This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json) Hash identifier: 66ZYg66Ni62zJy7DDe04Ucka2eN/TT9tGifImgCgt2A= Subject key identifier: 0D:E0:6E:DC:B6:2D:03:BD:9B:13:90:E8:9E:A9:A7:BC:39:03:C5:B0 Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Certificate serial: 019AF209353B8525287228D5A9C0D11B130B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft Manifest number: 0416 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 0Q3uyZY8RsqjLoJW6u1RmMpyPuo.roa (hash: pCjrPkrrHgp4o152zVnRaCrn6ENjsnKf49PVkjj9gyg=) 2: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=) 3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: xP01xhIHMLCd3RWBYGYlyN477GhZQXe3DYEbMAWR9SU=) 4: QMLVKgwADSsNbZRXcMe0xSA9x_A.roa (hash: Ml4zII8fhmnXo4EJyRA+v+Cfzf2PU3hifJXp1ALUjlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:35:3b:85:25:28:72:28:d5:a9:c0:d1:1b:13:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=0de06edcb62d03bd9b1390e89ea9a7bc3903c5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:c5:be:16:18:a9:e0:f0:67:cd:a0:26:f4: 8d:ff:58:9c:4b:90:83:8b:f8:dc:82:05:12:fc:05: 82:ca:a8:cc:f7:8b:7b:58:95:f6:ca:4b:63:72:4c: 07:7c:09:41:69:c6:0e:6b:12:bf:b4:3c:25:3e:d0: f1:6c:2c:04:55:a3:39:26:68:20:01:af:a2:0d:fa: e4:06:75:2d:f1:f9:8c:33:da:70:d9:43:2a:ee:5c: eb:43:5c:34:cb:f5:d0:8f:84:7b:71:f4:a2:3b:a3: 64:73:51:f8:ac:31:41:75:a1:26:71:01:00:44:af: e9:46:1c:ae:58:b7:0c:ce:9d:a9:9c:2c:44:9d:74: 04:0e:7d:5d:d8:47:37:29:a8:ed:dd:a9:2a:50:b7: 8e:df:cc:9c:22:4c:41:5c:41:47:1b:b8:91:f1:ee: 8a:12:7b:f4:92:82:5c:cc:09:67:ec:ac:48:c0:1c: 67:76:23:f7:5c:a3:4f:ac:04:77:15:60:68:2f:f5: 7d:4c:43:f1:44:1f:47:61:45:9f:81:60:8c:fe:e2: 95:d8:d0:32:07:78:e4:29:cc:8d:5d:36:22:28:da: 51:41:9b:4e:87:02:8d:be:ac:5e:cd:7f:38:cb:ff: 53:37:fa:16:29:86:7d:fe:05:58:6d:80:6b:db:01: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:6E:DC:B6:2D:03:BD:9B:13:90:E8:9E:A9:A7:BC:39:03:C5:B0 X509v3 Authority Key Identifier: keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:88:be:cd:ed:c5:ff:82:98:0c:c6:42:f2:68:b3:da:5d:26: 97:26:05:8e:54:5f:f9:8f:ce:1a:22:d8:e2:9e:ee:24:14:12: ac:1d:7e:e3:82:9e:e0:f9:ff:70:df:eb:e6:91:43:5d:a0:df: 3d:af:02:19:79:a8:5d:e3:84:30:48:4f:ef:8b:94:9e:6e:bf: ee:a5:09:09:fb:30:69:57:84:55:59:53:da:55:09:f9:2f:5e: c6:92:d9:cc:1d:a4:72:72:33:ac:02:db:26:cf:ed:d1:3c:42: 85:f2:39:24:20:36:c4:b7:24:fc:d6:ff:ec:73:5a:7a:ee:e3: 58:14:cf:bd:01:cb:f9:ad:8f:65:a8:c2:de:7d:42:6d:4c:c9: a2:87:9b:06:b5:cd:8a:32:73:3e:14:ac:62:09:d1:3a:4c:e3: db:a4:3d:1a:0f:21:66:a5:60:18:f8:62:cd:3f:41:e9:4c:5f: 36:e2:01:8a:2d:ae:fd:52:3f:5d:30:5d:2d:d4:d4:1b:37:f6: e6:f2:ee:12:57:8f:ce:70:9b:1d:12:7b:8e:a7:20:94:ce:97: 8f:8c:96:2c:56:6b:c0:e9:45:e0:89:58:e7:95:c4:d7:02:00: 8c:fe:0d:dc:f0:65:1d:ad:3d:fd:d7:0d:7f:5e:f7:4f:da:3c: e4:e1:3c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTU7hSUocijVqcDRGxMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk MjRkMzgwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EygwZGUwNmVkY2I2MmQwM2JkOWIxMzkwZTg5ZWE5YTdiYzM5MDNjNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FbFvhYYqeDwZ82gJvSN/1icS5CD i/jcggUS/AWCyqjM94t7WJX2yktjckwHfAlBacYOaxK/tDwlPtDxbCwEVaM5Jmgg Aa+iDfrkBnUt8fmMM9pw2UMq7lzrQ1w0y/XQj4R7cfSiO6Nkc1H4rDFBdaEmcQEA RK/pRhyuWLcMzp2pnCxEnXQEDn1d2Ec3Kajt3akqULeO38ycIkxBXEFHG7iR8e6K Env0koJczAln7KxIwBxndiP3XKNPrAR3FWBoL/V9TEPxRB9HYUWfgWCM/uKV2NAy B3jkKcyNXTYiKNpRQZtOhwKNvqxezX84y/9TN/oWKYZ9/gVYbYBr2wEOYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3gbty2LQO9mxOQ6J6pp7w5A8WwMB8GA1UdIwQY MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYi+ze3F /4KYDMZC8miz2l0mlyYFjlRf+Y/OGiLY4p7uJBQSrB1+44Ke4Pn/cN/r5pFDXaDf Pa8CGXmoXeOEMEhP74uUnm6/7qUJCfswaVeEVVlT2lUJ+S9expLZzB2kcnIzrALb Js/t0TxChfI5JCA2xLck/Nb/7HNaeu7jWBTPvQHL+a2PZajC3n1CbUzJooebBrXN ijJzPhSsYgnROkzj26Q9Gg8hZqVgGPhizT9B6UxfNuIBii2u/VI/XTBdLdTUGzf2 5vLuElePznCbHRJ7jqcglM6Xj4yWLFZrwOlF4IlY55XE1wIAjP4N3PBlHa09/dcN f173T9o85OE8dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:19 2025 by rpki-client