This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json) Hash identifier: rHjNnKIRTndHt5K/nSLCgVRKRCQLDiOU1d5Oi1OC5wA= Subject key identifier: AC:08:58:28:74:9F:19:D0:F9:F9:C7:19:B1:F8:F2:B2:A7:F6:EE:20 Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383 Certificate serial: 019AF19AA0D05CF69E86E22586F95317C146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: Im0WTkMR8mb5pGS8k8wug0rPf+dhs6ivFGOhJ7qbZPA=) 2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a0:d0:5c:f6:9e:86:e2:25:86:f9:53:17:c1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39469af33611b79084f575e95b13e66550edb383 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=ac085828749f19d0f9f9c719b1f8f2b2a7f6ee20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:04:63:5e:04:b3:b8:8f:28:06:9e:2d:27: 7f:91:84:a0:0a:1e:94:5a:be:46:67:35:6a:86:a5: 1e:46:09:2a:de:7b:a0:df:f5:43:26:26:9d:e5:f7: 4a:30:b8:58:11:d8:85:68:f1:a3:95:b8:93:c2:91: 93:a7:5f:d2:06:07:9a:cb:12:0b:fb:47:47:b9:8e: ad:da:3c:53:6a:44:06:ce:11:85:2f:71:00:ce:11: 37:a0:42:59:4a:2a:51:5a:46:c2:45:e9:81:59:c3: 45:75:ac:c1:93:4e:66:ec:f6:66:e6:13:fa:ce:5d: 98:64:f3:8b:4a:9b:c2:6b:9c:80:e1:35:e4:c6:96: d0:b8:8b:3c:2f:f6:8d:dc:8e:23:e1:cf:0c:cb:b8: a1:df:5e:42:e6:52:16:b4:14:aa:5c:e3:3a:e0:a9: 66:a0:4c:68:b2:92:9d:c9:16:80:40:15:f1:0c:84: 9a:91:6c:78:a8:16:86:a9:eb:fb:ae:73:74:b4:66: a9:8c:d4:04:38:43:1e:16:95:17:ce:09:81:dc:5b: c4:80:1c:5e:ce:69:5b:d1:3d:70:f7:cf:b4:99:0c: dc:fa:6c:3c:83:78:5f:31:ee:7a:8c:f7:99:b6:ee: 84:df:59:51:40:6a:6a:54:13:33:3e:c7:cc:fd:80: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:58:28:74:9F:19:D0:F9:F9:C7:19:B1:F8:F2:B2:A7:F6:EE:20 X509v3 Authority Key Identifier: keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:71:58:56:09:8e:e4:e6:fe:85:19:7c:73:40:22:29:0a:24: b6:4f:81:86:24:7b:fd:d0:44:3f:f8:2a:b6:13:25:09:a0:d5: 46:c2:c5:6c:50:1c:4b:04:c1:c4:89:15:ad:e9:3d:d5:8b:0a: 88:af:0a:68:e9:c6:dd:68:a4:4c:df:00:c5:f6:1e:3d:d8:9e: cb:43:d9:85:6e:19:d2:3a:f3:94:18:47:0a:0d:eb:04:e4:97: 65:1e:ac:35:f5:4f:eb:e0:6e:27:3a:85:ce:a8:eb:17:08:1e: e1:c4:fa:0c:7b:67:5e:1f:3a:00:f0:c4:43:cd:3a:27:a0:85: 7c:a6:cd:f9:7f:dc:41:30:3b:4e:5e:f5:47:17:94:cc:81:39: 02:20:fb:79:4b:b4:bd:08:2c:15:b4:a7:ca:96:2c:6e:f2:81: 26:77:72:2b:33:7d:2d:c6:15:82:2b:4d:0b:9e:b0:2c:fa:f2: 40:ba:47:99:e1:c6:33:be:72:54:cc:a6:c9:48:9d:2a:a1:7f: 20:55:09:22:5b:53:5a:f3:07:05:fa:8a:a8:58:03:e8:9c:30: 9d:74:a6:25:f2:67:0d:6b:34:c7:d1:cb:7b:fe:ac:54:56:ad: 24:78:3f:45:d0:2d:3f:65:ce:9a:46:a7:fe:d9:fe:d4:8a:0c: 99:30:e8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqDQXPaehuIlhvlTF8FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl ZGIzODMwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhhYzA4NTgyODc0OWYxOWQwZjlmOWM3MTliMWY4ZjJiMmE3ZjZlZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXwEY14Es7iPKAaeLSd/kYSgCh6U Wr5GZzVqhqUeRgkq3nug3/VDJiad5fdKMLhYEdiFaPGjlbiTwpGTp1/SBgeayxIL +0dHuY6t2jxTakQGzhGFL3EAzhE3oEJZSipRWkbCRemBWcNFdazBk05m7PZm5hP6 zl2YZPOLSpvCa5yA4TXkxpbQuIs8L/aN3I4j4c8My7ih315C5lIWtBSqXOM64Klm oExospKdyRaAQBXxDISakWx4qBaGqev7rnN0tGapjNQEOEMeFpUXzgmB3FvEgBxe zmlb0T1w98+0mQzc+mw8g3hfMe56jPeZtu6E31lRQGpqVBMzPsfM/YA7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwIWCh0nxnQ+fnHGbH48rKn9u4gMB8GA1UdIwQY MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt NjZkZDJhOTFmYWNhLzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnFYVgmO 5Ob+hRl8c0AiKQoktk+BhiR7/dBEP/gqthMlCaDVRsLFbFAcSwTBxIkVrek91YsK iK8KaOnG3WikTN8AxfYePdiey0PZhW4Z0jrzlBhHCg3rBOSXZR6sNfVP6+BuJzqF zqjrFwge4cT6DHtnXh86APDEQ806J6CFfKbN+X/cQTA7Tl71RxeUzIE5AiD7eUu0 vQgsFbSnypYsbvKBJndyKzN9LcYVgitNC56wLPryQLpHmeHGM75yVMymyUidKqF/ IFUJIltTWvMHBfqKqFgD6JwwnXSmJfJnDWs0x9HLe/6sVFatJHg/RdAtP2XOmkan /tn+1IoMmTDomQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:41 2025 by rpki-client