This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json) Hash identifier: lzvImz/KIXnGvCYEdHYwXmed6j/3u3v87qJFYGx6aoo= Subject key identifier: 04:BB:EF:5D:F0:73:E4:AB:3B:91:F1:F9:0E:9B:E5:35:DA:E7:95:9E Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Certificate serial: 019AF389451A7DF018F32E311477FB3BB743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:50 +0000 Manifest this update: Sat 06 Dec 2025 12:00:50 +0000 Manifest next update: Sun 07 Dec 2025 12:00:50 +0000 Files and hashes: 1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: bdlofFmaFbszI7IqU53xLWESbFsa/BdB9lsmrpIxZKs=) 2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:45:1a:7d:f0:18:f3:2e:31:14:77:fb:3b:b7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Validity Not Before: Dec 6 12:00:50 2025 GMT Not After : Dec 7 12:00:50 2025 GMT Subject: CN=04bbef5df073e4ab3b91f1f90e9be535dae7959e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:83:e0:ae:8b:6a:8a:1e:31:76:dc:3d:d3: 57:79:a9:a1:95:d4:7b:4c:e5:96:8b:45:cb:61:13: ac:db:ec:c0:04:55:c5:f6:86:04:78:13:ac:12:54: de:33:0e:4f:23:b5:24:c8:07:53:95:66:dd:0f:e2: 21:a5:c2:b4:74:80:47:be:5c:87:a9:04:7a:ec:b5: 46:61:ac:a2:bc:d0:5c:17:34:8d:79:23:16:bd:5d: 65:9b:f3:37:f1:8c:4a:e6:0e:f2:56:57:ba:8d:38: 9b:bd:1c:a2:f8:39:0b:4a:2c:b4:ab:b8:0d:81:9f: ba:10:2f:a4:49:26:48:10:ce:be:62:2d:9b:8b:86: 71:5a:ce:40:ea:d8:f1:96:d7:bb:2e:8b:87:25:03: fb:a1:d8:95:e4:ba:c4:67:b5:a6:52:f3:f1:43:06: 41:e9:b2:34:1c:08:ec:13:02:0f:d4:37:b7:a6:1f: cc:cb:63:56:b8:17:21:49:f9:59:91:3c:3e:a1:4c: e7:f1:34:e9:45:7a:66:a7:ab:b5:bc:1c:df:9f:c5: 7f:8d:f0:a4:b6:e8:99:16:3f:46:7c:05:9d:99:86: be:7f:f8:74:b4:b7:52:fd:e4:8c:40:59:18:e2:a1: d6:4a:13:ff:40:40:f4:a3:1c:eb:ba:be:05:e7:7e: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:EF:5D:F0:73:E4:AB:3B:91:F1:F9:0E:9B:E5:35:DA:E7:95:9E X509v3 Authority Key Identifier: keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:a6:f5:7c:ee:e3:3e:2d:ad:48:14:e2:0a:0b:63:5e:14: 51:63:63:c0:76:14:0e:6a:77:d8:90:1c:02:53:a2:29:4e:fa: a5:6f:4f:a8:99:02:bc:da:40:81:f4:9b:1a:58:42:02:9d:cd: 12:1b:30:67:e6:f0:c8:5c:c7:ef:eb:48:56:d9:ad:69:b9:df: 44:be:e4:e3:59:48:1c:e9:ba:c4:a9:d2:81:b5:25:72:50:f3: a0:8f:71:50:ec:41:12:1b:ad:0b:3a:df:17:13:61:60:b5:6e: 73:b7:c6:64:19:56:66:c1:7b:f2:91:e1:80:c7:e5:2e:4b:57: a2:a3:cb:7d:3b:5f:6d:89:08:3b:4f:aa:6a:a6:63:00:00:c4: f1:cc:0b:99:b3:f9:a2:73:f2:97:30:4c:5a:61:31:57:93:7e: c8:bd:8e:5b:ab:5a:c2:59:da:2b:f5:66:87:90:50:e0:53:21: d9:44:92:cf:83:d7:41:ea:ac:df:dc:f4:67:6b:95:77:df:22: 3a:e5:4c:44:90:c7:38:64:79:6f:6e:1b:b1:3e:9c:73:e7:95: 76:cd:55:2f:4b:18:eb:e1:06:d0:ce:9a:c4:bf:ca:af:a2:95: 3f:1e:d8:d9:ed:7c:c4:8c:ff:b4:e8:9a:d6:b3:2e:4b:5f:7d: 96:03:ed:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUUaffAY8y4xFHf7O7dDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2 NWFjZjEwHhcNMjUxMjA2MTIwMDUwWhcNMjUxMjA3MTIwMDUwWjAzMTEwLwYDVQQD EygwNGJiZWY1ZGYwNzNlNGFiM2I5MWYxZjkwZTliZTUzNWRhZTc5NTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gyD4K6LaooeMXbcPdNXeamhldR7 TOWWi0XLYROs2+zABFXF9oYEeBOsElTeMw5PI7UkyAdTlWbdD+IhpcK0dIBHvlyH qQR67LVGYayivNBcFzSNeSMWvV1lm/M38YxK5g7yVle6jTibvRyi+DkLSiy0q7gN gZ+6EC+kSSZIEM6+Yi2bi4ZxWs5A6tjxlte7LouHJQP7odiV5LrEZ7WmUvPxQwZB 6bI0HAjsEwIP1De3ph/My2NWuBchSflZkTw+oUzn8TTpRXpmp6u1vBzfn8V/jfCk tuiZFj9GfAWdmYa+f/h0tLdS/eSMQFkY4qHWShP/QED0oxzrur4F534+fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAS7713wc+SrO5Hx+Q6b5TXa55WeMB8GA1UdIwQY MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt Njk2OGUyZDgxODI2LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2 LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGGm9Xzu 4z4trUgU4goLY14UUWNjwHYUDmp32JAcAlOiKU76pW9PqJkCvNpAgfSbGlhCAp3N EhswZ+bwyFzH7+tIVtmtabnfRL7k41lIHOm6xKnSgbUlclDzoI9xUOxBEhutCzrf FxNhYLVuc7fGZBlWZsF78pHhgMflLktXoqPLfTtfbYkIO0+qaqZjAADE8cwLmbP5 onPylzBMWmExV5N+yL2OW6tawlnaK/Vmh5BQ4FMh2USSz4PXQeqs39z0Z2uVd98i OuVMRJDHOGR5b24bsT6cc+eVds1VL0sY6+EG0M6axL/Kr6KVPx7Y2e18xIz/tOia 1rMuS199lgPtpg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:06 2025 by rpki-client