This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json) Hash identifier: SlXrSjFfM1wADGagqA85FOcpkYe4daf88pdEVBYoXCo= Subject key identifier: 21:20:A5:02:24:68:13:64:48:88:26:27:11:2D:80:42:08:BC:8E:E1 Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455 Certificate serial: 019AF3F7D879CE44A01AE0B873E76752BE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft Manifest number: 0EEB Signing time: Sat 06 Dec 2025 14:01:37 +0000 Manifest this update: Sat 06 Dec 2025 14:01:37 +0000 Manifest next update: Sun 07 Dec 2025 14:01:37 +0000 Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=) 2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: T/xbcJqcqaUoGMoY0cSkoy/GpnrksL5s3M5BhdwJ21w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d8:79:ce:44:a0:1a:e0:b8:73:e7:67:52:be:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455 Validity Not Before: Dec 6 14:01:37 2025 GMT Not After : Dec 7 14:01:37 2025 GMT Subject: CN=2120a5022468136448882627112d804208bc8ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:27:19:04:62:49:46:d7:48:31:aa:35:a5: 18:8a:be:25:42:90:06:1a:b8:fa:8f:94:97:32:3d: ce:e3:e7:ff:23:5a:69:71:bd:66:48:6c:04:05:0b: dc:c9:d6:dd:0f:6f:90:06:81:78:71:91:8a:11:79: ea:de:27:c6:d0:13:51:28:07:78:1f:ef:10:c3:05: 47:96:c3:d0:6a:8e:70:b0:0f:f2:45:de:5f:b6:38: be:5f:51:04:12:2a:f8:8a:2f:c9:62:f2:5f:12:ba: b7:66:7f:27:93:b9:12:78:ec:0e:c0:b6:39:95:d6: cf:12:2b:4f:de:13:f3:30:4a:fc:55:81:8b:22:e7: 4a:f1:30:c3:47:5e:68:ac:6e:55:53:83:a6:a3:35: 82:b3:50:84:b7:96:61:5d:9d:9d:55:19:1c:76:45: e9:f5:50:b1:78:9d:f4:83:04:25:0c:64:d4:78:8d: 9e:3d:78:b7:c7:99:42:a8:37:14:8d:4b:5c:56:cb: 5b:87:7f:47:8c:e1:3c:69:66:c7:1b:a8:96:40:24: 27:3d:ed:88:fd:44:0d:d7:3b:23:53:c8:17:95:59: d6:8c:b9:53:67:d1:f5:ff:65:96:70:b3:6c:7a:be: 89:29:b3:48:38:18:36:5e:98:f0:11:74:46:c9:9e: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:A5:02:24:68:13:64:48:88:26:27:11:2D:80:42:08:BC:8E:E1 X509v3 Authority Key Identifier: keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7c:02:b8:61:74:f5:78:05:56:ac:8f:e1:03:53:94:8c:bd: 05:5b:53:47:e8:2d:c8:4d:b0:e4:d6:0c:69:c8:b4:71:2f:5a: ff:71:b9:f7:b6:4a:d3:91:a9:eb:50:7f:6b:62:34:cd:ab:7f: 24:56:55:d0:84:43:c1:f8:bc:4c:9b:3c:39:2c:03:89:0d:7d: 33:4f:b9:cf:b0:f6:ee:7e:41:99:64:a9:69:c7:bd:6e:c6:2c: a5:ef:82:4d:7f:02:8a:6e:60:16:86:85:5c:9f:7a:7c:69:a6: 97:27:b7:69:f3:1d:36:3b:74:32:ca:fc:b5:7a:ee:a8:c4:ac: 54:73:7b:89:06:40:09:40:4e:44:00:a5:d4:67:8b:15:40:eb: 40:6b:cc:03:9e:b5:04:c1:10:48:18:81:6e:d3:11:63:14:3c: 9c:fe:cb:1a:cc:d8:1a:47:60:04:38:43:98:25:fe:28:34:97: 7f:43:3e:e4:b0:d4:67:90:0e:ca:d5:7e:b0:0d:52:67:0b:92: 0c:a6:af:bd:56:dd:3c:c8:3c:1e:e8:91:29:80:8b:e3:55:89: 31:9b:1f:7b:d8:88:3c:9d:c6:de:1e:94:64:45:50:71:c6:08: 7a:ee:e8:16:5e:66:c9:6f:95:d5:9c:4c:03:31:e4:b7:ba:b6: b1:29:3c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99h5zkSgGuC4c+dnUr4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw MTc0NTUwHhcNMjUxMjA2MTQwMTM3WhcNMjUxMjA3MTQwMTM3WjAzMTEwLwYDVQQD EygyMTIwYTUwMjI0NjgxMzY0NDg4ODI2MjcxMTJkODA0MjA4YmM4ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3EnGQRiSUbXSDGqNaUYir4lQpAG Grj6j5SXMj3O4+f/I1ppcb1mSGwEBQvcydbdD2+QBoF4cZGKEXnq3ifG0BNRKAd4 H+8QwwVHlsPQao5wsA/yRd5ftji+X1EEEir4ii/JYvJfErq3Zn8nk7kSeOwOwLY5 ldbPEitP3hPzMEr8VYGLIudK8TDDR15orG5VU4OmozWCs1CEt5ZhXZ2dVRkcdkXp 9VCxeJ30gwQlDGTUeI2ePXi3x5lCqDcUjUtcVstbh39HjOE8aWbHG6iWQCQnPe2I /UQN1zsjU8gXlVnWjLlTZ9H1/2WWcLNser6JKbNIOBg2XpjwEXRGyZ4w/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEgpQIkaBNkSIgmJxEtgEIIvI7hMB8GA1UdIwQY MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4 LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXwCuGF0 9XgFVqyP4QNTlIy9BVtTR+gtyE2w5NYMaci0cS9a/3G597ZK05Gp61B/a2I0zat/ JFZV0IRDwfi8TJs8OSwDiQ19M0+5z7D27n5BmWSpace9bsYspe+CTX8Cim5gFoaF XJ96fGmmlye3afMdNjt0Msr8tXruqMSsVHN7iQZACUBORACl1GeLFUDrQGvMA561 BMEQSBiBbtMRYxQ8nP7LGszYGkdgBDhDmCX+KDSXf0M+5LDUZ5AOytV+sA1SZwuS DKavvVbdPMg8HuiRKYCL41WJMZsfe9iIPJ3G3h6UZEVQccYIeu7oFl5myW+V1ZxM AzHkt7q2sSk8mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:39 2025 by rpki-client