This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json) Hash identifier: pS0lieetHc3eOyYdJ4zx6/kTWM9k7m/vRX73bzxBwMg= Subject key identifier: 1E:7D:4C:1A:8F:9A:59:31:DA:7C:BA:5B:32:6C:F7:74:4D:9E:53:C1 Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Certificate serial: 019AF61C66C5A0F64154CAC6B7F9F2620742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft Manifest number: 06C8 Signing time: Sun 07 Dec 2025 00:00:47 +0000 Manifest this update: Sun 07 Dec 2025 00:00:47 +0000 Manifest next update: Mon 08 Dec 2025 00:00:47 +0000 Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: ZFcDBmbWasWvWY1gxTlTMNPIiMfew9KACDSWKWb/klY=) 2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:66:c5:a0:f6:41:54:ca:c6:b7:f9:f2:62:07:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Validity Not Before: Dec 7 00:00:47 2025 GMT Not After : Dec 8 00:00:47 2025 GMT Subject: CN=1e7d4c1a8f9a5931da7cba5b326cf7744d9e53c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:be:8a:9c:9a:c6:5c:06:18:f3:0d:bb:55:37: 6a:db:1f:86:38:1c:e6:74:d4:3b:d6:38:35:47:8a: 55:e7:3c:a7:87:ab:06:2f:c8:06:e5:d8:32:51:eb: 35:95:47:99:37:1c:96:55:2d:e9:80:a9:78:b3:80: 26:d8:fd:64:0d:10:73:ff:cf:75:b8:2f:c7:91:fd: 30:19:9e:30:68:9e:5c:52:f9:2f:cc:27:fd:20:e5: 59:e4:71:be:ea:d3:4f:7f:bc:a3:58:13:59:6a:eb: cd:f3:4e:f5:ba:ff:9b:58:61:b3:56:b6:46:f8:54: 33:1c:21:c5:44:55:bc:84:cc:11:c9:12:9b:d7:11: e4:33:76:a3:b5:95:86:fc:88:0b:bf:75:38:03:41: ee:0e:40:ed:19:23:c0:b8:17:cc:4c:46:bf:f2:7a: 5a:82:9e:35:bc:4d:fb:3c:2a:bf:75:37:39:4e:d0: 36:6a:6b:80:4d:91:bd:11:af:d6:90:92:4f:db:5a: 22:71:1f:98:8b:d2:d9:12:f5:12:8e:81:9b:c2:02: 85:4d:96:2f:0e:9c:f9:0d:a7:91:95:85:d4:e3:28: cd:2b:60:0a:5d:1c:c6:d0:88:e7:17:41:66:c8:aa: 89:42:7c:51:2d:47:ed:ee:42:68:13:a4:3f:f5:ff: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:4C:1A:8F:9A:59:31:DA:7C:BA:5B:32:6C:F7:74:4D:9E:53:C1 X509v3 Authority Key Identifier: keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:af:5d:83:ad:34:60:f2:7b:82:be:34:ed:79:74:f2:93:b6: 55:d1:62:f9:60:b0:95:2d:ae:c4:c1:07:20:3c:fa:f3:b0:15: 50:01:cd:1a:29:7e:0d:c1:f1:8b:ed:c5:fe:6b:9e:51:c4:57: 82:a9:8d:d4:e8:5b:eb:a0:34:d1:75:b7:4e:d0:39:88:41:4c: 51:bd:37:67:dc:33:c5:31:ff:36:84:2a:56:66:7e:b1:8d:12: 1e:4f:31:9a:58:2b:a6:d4:69:2a:c2:75:48:b2:b4:1a:83:da: 6d:c7:0e:7a:f2:79:e9:90:8f:e7:c6:f3:6e:fc:a9:fa:3e:ab: 25:e7:a0:0d:f1:e1:33:ed:87:38:04:66:8d:02:7c:7d:1c:4a: b7:68:e2:0e:40:f4:e0:70:42:6e:7c:87:3a:66:de:38:24:f3: ff:14:e4:2a:be:b1:d0:9e:70:14:62:1f:9d:5d:3d:c1:f0:09: 08:b8:71:64:ea:c1:28:81:16:08:2a:b9:a4:4f:d4:37:a3:58: 74:15:e9:88:d8:4f:be:00:2d:5a:99:7b:c2:0c:f7:b0:2d:4e: 10:82:d9:aa:df:7c:05:d0:ac:0f:95:50:e9:20:40:f1:85:7b: b8:c2:40:76:45:04:c5:37:d4:d7:59:1c:d2:88:55:78:74:98: ee:e5:e3:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGbFoPZBVMrGt/nyYgdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZmVlNmMxZjhjYjIyNTAzOTI1YzFlOTI5MmJmZDE4MWNh OTU5ODQwHhcNMjUxMjA3MDAwMDQ3WhcNMjUxMjA4MDAwMDQ3WjAzMTEwLwYDVQQD EygxZTdkNGMxYThmOWE1OTMxZGE3Y2JhNWIzMjZjZjc3NDRkOWU1M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L6KnJrGXAYY8w27VTdq2x+GOBzm dNQ71jg1R4pV5zynh6sGL8gG5dgyUes1lUeZNxyWVS3pgKl4s4Am2P1kDRBz/891 uC/Hkf0wGZ4waJ5cUvkvzCf9IOVZ5HG+6tNPf7yjWBNZauvN8071uv+bWGGzVrZG +FQzHCHFRFW8hMwRyRKb1xHkM3ajtZWG/IgLv3U4A0HuDkDtGSPAuBfMTEa/8npa gp41vE37PCq/dTc5TtA2amuATZG9Ea/WkJJP21oicR+Yi9LZEvUSjoGbwgKFTZYv Dpz5DaeRlYXU4yjNK2AKXRzG0IjnF0FmyKqJQnxRLUft7kJoE6Q/9f9WxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB59TBqPmlkx2ny6WzJs93RNnlPBMB8GA1UdIwQY MBaAFDj+5sH4yyJQOSXB6Skr/RgcqVmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYt YjVlNGE2ZGNlMTk0LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYtYjVlNGE2ZGNlMTk0 LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa9dg600 YPJ7gr407Xl08pO2VdFi+WCwlS2uxMEHIDz687AVUAHNGil+DcHxi+3F/mueUcRX gqmN1Ohb66A00XW3TtA5iEFMUb03Z9wzxTH/NoQqVmZ+sY0SHk8xmlgrptRpKsJ1 SLK0GoPabccOevJ56ZCP58bzbvyp+j6rJeegDfHhM+2HOARmjQJ8fRxKt2jiDkD0 4HBCbnyHOmbeOCTz/xTkKr6x0J5wFGIfnV09wfAJCLhxZOrBKIEWCCq5pE/UN6NY dBXpiNhPvgAtWpl7wgz3sC1OEILZqt98BdCsD5VQ6SBA8YV7uMJAdkUExTfU11kc 0ohVeHSY7uXjhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:44 2025 by rpki-client