This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json) Hash identifier: 9LyaXpk/+xzBc9IGer6LZRCIffWbWaACDCqSzy+ntCU= Subject key identifier: A7:FB:65:4C:A8:0F:F7:0B:CF:3A:68:7D:F8:06:15:E1:06:3C:83:A8 Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98 Certificate serial: 019AF12EFF6A118E07876FB27781BA06B800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft Manifest number: 13F5 Signing time: Sat 06 Dec 2025 01:03:00 +0000 Manifest this update: Sat 06 Dec 2025 01:03:00 +0000 Manifest next update: Sun 07 Dec 2025 01:03:00 +0000 Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: KY5HsbcXocA9suzF8DUbKoaAHIWgLhF31aE/qM9yJI0=) 2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ff:6a:11:8e:07:87:6f:b2:77:81:ba:06:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39abeb591716e908345d329fffd3700352315b98 Validity Not Before: Dec 6 01:03:00 2025 GMT Not After : Dec 7 01:03:00 2025 GMT Subject: CN=a7fb654ca80ff70bcf3a687df80615e1063c83a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:b5:73:2d:11:14:51:a3:50:94:ee:b2:79: d4:cd:ae:15:13:59:87:13:f5:7b:99:f8:7b:2b:bb: cd:f3:21:5f:49:f5:32:7f:d9:6c:87:66:28:a6:c6: 4d:93:1f:4a:09:14:1f:7d:c3:55:54:36:b0:93:63: 36:01:8f:8d:f4:a3:23:ab:fd:88:7d:0f:76:d4:b2: 23:bc:6a:d0:53:8b:3b:09:a4:e8:74:9c:aa:b7:03: dc:04:a4:ac:5b:b0:a4:b5:4f:f6:ee:80:02:04:2c: 41:89:a8:2c:20:02:b8:2b:6d:3a:11:93:ee:57:58: cb:f8:17:7d:67:0b:14:88:db:6d:ea:b0:1f:d7:0a: 01:6e:38:d7:fc:31:77:79:8f:95:69:76:80:46:55: 41:da:f5:bf:68:29:56:3e:22:1c:dd:10:e4:c6:aa: e6:59:8e:7f:99:fe:ba:6d:0e:2f:e1:f6:db:94:46: 24:9b:7b:b1:41:06:55:a3:05:ae:29:ff:c1:09:7c: f9:1f:46:86:e9:11:c7:89:68:b8:4f:f9:44:a6:1c: 78:a2:b3:06:cd:79:c3:d2:f2:24:a3:b7:04:1e:41: 7f:00:63:23:aa:f8:f5:82:a3:df:fa:c6:17:c5:f8: 72:99:7f:ea:37:44:25:a5:4d:9c:eb:2a:cc:59:39: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:65:4C:A8:0F:F7:0B:CF:3A:68:7D:F8:06:15:E1:06:3C:83:A8 X509v3 Authority Key Identifier: keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:36:be:e6:90:fc:1e:07:ee:ed:7d:e8:68:47:21:33:f8: 97:06:bb:35:e8:e1:80:74:7f:14:d2:3a:6e:39:c7:fe:c9:51: 56:65:23:7d:58:68:ff:8e:16:a2:df:ed:c7:ec:5e:cf:a2:df: 67:58:d0:61:73:56:d1:49:a9:87:6a:36:b0:cb:81:b0:51:7b: 80:35:47:e7:49:29:74:be:96:0d:3c:23:5c:81:a6:f5:df:01: 7c:a0:4e:72:eb:45:f4:08:da:70:7f:4f:b5:a5:de:f0:69:c2: c0:10:28:e1:7a:ba:17:26:a8:22:c3:fd:80:87:2d:d8:b9:54: 71:f7:82:04:63:41:03:2f:8e:3b:c0:54:7d:b2:0a:31:3a:ec: ce:13:f3:5a:f0:cb:b4:1f:85:1a:76:0d:8f:6b:eb:97:00:f3: 76:f6:74:f6:b1:97:b0:44:6a:ec:4d:2a:44:14:ba:74:62:13: d8:62:d9:da:2d:5e:b1:07:dc:39:53:2a:ed:8a:9d:1f:60:82: be:f6:2a:e9:ee:5f:29:05:8a:bd:45:78:b2:40:3f:ea:91:a1: 6a:27:d8:54:c2:72:4e:52:4a:f4:7b:12:f2:12:34:84:99:6f: 27:75:67:f3:4e:16:8d:7d:f0:14:cf:91:7e:a2:b6:2e:4e:f8: 5d:4d:78:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLv9qEY4Hh2+yd4G6BrgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz MTViOTgwHhcNMjUxMjA2MDEwMzAwWhcNMjUxMjA3MDEwMzAwWjAzMTEwLwYDVQQD EyhhN2ZiNjU0Y2E4MGZmNzBiY2YzYTY4N2RmODA2MTVlMTA2M2M4M2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnai1cy0RFFGjUJTusnnUza4VE1mH E/V7mfh7K7vN8yFfSfUyf9lsh2YopsZNkx9KCRQffcNVVDawk2M2AY+N9KMjq/2I fQ921LIjvGrQU4s7CaTodJyqtwPcBKSsW7CktU/27oACBCxBiagsIAK4K206EZPu V1jL+Bd9ZwsUiNtt6rAf1woBbjjX/DF3eY+VaXaARlVB2vW/aClWPiIc3RDkxqrm WY5/mf66bQ4v4fbblEYkm3uxQQZVowWuKf/BCXz5H0aG6RHHiWi4T/lEphx4orMG zXnD0vIko7cEHkF/AGMjqvj1gqPf+sYXxfhymX/qN0QlpU2c6yrMWTnyGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf7ZUyoD/cLzzpoffgGFeEGPIOoMB8GA1UdIwQY MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP682vuaQ /B4H7u196GhHITP4lwa7NejhgHR/FNI6bjnH/slRVmUjfVho/44Wot/tx+xez6Lf Z1jQYXNW0Umph2o2sMuBsFF7gDVH50kpdL6WDTwjXIGm9d8BfKBOcutF9AjacH9P taXe8GnCwBAo4Xq6FyaoIsP9gIct2LlUcfeCBGNBAy+OO8BUfbIKMTrszhPzWvDL tB+FGnYNj2vrlwDzdvZ09rGXsERq7E0qRBS6dGIT2GLZ2i1esQfcOVMq7YqdH2CC vvYq6e5fKQWKvUV4skA/6pGhaifYVMJyTlJK9HsS8hI0hJlvJ3Vn804WjX3wFM+R fqK2Lk74XU14hA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:42 2025 by rpki-client