This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json) Hash identifier: uSY/VwGzQEUjizOj8NaxIcUKB24Pk0XxkOrSevtr1UY= Subject key identifier: B6:F4:5C:7F:31:2E:D6:54:30:52:EA:94:D7:5B:E7:E1:1F:47:EA:92 Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Certificate serial: 019AF2AD7E0F234DB30CDD843B0DC793AF2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=) 2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: l4qRR85MY+2Sa73OK+TCeWwbFZI7qE0DFCHa+FkLAHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7e:0f:23:4d:b3:0c:dd:84:3b:0d:c7:93:af:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=b6f45c7f312ed6543052ea94d75be7e11f47ea92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:a8:fe:6e:8a:b7:15:7f:32:67:e9:33:02: 91:87:ca:b8:18:6b:06:19:b4:ef:56:3a:7b:1a:aa: 64:b5:16:85:3f:4b:1c:aa:bf:c5:9a:c9:b2:9d:0f: 5b:4e:c9:b5:67:08:53:fa:9a:7b:4d:76:31:b9:fa: b9:01:9d:bc:d8:29:e1:e4:f1:7e:02:6e:ad:45:a3: 00:0a:dc:41:64:29:12:ea:4f:45:90:96:d3:f1:d3: 5f:f1:f0:e1:4f:e4:97:98:d1:75:92:5e:69:fb:d0: 9a:fd:5f:e1:65:55:7e:d0:dd:6c:14:b0:20:70:ba: 83:07:1a:55:9b:6a:32:c6:62:f6:2b:af:63:3f:0c: 52:13:9d:92:8a:9a:21:b7:8d:2a:79:c0:26:1e:5d: 4a:c2:a0:29:cf:d1:a4:ce:5c:a1:66:b3:65:e1:af: 63:1f:82:cb:cb:9c:57:92:90:26:a0:7e:0d:66:c9: 52:1e:a5:70:8e:33:a2:8a:4b:94:3c:0b:3e:18:4d: f5:78:b7:a7:63:5d:ec:36:7d:83:01:ff:ca:7a:fc: 0a:9d:50:e2:85:e2:df:f1:0f:35:77:df:c1:4c:fe: 1f:8c:c3:1a:86:73:a6:80:0d:32:d3:2e:58:fa:9e: be:9d:85:ed:94:a5:74:75:39:e0:3b:89:29:c1:84: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:5C:7F:31:2E:D6:54:30:52:EA:94:D7:5B:E7:E1:1F:47:EA:92 X509v3 Authority Key Identifier: keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:95:2b:59:13:b1:80:cf:74:9e:3c:02:36:9f:ae:aa:4f:49: 03:e3:fc:71:9a:c6:3e:05:90:e9:58:01:17:02:ac:6c:5c:2a: 57:65:3d:9c:92:83:2e:a6:fd:20:5e:9d:aa:56:f1:89:d6:1e: 1c:bd:19:c1:d9:3d:d4:29:04:fb:d4:bc:b4:71:03:90:2c:c1: 77:ff:89:63:1c:95:5d:5d:bb:2f:65:6a:3d:d8:26:ed:5d:9b: c5:20:f6:08:f8:69:38:1b:d0:c2:e1:81:73:6c:e8:b1:af:98: 4f:d1:82:7b:ba:ab:0a:c2:fa:0e:93:e0:5a:42:9b:05:58:a4: 9c:5b:8c:ff:55:8a:36:ba:18:32:af:94:33:90:71:66:b8:2d: 40:a3:29:e5:5f:cb:bf:75:a5:c2:64:10:c8:46:10:7e:70:e8: 7a:f5:33:6e:9c:80:30:73:6b:5d:77:54:71:0f:ba:23:2a:fd: 67:b9:5a:91:71:13:97:91:02:3f:16:c1:49:ff:de:a4:51:2c: 44:33:a7:a8:2c:d1:cd:6e:30:03:4d:b6:9b:e7:7e:42:c5:f0: 09:e9:90:e3:f9:ef:73:4c:6e:59:ac:48:5b:a6:e0:ce:9c:15: 12:72:8f:7b:a5:f1:53:73:3e:ed:6c:81:24:1e:8a:53:d5:60: 30:d4:9f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX4PI02zDN2EOw3Hk68vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0 YzRiMWEwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhiNmY0NWM3ZjMxMmVkNjU0MzA1MmVhOTRkNzViZTdlMTFmNDdlYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmio/m6KtxV/MmfpMwKRh8q4GGsG GbTvVjp7GqpktRaFP0scqr/FmsmynQ9bTsm1ZwhT+pp7TXYxufq5AZ282Cnh5PF+ Am6tRaMACtxBZCkS6k9FkJbT8dNf8fDhT+SXmNF1kl5p+9Ca/V/hZVV+0N1sFLAg cLqDBxpVm2oyxmL2K69jPwxSE52Sipoht40qecAmHl1KwqApz9GkzlyhZrNl4a9j H4LLy5xXkpAmoH4NZslSHqVwjjOiikuUPAs+GE31eLenY13sNn2DAf/KevwKnVDi heLf8Q81d9/BTP4fjMMahnOmgA0y0y5Y+p6+nYXtlKV0dTngO4kpwYTlFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLb0XH8xLtZUMFLqlNdb5+EfR+qSMB8GA1UdIwQY MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5 LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpUrWROx gM90njwCNp+uqk9JA+P8cZrGPgWQ6VgBFwKsbFwqV2U9nJKDLqb9IF6dqlbxidYe HL0Zwdk91CkE+9S8tHEDkCzBd/+JYxyVXV27L2VqPdgm7V2bxSD2CPhpOBvQwuGB c2zosa+YT9GCe7qrCsL6DpPgWkKbBViknFuM/1WKNroYMq+UM5BxZrgtQKMp5V/L v3WlwmQQyEYQfnDoevUzbpyAMHNrXXdUcQ+6Iyr9Z7lakXETl5ECPxbBSf/epFEs RDOnqCzRzW4wA022m+d+QsXwCemQ4/nvc0xuWaxIW6bgzpwVEnKPe6XxU3M+7WyB JB6KU9VgMNSfjw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:21 2025 by rpki-client