09:e9:a2:fe:91:66:f9:d0:46:b6:b9:b0:18:e3: 6a:8d:1f:1e:aa:9b:af:ac:4a:65:64:75:c4:b9:db: 4c:53:fa:62:20:a5:c2:a8:27:0f:f1:fd:b8:44:f5: 3e:53:2d:c0:18:92:ba:23:e1:a2:67:3d:19:5b:85: 9a:b0:fa:1c:5c:45:60:72:b5:8e:2c:8e:5e:0e:b4: 15:4b:fe:96:bf:31:8f:dd:c5:02:9f:45:13:4b:f0: f6:9b:01:10:5a:51:ec:19:1b:cd:92:64:b8:90:d3: 0a:9a:99:25:34:30:82:2b:b7:2d:61:5e:3f:50:c3: d6:6e:6a:20:cd:34:70:ef:30:89:9a:61:24:e9:2a: 9f:98:8d:04:4f:18:a1:90:b7:75:f6:03:03:02:48: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:86:07:57:1B:D7:4E:23:32:BD:A3:83:10:06:66:CF:91:31:DB X509v3 Authority Key Identifier: keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:00:df:ac:37:5b:0b:9d:c7:fd:b5:11:28:4c:16:ae:28:76: e2:00:39:1f:b4:25:c4:1c:70:76:55:d4:7a:05:0f:0b:38:8b: 39:05:ef:8a:2b:c4:25:92:d9:aa:ad:81:80:8f:23:68:ac:98: 56:b0:8f:75:77:de:27:f9:05:14:86:7f:a6:1d:99:c1:aa:73: 34:e5:7e:f2:dc:41:d1:b4:68:ce:3f:a7:d0:b8:57:68:09:1a: 15:cd:0b:7d:07:68:bc:ad:f5:97:ba:b9:5e:1c:f7:5d:b6:c7: 44:c7:69:ee:4a:47:97:ad:14:77:b9:f9:15:da:ac:44:8b:81: 5a:c5:24:b7:ce:36:d4:80:60:9e:d9:70:38:10:1e:2f:71:02: 59:d4:1d:f3:1c:dd:1b:32:4f:70:bb:ed:5b:dd:67:82:45:da: f8:af:a7:d8:7f:99:4f:9c:25:80:a4:ff:1a:68:db:ba:97:25: cb:3e:de:8f:9f:eb:aa:b3:21:b6:b5:22:db:e8:e9:3d:b3:44: 0d:d7:fd:6c:99:27:04:7c:ff:e3:b7:e5:49:0d:e6:18:8f:23: 1a:01:3e:6c:b2:64:51:f2:67:d1:42:5e:7d:45:98:34:a7:a0: 00:94:28:e2:ea:82:88:0e:09:e5:3b:9a:30:f3:09:47:c3:d1: e1:73:2b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/b4aiyh1/XODEzx9dvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk NTBmZDMwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EygwZjY1ODYwNzU3MWJkNzRlMjMzMmJkYTM4MzEwMDY2NmNmOTEzMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUirlYR47rksQQO7qTY/trwTWNc YruMTOsNxSyZfBsgB8SDwJIXny6QHUZiyF/qqzurdlCeSNmJ980fvyFVxfTn9btH 9fmxw1XoPtWgoTniXmExOH5ZVuk0UsT9cBy927ZL1m6K3caRCemi/pFm+dBGtrmw GONqjR8eqpuvrEplZHXEudtMU/piIKXCqCcP8f24RPU+Uy3AGJK6I+GiZz0ZW4Wa sPocXEVgcrWOLI5eDrQVS/6WvzGP3cUCn0UTS/D2mwEQWlHsGRvNkmS4kNMKmpkl NDCCK7ctYV4/UMPWbmogzTRw7zCJmmEk6SqfmI0ETxihkLd19gMDAkgfIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9lhgdXG9dOIzK9o4MQBmbPkTHbMB8GA1UdIwQY MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwDfrDdb C53H/bURKEwWrih24gA5H7QlxBxwdlXUegUPCziLOQXviivEJZLZqq2BgI8jaKyY VrCPdXfeJ/kFFIZ/ph2ZwapzNOV+8txB0bRozj+n0LhXaAkaFc0LfQdovK31l7q5 Xhz3XbbHRMdp7kpHl60Ud7n5FdqsRIuBWsUkt8421IBgntlwOBAeL3ECWdQd8xzd GzJPcLvtW91ngkXa+K+n2H+ZT5wlgKT/Gmjbupclyz7ej5/rqrMhtrUi2+jpPbNE Ddf9bJknBHz/47flSQ3mGI8jGgE+bLJkUfJn0UJefUWYNKegAJQo4uqCiA4J5Tua MPMJR8PR4XMrag== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:34 2025 by rpki-client