This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json) Hash identifier: LEVjH74xd9BOXHT0QKoVbFGWzsPzD9CDtv83VbnnO08= Subject key identifier: DD:BE:14:ED:F5:F8:41:EA:95:85:3C:A5:5B:9C:C0:2D:4D:0D:83:09 Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62 Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62 Certificate serial: 019B299BBFE06FE0243BA7306F91AA6C1325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft Manifest number: 0862 Signing time: Wed 17 Dec 2025 00:00:31 +0000 Manifest this update: Wed 17 Dec 2025 00:00:31 +0000 Manifest next update: Thu 18 Dec 2025 00:00:31 +0000 Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=) 2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: 4SK8EgntOJydTAPWUBJlDsEBb1dIVRjbKswI3mDT1ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:bf:e0:6f:e0:24:3b:a7:30:6f:91:aa:6c:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62 Validity Not Before: Dec 17 00:00:31 2025 GMT Not After : Dec 18 00:00:31 2025 GMT Subject: CN=ddbe14edf5f841ea95853ca55b9cc02d4d0d8309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:a8:7a:57:0c:10:82:c1:7a:1e:ea:52:fe: 15:21:db:7c:b1:75:41:e7:8a:cd:f3:fb:fb:31:9b: f1:95:8f:68:d0:16:96:db:45:43:de:ad:51:ff:e8: 59:3b:92:95:36:24:11:ef:18:c1:fa:07:ec:bc:35: 5d:fb:14:c4:b6:0b:5b:02:a3:5a:41:3b:bc:ff:d2: 4d:31:bd:58:65:e8:1f:ba:41:47:da:15:d5:34:7d: 83:10:35:e6:98:e0:c5:6d:a6:de:08:92:c9:27:7a: 4f:92:79:15:6a:51:85:29:43:03:06:0c:c6:e8:bd: 0b:0c:39:8d:35:9b:79:1b:c8:61:18:59:f7:6e:47: 45:ed:fa:ec:bb:a2:23:d0:e2:f9:76:e6:f8:41:a7: cb:67:8b:ef:dc:3d:43:c8:b4:2b:db:4b:01:af:a8: 6b:9c:dc:1e:9b:0e:52:0d:50:51:dd:35:ba:1e:59: 2f:9d:d6:f0:22:68:9d:9c:15:f4:e4:30:f0:63:9c: 67:ba:d9:1f:80:c2:1c:f1:b5:3f:73:9f:b7:58:58: f8:fc:91:f7:f9:7f:5b:45:97:09:72:1f:bf:b3:72: c6:99:6a:6e:1a:fd:59:d1:d0:e8:0b:53:ed:91:37: 14:d3:35:66:1f:f8:f7:3a:10:66:98:a1:bf:92:8d: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BE:14:ED:F5:F8:41:EA:95:85:3C:A5:5B:9C:C0:2D:4D:0D:83:09 X509v3 Authority Key Identifier: keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:1a:7a:27:08:cd:7e:f3:82:18:b1:21:a6:cf:69:70:ca:2f: 1f:20:37:03:7e:c8:75:b9:7c:fe:5e:a6:c1:e5:72:5a:a3:47: eb:2d:d8:51:24:b8:52:c6:11:b6:72:be:a5:c8:84:72:54:eb: d0:a6:76:1c:2a:48:1e:1f:8d:88:86:ad:30:0c:e4:75:c0:94: 22:20:80:91:20:e8:b7:3b:2c:56:73:41:9d:48:50:80:66:d2: f3:ae:01:cc:65:f6:a6:f3:a1:c0:61:82:dc:40:8a:e0:d0:4b: c7:88:af:39:82:cb:d2:6c:78:df:86:56:e8:62:39:dc:a0:9d: c9:f8:4e:28:1f:1c:84:99:21:e0:be:cc:1f:47:c1:21:c0:bc: 1c:85:c1:63:a0:b7:98:bd:8d:3d:01:47:f7:02:87:15:de:fc: 9a:1c:58:f1:c5:dc:e3:d2:25:a7:f0:81:05:47:70:c5:dc:b9: d5:cf:0e:c9:dc:ef:f5:e6:9a:6b:8e:68:05:6f:2a:2e:d4:b1: 02:78:ef:3a:52:13:94:ea:ab:25:ac:ed:36:89:f2:9e:7f:25: b0:80:47:2e:1b:3c:c7:7c:95:c1:57:26:18:45:90:10:c1:ac: d7:c9:c7:88:e8:6b:b0:1d:2a:f4:b4:64:ba:be:e5:b1:35:c3: b7:23:d9:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm7/gb+AkO6cwb5GqbBMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1 ZDhiNjIwHhcNMjUxMjE3MDAwMDMxWhcNMjUxMjE4MDAwMDMxWjAzMTEwLwYDVQQD EyhkZGJlMTRlZGY1Zjg0MWVhOTU4NTNjYTU1YjljYzAyZDRkMGQ4MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4OoelcMEILBeh7qUv4VIdt8sXVB 54rN8/v7MZvxlY9o0BaW20VD3q1R/+hZO5KVNiQR7xjB+gfsvDVd+xTEtgtbAqNa QTu8/9JNMb1YZegfukFH2hXVNH2DEDXmmODFbabeCJLJJ3pPknkValGFKUMDBgzG 6L0LDDmNNZt5G8hhGFn3bkdF7frsu6Ij0OL5dub4QafLZ4vv3D1DyLQr20sBr6hr nNwemw5SDVBR3TW6HlkvndbwImidnBX05DDwY5xnutkfgMIc8bU/c5+3WFj4/JH3 +X9bRZcJch+/s3LGmWpuGv1Z0dDoC1PtkTcU0zVmH/j3OhBmmKG/ko3lhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2+FO31+EHqlYU8pVucwC1NDYMJMB8GA1UdIwQY MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt ZDlhZWJlNDNlZjQyLzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxp6JwjN fvOCGLEhps9pcMovHyA3A37Idbl8/l6mweVyWqNH6y3YUSS4UsYRtnK+pciEclTr 0KZ2HCpIHh+NiIatMAzkdcCUIiCAkSDotzssVnNBnUhQgGbS864BzGX2pvOhwGGC 3ECK4NBLx4ivOYLL0mx434ZW6GI53KCdyfhOKB8chJkh4L7MH0fBIcC8HIXBY6C3 mL2NPQFH9wKHFd78mhxY8cXc49Ilp/CBBUdwxdy51c8Oydzv9eaaa45oBW8qLtSx AnjvOlITlOqrJaztNonynn8lsIBHLhs8x3yVwVcmGEWQEMGs18nHiOhrsB0q9LRk ur7lsTXDtyPZ9Q== -----END CERTIFICATE-----Generated at Wed Dec 17 05:42:29 2025 by rpki-client