This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json) Hash identifier: uMVTlUa2fu5w0Pr4i9DKH9gJPEuFom9QpYnWwZ8KPOY= Subject key identifier: 91:09:C6:D2:84:EE:FA:5C:D9:57:0D:D6:F9:6B:54:82:B1:EC:10:21 Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68 Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568 Certificate serial: 019B26D21C551099AB0CF9C7B33F3FDAE228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft Manifest number: 0F66 Signing time: Tue 16 Dec 2025 11:01:02 +0000 Manifest this update: Tue 16 Dec 2025 11:01:02 +0000 Manifest next update: Wed 17 Dec 2025 11:01:02 +0000 Files and hashes: 1: 3kXlETfWJCAXbDxVUKtx9yNwW6s.roa (hash: +FY4/sli19BSBmLjlHOU6V5Ds/P1dgvrtzoRsC70tAY=) 2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: YD0MNtJOLHCTeqbfnrZgRTBxsltVblRvTCR52t6NxLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:1c:55:10:99:ab:0c:f9:c7:b3:3f:3f:da:e2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568 Validity Not Before: Dec 16 11:01:02 2025 GMT Not After : Dec 17 11:01:02 2025 GMT Subject: CN=9109c6d284eefa5cd9570dd6f96b5482b1ec1021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:d1:ca:4f:69:56:22:e4:4e:55:27:aa:01: 58:48:cf:de:fe:ab:39:bb:8b:d7:1c:88:20:de:9f: 53:ea:b1:12:68:71:3c:a8:82:69:6a:40:67:7a:27: dd:ee:60:4c:40:1a:84:87:21:e1:ae:23:c3:af:5a: 28:bb:2d:d5:2d:cb:dd:97:9b:e4:18:4e:2a:ca:94: 7f:fe:94:7b:b6:b1:ae:19:82:1a:98:51:89:09:6d: 6f:86:71:7b:69:f6:94:03:da:85:ec:98:42:88:fc: ed:fd:05:0f:5f:a9:60:dd:31:ee:29:6a:9c:60:38: 29:c2:90:a3:96:9f:57:c1:da:82:40:b5:d0:cc:4f: 4b:96:48:ce:df:fa:33:a3:05:cc:2d:0b:30:fc:66: 7f:b1:7b:1d:a3:39:24:a4:56:93:f3:80:ff:b3:2c: d3:d7:65:88:d9:e5:c7:61:1f:ee:91:fe:63:61:03: e9:b5:86:53:15:8a:69:c2:b3:cc:c8:8e:60:d4:f1: 6b:c5:9c:4f:fe:e4:a6:ac:5d:e7:1d:c3:0a:94:92: 07:b9:76:09:23:24:3e:9a:75:5c:d7:6a:53:d7:5a: 1e:b5:a8:17:c9:df:fb:58:7a:a5:8e:69:7a:f7:b5: 71:e2:bb:37:6d:bd:b6:c3:71:60:b0:58:0c:0e:3d: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:09:C6:D2:84:EE:FA:5C:D9:57:0D:D6:F9:6B:54:82:B1:EC:10:21 X509v3 Authority Key Identifier: keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:64:43:ba:49:14:a7:54:8d:32:46:c9:08:59:c8:8e:f9:a5: 57:ef:45:9f:38:67:03:b8:52:21:8d:21:3e:51:72:53:a8:16: 78:4a:d9:2a:d7:dd:8e:89:2f:dd:dd:2f:fc:b3:e9:a3:d6:f4: c0:17:d1:5a:c2:f6:2a:cb:e5:a2:20:05:2a:12:d1:7b:8b:17: 3a:3a:de:fd:57:4e:bc:8c:29:f4:de:14:a1:6a:34:6b:e1:a4: 68:eb:7c:29:27:b3:38:25:17:8c:90:a4:d0:d2:5a:45:37:dd: 1a:1e:6c:55:d5:08:4e:3e:d1:33:94:72:0a:5a:7b:19:af:f1: c2:d9:52:31:ee:c0:3c:d7:ae:4a:29:77:59:9b:01:31:be:45: 92:c5:50:e3:34:64:d9:78:a7:82:98:d4:00:11:9c:75:3f:8f: 8b:cb:69:48:c0:bd:13:d4:35:8e:32:dd:2d:56:db:fe:64:a7: 5b:a7:6e:3d:a6:48:e3:c1:d7:02:e1:10:76:46:ac:7d:69:e2: ec:93:3e:1c:8b:20:49:bb:e6:a0:39:a8:d6:6b:a8:50:ba:34: ef:9c:55:a1:93:78:6b:e7:8a:05:97:fe:13:f5:eb:58:d6:26: 83:84:a9:2c:b7:78:ec:c4:86:7f:b4:92:97:30:fe:6b:f5:df: 3a:83:d6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0hxVEJmrDPnHsz8/2uIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3 ZDc1NjgwHhcNMjUxMjE2MTEwMTAyWhcNMjUxMjE3MTEwMTAyWjAzMTEwLwYDVQQD Eyg5MTA5YzZkMjg0ZWVmYTVjZDk1NzBkZDZmOTZiNTQ4MmIxZWMxMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrvRyk9pViLkTlUnqgFYSM/e/qs5 u4vXHIgg3p9T6rESaHE8qIJpakBneifd7mBMQBqEhyHhriPDr1oouy3VLcvdl5vk GE4qypR//pR7trGuGYIamFGJCW1vhnF7afaUA9qF7JhCiPzt/QUPX6lg3THuKWqc YDgpwpCjlp9XwdqCQLXQzE9LlkjO3/ozowXMLQsw/GZ/sXsdozkkpFaT84D/syzT 12WI2eXHYR/ukf5jYQPptYZTFYppwrPMyI5g1PFrxZxP/uSmrF3nHcMKlJIHuXYJ IyQ+mnVc12pT11oetagXyd/7WHqljml697Vx4rs3bb22w3FgsFgMDj1cJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEJxtKE7vpc2VcN1vlrVIKx7BAhMB8GA1UdIwQY MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmRDukkU p1SNMkbJCFnIjvmlV+9FnzhnA7hSIY0hPlFyU6gWeErZKtfdjokv3d0v/LPpo9b0 wBfRWsL2KsvloiAFKhLRe4sXOjre/VdOvIwp9N4UoWo0a+GkaOt8KSezOCUXjJCk 0NJaRTfdGh5sVdUITj7RM5RyClp7Ga/xwtlSMe7APNeuSil3WZsBMb5FksVQ4zRk 2XingpjUABGcdT+Pi8tpSMC9E9Q1jjLdLVbb/mSnW6duPaZI48HXAuEQdkasfWni 7JM+HIsgSbvmoDmo1muoULo075xVoZN4a+eKBZf+E/XrWNYmg4SpLLd47MSGf7SS lzD+a/XfOoPW3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:14 2025 by rpki-client