This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json) Hash identifier: KxDLoo97EVqpwmF+p+Cf5u0zymxo0b/H9ctHy/hNNRM= Subject key identifier: E0:92:5B:9A:48:C5:36:4D:9E:FB:2C:C5:E7:FE:09:C8:31:A8:41:D8 Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e Certificate serial: 019B23641DFE0C4261307E2AD70A180E7841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft Manifest number: 16E2 Signing time: Mon 15 Dec 2025 19:02:02 +0000 Manifest this update: Mon 15 Dec 2025 19:02:02 +0000 Manifest next update: Tue 16 Dec 2025 19:02:02 +0000 Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=) 2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: jriUQyHFZtQA+MJp0OG26eYlxqOI4uf5qMyNyaUSN9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:1d:fe:0c:42:61:30:7e:2a:d7:0a:18:0e:78:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e Validity Not Before: Dec 15 19:02:02 2025 GMT Not After : Dec 16 19:02:02 2025 GMT Subject: CN=e0925b9a48c5364d9efb2cc5e7fe09c831a841d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:f3:a5:d3:b8:33:7b:47:15:fd:85:4e:94: 63:cc:39:61:d1:0a:fb:06:3f:d9:ff:fa:d0:0a:95: 61:02:ea:4e:63:44:ae:74:f7:63:98:87:38:b7:a4: e8:8d:08:5f:7a:4b:be:7b:d2:f5:2d:83:d4:28:12: be:36:38:89:b4:13:be:7d:07:16:75:28:f6:cc:03: 49:f7:ae:1f:eb:50:bf:7b:ac:8d:eb:52:69:bd:9a: 03:19:b1:a6:4e:4b:da:01:5f:2e:2a:4c:2a:64:74: 95:d5:4b:14:d9:6e:66:88:fb:61:67:1c:24:42:f9: 87:53:b4:db:c5:8b:5d:c3:3e:fe:b0:a0:0c:d2:68: c6:27:64:df:a4:31:fb:d6:ad:a7:ef:d7:79:29:a7: 06:04:48:6c:ab:19:45:fe:cf:77:26:fb:60:ed:a2: ff:34:85:0a:8b:93:96:61:44:ba:75:e8:2c:4b:8c: d8:27:fa:84:47:dd:69:d1:f4:c0:d9:c1:d6:ff:3e: dd:bb:46:2d:ee:1a:d5:fc:07:44:3d:e0:e9:55:ab: 5e:8b:66:39:28:d2:f5:1d:58:c4:6d:d1:3c:3b:66: d9:21:58:f5:7d:44:b3:40:ea:39:be:06:d6:f9:16: 00:09:0f:65:d3:9c:96:fa:4a:2c:40:bc:7b:1d:4f: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:92:5B:9A:48:C5:36:4D:9E:FB:2C:C5:E7:FE:09:C8:31:A8:41:D8 X509v3 Authority Key Identifier: keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:65:35:b1:c4:7e:76:58:7a:dd:8c:39:42:ab:c2:71:ee:46: 22:b1:f9:5d:39:d2:0c:f7:7f:e9:ec:00:6d:03:8f:a2:0e:40: d9:4d:29:51:40:b9:00:bf:ea:82:37:1e:ca:50:91:a1:5f:94: 22:ca:59:5b:95:a2:d1:3a:8d:55:3c:2f:49:ac:52:a0:54:03: 79:6f:8e:9b:38:2c:0e:8c:19:cf:d4:a3:9a:c6:14:20:a9:15: 20:68:90:b6:5d:29:d7:8c:3d:7e:d5:63:f0:65:75:e2:bd:25: eb:55:cb:f6:ce:b7:81:b5:1a:13:0e:f6:69:a5:e2:27:1d:72: 1c:7e:03:ff:43:22:80:83:39:2e:1f:f4:78:b2:5d:cc:b0:e7: 5e:b9:83:68:ba:ab:c9:12:0d:c6:73:8f:29:24:36:32:3a:d0: bd:6b:da:71:11:19:e0:13:6c:61:e9:a4:00:03:6a:5d:1e:cc: eb:88:04:54:b7:16:4a:9b:33:61:ef:c9:f6:d6:57:38:2a:08: a1:67:ce:96:a2:d0:94:9e:3d:52:b6:97:77:c8:09:20:15:f6: ed:9a:90:86:e1:b2:4c:48:58:b3:20:97:82:c2:7b:e8:73:fc: 27:1c:f1:54:26:64:f4:c0:43:cb:57:5a:5c:1d:20:2c:0d:58: 27:75:45:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZB3+DEJhMH4q1woYDnhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OGY3MTA2YmVkMTBmZTdmZmM2NWJiZDY0YWRiZWRjOWRi ZDUyNWUwHhcNMjUxMjE1MTkwMjAyWhcNMjUxMjE2MTkwMjAyWjAzMTEwLwYDVQQD EyhlMDkyNWI5YTQ4YzUzNjRkOWVmYjJjYzVlN2ZlMDljODMxYTg0MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd/zpdO4M3tHFf2FTpRjzDlh0Qr7 Bj/Z//rQCpVhAupOY0SudPdjmIc4t6TojQhfeku+e9L1LYPUKBK+NjiJtBO+fQcW dSj2zANJ964f61C/e6yN61JpvZoDGbGmTkvaAV8uKkwqZHSV1UsU2W5miPthZxwk QvmHU7TbxYtdwz7+sKAM0mjGJ2TfpDH71q2n79d5KacGBEhsqxlF/s93Jvtg7aL/ NIUKi5OWYUS6degsS4zYJ/qER91p0fTA2cHW/z7du0Yt7hrV/AdEPeDpVatei2Y5 KNL1HVjEbdE8O2bZIVj1fUSzQOo5vgbW+RYACQ9l05yW+kosQLx7HU98awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCSW5pIxTZNnvssxef+CcgxqEHYMB8GA1UdIwQY MBaAFDmPcQa+0Q/n/8ZbvWStvtydvVJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMt ZTA4MWE1YjQxNDMyLzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMtZTA4MWE1YjQxNDMy LzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmU1scR+ dlh63Yw5QqvCce5GIrH5XTnSDPd/6ewAbQOPog5A2U0pUUC5AL/qgjceylCRoV+U IspZW5Wi0TqNVTwvSaxSoFQDeW+OmzgsDowZz9SjmsYUIKkVIGiQtl0p14w9ftVj 8GV14r0l61XL9s63gbUaEw72aaXiJx1yHH4D/0MigIM5Lh/0eLJdzLDnXrmDaLqr yRINxnOPKSQ2MjrQvWvacREZ4BNsYemkAANqXR7M64gEVLcWSpszYe/J9tZXOCoI oWfOlqLQlJ49UraXd8gJIBX27ZqQhuGyTEhYsyCXgsJ76HP8JxzxVCZk9MBDy1da XB0gLA1YJ3VF9g== -----END CERTIFICATE-----Generated at Tue Dec 16 00:48:35 2025 by rpki-client