This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json) Hash identifier: yt6T6+j6daWNhZLxyJlcBvv7SSRPVwi5ikz641Z1TC4= Subject key identifier: BA:D7:21:32:BF:3F:2E:0F:B3:4E:48:77:44:BC:96:A1:A5:7F:03:0E Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Certificate serial: 019AF3F78686B90DACE4BDACDB3BB65C5544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft Manifest number: 0EBF Signing time: Sat 06 Dec 2025 14:01:16 +0000 Manifest this update: Sat 06 Dec 2025 14:01:16 +0000 Manifest next update: Sun 07 Dec 2025 14:01:16 +0000 Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: gePl/8R5THFsi+WHfmY6/1wn6OZ14xWZAgUkcnVJoFI=) 2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:86:86:b9:0d:ac:e4:bd:ac:db:3b:b6:5c:55:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0 Validity Not Before: Dec 6 14:01:16 2025 GMT Not After : Dec 7 14:01:16 2025 GMT Subject: CN=bad72132bf3f2e0fb34e487744bc96a1a57f030e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:21:3c:2f:f1:0d:88:ed:9e:49:bd:8a:66: 45:a5:c6:9f:28:08:de:50:68:48:b3:4a:af:85:33: 04:90:78:18:a6:c0:1b:c3:43:ab:62:4f:25:4a:04: d0:f7:8d:9d:aa:fa:c8:71:6a:96:60:d9:7f:b8:67: 92:e3:0b:30:dc:8d:a4:ab:6d:09:b9:ff:e2:57:ca: b4:9b:47:56:ed:f5:da:13:09:9d:08:52:ec:cc:5a: bf:84:68:4c:5d:77:c4:20:cf:9e:d8:05:ac:6b:a6: 9e:c7:e1:aa:65:3c:33:f6:42:2b:6f:4a:84:bf:76: d1:3d:ca:e5:e1:82:38:4f:d9:84:12:f0:c5:3e:1f: c5:7c:84:57:08:b9:64:ad:aa:ed:f0:fa:8c:57:94: 09:46:c4:cc:25:27:2c:82:8e:4a:c0:63:9a:0a:82: 94:fd:ff:d3:90:91:97:93:04:c0:2c:8b:01:22:9b: 68:85:93:a3:e9:01:e5:2c:1a:e1:49:92:68:99:e6: e3:ae:ab:1c:39:56:1a:d3:d0:78:52:76:ae:9d:d4: b4:23:d5:46:4f:20:f9:bc:44:bc:36:d0:76:c9:2c: e6:0d:69:ff:e1:46:f1:0b:9f:f3:9c:7b:30:b0:c8: 15:08:b4:02:71:75:95:cb:20:d5:86:29:45:10:e4: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D7:21:32:BF:3F:2E:0F:B3:4E:48:77:44:BC:96:A1:A5:7F:03:0E X509v3 Authority Key Identifier: keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:80:8d:69:c3:74:2c:34:7d:42:b0:27:af:11:ed:0a:db:89: e1:22:78:43:42:b8:35:15:df:9e:d6:16:3d:ef:67:50:75:74: 43:d1:df:85:ba:b1:c7:5c:26:7d:35:9c:86:5f:77:5e:0b:62: ba:9e:a3:3c:a4:a5:c1:d0:ff:4e:7e:65:e2:db:72:b4:ce:19: 2a:79:5d:b1:c4:0a:e6:31:f7:dd:7c:9a:0b:aa:21:57:0b:7f: 8d:41:dd:af:df:4b:02:e7:0c:7a:e0:ea:49:a8:bb:11:a6:30: 85:27:e5:53:d5:94:03:6a:d5:6b:d1:81:8e:b4:97:4c:bd:e1: a7:58:cb:ed:7c:82:9e:74:d1:51:ed:37:0a:05:c3:0e:a3:97: e9:83:57:44:dc:8a:50:64:a0:79:be:9f:4e:34:c1:78:0d:99: 40:50:6d:65:1b:3b:08:22:42:a0:75:a7:a1:de:ca:b2:1b:39: 5a:78:b3:67:00:79:95:0b:d2:26:a1:28:72:63:61:34:1b:64: d8:be:b7:20:5c:28:1f:64:c3:c5:84:bb:f1:c5:2b:4c:07:ee: 19:1f:81:70:63:35:95:24:27:4a:80:49:69:b4:33:19:74:57: 4a:72:67:41:e8:80:fa:a3:e2:bb:e8:a2:d2:e9:93:97:64:27: 3d:e8:43:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94aGuQ2s5L2s2zu2XFVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj Mzg1YjAwHhcNMjUxMjA2MTQwMTE2WhcNMjUxMjA3MTQwMTE2WjAzMTEwLwYDVQQD EyhiYWQ3MjEzMmJmM2YyZTBmYjM0ZTQ4Nzc0NGJjOTZhMWE1N2YwMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEhPC/xDYjtnkm9imZFpcafKAje UGhIs0qvhTMEkHgYpsAbw0OrYk8lSgTQ942dqvrIcWqWYNl/uGeS4wsw3I2kq20J uf/iV8q0m0dW7fXaEwmdCFLszFq/hGhMXXfEIM+e2AWsa6aex+GqZTwz9kIrb0qE v3bRPcrl4YI4T9mEEvDFPh/FfIRXCLlkrart8PqMV5QJRsTMJScsgo5KwGOaCoKU /f/TkJGXkwTALIsBIptohZOj6QHlLBrhSZJomebjrqscOVYa09B4UnaundS0I9VG TyD5vES8NtB2ySzmDWn/4UbxC5/znHswsMgVCLQCcXWVyyDVhilFEOQt3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrXITK/Py4Ps05Id0S8lqGlfwMOMB8GA1UdIwQY MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYCNacN0 LDR9QrAnrxHtCtuJ4SJ4Q0K4NRXfntYWPe9nUHV0Q9Hfhbqxx1wmfTWchl93Xgti up6jPKSlwdD/Tn5l4ttytM4ZKnldscQK5jH33XyaC6ohVwt/jUHdr99LAucMeuDq Sai7EaYwhSflU9WUA2rVa9GBjrSXTL3hp1jL7XyCnnTRUe03CgXDDqOX6YNXRNyK UGSgeb6fTjTBeA2ZQFBtZRs7CCJCoHWnod7Kshs5WnizZwB5lQvSJqEocmNhNBtk 2L63IFwoH2TDxYS78cUrTAfuGR+BcGM1lSQnSoBJabQzGXRXSnJnQeiA+qPiu+ii 0umTl2QnPehDWg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:04 2025 by rpki-client