This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json) Hash identifier: tsy7YCybiqwJWXU4MLsedIaziJyGzT+kVwIK7b6oZTQ= Subject key identifier: D8:BC:A1:BF:5F:22:ED:43:98:2B:69:82:B7:6D:33:72:E5:1C:F1:3D Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b Certificate serial: 019AF19B653330A04B713D98D90E99B73B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: ekX1gWFW4Jkm8rBRXqDmvvMu9racCeah4UDJXhyJ9Co=) 2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=) 3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:65:33:30:a0:4b:71:3d:98:d9:0e:99:b7:3b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=d8bca1bf5f22ed43982b6982b76d3372e51cf13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:75:ca:ed:1e:ec:77:32:57:c9:16:4e:06: 75:c3:fd:f6:5a:fe:66:bd:02:62:4b:d7:ab:2f:49: b3:75:f1:77:32:b8:87:76:8e:06:28:39:26:03:64: b5:6d:ea:39:d3:eb:31:44:da:bd:20:0a:74:e2:c3: 1a:ee:73:d1:5b:cf:f9:98:e4:8f:bb:e6:ed:75:26: f8:3c:fc:87:56:0f:e1:97:15:17:13:d1:80:7b:ea: 1a:c4:7e:8d:3a:4d:44:c1:04:9b:03:8e:de:e2:62: 93:7d:59:40:23:48:9a:2e:1f:04:68:7c:8c:d8:51: e1:bd:d2:f9:2b:ea:5c:96:ff:e3:be:6a:72:15:50: b3:d3:5f:1e:1b:f9:2d:d7:51:f9:1f:a3:bd:a7:7d: 41:64:15:65:f3:49:8b:18:fe:f1:d0:96:dc:ef:44: 90:8a:09:d3:e7:37:57:29:ca:3f:86:d1:77:1c:e0: 62:96:a6:67:73:0d:fd:0f:fa:a1:04:e5:c5:a1:17: c5:29:6d:91:30:42:e5:ac:a5:0a:d1:54:d4:e9:5a: 51:b5:46:4a:dd:9d:65:16:03:25:8d:e0:38:61:52: fa:a1:b2:12:a4:3f:09:c2:7a:94:a5:c0:6d:96:68: df:be:36:dd:f6:d1:1b:a7:e9:d0:ff:5f:8a:0f:23: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:A1:BF:5F:22:ED:43:98:2B:69:82:B7:6D:33:72:E5:1C:F1:3D X509v3 Authority Key Identifier: keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:e3:49:f1:e6:94:e8:74:83:fd:1a:02:d9:8b:4d:2d:36: ff:7a:f4:05:1e:17:b8:6b:63:96:6d:13:31:80:ab:73:f4:28: 15:f0:94:02:d5:4f:05:b8:41:4b:ac:87:7b:13:0f:cc:87:77: 41:ce:bc:7c:d3:db:7c:59:5f:35:21:3e:60:1a:0d:ba:a8:ed: 44:35:4f:33:87:f1:41:a5:ba:7f:a4:96:50:03:ec:40:c8:9a: 93:5e:31:d9:78:43:cd:48:da:98:b4:fd:51:93:5b:74:45:73: c7:83:a3:b0:46:85:d4:5f:94:21:e8:9b:45:25:c2:08:e7:95: 78:69:8b:5a:ae:5c:80:ba:b3:ff:77:d6:cf:d8:ca:37:c4:28: 7c:36:c2:88:1b:78:b6:57:3c:6a:29:62:72:2c:ec:15:89:05: a5:eb:3d:fc:6b:39:db:70:2f:e5:4e:27:e4:74:12:5c:57:2d: 57:68:cb:f9:73:3e:29:db:0b:71:e6:39:d6:78:93:d1:f8:a0: 7a:25:21:15:88:68:ec:1d:75:dd:03:a3:ab:da:f9:d5:a5:26: 23:d8:82:f1:e0:bc:43:85:a7:d2:da:51:30:c4:1f:9a:1b:5c: ab:1c:14:11:75:26:3a:e0:93:b7:e1:28:be:45:ab:47:ea:0e: c1:5e:ac:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2UzMKBLcT2Y2Q6ZtztRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3 MTcyNWIwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhkOGJjYTFiZjVmMjJlZDQzOTgyYjY5ODJiNzZkMzM3MmU1MWNmMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKN1yu0e7HcyV8kWTgZ1w/32Wv5m vQJiS9erL0mzdfF3MriHdo4GKDkmA2S1beo50+sxRNq9IAp04sMa7nPRW8/5mOSP u+btdSb4PPyHVg/hlxUXE9GAe+oaxH6NOk1EwQSbA47e4mKTfVlAI0iaLh8EaHyM 2FHhvdL5K+pclv/jvmpyFVCz018eG/kt11H5H6O9p31BZBVl80mLGP7x0Jbc70SQ ignT5zdXKco/htF3HOBilqZncw39D/qhBOXFoRfFKW2RMELlrKUK0VTU6VpRtUZK 3Z1lFgMljeA4YVL6obISpD8JwnqUpcBtlmjfvjbd9tEbp+nQ/1+KDyPnEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi8ob9fIu1DmCtpgrdtM3LlHPE9MB8GA1UdIwQY MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGLjSfHm lOh0g/0aAtmLTS02/3r0BR4XuGtjlm0TMYCrc/QoFfCUAtVPBbhBS6yHexMPzId3 Qc68fNPbfFlfNSE+YBoNuqjtRDVPM4fxQaW6f6SWUAPsQMiak14x2XhDzUjamLT9 UZNbdEVzx4OjsEaF1F+UIeibRSXCCOeVeGmLWq5cgLqz/3fWz9jKN8QofDbCiBt4 tlc8ailicizsFYkFpes9/Gs523Av5U4n5HQSXFctV2jL+XM+KdsLceY51niT0fig eiUhFYho7B113QOjq9r51aUmI9iC8eC8Q4Wn0tpRMMQfmhtcqxwUEXUmOuCTt+Eo vkWrR+oOwV6s8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:12 2025 by rpki-client