This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json) Hash identifier: drE2iRtLyLuIuhhO61t7Mk2CWlIrEZwuwo1YFpjtzXg= Subject key identifier: 39:02:D2:A1:FE:DE:21:12:2B:5A:82:96:67:5E:5C:60:26:07:10:AF Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27 Certificate serial: 019AF3F72EEDB02ABD51C539BBF28EE4F10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft Manifest number: 1396 Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: 4maH91Ms2XTXgkpqVb7CXvZdtjyAuOLR+SU42LCnBPI=) 2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=) 3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2e:ed:b0:2a:bd:51:c5:39:bb:f2:8e:e4:f1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27 Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=3902d2a1fede21122b5a8296675e5c60260710af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ac:83:be:b9:40:8e:fc:c4:0a:50:13:fc:f6: 83:1c:11:86:58:af:d3:30:87:e3:3f:1f:05:19:41: 9a:cc:d6:e5:f8:10:87:b9:bf:36:4a:1a:e8:79:6e: b8:58:60:85:a0:21:b2:da:13:5d:98:3e:44:9e:c3: 19:ec:a0:6b:29:3b:36:92:60:a5:ed:4b:80:f9:88: cd:ef:4d:d1:ed:11:bf:14:34:c9:ff:10:13:fc:13: f4:03:24:75:8e:e5:43:cc:a6:12:7c:f6:fc:5b:f5: 0e:43:74:d1:ca:2b:7d:53:77:fa:99:46:fa:ec:4a: 03:60:90:66:83:39:c1:2d:0c:a9:95:9a:a5:6b:c9: 3c:9f:98:a4:2b:46:98:41:c6:67:00:32:49:b1:50: 00:63:0d:25:5d:c8:24:54:7c:75:b2:2d:4f:fe:76: 0d:a1:57:8d:a4:99:87:1a:dc:d2:d8:e9:03:5a:5c: 9a:5f:7f:c0:97:fe:10:09:11:b1:d9:27:5d:f1:81: 3a:80:ce:0c:c0:43:5c:c5:0c:79:35:18:1e:86:30: 6b:00:11:5d:a0:9b:48:9b:7e:cd:9e:9f:e5:8f:cf: 5e:84:36:bc:01:d2:0c:fd:19:20:8e:e2:d4:9b:b3: 32:8c:b6:30:a8:7d:a1:cf:b9:3d:9d:b9:83:64:af: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:D2:A1:FE:DE:21:12:2B:5A:82:96:67:5E:5C:60:26:07:10:AF X509v3 Authority Key Identifier: keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d5:7c:42:37:3f:f5:2a:19:77:0b:2f:f1:09:e0:44:87:5e: 0f:40:89:03:04:e9:e0:c9:f6:57:1d:b9:f7:ba:48:39:a7:dd: ad:5a:fa:29:d1:a8:d4:62:e6:6c:a7:42:d6:88:63:41:22:63: 37:74:91:c9:38:ab:f9:94:85:cc:86:72:fb:ba:dc:62:f6:33: bf:1a:39:6c:fb:f9:83:c6:10:31:7f:36:97:8f:36:ca:07:02: 5e:c0:94:91:65:aa:ed:4e:3a:73:2b:b2:60:de:0d:d8:71:86: c6:09:07:b1:20:63:2b:82:f1:6a:de:55:6a:3c:ee:f6:7a:8a: ce:1a:50:50:d9:4e:9f:60:27:7a:8c:e3:c2:90:1f:93:df:28: 94:e8:b1:6e:50:64:12:89:5a:2f:c8:43:51:0d:f3:b6:80:93: b3:18:98:14:6f:84:08:9e:ed:a0:c4:c6:38:17:9d:82:e2:d2: e6:b7:e5:05:45:66:e6:10:07:45:98:4c:5e:78:c2:63:32:19: cf:ef:59:51:b4:eb:a6:83:47:89:ea:3d:84:82:54:da:61:0b: d1:38:96:e5:22:e4:3b:75:4f:f8:f6:cf:da:32:39:47:6b:43: 05:42:8a:5d:14:6f:bb:d6:ec:2a:70:e0:59:f6:84:04:24:c2: 69:16:6d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9y7tsCq9UcU5u/KO5PENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh ZWFjMjcwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EygzOTAyZDJhMWZlZGUyMTEyMmI1YTgyOTY2NzVlNWM2MDI2MDcxMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqyDvrlAjvzEClAT/PaDHBGGWK/T MIfjPx8FGUGazNbl+BCHub82ShroeW64WGCFoCGy2hNdmD5EnsMZ7KBrKTs2kmCl 7UuA+YjN703R7RG/FDTJ/xAT/BP0AyR1juVDzKYSfPb8W/UOQ3TRyit9U3f6mUb6 7EoDYJBmgznBLQyplZqla8k8n5ikK0aYQcZnADJJsVAAYw0lXcgkVHx1si1P/nYN oVeNpJmHGtzS2OkDWlyaX3/Al/4QCRGx2Sdd8YE6gM4MwENcxQx5NRgehjBrABFd oJtIm37Nnp/lj89ehDa8AdIM/RkgjuLUm7MyjLYwqH2hz7k9nbmDZK8g+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkC0qH+3iESK1qClmdeXGAmBxCvMB8GA1UdIwQY MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdV8Qjc/ 9SoZdwsv8QngRIdeD0CJAwTp4Mn2Vx2597pIOafdrVr6KdGo1GLmbKdC1ohjQSJj N3SRyTir+ZSFzIZy+7rcYvYzvxo5bPv5g8YQMX82l482ygcCXsCUkWWq7U46cyuy YN4N2HGGxgkHsSBjK4Lxat5Vajzu9nqKzhpQUNlOn2AneozjwpAfk98olOixblBk EolaL8hDUQ3ztoCTsxiYFG+ECJ7toMTGOBedguLS5rflBUVm5hAHRZhMXnjCYzIZ z+9ZUbTrpoNHieo9hIJU2mEL0TiW5SLkO3VP+PbP2jI5R2tDBUKKXRRvu9bsKnDg WfaEBCTCaRZtGg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:54 2025 by rpki-client