This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json) Hash identifier: nDeGMqT0LuJYCbpaWRZ/vVqSWozO7pfqxDU5KeTfxWo= Subject key identifier: 76:0D:2F:38:E6:4C:8F:E6:0D:46:0A:F7:D3:AC:97:15:94:22:05:32 Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191 Certificate serial: 019AF0BF3B07B48EFD35E3024F70855AF6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft Manifest number: 16B6 Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: 5QteHr09tgeivLwx4F8kVgcu5AjzQDQCY9nN3Au9F7I=) 2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3b:07:b4:8e:fd:35:e3:02:4f:70:85:5a:f6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191 Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=760d2f38e64c8fe60d460af7d3ac971594220532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:0c:1b:7d:e1:58:62:06:1a:be:8e:fb:97: 7c:d3:12:20:8c:e8:15:f0:dd:3b:9d:27:b7:40:52: 57:bf:6e:0d:47:dd:af:cc:5f:41:05:22:fd:5d:40: c8:e0:7f:c6:1e:36:4f:fe:35:a6:86:c0:c4:21:c0: a5:38:6b:38:62:56:55:e5:b0:ea:e8:d0:2c:e8:9f: c1:97:51:84:55:09:e2:99:82:bc:a7:f0:c0:1a:26: 7f:2b:70:10:b4:b9:be:41:97:49:df:9b:fe:ae:c4: ae:2d:47:02:fe:a6:a2:26:3e:a8:ae:57:46:42:c6: b8:b7:ee:52:81:ee:0e:40:96:f8:11:98:6e:44:eb: 7c:03:b8:52:31:3d:4d:cf:40:d7:39:bd:a2:b3:a3: 57:08:78:65:7c:e5:93:8d:07:08:6e:a3:7e:9c:66: c4:7e:73:82:68:be:c4:17:44:57:f1:e3:aa:fd:22: c1:d1:8b:6f:d1:3a:6a:3c:6a:0f:37:7a:b4:63:fb: 30:81:b4:cf:9b:9e:de:cf:f2:95:04:c6:87:95:53: fb:68:06:5f:76:a5:4d:34:0f:a1:97:ce:d2:0e:de: 3f:95:72:b9:39:23:96:da:40:b6:5b:33:47:45:13: c2:18:b4:ae:a6:b6:d8:45:51:bd:a0:32:fc:00:d1: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:2F:38:E6:4C:8F:E6:0D:46:0A:F7:D3:AC:97:15:94:22:05:32 X509v3 Authority Key Identifier: keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7e:57:5d:0b:9b:f3:04:6c:36:32:8e:57:35:70:60:bf:bf: 04:22:45:eb:76:3a:f6:b5:6d:aa:5c:8e:23:ec:1a:4b:ff:5a: 17:aa:fc:8b:0d:4c:d7:e5:bc:fa:34:f1:34:71:45:64:71:43: 52:8b:4b:98:c7:06:67:c1:8d:c0:61:19:cb:45:57:fb:41:18: cb:b6:4f:41:72:eb:c8:af:86:c9:6e:3e:ce:69:85:10:ed:22: e7:8d:c2:d7:3e:ae:a5:e1:da:83:bf:eb:80:54:26:29:1a:ff: 38:d9:67:1c:24:5f:f9:00:b3:43:22:41:02:0b:96:42:b1:db: 74:58:b4:bd:f4:4c:83:b8:ea:70:2e:34:fa:73:b8:ff:dd:ed: 71:84:7d:b6:50:8d:65:c6:21:f4:76:7d:c4:bb:1b:66:11:ec: 97:09:26:a5:4c:9e:e2:2c:dc:f5:98:90:1d:90:7a:1b:6f:21: 17:b0:db:81:33:2f:5e:da:1c:8f:90:b7:ee:44:c7:bd:0d:42: 23:43:86:39:7a:1a:44:a0:e9:1c:fd:42:8e:f6:19:4d:4b:cb: fa:43:00:b9:1c:ef:20:8c:a4:4c:e2:99:ce:3d:52:32:9a:0e: 21:4a:55:c7:4f:14:97:6e:85:d2:2c:58:b3:e9:88:a4:87:75: 01:01:bd:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzsHtI79NeMCT3CFWva3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx NzkxOTEwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD Eyg3NjBkMmYzOGU2NGM4ZmU2MGQ0NjBhZjdkM2FjOTcxNTk0MjIwNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOYMG33hWGIGGr6O+5d80xIgjOgV 8N07nSe3QFJXv24NR92vzF9BBSL9XUDI4H/GHjZP/jWmhsDEIcClOGs4YlZV5bDq 6NAs6J/Bl1GEVQnimYK8p/DAGiZ/K3AQtLm+QZdJ35v+rsSuLUcC/qaiJj6orldG Qsa4t+5Sge4OQJb4EZhuROt8A7hSMT1Nz0DXOb2is6NXCHhlfOWTjQcIbqN+nGbE fnOCaL7EF0RX8eOq/SLB0Ytv0TpqPGoPN3q0Y/swgbTPm57ez/KVBMaHlVP7aAZf dqVNNA+hl87SDt4/lXK5OSOW2kC2WzNHRRPCGLSuprbYRVG9oDL8ANHaqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYNLzjmTI/mDUYK99OslxWUIgUyMB8GA1UdIwQY MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt ODZlNWE5ZWY4NjJhLzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYn5XXQub 8wRsNjKOVzVwYL+/BCJF63Y69rVtqlyOI+waS/9aF6r8iw1M1+W8+jTxNHFFZHFD UotLmMcGZ8GNwGEZy0VX+0EYy7ZPQXLryK+GyW4+zmmFEO0i543C1z6upeHag7/r gFQmKRr/ONlnHCRf+QCzQyJBAguWQrHbdFi0vfRMg7jqcC40+nO4/93tcYR9tlCN ZcYh9HZ9xLsbZhHslwkmpUye4izc9ZiQHZB6G28hF7DbgTMvXtocj5C37kTHvQ1C I0OGOXoaRKDpHP1CjvYZTUvL+kMAuRzvIIykTOKZzj1SMpoOIUpVx08Ul26F0ixY s+mIpId1AQG9Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:54 2025 by rpki-client