This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json) Hash identifier: 1TGmt2N+NkdpH3pR6FRl4sJ0ADFmcGKbgiKcvQ0sRVg= Subject key identifier: 49:34:70:8F:DA:CB:BA:44:C7:0D:30:1A:EA:EE:E4:31:F0:20:82:9B Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Certificate serial: 019AF1D23733C749CDE2DF2C5228E80801BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=) 2: GAcb3_GTi9es4ti94Ex9da8Yuuo.roa (hash: hXt1K6MNNmm3FVbMZur0tZVjSZe1csXYHc6pvZG31yI=) 3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=) 4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: ZuO/iFpa/qQqMkqRUB/IioR0XgT+HOpKCg4Yzw/DwKY=) 5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=) 6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:33:c7:49:cd:e2:df:2c:52:28:e8:08:01:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=4934708fdacbba44c70d301aeaeee431f020829b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:27:f6:69:57:af:fc:ee:8e:33:4a:13:67: 27:88:01:86:e5:53:98:98:fa:10:1e:6d:2c:be:b1: 1d:e3:6f:c2:1f:a1:8e:9b:80:78:5f:d4:c7:83:6a: bf:d6:d3:7c:6b:ae:d9:e0:2f:a9:68:4b:5c:20:96: 77:8f:e1:66:66:da:ec:3f:2d:53:86:07:75:a4:25: 42:35:e8:8b:3e:2a:9c:cd:23:bd:49:d4:7a:db:9f: 08:ff:2c:31:05:c3:1b:ca:a7:3b:e4:59:fc:74:c6: 2d:6d:45:a7:2d:eb:f4:65:48:de:93:31:80:38:24: f6:3d:62:05:d5:c1:fc:4e:37:5c:8c:60:84:08:e5: ca:7d:73:3e:2d:b2:0b:ba:71:e5:dd:96:36:6b:a6: c6:e7:75:d5:46:9c:27:f0:1e:1c:23:b0:83:42:f9: b3:1a:79:2d:b8:81:12:c9:04:40:8b:e6:9e:9e:2c: 40:05:15:22:c3:96:0d:80:67:44:b6:12:1d:45:2c: e5:46:ef:a7:f3:7b:c5:c9:ac:85:2c:cf:ac:81:b6: 08:31:31:07:18:5b:e2:94:a6:8f:8a:5a:3c:cf:15: bb:ed:25:28:6f:fc:8b:27:4f:1f:80:97:36:7f:fa: 16:6a:f2:13:aa:9f:dc:0c:59:98:02:33:82:6f:03: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:34:70:8F:DA:CB:BA:44:C7:0D:30:1A:EA:EE:E4:31:F0:20:82:9B X509v3 Authority Key Identifier: keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ee:9a:eb:92:e2:c4:34:cd:81:2f:ad:f4:05:d6:f2:64:90: bd:de:29:6b:ca:e0:ad:a8:81:52:28:12:8c:84:51:a4:07:6d: e4:ce:62:79:b6:62:b1:19:23:b6:96:5f:9a:6b:be:8d:67:9d: 9c:ad:6d:db:4a:c3:06:9d:ea:5e:e6:9c:b6:03:21:7b:d5:33: 28:ce:51:82:5e:74:9d:da:15:21:11:89:b7:6d:98:e5:a8:4e: 02:50:47:37:9a:52:e0:67:99:59:58:7b:33:18:27:23:7b:4e: ed:83:3d:26:63:6c:a6:52:8e:b5:8a:d6:f6:dd:1d:de:4f:13: 2b:14:74:4c:3c:69:c5:24:c8:5c:10:5c:82:44:f8:b8:39:ed: df:32:74:42:3a:2c:da:85:db:25:8a:ac:f4:4c:b0:34:c3:ea: ca:01:33:aa:59:1a:cf:54:18:02:3e:27:10:ce:c9:82:ba:64: 1a:a3:3d:5b:e0:4f:d2:d5:c9:26:9b:50:bd:ed:1e:b0:3b:69: ab:4e:a1:40:37:2f:c8:12:31:58:38:88:86:20:dd:32:6d:0b: 50:5d:46:d3:4d:11:93:29:09:2d:61:92:30:e9:e0:58:c8:28: ba:e6:89:cb:fa:9f:34:db:aa:c9:fb:8f:33:1b:e2:40:9f:76: 06:6b:18:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jczx0nN4t8sUijoCAG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4 YmZiYjUwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg0OTM0NzA4ZmRhY2JiYTQ0YzcwZDMwMWFlYWVlZTQzMWYwMjA4MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmYn9mlXr/zujjNKE2cniAGG5VOY mPoQHm0svrEd42/CH6GOm4B4X9THg2q/1tN8a67Z4C+paEtcIJZ3j+FmZtrsPy1T hgd1pCVCNeiLPiqczSO9SdR6258I/ywxBcMbyqc75Fn8dMYtbUWnLev0ZUjekzGA OCT2PWIF1cH8TjdcjGCECOXKfXM+LbILunHl3ZY2a6bG53XVRpwn8B4cI7CDQvmz GnktuIESyQRAi+aenixABRUiw5YNgGdEthIdRSzlRu+n83vFyayFLM+sgbYIMTEH GFvilKaPilo8zxW77SUob/yLJ08fgJc2f/oWavITqp/cDFmYAjOCbwOk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk0cI/ay7pExw0wGuru5DHwIIKbMB8GA1UdIwQY MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5 LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu6a65Li xDTNgS+t9AXW8mSQvd4pa8rgraiBUigSjIRRpAdt5M5iebZisRkjtpZfmmu+jWed nK1t20rDBp3qXuactgMhe9UzKM5Rgl50ndoVIRGJt22Y5ahOAlBHN5pS4GeZWVh7 MxgnI3tO7YM9JmNsplKOtYrW9t0d3k8TKxR0TDxpxSTIXBBcgkT4uDnt3zJ0Qjos 2oXbJYqs9EywNMPqygEzqlkaz1QYAj4nEM7JgrpkGqM9W+BP0tXJJptQve0esDtp q06hQDcvyBIxWDiIhiDdMm0LUF1G000RkykJLWGSMOngWMgouuaJy/qfNNuqyfuP MxviQJ92BmsYcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:23 2025 by rpki-client