This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json) Hash identifier: XN1LHsmKZSFKd7YRpr+0Y/bMa4kH+KBeG9vs9JLA31o= Subject key identifier: 53:F8:22:70:24:19:91:6F:92:08:E5:F1:37:D5:A8:49:04:B0:22:33 Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb Certificate serial: 019B330CC53C6983326715305302111C242E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 20:00:33 +0000 Manifest this update: Thu 18 Dec 2025 20:00:33 +0000 Manifest next update: Fri 19 Dec 2025 20:00:33 +0000 Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: dc9wzCD8Oe1Lof5wpffmBl+LYiOCMpKeOJkEn8pwew8=) 2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:c5:3c:69:83:32:67:15:30:53:02:11:1c:24:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb Validity Not Before: Dec 18 20:00:33 2025 GMT Not After : Dec 19 20:00:33 2025 GMT Subject: CN=53f822702419916f9208e5f137d5a84904b02233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:7c:48:aa:39:93:38:e3:a4:6f:16:87:7f: 22:eb:73:f0:b7:4d:5c:e7:f7:e8:c2:fd:c6:6d:d7: 81:2c:87:93:94:c4:00:5c:e7:30:9e:41:50:31:8d: ff:41:6b:ad:c2:f3:b0:a5:04:9d:49:32:8a:72:5b: 9e:e4:88:3c:1c:20:19:79:bb:bd:88:2a:9c:bc:81: 97:5c:5c:38:55:3f:55:3b:14:ca:9c:2d:30:1e:6d: 21:36:a6:6a:c1:fc:c3:07:48:a2:e4:48:7a:bc:09: b1:a0:ba:b6:a2:29:6e:0d:87:d2:f1:c0:e2:a2:99: 0e:f8:c7:da:f4:13:5b:51:39:2c:5f:55:d7:34:18: 75:a1:50:12:5c:ea:71:3f:54:8e:21:18:37:39:d8: 5c:da:2b:a0:9e:c9:9f:45:90:7f:11:92:8d:c3:83: 10:e4:e4:d5:61:ac:3b:0d:f9:7b:26:b9:bf:ba:86: d7:05:f7:ec:68:af:33:3b:4a:9a:22:f3:b9:cd:b3: b9:55:13:64:50:0a:4f:85:08:9d:fa:f7:9d:03:c1: 92:07:8f:52:2a:bf:3e:71:6a:ce:99:24:fd:31:f3: 5d:d0:8e:c3:8d:e5:48:49:ba:e7:3b:54:ea:89:5f: 3d:8a:a0:bf:07:2a:4a:1c:f0:95:3b:c6:b3:04:c7: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F8:22:70:24:19:91:6F:92:08:E5:F1:37:D5:A8:49:04:B0:22:33 X509v3 Authority Key Identifier: keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ff:65:46:a0:c5:40:c6:1f:a5:3f:a3:47:ad:1e:be:59:c0: 00:9a:4d:64:5b:63:c4:fb:e9:2d:99:dd:da:f5:1f:c0:19:b2: 5b:33:65:5c:fb:dc:7d:cf:09:ba:37:17:a9:32:ec:46:2d:52: 42:d7:47:d9:80:44:cf:52:52:a2:e3:70:b1:96:b0:89:89:ae: fa:7b:ce:e6:82:5c:c2:74:e6:08:d7:fe:3d:a3:9b:91:ad:27: 7e:31:28:19:b1:a3:2f:b6:db:e0:6c:3f:d0:b3:75:44:03:ce: 49:a0:f6:27:d5:6c:a6:67:4d:c4:e9:d5:ae:ca:1e:e0:df:54: 37:30:e8:2a:3a:b1:84:06:56:88:60:51:c8:19:11:b4:96:47: f1:88:26:39:e2:1b:99:17:5b:1e:77:97:71:52:7e:7d:a4:41: 21:f7:41:73:4c:d1:34:2c:e8:29:cd:46:4c:5d:ba:ed:85:e9: 58:2a:f2:7b:b9:d2:c1:9f:a7:4d:ca:9b:22:18:08:00:e8:09: b8:41:d6:84:1e:95:b7:ab:59:b7:ea:cc:38:46:dc:79:f4:67: a6:21:a7:d1:f8:29:07:ee:5a:ec:dd:56:a8:43:ad:29:7b:22: 42:60:66:2b:91:5d:6a:24:fe:3a:73:d3:61:9b:b1:87:d7:a6: 7b:20:87:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDMU8aYMyZxUwUwIRHCQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2 NDRjZGIwHhcNMjUxMjE4MjAwMDMzWhcNMjUxMjE5MjAwMDMzWjAzMTEwLwYDVQQD Eyg1M2Y4MjI3MDI0MTk5MTZmOTIwOGU1ZjEzN2Q1YTg0OTA0YjAyMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QV8SKo5kzjjpG8Wh38i63Pwt01c 5/fowv3GbdeBLIeTlMQAXOcwnkFQMY3/QWutwvOwpQSdSTKKclue5Ig8HCAZebu9 iCqcvIGXXFw4VT9VOxTKnC0wHm0hNqZqwfzDB0ii5Eh6vAmxoLq2oiluDYfS8cDi opkO+Mfa9BNbUTksX1XXNBh1oVASXOpxP1SOIRg3Odhc2iugnsmfRZB/EZKNw4MQ 5OTVYaw7Dfl7Jrm/uobXBffsaK8zO0qaIvO5zbO5VRNkUApPhQid+vedA8GSB49S Kr8+cWrOmST9MfNd0I7DjeVISbrnO1TqiV89iqC/BypKHPCVO8azBMee9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFP4InAkGZFvkgjl8TfVqEkEsCIzMB8GA1UdIwQY MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/9lRqDF QMYfpT+jR60evlnAAJpNZFtjxPvpLZnd2vUfwBmyWzNlXPvcfc8JujcXqTLsRi1S QtdH2YBEz1JSouNwsZawiYmu+nvO5oJcwnTmCNf+PaObka0nfjEoGbGjL7bb4Gw/ 0LN1RAPOSaD2J9VspmdNxOnVrsoe4N9UNzDoKjqxhAZWiGBRyBkRtJZH8YgmOeIb mRdbHneXcVJ+faRBIfdBc0zRNCzoKc1GTF267YXpWCrye7nSwZ+nTcqbIhgIAOgJ uEHWhB6Vt6tZt+rMOEbcefRnpiGn0fgpB+5a7N1WqEOtKXsiQmBmK5FdaiT+OnPT YZuxh9emeyCHgw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:08:11 2025 by rpki-client