This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json) Hash identifier: S9juD5t/14yQl5Xms/hwPmZBOdk9ApS67R9E44lZmFY= Subject key identifier: 64:68:0C:62:3D:B0:35:6D:17:A4:DA:63:C4:E9:80:5E:75:B3:C7:16 Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Certificate serial: 019AF208D17F1A8CF7D2972E028E142FE7B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: f17AVJv033EL5KrcY6raZbeYJi8LdBL9m5jNRiLKErk=) 2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d1:7f:1a:8c:f7:d2:97:2e:02:8e:14:2f:e7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=64680c623db0356d17a4da63c4e9805e75b3c716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:17:0e:e6:77:06:8b:5f:44:af:57:5c:cc: 58:36:e7:8a:fc:0e:41:e8:39:a8:73:c1:5e:d0:09: 62:79:70:72:5b:53:ab:33:c5:9e:6e:71:f9:87:5c: 2e:cb:04:8f:0b:12:19:e8:29:14:83:cc:3c:06:60: 6a:68:4a:1d:58:9d:bf:d6:cc:91:e7:27:73:5f:86: 68:bd:b3:16:eb:71:e8:3e:fc:39:1e:a8:ef:9c:4f: 09:a0:0e:3e:37:24:33:c0:f2:07:fd:cf:e5:21:17: 2b:14:6f:76:fb:70:41:88:74:5a:30:72:50:c9:d9: ab:6a:4b:2c:2e:b3:ab:da:e1:02:74:d6:be:af:d5: cb:25:c8:16:5b:5a:60:01:03:5a:03:14:ea:7c:38: e9:02:37:de:9a:4c:20:cb:e4:9d:16:f3:c6:05:57: a1:01:1e:0f:62:03:e2:f8:f6:89:8d:5e:f6:8d:bd: 28:bb:6a:9a:4a:d6:fa:00:72:a1:5b:8a:05:68:d0: e9:bd:62:87:31:2e:54:bb:c2:3d:c2:30:9d:39:ef: 0e:3d:59:61:aa:37:dc:7e:30:9d:a6:c0:10:d9:b8: 80:d2:95:5d:80:15:2a:68:ee:06:3a:92:6b:a0:70: c8:90:cd:70:21:d9:e6:79:ec:b2:c1:e4:d0:d7:6b: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:68:0C:62:3D:B0:35:6D:17:A4:DA:63:C4:E9:80:5E:75:B3:C7:16 X509v3 Authority Key Identifier: keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6b:f0:0e:5a:6c:61:94:cd:f2:0b:30:c1:a1:8b:ca:ff:53: 2b:2e:eb:29:c0:34:78:8b:70:07:d8:cb:a1:78:e2:e3:44:ca: ff:a9:ff:2a:a9:22:51:ed:3e:41:0e:82:91:93:85:8b:c3:9e: 18:0d:ca:fe:7c:88:6a:79:3b:97:1f:5d:69:a1:57:46:6b:2e: 10:32:2d:2c:d6:2e:17:a1:96:40:10:68:71:8b:04:dc:71:69: 14:93:9b:b7:97:be:19:bb:6a:4b:3a:f0:4b:4e:fb:23:a2:54: af:6a:3a:36:57:62:db:cf:54:2b:ac:a2:c7:ed:0b:17:eb:cc: 16:a9:5b:2c:dd:0c:df:a8:f3:0d:07:41:9b:97:3b:29:47:87: 9a:1b:4f:c6:fc:54:92:5c:87:b7:49:0b:62:66:1e:c7:31:41: 40:bd:c4:b1:09:71:e7:ca:4b:8f:37:fd:27:e4:f2:b5:7a:90: 83:20:2b:63:2a:87:c2:f0:db:2b:b7:96:33:50:70:4a:88:00: 92:a9:84:cc:3e:35:ab:63:f4:38:0f:e5:6c:53:c0:88:3b:22: 37:4a:e8:c4:2b:11:3b:57:49:64:69:23:0f:87:1e:29:18:3f: b2:22:5a:d4:9b:37:ae:5a:41:76:3c:4e:6e:f7:13:cd:4c:2c: d7:ef:37:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNF/Goz30pcuAo4UL+e2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx NzlhYzIwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg2NDY4MGM2MjNkYjAzNTZkMTdhNGRhNjNjNGU5ODA1ZTc1YjNjNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQXDuZ3BotfRK9XXMxYNueK/A5B 6Dmoc8Fe0AlieXByW1OrM8WebnH5h1wuywSPCxIZ6CkUg8w8BmBqaEodWJ2/1syR 5ydzX4ZovbMW63HoPvw5HqjvnE8JoA4+NyQzwPIH/c/lIRcrFG92+3BBiHRaMHJQ ydmrakssLrOr2uECdNa+r9XLJcgWW1pgAQNaAxTqfDjpAjfemkwgy+SdFvPGBVeh AR4PYgPi+PaJjV72jb0ou2qaStb6AHKhW4oFaNDpvWKHMS5Uu8I9wjCdOe8OPVlh qjfcfjCdpsAQ2biA0pVdgBUqaO4GOpJroHDIkM1wIdnmeeyyweTQ12s1OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRoDGI9sDVtF6TaY8TpgF51s8cWMB8GA1UdIwQY MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWvwDlps YZTN8gswwaGLyv9TKy7rKcA0eItwB9jLoXji40TK/6n/KqkiUe0+QQ6CkZOFi8Oe GA3K/nyIank7lx9daaFXRmsuEDItLNYuF6GWQBBocYsE3HFpFJObt5e+GbtqSzrw S077I6JUr2o6Nldi289UK6yix+0LF+vMFqlbLN0M36jzDQdBm5c7KUeHmhtPxvxU klyHt0kLYmYexzFBQL3EsQlx58pLjzf9J+TytXqQgyArYyqHwvDbK7eWM1BwSogA kqmEzD41q2P0OA/lbFPAiDsiN0roxCsRO1dJZGkjD4ceKRg/siJa1Js3rlpBdjxO bvcTzUws1+83qg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:46 2025 by rpki-client