This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json) Hash identifier: kvsR8ApREDYB891Q+DOfTMuk7R02XmiBsIZBO7f3dQU= Subject key identifier: D8:9A:E2:65:CC:97:BC:E8:AE:7C:07:F5:DE:84:9D:95:E1:60:AA:1E Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Certificate serial: 019B38A25C13F49A47A9384850C37187744F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft Manifest number: 0C50 Signing time: Fri 19 Dec 2025 22:02:02 +0000 Manifest this update: Fri 19 Dec 2025 22:02:02 +0000 Manifest next update: Sat 20 Dec 2025 22:02:02 +0000 Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: KHGOLQ9BQ755IksxntmpgJ5690v4oYcICFCVWOWCCU4=) 2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:5c:13:f4:9a:47:a9:38:48:50:c3:71:87:74:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Validity Not Before: Dec 19 22:02:02 2025 GMT Not After : Dec 20 22:02:02 2025 GMT Subject: CN=d89ae265cc97bce8ae7c07f5de849d95e160aa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:ee:7a:3f:7b:3b:6d:b5:15:ed:88:e2:14: 3c:81:77:69:79:d4:fa:67:41:12:d1:c9:d4:ba:bc: b9:4c:fa:33:94:fa:6d:09:3c:d8:5c:c6:3a:6d:07: c3:19:c4:e8:45:af:a6:51:96:a0:62:7c:a2:29:b9: 17:d2:f9:b9:38:62:c0:32:41:f1:33:5d:7c:a3:4d: de:e5:81:c2:59:24:b1:95:fb:0c:20:a0:4e:d3:a9: 6c:48:99:1d:1c:1f:e7:94:6b:be:47:c7:c0:f0:5f: f5:d5:0b:ed:ee:fb:8e:03:5c:6c:6a:20:99:5e:15: 4a:e7:6e:ed:20:ff:57:c4:f0:26:ea:6f:b6:ce:bf: 08:73:30:81:d0:12:33:4b:32:11:79:a6:da:25:78: af:50:28:22:23:39:4a:c5:2e:14:90:0e:d0:49:f4: b6:3e:df:7f:48:d0:69:32:6b:3b:90:2a:47:ba:07: 5b:cc:b2:90:68:6f:2c:2c:c1:89:2e:79:41:8c:ca: ee:80:3e:d6:7b:c3:7c:5a:ad:9b:5f:4e:a5:39:5f: 96:62:89:35:24:df:0b:67:55:6d:35:6b:98:13:d6: 6c:62:2d:ef:f3:fa:33:70:2c:4a:a1:43:d7:a6:1c: 72:47:b0:65:9a:e1:25:73:2b:b3:60:70:38:56:c5: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:E2:65:CC:97:BC:E8:AE:7C:07:F5:DE:84:9D:95:E1:60:AA:1E X509v3 Authority Key Identifier: keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9e:6f:58:11:2f:b2:d8:c8:15:51:0f:ce:2a:e2:0e:4e:1a: 2e:21:25:f8:0d:56:22:ca:55:e6:fd:20:dc:51:a5:5e:19:ae: 0d:8d:15:46:8d:d6:96:43:5a:08:ab:1c:46:24:3b:4f:cd:43: 82:48:13:a2:cb:f5:f4:7a:3b:a3:10:82:22:73:ad:aa:49:72: 8a:6e:f6:69:8d:c9:6f:1e:3c:69:8b:1f:5c:e2:03:f0:dc:67: 09:b8:30:08:db:45:fa:9b:6f:64:13:f8:4f:16:fe:89:1f:97: 6c:c1:cb:d3:56:98:96:67:90:a3:40:6b:08:a8:9e:27:06:ea: d7:84:ad:ba:88:de:ea:e2:c2:ea:ba:a0:f7:e6:27:2e:0f:b2: 77:d4:08:9b:c6:22:40:0c:3a:3f:f8:f0:04:1f:8a:d6:24:ec: 23:a6:08:b6:de:44:d9:f7:32:d6:0e:92:fc:ee:d2:24:c1:2a: bc:43:2a:83:51:4c:ae:85:14:52:2a:c0:8f:ff:c7:e3:47:3b: 29:88:ed:1c:53:02:2c:f6:f5:c2:72:8a:5c:16:50:0e:ca:af: ee:84:c4:2c:fd:c6:f3:d7:35:b2:75:1e:f2:c9:23:7f:d8:50: 6b:be:c1:74:95:ff:47:74:a1:5e:f1:3b:c4:76:81:8d:6e:b4: 6e:73:84:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4olwT9JpHqThIUMNxh3RPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx NWE1MzcwHhcNMjUxMjE5MjIwMjAyWhcNMjUxMjIwMjIwMjAyWjAzMTEwLwYDVQQD EyhkODlhZTI2NWNjOTdiY2U4YWU3YzA3ZjVkZTg0OWQ5NWUxNjBhYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq7uej97O221Fe2I4hQ8gXdpedT6 Z0ES0cnUury5TPozlPptCTzYXMY6bQfDGcToRa+mUZagYnyiKbkX0vm5OGLAMkHx M118o03e5YHCWSSxlfsMIKBO06lsSJkdHB/nlGu+R8fA8F/11Qvt7vuOA1xsaiCZ XhVK527tIP9XxPAm6m+2zr8IczCB0BIzSzIReabaJXivUCgiIzlKxS4UkA7QSfS2 Pt9/SNBpMms7kCpHugdbzLKQaG8sLMGJLnlBjMrugD7We8N8Wq2bX06lOV+WYok1 JN8LZ1VtNWuYE9ZsYi3v8/ozcCxKoUPXphxyR7BlmuElcyuzYHA4VsU5XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNia4mXMl7zornwH9d6EnZXhYKoeMB8GA1UdIwQY MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It MzU5ZTRlNGQ5MTc1LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1 LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk55vWBEv stjIFVEPziriDk4aLiEl+A1WIspV5v0g3FGlXhmuDY0VRo3WlkNaCKscRiQ7T81D gkgTosv19Ho7oxCCInOtqklyim72aY3Jbx48aYsfXOID8NxnCbgwCNtF+ptvZBP4 Txb+iR+XbMHL01aYlmeQo0BrCKieJwbq14Stuoje6uLC6rqg9+YnLg+yd9QIm8Yi QAw6P/jwBB+K1iTsI6YItt5E2fcy1g6S/O7SJMEqvEMqg1FMroUUUirAj//H40c7 KYjtHFMCLPb1wnKKXBZQDsqv7oTELP3G89c1snUe8skjf9hQa77BdJX/R3ShXvE7 xHaBjW60bnOEcg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:50:38 2025 by rpki-client