This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json) Hash identifier: WLg23u9prv1zB3V6ovbtJ8v6DJJA3QXg9rom6sNp3/c= Subject key identifier: 41:49:B0:AE:BC:4D:9F:65:82:26:D0:04:98:4E:9B:9B:2C:E3:68:4D Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a Certificate serial: 019AF12E2FF17DF787C4880538D5BBB48571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft Manifest number: 14E4 Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: dP60XTCVIG19Fb7Fx9Cw+xWBOcuS8KhalygpsO0Aa8Q=) 2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2f:f1:7d:f7:87:c4:88:05:38:d5:bb:b4:85:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=4149b0aebc4d9f658226d004984e9b9b2ce3684d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:5b:5f:a3:24:c6:37:70:0f:70:72:9d:55: 3d:54:ae:47:12:97:dd:fe:08:26:58:2a:b8:02:21: 04:0b:ec:af:13:ce:5d:b1:e3:80:3b:d7:c0:e7:b5: e1:ce:1f:ee:12:0a:7a:a9:40:a0:05:51:0e:60:41: ca:a8:0b:f8:22:48:4c:58:b1:a6:c9:8f:cc:07:65: be:92:e2:89:8a:93:8a:6b:25:85:56:bc:ef:26:c2: 5d:13:38:79:0f:0d:fa:78:b6:5e:1f:be:de:8a:85: 50:67:1f:47:19:29:87:c5:e2:88:85:88:6a:8d:c6: 2f:df:43:4a:38:a7:6b:7c:53:32:ad:0f:aa:aa:e6: 54:37:c1:ef:d1:d4:c8:00:97:85:48:9a:cd:24:95: 75:e6:a7:7c:87:61:55:1f:93:5b:be:19:34:cf:bf: 7d:da:7b:6a:47:2f:03:40:aa:5b:3e:27:2f:70:59: c4:e3:b5:85:b7:29:b3:8f:8d:20:34:3d:f6:b5:19: 4a:9a:d4:36:be:b1:19:0c:73:12:82:b5:f6:20:c4: ec:a9:55:74:ad:b7:36:76:09:93:22:a2:13:c0:12: d9:b7:70:79:38:d2:21:c2:4b:4b:46:2b:11:76:32: ec:32:72:63:9c:a5:65:da:ff:e1:bb:af:af:7b:6e: ac:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:B0:AE:BC:4D:9F:65:82:26:D0:04:98:4E:9B:9B:2C:E3:68:4D X509v3 Authority Key Identifier: keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:40:ba:3c:3f:f9:4b:00:ee:42:86:06:c5:29:32:55:c6:5c: c7:fd:62:c7:b3:2c:88:8e:44:7d:15:e5:64:95:eb:97:3a:a7: 9b:58:b5:e3:4d:4c:a4:a2:80:56:60:e9:0e:1d:a9:cd:3d:82: ae:4a:b2:eb:cd:ca:10:b3:7c:a9:77:01:8c:51:dd:d7:9f:03: 8c:09:90:76:6b:30:c4:93:17:1e:39:c8:18:5d:b0:dc:53:c7: 36:e2:a6:27:29:4b:5d:26:3f:90:93:14:6e:eb:f2:81:4c:91: b5:d8:01:01:40:ca:4e:93:6e:b9:46:46:db:7e:48:a4:f1:24: 29:c6:d9:85:13:ca:e2:84:93:7e:50:81:88:1c:06:35:b0:32: fd:d7:e9:61:bb:ce:13:cf:48:35:8f:65:1a:d7:71:b2:71:34: 27:94:cc:c4:36:01:28:22:a4:a4:e9:7b:a0:07:b9:39:01:67: 85:c2:b5:01:82:ab:f7:a6:c9:cf:5a:58:62:70:62:37:d0:01: 0f:5c:53:f3:75:03:80:bc:9c:b8:2d:ac:a9:8b:36:d5:a4:36: 0e:bd:da:a6:a2:2e:ab:63:de:58:e6:d3:05:49:0b:ff:09:f7: 4f:7f:50:33:7d:66:45:13:8b:b3:ba:8a:41:8d:b4:f8:e3:8d: aa:4e:70:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi/xffeHxIgFONW7tIVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3 MDQxOWEwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD Eyg0MTQ5YjBhZWJjNGQ5ZjY1ODIyNmQwMDQ5ODRlOWI5YjJjZTM2ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PRbX6MkxjdwD3BynVU9VK5HEpfd /ggmWCq4AiEEC+yvE85dseOAO9fA57Xhzh/uEgp6qUCgBVEOYEHKqAv4IkhMWLGm yY/MB2W+kuKJipOKayWFVrzvJsJdEzh5Dw36eLZeH77eioVQZx9HGSmHxeKIhYhq jcYv30NKOKdrfFMyrQ+qquZUN8Hv0dTIAJeFSJrNJJV15qd8h2FVH5Nbvhk0z799 2ntqRy8DQKpbPicvcFnE47WFtymzj40gND32tRlKmtQ2vrEZDHMSgrX2IMTsqVV0 rbc2dgmTIqITwBLZt3B5ONIhwktLRisRdjLsMnJjnKVl2v/hu6+ve26suwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFJsK68TZ9lgibQBJhOm5ss42hNMB8GA1UdIwQY MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1 LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEC6PD/5 SwDuQoYGxSkyVcZcx/1ix7MsiI5EfRXlZJXrlzqnm1i1401MpKKAVmDpDh2pzT2C rkqy683KELN8qXcBjFHd158DjAmQdmswxJMXHjnIGF2w3FPHNuKmJylLXSY/kJMU buvygUyRtdgBAUDKTpNuuUZG235IpPEkKcbZhRPK4oSTflCBiBwGNbAy/dfpYbvO E89INY9lGtdxsnE0J5TMxDYBKCKkpOl7oAe5OQFnhcK1AYKr96bJz1pYYnBiN9AB D1xT83UDgLycuC2sqYs21aQ2Dr3apqIuq2PeWObTBUkL/wn3T39QM31mRROLs7qK QY20+OONqk5wOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:00:11 2025 by rpki-client