This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json) Hash identifier: d2xhn9Vg1p9OGYmH4tMz0Duc/0RLEHIPDTgy56FIHZU= Subject key identifier: 13:28:2A:5D:5D:A9:2C:20:68:95:34:DC:B1:2E:A3:1D:01:67:CD:4E Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Certificate serial: 019AF12DC7421932A1D07F2E99C98C20FBC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=) 2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: NNYaMi3qZZLwNlZ1r8HkCSOIlEbkNM2KBlKZsTxdNSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c7:42:19:32:a1:d0:7f:2e:99:c9:8c:20:fb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=13282a5d5da92c20689534dcb12ea31d0167cd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:36:d0:b1:30:49:6a:35:56:06:13:5e:1b: 19:22:84:dc:50:a3:00:04:d1:38:12:5b:30:4e:5e: 49:4b:bc:ad:03:5e:ba:c2:5e:bb:09:43:80:d9:77: b3:bc:ca:06:fe:f1:a7:95:6f:1d:c9:82:5f:cc:58: 7e:38:b0:3d:ca:26:3f:b4:11:3b:fb:20:2e:85:a3: 0e:9e:d8:b1:a5:3d:5f:e5:65:08:af:02:6f:5d:76: a9:89:be:48:ba:bf:fb:bd:80:e6:54:d3:0c:69:af: fc:bb:51:73:3b:a3:ed:59:c8:50:4a:78:40:90:5f: 75:bd:ff:1f:dc:c0:66:b6:78:01:29:82:6d:41:2f: f4:2e:74:01:99:a1:de:d6:f4:c0:96:b4:c8:ab:7d: c0:95:b7:7b:30:18:a4:0b:36:0b:2f:a9:48:67:9a: ab:66:3e:fa:b9:21:67:f5:79:c9:d6:9c:c9:40:b6: 9d:fc:53:13:7b:5f:38:02:26:c9:e1:2e:c1:ba:b4: 33:f6:38:66:1a:55:d5:c2:df:9e:b6:d8:79:e1:a7: 83:1a:df:17:4b:23:72:5f:a2:15:f8:69:4f:9f:6e: a2:dd:62:b3:6e:7b:f6:dd:ec:bf:e1:c9:fa:fb:2f: 7c:a8:07:1e:25:b1:5e:24:a5:09:c6:dc:fb:cf:18: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:28:2A:5D:5D:A9:2C:20:68:95:34:DC:B1:2E:A3:1D:01:67:CD:4E X509v3 Authority Key Identifier: keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:91:e2:6d:c6:05:7b:1b:3c:28:60:53:0c:6c:ce:03:f7:1e: f9:bc:f3:33:44:a5:09:7b:82:e0:a7:69:89:ed:e1:0e:d3:28: 0f:9c:a3:8a:f6:9d:a6:3b:a3:11:49:1c:5e:75:46:d1:97:72: 1c:f4:00:f4:0a:d5:fb:99:b8:2e:17:80:01:a9:bd:89:8e:33: 31:7d:ac:6a:d8:c3:98:10:1b:9b:df:c5:3d:28:27:f6:c3:45: 63:b8:79:72:3e:86:b1:ab:57:ab:d3:28:fb:83:53:93:70:92: 8e:50:01:5f:78:d6:f1:70:18:13:2f:49:8c:66:be:2b:98:7b: 01:65:57:25:bd:68:af:db:fd:d3:4c:00:83:c6:45:16:81:cf: 0f:e0:48:b4:a6:b3:82:5a:6d:76:24:1b:e0:ef:33:0b:ce:2b: e2:dd:6a:85:85:57:dd:86:eb:d7:ba:8e:7c:1a:8e:ce:01:b6: e7:ff:3e:0b:0a:ee:2f:bb:1e:8f:74:4b:b5:46:30:a3:72:bd: f7:01:b5:54:e5:42:a6:0f:69:74:25:3e:44:3a:d9:68:ed:bd: 6a:3e:bb:d7:9b:de:e1:8f:f7:0c:61:fa:69:4d:95:0b:6e:82: 68:6d:fe:a4:70:57:28:c7:9d:0e:2a:66:af:e1:be:0e:3f:62: a5:55:ba:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcdCGTKh0H8umcmMIPvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj NGQxOTgwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD EygxMzI4MmE1ZDVkYTkyYzIwNjg5NTM0ZGNiMTJlYTMxZDAxNjdjZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LE20LEwSWo1VgYTXhsZIoTcUKMA BNE4ElswTl5JS7ytA166wl67CUOA2XezvMoG/vGnlW8dyYJfzFh+OLA9yiY/tBE7 +yAuhaMOntixpT1f5WUIrwJvXXapib5Iur/7vYDmVNMMaa/8u1FzO6PtWchQSnhA kF91vf8f3MBmtngBKYJtQS/0LnQBmaHe1vTAlrTIq33Albd7MBikCzYLL6lIZ5qr Zj76uSFn9XnJ1pzJQLad/FMTe184AibJ4S7BurQz9jhmGlXVwt+etth54aeDGt8X SyNyX6IV+GlPn26i3WKzbnv23ey/4cn6+y98qAceJbFeJKUJxtz7zxixuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMoKl1dqSwgaJU03LEuox0BZ81OMB8GA1UdIwQY MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2 LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZHibcYF exs8KGBTDGzOA/ce+bzzM0SlCXuC4Kdpie3hDtMoD5yjivadpjujEUkcXnVG0Zdy HPQA9ArV+5m4LheAAam9iY4zMX2satjDmBAbm9/FPSgn9sNFY7h5cj6GsatXq9Mo +4NTk3CSjlABX3jW8XAYEy9JjGa+K5h7AWVXJb1or9v900wAg8ZFFoHPD+BItKaz glptdiQb4O8zC84r4t1qhYVX3Ybr17qOfBqOzgG25/8+CwruL7sej3RLtUYwo3K9 9wG1VOVCpg9pdCU+RDrZaO29aj6715ve4Y/3DGH6aU2VC26CaG3+pHBXKMedDipm r+G+Dj9ipVW60g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:02 2025 by rpki-client