This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json) Hash identifier: Lg0EQb2wzkziRY30AyP6t0h8K4SbphoGESpb6uw6gMo= Subject key identifier: 7E:26:11:E2:5B:CF:AE:75:EC:F7:39:1D:0D:6F:EB:08:25:C3:57:0F Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Certificate serial: 019AF19B85307DB15ECF4A713A1CFB59430D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft Manifest number: 039E Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: 9QS1zHKcKbmPX2sVrkdF2f9Nc7InvFYxqx+fJQzUbe4=) 2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:85:30:7d:b1:5e:cf:4a:71:3a:1c:fb:59:43:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=7e2611e25bcfae75ecf7391d0d6feb0825c3570f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:4f:cf:cc:64:65:ba:a2:8a:46:a7:4c:e5: 20:47:6c:79:5d:d4:64:49:20:32:3b:14:ca:c1:47: 08:74:9a:0d:06:4c:56:36:51:6e:2a:c2:ab:4e:49: fe:9a:be:bd:04:d0:a1:10:0b:d8:88:b7:c9:e1:9e: 48:00:23:ca:1f:b9:d5:f6:f2:28:7f:37:6c:fc:35: 53:13:10:2d:6a:92:51:b9:78:97:4c:28:3f:a3:25: 38:ca:e5:6c:b4:8a:6f:4a:16:10:a7:6e:50:ae:f7: bf:71:b1:97:bd:12:2b:9b:e3:ee:d4:8d:db:c0:bf: 21:97:83:c1:86:aa:8d:3e:ea:5d:77:5f:c6:70:2c: 3d:8c:23:80:4d:e7:0e:57:56:c7:ad:19:92:b8:56: 9d:32:6e:b0:30:4a:d1:3f:92:4f:38:45:12:73:52: 3b:3c:e7:24:d1:59:6d:bf:4c:b8:5b:2f:f6:3a:b2: 3c:f9:47:90:21:fd:41:82:9d:d9:1b:09:2a:70:cb: 3c:ea:91:65:87:88:ec:e1:9c:c5:b7:53:cc:d0:3f: 72:78:f9:8a:0b:55:57:ab:c6:60:f0:1c:3c:a0:d6: 15:88:98:93:8b:1c:00:95:49:7f:ac:d6:a0:af:0c: 16:82:4f:b3:ec:07:76:8c:bb:b0:62:a2:4f:28:b9: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:11:E2:5B:CF:AE:75:EC:F7:39:1D:0D:6F:EB:08:25:C3:57:0F X509v3 Authority Key Identifier: keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4c:eb:4b:92:e0:20:db:e8:fc:8f:17:f3:fa:9d:17:6c:f3: 1c:38:55:99:20:43:b5:21:5d:8c:6d:74:87:33:db:d0:78:1c: f5:71:eb:97:71:2b:05:21:86:c4:81:4b:9e:18:af:6e:3d:f7: 75:a5:53:42:7c:1c:b5:b0:56:bf:43:42:45:e8:03:ed:ee:6c: 9d:8a:ac:b6:dd:c4:36:4d:10:d8:1b:1c:d6:90:70:4f:49:23: 37:f8:75:0e:22:a9:bc:80:92:5d:8c:e1:cb:0d:55:08:1e:a7: 7c:31:15:cc:ad:fe:f1:3d:33:58:bc:81:c8:21:cc:3b:83:10: c3:c0:6b:25:03:40:e3:82:89:68:ee:a3:5b:08:67:52:28:f7: 54:fb:41:00:f4:63:9c:c2:6f:7a:f8:f1:35:dd:82:cf:93:00: 77:de:33:54:bd:84:ce:52:7e:f2:6e:10:c7:d6:25:b2:92:6f: ae:cf:d7:ea:a4:4b:41:10:90:47:ad:82:09:a3:bc:6a:85:fb: c0:c3:54:e1:4d:83:0b:4e:cd:9e:68:09:aa:9d:72:e3:55:58: f3:db:3d:e3:94:a3:c0:10:f1:f1:6b:be:d8:80:31:b2:14:c9: 2e:4c:be:29:c0:13:43:63:cf:b5:08:d6:7b:9a:ad:ca:b7:17: 0c:9c:40:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4UwfbFez0pxOhz7WUMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1 YTM1YjIwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD Eyg3ZTI2MTFlMjViY2ZhZTc1ZWNmNzM5MWQwZDZmZWIwODI1YzM1NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWhPz8xkZbqiikanTOUgR2x5XdRk SSAyOxTKwUcIdJoNBkxWNlFuKsKrTkn+mr69BNChEAvYiLfJ4Z5IACPKH7nV9vIo fzds/DVTExAtapJRuXiXTCg/oyU4yuVstIpvShYQp25Qrve/cbGXvRIrm+Pu1I3b wL8hl4PBhqqNPupdd1/GcCw9jCOATecOV1bHrRmSuFadMm6wMErRP5JPOEUSc1I7 POck0Vltv0y4Wy/2OrI8+UeQIf1Bgp3ZGwkqcMs86pFlh4js4ZzFt1PM0D9yePmK C1VXq8Zg8Bw8oNYViJiTixwAlUl/rNagrwwWgk+z7Ad2jLuwYqJPKLmBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4mEeJbz6517Pc5HQ1v6wglw1cPMB8GA1UdIwQY MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5 LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEzrS5Lg INvo/I8X8/qdF2zzHDhVmSBDtSFdjG10hzPb0Hgc9XHrl3ErBSGGxIFLnhivbj33 daVTQnwctbBWv0NCRegD7e5snYqstt3ENk0Q2Bsc1pBwT0kjN/h1DiKpvICSXYzh yw1VCB6nfDEVzK3+8T0zWLyByCHMO4MQw8BrJQNA44KJaO6jWwhnUij3VPtBAPRj nMJvevjxNd2Cz5MAd94zVL2EzlJ+8m4Qx9YlspJvrs/X6qRLQRCQR62CCaO8aoX7 wMNU4U2DC07NnmgJqp1y41VY89s945SjwBDx8Wu+2IAxshTJLky+KcATQ2PPtQjW e5qtyrcXDJxA6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:38 2025 by rpki-client