This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json) Hash identifier: FfJEKQz9CsKMBjLAHtIPWvYQxoQhiJ4aeptsXJ+FfYQ= Subject key identifier: 06:D9:E1:8C:55:B7:78:24:CE:23:E6:07:BB:5A:35:E6:F6:7D:A5:F4 Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Certificate serial: 019AF50A3B975662B7AB3CA7D15DE4332F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 19:01:19 +0000 Manifest this update: Sat 06 Dec 2025 19:01:19 +0000 Manifest next update: Sun 07 Dec 2025 19:01:19 +0000 Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: w5lcwfi3eB9dUD0FJ/eDO1uMHQQybw8eDUFEO0hCEDk=) 2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=) 3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3b:97:56:62:b7:ab:3c:a7:d1:5d:e4:33:2f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Validity Not Before: Dec 6 19:01:19 2025 GMT Not After : Dec 7 19:01:19 2025 GMT Subject: CN=06d9e18c55b77824ce23e607bb5a35e6f67da5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:6f:f5:94:c7:78:87:34:10:d5:66:95:0c: ca:24:5f:ab:69:a6:f5:68:09:ba:ba:8c:7f:17:26: 20:10:ed:ad:86:23:9e:aa:6d:15:68:00:2c:b4:0d: e1:54:80:7c:8f:e9:e2:8b:8f:7e:46:0f:62:84:bf: 1b:d1:02:da:e0:9c:d4:00:f6:40:ca:2e:ff:6d:52: 17:55:27:77:28:c6:66:a2:7f:2f:79:3a:5d:17:86: b2:25:2c:26:8f:c4:56:e1:41:59:51:e5:1e:6b:52: 98:67:dd:81:3f:fb:cb:f6:7a:9c:d8:e0:d3:9f:8c: 97:84:97:21:14:3b:d2:2e:06:f1:9d:03:05:3f:dc: 6d:a5:e3:db:65:aa:82:93:9c:dd:bf:67:be:74:4e: 3d:60:f4:38:68:40:13:fc:8a:29:cb:be:56:20:ef: 79:7f:38:d8:37:49:68:fb:72:e2:51:5b:03:4a:6b: e4:a9:a3:1e:58:e6:e1:57:3e:67:2a:69:be:c2:13: 1f:99:78:f5:b8:85:8b:96:b4:a5:85:f2:d8:1b:29: 29:c2:9d:1a:6b:cb:32:84:01:34:cd:d6:de:96:65: 12:cd:1d:ef:26:bc:f7:39:fe:90:23:20:85:77:b7: 2d:70:30:63:2e:56:52:33:43:48:af:0b:b3:26:da: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:E1:8C:55:B7:78:24:CE:23:E6:07:BB:5A:35:E6:F6:7D:A5:F4 X509v3 Authority Key Identifier: keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e8:93:40:1f:32:4a:3a:22:ee:e5:15:b7:7c:13:6d:1c:71: a3:e8:5a:aa:a3:5b:78:5e:60:c7:f6:a4:5a:ad:8e:e1:e2:64: 0d:c1:13:55:59:1e:dd:9b:be:20:31:de:f8:26:09:cc:f5:60: 03:25:6e:47:c0:4d:6c:e4:56:44:1a:1a:55:1e:7d:da:da:2e: bf:98:ba:ad:b1:b4:b5:a1:34:e2:d4:35:90:ad:c3:24:9b:c4: 3c:83:a5:b5:5a:9a:1c:56:c2:9e:04:fb:44:56:68:c6:02:a1: 8b:96:16:fc:1f:1e:b6:19:25:2c:ac:3a:39:bc:8a:3e:ec:b0: 21:7f:7d:59:ad:ac:cd:c9:18:68:35:08:f5:da:90:00:d8:dd: 1b:a2:0f:81:c9:37:17:4d:23:3a:ea:83:c4:63:b1:5a:ea:ea: d1:9d:7a:18:d8:ea:98:2a:21:c1:b9:64:1a:2b:8c:79:08:1a: 6a:bf:f6:c5:25:c5:72:50:69:de:54:00:6e:d3:ea:1c:c2:98: 01:7e:ba:da:cf:b3:c9:65:d0:a7:33:a3:29:cf:f6:6d:fa:8b: 82:eb:e1:3c:bb:de:fd:a4:3b:63:6c:c3:d6:d4:89:8f:78:71: ec:23:45:7a:a2:1b:b8:a6:f2:11:89:fb:cb:87:67:21:30:ca: 60:3d:fc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjuXVmK3qzyn0V3kMy9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4 MjdhNTgwHhcNMjUxMjA2MTkwMTE5WhcNMjUxMjA3MTkwMTE5WjAzMTEwLwYDVQQD EygwNmQ5ZTE4YzU1Yjc3ODI0Y2UyM2U2MDdiYjVhMzVlNmY2N2RhNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xpv9ZTHeIc0ENVmlQzKJF+raab1 aAm6uox/FyYgEO2thiOeqm0VaAAstA3hVIB8j+nii49+Rg9ihL8b0QLa4JzUAPZA yi7/bVIXVSd3KMZmon8veTpdF4ayJSwmj8RW4UFZUeUea1KYZ92BP/vL9nqc2ODT n4yXhJchFDvSLgbxnQMFP9xtpePbZaqCk5zdv2e+dE49YPQ4aEAT/Iopy75WIO95 fzjYN0lo+3LiUVsDSmvkqaMeWObhVz5nKmm+whMfmXj1uIWLlrSlhfLYGykpwp0a a8syhAE0zdbelmUSzR3vJrz3Of6QIyCFd7ctcDBjLlZSM0NIrwuzJtozBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbZ4YxVt3gkziPmB7taNeb2faX0MB8GA1UdIwQY MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt NzI2NzA3Mzc2MWQ0LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0 LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOiTQB8y Sjoi7uUVt3wTbRxxo+haqqNbeF5gx/akWq2O4eJkDcETVVke3Zu+IDHe+CYJzPVg AyVuR8BNbORWRBoaVR592touv5i6rbG0taE04tQ1kK3DJJvEPIOltVqaHFbCngT7 RFZoxgKhi5YW/B8ethklLKw6ObyKPuywIX99Wa2szckYaDUI9dqQANjdG6IPgck3 F00jOuqDxGOxWurq0Z16GNjqmCohwblkGiuMeQgaar/2xSXFclBp3lQAbtPqHMKY AX662s+zyWXQpzOjKc/2bfqLguvhPLve/aQ7Y2zD1tSJj3hx7CNFeqIbuKbyEYn7 y4dnITDKYD38Mg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:20 2025 by rpki-client