This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json) Hash identifier: 3tPWcFzCTLQ55EhtQMSZFj+Rz0QvC+3BFf/ntq7AVxY= Subject key identifier: CF:C3:5C:1F:C4:1E:F9:9C:8E:4F:E4:76:17:16:05:96:33:86:E6:15 Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582 Certificate serial: 019AF6F884C0CF777F5EF5C4F7B1B0A0DEEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft Manifest number: 0DFA Signing time: Sun 07 Dec 2025 04:01:13 +0000 Manifest this update: Sun 07 Dec 2025 04:01:13 +0000 Manifest next update: Mon 08 Dec 2025 04:01:13 +0000 Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=) 2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: AVfybglFRdQgB7lgHTid51b8l/kNmxk40vHBPQ5Rzks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:84:c0:cf:77:7f:5e:f5:c4:f7:b1:b0:a0:de:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389755423f832a528c93136110f0fe4b10453582 Validity Not Before: Dec 7 04:01:13 2025 GMT Not After : Dec 8 04:01:13 2025 GMT Subject: CN=cfc35c1fc41ef99c8e4fe476171605963386e615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:18:b1:a5:25:9a:86:00:a5:c2:08:16:24: a9:43:09:6c:9b:b1:0e:f6:90:5b:5e:2b:89:69:d9: fb:57:f8:f8:4b:fd:a8:a5:b4:b7:b4:9f:bd:5e:8b: 6a:3a:1f:6e:1c:60:3d:cc:b2:1a:58:ce:bf:cf:68: d0:19:bf:95:36:19:1e:67:cf:cf:7e:25:c0:5e:44: 48:f7:68:e1:e0:38:1e:21:d2:fd:c2:c8:d6:71:b3: ca:36:1f:c4:bd:f3:ca:9f:ff:76:aa:de:50:98:44: b9:37:1b:86:5e:b8:29:eb:44:9b:41:5a:00:c3:41: dc:f2:13:40:08:06:87:db:5c:97:ac:61:99:20:d7: 33:bb:c2:86:df:dc:a2:f5:24:96:cd:54:55:0f:c2: 92:73:ec:43:07:fe:31:6d:16:5d:92:c6:f5:1a:30: c7:2a:0b:b9:1e:2d:e6:c6:5c:88:11:e1:53:ae:89: c2:1d:0f:20:e5:18:b9:d3:04:24:96:58:27:9b:0f: 34:21:00:a2:b6:6f:ba:f4:19:19:50:79:21:ba:00: 8a:a9:b1:51:db:e3:b7:3b:eb:f4:4d:f2:72:a7:99: 82:ca:78:ae:80:fb:94:ae:48:0b:9a:3a:3a:d5:55: 2d:60:47:76:ed:16:e8:f7:22:ce:5d:a6:50:f2:a1: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:5C:1F:C4:1E:F9:9C:8E:4F:E4:76:17:16:05:96:33:86:E6:15 X509v3 Authority Key Identifier: keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f6:4d:ab:5e:1a:fc:7f:da:9c:1f:83:73:a1:9f:5c:47:0e: ff:ab:58:21:3b:3f:8d:0d:6e:a9:f8:d4:13:b5:52:05:97:ff: 48:4d:c4:bc:20:b0:52:e4:8a:be:5f:ef:57:94:80:fe:70:39: 2f:0b:18:30:be:9d:39:da:fc:e6:5e:7e:74:52:95:96:a4:ca: c4:20:58:49:54:1a:1b:fa:2a:45:f1:bc:d3:46:75:65:40:d9: e1:06:88:da:7c:88:bd:d5:a7:e1:d3:94:a4:fd:ba:e9:66:54: d3:c6:16:03:59:a1:91:d9:e6:33:75:7f:ae:59:2a:59:08:a1: ee:dc:d0:64:cc:a3:7a:de:e8:b4:5e:d0:27:0c:b6:ca:ca:6b: de:19:36:87:9f:29:fc:1c:ff:b0:1d:59:7f:7e:e2:5d:f5:17: 0f:c8:1e:26:05:d0:b1:2e:15:e0:74:05:74:1a:22:50:01:22: c3:f8:df:ef:7f:87:4b:ec:07:fc:a1:b6:91:ec:f2:37:73:8d: 6a:bc:03:23:3e:46:ee:d2:7c:f1:08:9b:f1:71:96:c6:3d:6d: 5a:eb:8f:e3:91:21:64:d1:0e:2d:c7:dd:80:30:e0:c4:a7:bd: 71:63:81:95:95:43:58:e6:67:94:0c:2d:40:54:9d:4a:ac:d3: 80:61:ff:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+ITAz3d/XvXE97GwoN7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0 NTM1ODIwHhcNMjUxMjA3MDQwMTEzWhcNMjUxMjA4MDQwMTEzWjAzMTEwLwYDVQQD EyhjZmMzNWMxZmM0MWVmOTljOGU0ZmU0NzYxNzE2MDU5NjMzODZlNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji0YsaUlmoYApcIIFiSpQwlsm7EO 9pBbXiuJadn7V/j4S/2opbS3tJ+9XotqOh9uHGA9zLIaWM6/z2jQGb+VNhkeZ8/P fiXAXkRI92jh4DgeIdL9wsjWcbPKNh/EvfPKn/92qt5QmES5NxuGXrgp60SbQVoA w0Hc8hNACAaH21yXrGGZINczu8KG39yi9SSWzVRVD8KSc+xDB/4xbRZdksb1GjDH Kgu5Hi3mxlyIEeFTronCHQ8g5Ri50wQkllgnmw80IQCitm+69BkZUHkhugCKqbFR 2+O3O+v0TfJyp5mCyniugPuUrkgLmjo61VUtYEd27Rbo9yLOXaZQ8qFExwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/DXB/EHvmcjk/kdhcWBZYzhuYVMB8GA1UdIwQY MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvZNq14a /H/anB+Dc6GfXEcO/6tYITs/jQ1uqfjUE7VSBZf/SE3EvCCwUuSKvl/vV5SA/nA5 LwsYML6dOdr85l5+dFKVlqTKxCBYSVQaG/oqRfG800Z1ZUDZ4QaI2nyIvdWn4dOU pP266WZU08YWA1mhkdnmM3V/rlkqWQih7tzQZMyjet7otF7QJwy2yspr3hk2h58p /Bz/sB1Zf37iXfUXD8geJgXQsS4V4HQFdBoiUAEiw/jf73+HS+wH/KG2kezyN3ON arwDIz5G7tJ88Qib8XGWxj1tWuuP45EhZNEOLcfdgDDgxKe9cWOBlZVDWOZnlAwt QFSdSqzTgGH/9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 11:19:21 2025 by rpki-client