This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json) Hash identifier: RXMrH4F+QGIUVnpF/bkqVTnxBTin2a52oi0ByXZJmq8= Subject key identifier: E0:CA:94:56:E4:3F:E8:2F:DC:79:A5:9A:21:84:7F:20:97:AD:3C:68 Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f Certificate serial: 019AF12DF32D0C9D8281F14BC25F53D168D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft Manifest number: 0226 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (hash: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=) 2: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: tD9t0ESJZRLY8vw9MgNBk2wV+/o6zjFuH+/KEpKpSA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f3:2d:0c:9d:82:81:f1:4b:c2:5f:53:d1:68:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=e0ca9456e43fe82fdc79a59a21847f2097ad3c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:fb:6c:21:fd:70:dd:74:e1:76:45:52:e6: 34:45:cc:01:06:7e:0d:af:58:c0:b6:38:ce:8f:46: d1:6a:57:8d:ef:3f:72:5a:3e:9d:cc:c9:39:68:22: 42:9e:43:63:e5:9d:ac:42:30:dc:e5:c9:30:8e:65: b2:69:38:75:14:a6:b3:55:83:3e:f2:e0:5f:f1:bf: 2d:58:b3:86:06:a3:11:e6:f9:f4:f0:cf:8e:69:86: 4c:84:f7:98:c1:cc:45:e5:26:e8:d3:4e:21:51:b9: a8:f9:8b:3a:ba:5b:e0:02:d1:25:09:c3:d2:77:1f: 5e:31:46:7c:b7:3d:a0:ba:45:0a:95:19:7e:93:88: 8a:f2:0d:c7:7d:a1:ba:fa:95:cb:75:c2:78:16:3e: c0:3d:74:c2:07:3e:9d:a2:b2:54:bd:05:42:de:96: d3:5b:8e:15:7a:1d:bb:53:65:4a:2b:c0:25:19:81: 78:d9:2f:da:53:30:8d:95:cb:1f:a5:8e:09:42:08: 11:8e:2e:7c:65:94:03:66:48:1b:e3:a3:39:dc:99: 6e:4f:a6:0d:fd:43:27:5a:7a:4e:62:70:fe:1a:ab: 5e:17:86:82:61:a8:5f:f7:06:00:50:21:f0:ef:20: 33:10:3b:ea:8f:e1:c9:48:1d:e3:53:bb:8b:45:da: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:94:56:E4:3F:E8:2F:DC:79:A5:9A:21:84:7F:20:97:AD:3C:68 X509v3 Authority Key Identifier: keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:a5:1c:58:0c:5f:12:c6:83:43:55:36:a0:b2:7c:69:81:2a: c1:59:b0:e5:9e:3c:f4:6d:ae:14:b6:cc:ba:a5:b1:ea:b9:de: f2:57:3c:58:22:36:aa:1b:15:8b:97:72:63:b9:78:d8:2b:c7: fd:da:ff:ee:d8:c1:ee:6f:ea:d3:6b:72:44:d9:cb:de:6c:c4: 21:b5:4e:68:a7:d1:60:c7:be:57:5f:d9:5b:0b:84:68:89:39: 84:fc:12:9c:91:22:1e:c4:05:cf:8a:35:2f:10:ba:c8:0e:71: 19:3c:71:12:5c:a5:f5:3b:81:b5:ea:d4:f4:0a:17:00:b2:de: 91:81:a1:4f:01:9c:0e:df:75:7f:e2:c7:03:92:97:f3:11:0c: 39:e1:3b:fb:b9:23:a1:a5:3c:e6:a4:0c:51:52:b7:f6:63:3d: 01:b0:61:7c:f9:01:39:b3:13:9b:86:52:3e:ed:1b:02:5f:14: 07:3f:dd:56:fd:ac:8e:53:9c:2d:bc:35:f9:33:0d:ec:d4:3d: 9f:35:93:63:c3:0b:86:fd:fe:ca:08:44:46:40:24:e6:b4:39: e3:51:cd:77:de:4a:95:62:83:59:5a:64:1b:7e:74:6e:a5:4a: ea:d0:08:8a:ac:23:73:f8:6c:f1:e5:ca:bf:60:1d:b9:96:a1: 3c:d0:2d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfMtDJ2CgfFLwl9T0WjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Mjc5MDJlZWNhNTJhOWYwODE0MDA4OGY1NThlNDUyZTBl Yzk1NWYwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EyhlMGNhOTQ1NmU0M2ZlODJmZGM3OWE1OWEyMTg0N2YyMDk3YWQzYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtL7bCH9cN104XZFUuY0RcwBBn4N r1jAtjjOj0bRaleN7z9yWj6dzMk5aCJCnkNj5Z2sQjDc5ckwjmWyaTh1FKazVYM+ 8uBf8b8tWLOGBqMR5vn08M+OaYZMhPeYwcxF5Sbo004hUbmo+Ys6ulvgAtElCcPS dx9eMUZ8tz2gukUKlRl+k4iK8g3HfaG6+pXLdcJ4Fj7APXTCBz6dorJUvQVC3pbT W44Veh27U2VKK8AlGYF42S/aUzCNlcsfpY4JQggRji58ZZQDZkgb46M53JluT6YN /UMnWnpOYnD+GqteF4aCYahf9wYAUCHw7yAzEDvqj+HJSB3jU7uLRdp0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODKlFbkP+gv3HmlmiGEfyCXrTxoMB8GA1UdIwQY MBaAFDgnkC7spSqfCBQAiPVY5FLg7JVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgt NzdkYjMyNjQ3Y2E5LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgtNzdkYjMyNjQ3Y2E5 LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KUcWAxf EsaDQ1U2oLJ8aYEqwVmw5Z489G2uFLbMuqWx6rne8lc8WCI2qhsVi5dyY7l42CvH /dr/7tjB7m/q02tyRNnL3mzEIbVOaKfRYMe+V1/ZWwuEaIk5hPwSnJEiHsQFz4o1 LxC6yA5xGTxxElyl9TuBterU9AoXALLekYGhTwGcDt91f+LHA5KX8xEMOeE7+7kj oaU85qQMUVK39mM9AbBhfPkBObMTm4ZSPu0bAl8UBz/dVv2sjlOcLbw1+TMN7NQ9 nzWTY8MLhv3+yghERkAk5rQ541HNd95KlWKDWVpkG350bqVK6tAIiqwjc/hs8eXK v2AduZahPNAt5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:08 2025 by rpki-client