This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json) Hash identifier: z68Xrb1OlDqACBWrAmLsZjieZ3NO1Qrw4hqBS9wVdzU= Subject key identifier: 9F:D8:61:4A:3A:CC:95:66:80:BC:F9:46:66:45:24:F9:78:D8:8D:2C Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6 Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6 Certificate serial: 019AF31B52709871F8DCC9B7F608D659F3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: KLiEiQz4IYP9ZoAe50vbohWiwmEbYR/JdlJ4XGQ304c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:52:70:98:71:f8:dc:c9:b7:f6:08:d6:59:f3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=9fd8614a3acc956680bcf946664524f978d88d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:f1:b3:0e:4c:8b:d2:06:6f:79:79:26:6e: ab:2b:31:50:d9:3c:1d:c7:bb:f7:83:13:ce:aa:cd: 73:4d:90:e9:54:b6:f6:a3:a1:b0:c0:f4:e1:a1:ac: 3a:db:c5:bc:43:7c:ba:01:01:ca:5e:b0:b6:33:e0: 3e:14:9a:32:d4:28:dc:7f:f5:42:d6:68:96:b5:6e: b9:51:8e:c8:e1:e7:18:c2:5b:1d:fc:9f:94:7a:0b: d0:a8:e7:14:6f:b9:24:1a:77:ab:ef:bf:3c:ca:ef: 79:f0:cf:ad:89:3f:ed:7e:a2:5d:58:41:17:45:05: b5:28:08:fe:21:a1:30:ac:3d:5e:57:6d:ca:40:5c: 25:9a:db:1f:b7:00:58:a9:ff:ab:00:32:74:21:b2: 4e:24:38:05:ad:e4:76:80:5a:f3:ba:80:6e:97:3c: c8:02:7c:56:d2:91:22:67:92:85:23:47:9a:f3:8f: 09:bc:3b:5f:7b:b3:60:4e:41:3a:40:56:85:65:63: a9:7d:fd:1b:6f:cc:e1:25:d9:3e:d1:e5:d7:a2:94: 0b:99:05:5b:b4:79:91:6f:14:8a:45:e7:79:ef:68: 7e:41:71:ec:9f:b6:e6:1d:09:bc:c5:92:95:d2:e6: 8e:06:64:26:ab:70:fc:dd:6f:9f:41:79:3f:05:da: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D8:61:4A:3A:CC:95:66:80:BC:F9:46:66:45:24:F9:78:D8:8D:2C X509v3 Authority Key Identifier: keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3c:9c:a6:b5:60:75:6e:db:e1:77:48:9b:41:c4:d4:50:20: e3:e2:98:51:6e:a1:37:30:34:08:2f:5d:cc:20:a6:ea:1f:e6: 9d:4f:f5:bc:7e:7e:68:aa:bb:b4:1f:e7:04:e9:df:fa:05:a5: 0a:7b:16:88:80:0b:a7:a2:f9:30:5a:7b:a2:1e:de:5c:e5:0f: fd:86:a4:ff:cc:54:cf:c9:75:92:ba:a1:7a:3d:e3:f8:83:db: 31:e0:52:30:da:55:36:0e:dc:ab:84:33:77:80:72:9f:14:b9: 22:6d:1c:b0:bc:3d:3e:1a:d5:66:05:1b:fd:ca:ac:3b:8d:47: d0:85:15:39:bf:56:44:c7:7d:3a:06:f9:d2:b5:6d:00:96:02: d9:85:89:8e:5a:dd:1e:57:9c:13:b0:e9:15:bc:14:f8:37:7e: ea:08:bf:b8:27:1c:89:37:d6:92:cd:f9:27:3c:61:0a:6e:ed: ef:7a:21:44:89:3c:73:34:20:68:fd:f3:0a:f7:e2:85:2f:ab: 2a:38:07:6e:69:1a:16:06:35:e0:a4:77:10:63:88:be:35:0e: 65:d8:94:ef:18:7b:39:d4:04:18:7f:3b:1f:aa:d5:cc:a1:61: 35:ec:8e:10:ef:79:58:34:57:94:ba:9b:fa:1f:ba:2c:32:24: b8:7c:da:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1JwmHH43Mm39gjWWfO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Y2QyNDYxMTlmODU2ZDg5NzNhODc3MGJlYzM5ZmZjNDdh M2M5ZDYwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD Eyg5ZmQ4NjE0YTNhY2M5NTY2ODBiY2Y5NDY2NjQ1MjRmOTc4ZDg4ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Lxsw5Mi9IGb3l5Jm6rKzFQ2Twd x7v3gxPOqs1zTZDpVLb2o6GwwPThoaw628W8Q3y6AQHKXrC2M+A+FJoy1Cjcf/VC 1miWtW65UY7I4ecYwlsd/J+UegvQqOcUb7kkGner7788yu958M+tiT/tfqJdWEEX RQW1KAj+IaEwrD1eV23KQFwlmtsftwBYqf+rADJ0IbJOJDgFreR2gFrzuoBulzzI AnxW0pEiZ5KFI0ea848JvDtfe7NgTkE6QFaFZWOpff0bb8zhJdk+0eXXopQLmQVb tHmRbxSKRed572h+QXHsn7bmHQm8xZKV0uaOBmQmq3D83W+fQXk/BdrOKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/YYUo6zJVmgLz5RmZFJPl42I0sMB8GA1UdIwQY MBaAFDjNJGEZ+FbYlzqHcL7Dn/xHo8nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMt OGZjZDUzZDQzMWQ1LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMtOGZjZDUzZDQzMWQ1 LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjycprVg dW7b4XdIm0HE1FAg4+KYUW6hNzA0CC9dzCCm6h/mnU/1vH5+aKq7tB/nBOnf+gWl CnsWiIALp6L5MFp7oh7eXOUP/Yak/8xUz8l1krqhej3j+IPbMeBSMNpVNg7cq4Qz d4BynxS5Im0csLw9PhrVZgUb/cqsO41H0IUVOb9WRMd9Ogb50rVtAJYC2YWJjlrd HlecE7DpFbwU+Dd+6gi/uCcciTfWks35JzxhCm7t73ohRIk8czQgaP3zCvfihS+r KjgHbmkaFgY14KR3EGOIvjUOZdiU7xh7OdQEGH87H6rVzKFhNeyOEO95WDRXlLqb +h+6LDIkuHzaqw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:00 2025 by rpki-client