This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json) Hash identifier: Q8ngFXtnrreLMNFLg6X0ZilNYkz2+1THkmD+KBpIFyU= Subject key identifier: 45:B1:82:65:12:18:04:F6:E1:7B:E9:8E:64:79:76:E8:E9:EE:DB:7B Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb Certificate serial: 019AF5410659A193FDA641986D2ED443B44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 20:01:10 +0000 Manifest this update: Sat 06 Dec 2025 20:01:10 +0000 Manifest next update: Sun 07 Dec 2025 20:01:10 +0000 Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: yJLJqAaRiAwa52YaYGGiigJLk2e7XUlWxds071qicLE=) 2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:06:59:a1:93:fd:a6:41:98:6d:2e:d4:43:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb Validity Not Before: Dec 6 20:01:10 2025 GMT Not After : Dec 7 20:01:10 2025 GMT Subject: CN=45b18265121804f6e17be98e647976e8e9eedb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f3:12:f3:e3:c2:65:5d:00:62:ca:cb:60:28: 9f:0d:88:8a:4b:a1:d3:7f:94:a6:37:18:e0:35:eb: 8e:d3:aa:77:8a:f0:a0:08:c1:ef:0d:5b:f6:f1:5e: bf:9d:96:16:91:22:5d:9a:53:f5:09:93:23:95:d1: 4f:78:6c:80:d7:34:d4:66:15:25:25:89:fc:e9:de: 81:97:f7:bb:4a:99:b6:b1:ec:6b:b2:51:43:7a:43: 1f:b9:9a:3b:f2:26:de:11:03:a3:d6:d1:d0:a6:63: 81:84:97:ff:2a:9a:a7:5e:f2:dc:38:d2:03:12:39: 1c:11:31:15:96:d8:d3:69:2a:43:01:cc:bc:8a:0e: 6c:c6:24:aa:da:e6:7a:77:f8:91:6f:71:ab:51:5e: a8:48:f8:03:ff:c7:34:53:04:f9:81:05:59:6d:9d: 9c:cc:63:5f:34:06:0e:67:a5:d0:26:f6:5a:6b:44: d1:7e:58:4f:70:c6:1f:8e:9b:5c:cc:7a:bf:d9:6b: aa:9d:45:32:8b:7b:4c:81:8f:a1:f7:a9:d6:f6:01: 86:63:a4:1f:66:72:4a:94:1e:c4:10:ab:c0:59:31: 5d:aa:a8:55:e8:9d:5a:d8:93:b2:c1:eb:74:6d:b3: 12:58:df:67:60:60:d9:83:91:3c:62:73:a3:fa:99: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:82:65:12:18:04:F6:E1:7B:E9:8E:64:79:76:E8:E9:EE:DB:7B X509v3 Authority Key Identifier: keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:00:96:14:60:af:69:64:89:8c:48:2e:4a:01:ee:35:e6:66: 4f:7e:68:77:40:d2:24:66:28:73:c9:98:38:ac:c8:08:f3:33: 69:6d:e2:69:67:d4:bb:2f:b0:32:9f:59:1d:bf:25:0b:d9:5a: 42:f5:bd:60:e7:4a:c0:0a:f1:dc:40:19:10:b6:1b:a5:05:39: d6:a7:c7:36:03:d4:46:9b:02:96:8b:5b:0c:6a:53:38:c2:92: 1f:cf:53:70:b0:08:26:1d:b0:19:52:b1:1d:b4:ee:f4:de:89: 70:3e:df:9e:6f:81:39:69:51:e0:ff:e9:5b:4e:37:09:11:4f: 4a:72:d9:e0:f4:6a:55:00:50:08:52:e5:1d:fe:4f:68:ea:6e: f1:23:55:3a:7b:b0:a7:47:55:e4:aa:c5:37:99:55:38:e9:6c: 39:43:75:d4:e0:03:dd:b3:c1:94:cd:77:49:e0:e6:9d:91:1c: d6:da:75:18:3a:29:2f:7d:6a:98:eb:3c:ed:b6:20:d7:05:fd: ef:96:84:c6:d1:a8:78:fb:70:92:69:44:6a:b8:60:16:55:95: f6:2c:a6:d2:bb:18:d1:4d:0d:43:48:c3:11:c1:ce:f5:10:fe: d9:49:18:69:1f:90:a3:4f:2f:e0:3b:28:9b:82:c4:7d:84:ac: 4a:57:cc:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQZZoZP9pkGYbS7UQ7RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2 NDRjZGIwHhcNMjUxMjA2MjAwMTEwWhcNMjUxMjA3MjAwMTEwWjAzMTEwLwYDVQQD Eyg0NWIxODI2NTEyMTgwNGY2ZTE3YmU5OGU2NDc5NzZlOGU5ZWVkYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/MS8+PCZV0AYsrLYCifDYiKS6HT f5SmNxjgNeuO06p3ivCgCMHvDVv28V6/nZYWkSJdmlP1CZMjldFPeGyA1zTUZhUl JYn86d6Bl/e7Spm2sexrslFDekMfuZo78ibeEQOj1tHQpmOBhJf/KpqnXvLcONID EjkcETEVltjTaSpDAcy8ig5sxiSq2uZ6d/iRb3GrUV6oSPgD/8c0UwT5gQVZbZ2c zGNfNAYOZ6XQJvZaa0TRflhPcMYfjptczHq/2WuqnUUyi3tMgY+h96nW9gGGY6Qf ZnJKlB7EEKvAWTFdqqhV6J1a2JOywet0bbMSWN9nYGDZg5E8YnOj+pnHmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWxgmUSGAT24XvpjmR5dujp7tt7MB8GA1UdIwQY MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwCWFGCv aWSJjEguSgHuNeZmT35od0DSJGYoc8mYOKzICPMzaW3iaWfUuy+wMp9ZHb8lC9la QvW9YOdKwArx3EAZELYbpQU51qfHNgPURpsClotbDGpTOMKSH89TcLAIJh2wGVKx HbTu9N6JcD7fnm+BOWlR4P/pW043CRFPSnLZ4PRqVQBQCFLlHf5PaOpu8SNVOnuw p0dV5KrFN5lVOOlsOUN11OAD3bPBlM13SeDmnZEc1tp1GDopL31qmOs87bYg1wX9 75aExtGoePtwkmlEarhgFlWV9iym0rsY0U0NQ0jDEcHO9RD+2UkYaR+Qo08v4Dso m4LEfYSsSlfMXA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:36 2025 by rpki-client