This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json) Hash identifier: XItyZz/0UeS0zLumjP9CzcuEvGRYDkemTWLvptwIGJA= Subject key identifier: 5E:76:21:8B:76:33:BD:EC:59:50:C2:4C:69:50:95:D3:6C:C3:BA:79 Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d Certificate serial: 019AF49C427016519F21A4A288EA690337E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft Manifest number: 0351 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=) 2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: pY3y5Yooffqpe9FcAsCXETLXWlXUxODLJzdHayYfcus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:42:70:16:51:9f:21:a4:a2:88:ea:69:03:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=5e76218b7633bdec5950c24c695095d36cc3ba79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:03:0d:6c:f1:37:3d:ae:54:d4:b4:d6:8d: 4e:4f:12:cf:8a:21:f6:01:22:2c:9e:89:7f:59:8d: e7:db:d6:eb:3a:f7:56:1b:53:57:fd:21:26:91:f1: 99:91:5d:0b:dc:4b:26:61:57:a2:56:59:27:7e:c5: e7:df:14:9e:6e:2b:43:88:e7:3d:59:4d:a9:78:01: ff:fd:8d:5d:85:0f:db:a9:22:47:22:2f:07:74:39: 25:f4:42:86:25:6d:cb:29:8e:f7:6a:94:b5:9f:84: 17:0e:bb:22:ed:b0:3d:6f:72:f5:a8:b5:77:66:67: 3e:c0:dd:8a:f4:20:66:d3:e9:b1:8e:01:98:44:0f: 51:e6:d9:fd:1a:bd:d2:9e:8d:47:f8:90:b5:f6:cc: c8:93:c9:28:97:bf:cc:16:f4:e3:45:c6:56:ea:2e: 13:8f:9b:e9:4e:03:c1:2e:2e:9f:25:63:c0:59:27: eb:08:83:bd:d7:d2:b8:e9:57:2e:84:20:8c:7d:a7: 17:66:57:2e:92:0d:da:e8:83:14:1e:94:70:7c:96: 38:b6:f4:84:fe:36:37:1a:74:48:0c:cf:74:d0:6c: 8e:88:98:93:53:76:d8:9d:a8:5c:85:e9:a7:d3:d5: 86:cf:1d:63:49:9b:b2:1d:5e:01:24:84:c9:74:3e: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:21:8B:76:33:BD:EC:59:50:C2:4C:69:50:95:D3:6C:C3:BA:79 X509v3 Authority Key Identifier: keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d7:3f:cf:e0:43:ab:64:d1:d8:2f:57:52:38:2a:cf:49:5c: 15:34:39:6b:34:49:81:8b:9d:22:42:8a:76:2d:45:cc:bf:68: 9c:95:8a:9d:ac:7e:ad:73:d4:4c:d4:95:d9:55:4f:76:47:25: fb:58:16:40:6e:7b:b9:01:fe:55:bc:ef:a9:fb:64:87:e7:f5: 14:41:78:6f:6c:f5:9e:ac:66:3e:52:da:6c:1e:0f:c5:1a:02: 49:41:b2:9c:0f:45:8f:a9:55:75:ca:00:b3:31:c0:31:18:02: 33:90:7e:18:85:55:a4:3e:7b:ed:de:e4:1e:9d:e4:d1:a6:33: 68:9d:13:f4:95:50:9e:94:04:8a:88:e7:30:35:3d:a8:ba:ab: bf:9d:d6:26:53:0b:40:92:3c:fe:75:a5:10:f8:1c:75:fc:1a: 3a:48:56:bf:21:87:f8:ea:04:1a:aa:1b:84:43:70:47:3f:15: d5:32:e1:7a:08:03:2e:9c:eb:79:85:04:80:58:c5:1e:d7:f8: 3f:38:05:31:23:d0:b3:aa:1b:2f:1f:1d:4e:a3:83:6d:4e:38: 90:56:47:05:15:c7:89:84:f7:c3:bc:82:c4:e2:3e:c4:c5:1b: f3:3b:66:83:f7:dd:00:56:04:8f:c3:92:48:28:34:a4:a5:f0: 46:fb:65:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEJwFlGfIaSiiOppAzfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi NDM5MGQwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD Eyg1ZTc2MjE4Yjc2MzNiZGVjNTk1MGMyNGM2OTUwOTVkMzZjYzNiYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oDDWzxNz2uVNS01o1OTxLPiiH2 ASIsnol/WY3n29brOvdWG1NX/SEmkfGZkV0L3EsmYVeiVlknfsXn3xSebitDiOc9 WU2peAH//Y1dhQ/bqSJHIi8HdDkl9EKGJW3LKY73apS1n4QXDrsi7bA9b3L1qLV3 Zmc+wN2K9CBm0+mxjgGYRA9R5tn9Gr3Sno1H+JC19szIk8kol7/MFvTjRcZW6i4T j5vpTgPBLi6fJWPAWSfrCIO919K46VcuhCCMfacXZlcukg3a6IMUHpRwfJY4tvSE /jY3GnRIDM900GyOiJiTU3bYnahchemn09WGzx1jSZuyHV4BJITJdD4/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF52IYt2M73sWVDCTGlQldNsw7p5MB8GA1UdIwQY MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9c/z+BD q2TR2C9XUjgqz0lcFTQ5azRJgYudIkKKdi1FzL9onJWKnax+rXPUTNSV2VVPdkcl +1gWQG57uQH+Vbzvqftkh+f1FEF4b2z1nqxmPlLabB4PxRoCSUGynA9Fj6lVdcoA szHAMRgCM5B+GIVVpD577d7kHp3k0aYzaJ0T9JVQnpQEiojnMDU9qLqrv53WJlML QJI8/nWlEPgcdfwaOkhWvyGH+OoEGqobhENwRz8V1TLheggDLpzreYUEgFjFHtf4 PzgFMSPQs6obLx8dTqODbU44kFZHBRXHiYT3w7yCxOI+xMUb8ztmg/fdAFYEj8OS SCg0pKXwRvtlTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:17 2025 by rpki-client