This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json) Hash identifier: kJh4OgaCsp0I1AIPJgqqyMrd/g4VmkNORqIAjsGJ9dM= Subject key identifier: 86:B1:38:FE:AA:3A:36:AB:0C:FD:9D:78:93:4A:5F:6F:9E:7A:B9:8A Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582 Certificate serial: 019AF1D184AACF2BD4806A95168916950C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=) 2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: TbPwhFT+TWtLAtuNNQoVbr39r3suN/XVtOD+pLigPEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:aa:cf:2b:d4:80:6a:95:16:89:16:95:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=86b138feaa3a36ab0cfd9d78934a5f6f9e7ab98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:e4:38:33:80:79:98:a8:f5:a9:a6:68:f5: 0b:46:08:47:c0:3c:c0:1b:d9:1c:ee:f8:92:59:26: c8:eb:75:06:ac:71:db:0c:97:27:db:a7:8b:e4:99: 42:29:d2:4c:74:44:80:cb:17:20:d9:09:aa:53:b5: 4c:e1:51:50:ec:8c:d2:3b:1b:2e:4a:4e:45:e4:cc: 95:7f:a3:cd:e1:27:52:8d:de:5c:90:8f:bc:01:10: 05:7e:96:35:6e:e6:aa:2b:f5:d4:b8:d4:ea:05:15: 12:e1:27:cc:41:9d:0c:11:a7:cf:88:9e:0e:34:49: 4f:39:51:2a:e0:17:72:ef:44:b4:e0:00:7b:dc:ab: 8e:5e:48:5b:03:50:c2:3c:6f:ec:37:5c:21:fa:49: 69:95:7a:cb:88:1e:c0:84:c7:9a:b3:a7:70:76:49: 4d:3f:db:2b:fc:15:bb:13:a4:f8:35:6a:57:cb:d9: bd:8c:39:4f:90:ac:b2:0b:22:ad:5b:83:a0:d3:44: 92:90:63:31:4a:8a:42:51:d0:43:50:07:55:be:1a: 3e:3f:27:6f:ef:ee:9f:c6:82:15:16:4e:02:3c:00: 6e:de:55:64:65:02:90:ac:5f:eb:67:1b:4d:63:2e: eb:54:a4:b3:64:5e:83:67:99:68:9e:5d:c7:57:c5: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B1:38:FE:AA:3A:36:AB:0C:FD:9D:78:93:4A:5F:6F:9E:7A:B9:8A X509v3 Authority Key Identifier: keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:00:30:62:a1:cd:ea:79:59:c8:21:7c:48:57:18:d7:ed:7d: 15:29:e9:6a:19:9b:b0:3d:cc:63:c0:bc:37:90:f3:2d:97:18: f0:ab:b6:96:61:00:53:6f:45:ea:d2:15:fa:84:c9:5f:35:ff: b1:b6:1f:f1:6d:65:02:d8:62:08:cf:41:9e:16:04:15:8d:15: a9:bf:ae:5f:df:95:df:51:41:46:7b:5f:3f:e4:26:52:9e:a3: a0:f2:b3:e9:8a:b9:04:37:92:6a:d9:a6:a7:37:24:b1:d8:47: 7e:84:f1:6a:79:4d:d6:df:c4:e3:1e:3d:72:39:bf:6d:a5:c0: 97:af:51:60:4e:ab:b0:90:25:c8:12:b3:30:f2:fd:7d:fb:78: 4a:51:e5:f5:49:18:42:23:67:49:8e:c8:bf:77:e1:6c:d0:03: f0:25:26:87:20:ec:40:25:c6:0a:7a:3e:37:0f:5e:a0:e8:2b: 8f:b4:c1:d2:af:0b:4f:73:54:22:c2:9f:45:c5:22:51:59:8c: ce:a2:da:a9:a8:64:4a:2b:ec:9e:7f:46:d1:48:35:9d:21:b5: c8:c2:6d:fe:8b:c0:f5:e3:88:7d:d3:e6:a2:9b:3c:1e:9a:0e: 16:39:c5:af:11:b0:e9:ed:2d:a4:f8:1a:1c:2a:eb:a0:7f:6a: 56:23:b2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YSqzyvUgGqVFokWlQwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMTQ2MjljNzY1Y2UxYWM0ZjY4ODk1NmUzYjkwZjZhZDhj NGI1ODIwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg4NmIxMzhmZWFhM2EzNmFiMGNmZDlkNzg5MzRhNWY2ZjllN2FiOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy7kODOAeZio9ammaPULRghHwDzA G9kc7viSWSbI63UGrHHbDJcn26eL5JlCKdJMdESAyxcg2QmqU7VM4VFQ7IzSOxsu Sk5F5MyVf6PN4SdSjd5ckI+8ARAFfpY1buaqK/XUuNTqBRUS4SfMQZ0MEafPiJ4O NElPOVEq4Bdy70S04AB73KuOXkhbA1DCPG/sN1wh+klplXrLiB7AhMeas6dwdklN P9sr/BW7E6T4NWpXy9m9jDlPkKyyCyKtW4Og00SSkGMxSopCUdBDUAdVvho+Pydv 7+6fxoIVFk4CPABu3lVkZQKQrF/rZxtNYy7rVKSzZF6DZ5lonl3HV8UEDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaxOP6qOjarDP2deJNKX2+eermKMB8GA1UdIwQY MBaAFDsUYpx2XOGsT2iJVuO5D2rYxLWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTIt ZmUzMTEwMGQwODFmLzEvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hMzdmOWMtMWU2YS00NjY1LWEwZTItZmUzMTEwMGQwODFm LzEvT3hSaW5IWmM0YXhQYUlsVzQ3a1BhdGpFdFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogAwYqHN 6nlZyCF8SFcY1+19FSnpahmbsD3MY8C8N5DzLZcY8Ku2lmEAU29F6tIV+oTJXzX/ sbYf8W1lAthiCM9BnhYEFY0Vqb+uX9+V31FBRntfP+QmUp6joPKz6Yq5BDeSatmm pzcksdhHfoTxanlN1t/E4x49cjm/baXAl69RYE6rsJAlyBKzMPL9fft4SlHl9UkY QiNnSY7Iv3fhbNAD8CUmhyDsQCXGCno+Nw9eoOgrj7TB0q8LT3NUIsKfRcUiUVmM zqLaqahkSivsnn9G0Ug1nSG1yMJt/ovA9eOIfdPmops8HpoOFjnFrxGw6e0tpPga HCrroH9qViOyVw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:03 2025 by rpki-client