This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json) Hash identifier: mXxYRMoJY43js5BbIf53iXoSihiSdq55HD++9LsmnNA= Subject key identifier: 96:C6:AB:E8:89:3C:5D:00:A0:CB:89:00:C8:1C:EF:3B:F6:C2:C8:10 Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a Certificate serial: 019AF1645A0D0E1BCE5637DA39A05B77B302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft Manifest number: 03B1 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: 9zokUYrOjBrdusZWHqfrmE8V+aZqccGlE3FT0aZnk+Q=) 2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:0d:0e:1b:ce:56:37:da:39:a0:5b:77:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=96c6abe8893c5d00a0cb8900c81cef3bf6c2c810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:3b:7f:96:97:3c:25:9a:d3:f7:28:b0:e2: 06:44:2a:35:e5:9a:3f:4c:3d:1b:7b:b7:ce:c9:4e: 74:5d:b6:2d:84:ea:08:b7:df:2e:60:5e:2d:62:42: 42:f3:03:d0:9f:24:76:98:63:c9:8a:ed:8a:05:dc: a3:fc:9b:d1:ff:2b:82:77:35:a8:88:36:52:e9:2b: 7e:5e:4d:c7:b1:f1:62:eb:39:09:34:bb:38:a9:48: 25:f9:dd:65:ac:20:a6:ff:22:3e:b2:af:e7:45:ed: 64:57:97:74:de:bb:8b:1e:d9:23:71:5b:31:41:80: 01:be:f2:93:cc:d5:6c:13:8c:bc:7e:c2:99:20:c1: 59:54:97:20:e4:94:23:49:f9:ce:24:69:06:19:26: a1:4a:05:2d:69:6f:40:bd:66:37:bb:ba:10:80:62: 99:f5:40:7b:e2:06:b1:77:87:52:24:59:cf:6e:80: cf:4a:2d:f0:ec:9c:ea:e9:75:a4:5e:1b:66:92:03: d4:21:85:e2:23:45:72:34:d7:33:b7:f0:e5:a4:a1: e4:d2:be:94:34:46:56:61:76:b0:8b:51:9e:ca:7e: 00:ef:fd:32:de:f5:fd:66:01:6e:dc:d2:10:5f:76: e6:15:30:1c:c1:f8:ef:bb:64:9a:21:94:fd:57:f7: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:AB:E8:89:3C:5D:00:A0:CB:89:00:C8:1C:EF:3B:F6:C2:C8:10 X509v3 Authority Key Identifier: keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f0:88:33:12:f2:b9:7d:92:68:a4:a9:76:35:81:6e:d3:9b: 2d:f3:fb:ac:11:6f:c4:1d:78:29:e4:88:bb:62:8e:37:4d:e0: 0e:ac:a7:30:de:ac:c9:21:39:2d:99:35:25:91:15:a8:6c:cd: c8:d2:9f:60:28:20:89:ca:c1:60:86:43:b4:fb:a9:e7:a0:59: a2:f9:89:7e:02:c2:c4:d2:78:ec:9d:c8:0e:92:40:c3:59:d5: 7e:ff:57:66:f8:24:d6:fe:88:37:c9:08:79:f3:64:89:5b:bc: 0a:b9:47:58:e4:74:35:89:5e:a4:58:e6:91:b0:71:39:ed:c6: 7b:3e:3f:0f:81:77:b8:57:d6:7b:b7:d8:87:bf:c9:b2:e7:dc: f8:e3:cf:3f:e0:da:97:0d:26:f0:8f:e4:56:00:f4:a5:f2:22: 11:b1:e4:b9:ef:a5:cb:34:46:d7:0d:bd:9b:30:f5:3a:18:d7: d3:00:77:b5:10:ac:d8:e6:56:ae:2d:98:3c:9f:f4:cc:96:a1: 7e:2c:eb:57:4d:e1:2e:0f:cc:b6:7e:32:af:11:1e:21:7f:7e: 3e:de:18:5a:7f:e6:ff:90:5d:b4:6d:43:6d:e8:6a:d4:b9:c4: fb:81:d1:8e:9b:4a:ef:09:23:f3:08:c7:db:15:dd:bb:e1:ae: 5a:a6:11:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFoNDhvOVjfaOaBbd7MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1 YTM3MGEwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg5NmM2YWJlODg5M2M1ZDAwYTBjYjg5MDBjODFjZWYzYmY2YzJjODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeI7f5aXPCWa0/cosOIGRCo15Zo/ TD0be7fOyU50XbYthOoIt98uYF4tYkJC8wPQnyR2mGPJiu2KBdyj/JvR/yuCdzWo iDZS6St+Xk3HsfFi6zkJNLs4qUgl+d1lrCCm/yI+sq/nRe1kV5d03ruLHtkjcVsx QYABvvKTzNVsE4y8fsKZIMFZVJcg5JQjSfnOJGkGGSahSgUtaW9AvWY3u7oQgGKZ 9UB74gaxd4dSJFnPboDPSi3w7Jzq6XWkXhtmkgPUIYXiI0VyNNczt/DlpKHk0r6U NEZWYXawi1Geyn4A7/0y3vX9ZgFu3NIQX3bmFTAcwfjvu2SaIZT9V/c1ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbGq+iJPF0AoMuJAMgc7zv2wsgQMB8GA1UdIwQY MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvCIMxLy uX2SaKSpdjWBbtObLfP7rBFvxB14KeSIu2KON03gDqynMN6sySE5LZk1JZEVqGzN yNKfYCggicrBYIZDtPup56BZovmJfgLCxNJ47J3IDpJAw1nVfv9XZvgk1v6IN8kI efNkiVu8CrlHWOR0NYlepFjmkbBxOe3Gez4/D4F3uFfWe7fYh7/Jsufc+OPPP+Da lw0m8I/kVgD0pfIiEbHkue+lyzRG1w29mzD1OhjX0wB3tRCs2OZWri2YPJ/0zJah fizrV03hLg/Mtn4yrxEeIX9+Pt4YWn/m/5BdtG1Dbehq1LnE+4HRjptK7wkj8wjH 2xXdu+GuWqYRtA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:46 2025 by rpki-client