This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json) Hash identifier: +2qlea2bvCVB3EJwOAxJ5VN0KECGirTVZcnu1ApcTNE= Subject key identifier: 9A:4F:DD:80:C1:AC:A7:01:B9:36:57:FE:32:15:F4:AC:D0:4D:E0:86 Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Certificate serial: 019AF12D3FC5C58E364A1DEA5D36847C2622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: wwPVTujRTnusuMp8GyF1hyKc4lgm53T4oSGU8+wm2gM=) 2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3f:c5:c5:8e:36:4a:1d:ea:5d:36:84:7c:26:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=9a4fdd80c1aca701b93657fe3215f4acd04de086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:89:e1:cf:85:49:23:2b:ce:fb:b3:0f:f3: 83:1b:18:ac:39:f2:af:c6:80:a9:c0:3b:af:95:c0: af:ad:df:98:f7:1b:e6:0a:f5:41:f7:2b:1a:07:29: e9:b7:0f:3c:f2:37:88:31:de:8f:65:17:b9:ac:eb: ae:b9:48:1c:de:1d:8b:b5:d0:84:19:4e:76:6a:30: fe:da:41:81:5f:65:a0:ff:3b:c3:12:15:4f:ac:ba: de:c9:8c:fb:cd:29:62:f9:9d:64:32:88:3d:52:f7: 71:cc:4f:0f:07:98:fc:ab:3f:f2:24:57:18:36:e2: a0:28:80:94:f3:49:4c:32:4c:5e:22:7d:b7:b0:12: a3:e7:86:1a:d3:6e:c8:02:73:93:6d:06:21:b8:28: a1:a8:b5:d3:2a:d9:fd:7b:41:e0:4e:ce:fb:6d:a5: fc:d2:6c:b1:ac:cf:ac:b3:39:8a:3d:79:e5:fa:e1: 7b:28:e8:fa:f2:8b:ea:46:bc:55:7b:69:c3:e2:3e: 8b:31:be:e2:47:e6:48:90:a4:a9:2f:6c:d0:7a:6e: 18:ca:41:a9:dd:e6:f8:32:96:a8:9c:4f:31:bd:3e: 35:0b:63:27:4d:55:8c:e0:5c:59:e4:fd:2c:9e:25: 2e:1b:b2:00:a3:0d:9e:4b:2c:6a:76:cc:d5:de:da: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:DD:80:C1:AC:A7:01:B9:36:57:FE:32:15:F4:AC:D0:4D:E0:86 X509v3 Authority Key Identifier: keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:0b:e0:2d:47:f5:4f:eb:4b:7b:f3:e3:85:ad:59:84:8e: 6c:28:97:72:5d:8d:61:51:e0:95:28:cd:66:c4:ab:be:b9:6c: 28:44:13:8b:ef:44:6e:d0:b0:57:de:5e:7c:1a:0f:d8:33:ad: b2:33:dc:6b:f3:f5:e1:fe:2a:f9:40:90:37:b5:12:95:d6:c6: 9e:44:6f:6e:35:65:d5:9e:a5:2b:c4:22:b1:7c:8c:bf:5e:1f: e0:7c:bb:98:f3:02:5a:6a:59:2a:82:a7:b7:81:ec:2b:6e:ff: 72:e6:60:95:c0:f8:dd:75:3f:59:c9:11:48:8b:d9:f7:db:d4: e5:55:ba:ee:2a:ef:a3:1b:8a:83:db:16:c5:5a:ce:b1:ca:d4: d5:27:c4:c6:44:1a:8b:a1:c4:92:53:40:94:fb:fb:7c:9c:e0: 5c:53:2c:e5:35:c8:61:3a:25:09:9a:98:46:a2:8a:69:d2:67: a5:9d:57:c5:2b:38:62:2c:5a:ea:40:a8:15:13:7c:d6:7b:ef: 3d:bf:89:29:ac:ac:f1:bf:8f:3f:97:33:a1:c3:84:79:e9:76: f4:a4:6a:ea:96:b7:d2:98:34:49:5e:08:2a:b4:71:c7:98:af: 45:16:f7:cc:b5:72:75:a0:6c:bd:10:81:6a:b6:6b:3b:b7:33: a4:d3:d6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT/FxY42Sh3qXTaEfCYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzZlNmFiMDg0YzllZWVkZTg2ZTJhZjZiZGU3MjE1Mjc0 Yjk1YTcwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD Eyg5YTRmZGQ4MGMxYWNhNzAxYjkzNjU3ZmUzMjE1ZjRhY2QwNGRlMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6yJ4c+FSSMrzvuzD/ODGxisOfKv xoCpwDuvlcCvrd+Y9xvmCvVB9ysaBynptw888jeIMd6PZRe5rOuuuUgc3h2LtdCE GU52ajD+2kGBX2Wg/zvDEhVPrLreyYz7zSli+Z1kMog9UvdxzE8PB5j8qz/yJFcY NuKgKICU80lMMkxeIn23sBKj54Ya027IAnOTbQYhuCihqLXTKtn9e0HgTs77baX8 0myxrM+sszmKPXnl+uF7KOj68ovqRrxVe2nD4j6LMb7iR+ZIkKSpL2zQem4YykGp 3eb4MpaonE8xvT41C2MnTVWM4FxZ5P0sniUuG7IAow2eSyxqdszV3trwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpP3YDBrKcBuTZX/jIV9KzQTeCGMB8GA1UdIwQY MBaAFDl25qsITJ7u3obir2vechUnS5WnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMt ZDY2Njc0Y2ZhNDI0LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMtZDY2Njc0Y2ZhNDI0 LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFUL4C1H 9U/rS3vz44WtWYSObCiXcl2NYVHglSjNZsSrvrlsKEQTi+9EbtCwV95efBoP2DOt sjPca/P14f4q+UCQN7USldbGnkRvbjVl1Z6lK8QisXyMv14f4Hy7mPMCWmpZKoKn t4HsK27/cuZglcD43XU/WckRSIvZ99vU5VW67irvoxuKg9sWxVrOscrU1SfExkQa i6HEklNAlPv7fJzgXFMs5TXIYTolCZqYRqKKadJnpZ1XxSs4Yixa6kCoFRN81nvv Pb+JKays8b+PP5czocOEeel29KRq6pa30pg0SV4IKrRxx5ivRRb3zLVydaBsvRCB arZrO7czpNPWMg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:14 2025 by rpki-client