This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json) Hash identifier: VnumpruZay0bH8ZPN+e/ibndKxV0hZ8CEGBW06ZI5wI= Subject key identifier: B0:2E:4F:EC:91:D0:26:03:2D:B8:4D:EC:CE:92:E0:6F:45:E7:F2:A9 Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019AF19AE6036914FA81C1DEEB6254F95E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft Manifest number: 0DDF Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=) 2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: n2qKTBDzmtttu6ndA3iDceNM3QPSY8YjkOSxv8wsMVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:03:69:14:fa:81:c1:de:eb:62:54:f9:5e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=b02e4fec91d026032db84decce92e06f45e7f2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:ab:f1:02:4d:24:c5:a5:36:3a:15:04:44: a0:8f:e4:72:dd:91:8b:5d:18:89:c4:d0:f7:12:5b: 54:f1:1d:62:0e:3f:15:f4:7e:6f:a3:86:bd:bc:63: 91:e5:12:b7:50:fc:af:02:cc:18:ff:b2:8e:40:67: a9:a7:f7:25:69:f2:36:a9:e0:0a:cb:4c:b1:1a:4c: 3d:04:89:81:90:a1:12:a7:1d:93:85:4e:3b:9c:d6: fa:cf:74:e9:e6:62:10:d6:f8:7a:5b:03:3e:83:c5: 47:0d:f2:17:4f:a9:09:df:a4:5b:95:69:84:79:01: 25:52:4e:29:a0:d8:a5:7e:50:7c:9e:f2:b1:de:b8: 66:56:1c:db:2c:0e:14:84:cb:33:d4:f6:3c:ae:0a: e4:12:ec:16:d8:58:96:a9:39:d2:41:c9:75:1c:64: e4:fa:d2:3b:f5:78:b3:41:92:8b:32:c0:85:33:c6: c3:e5:ef:29:9b:0a:8f:69:6e:62:30:25:65:e6:5c: 3c:73:b0:8c:72:7b:a2:e8:de:c8:a6:2b:20:f7:93: d4:91:e8:05:a2:4f:46:32:6c:88:32:61:e2:d0:42: 01:d9:3c:a5:17:93:88:9a:29:03:45:f8:31:44:44: 31:ac:b4:5c:88:a3:eb:fb:9a:e0:09:b2:e0:00:50: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2E:4F:EC:91:D0:26:03:2D:B8:4D:EC:CE:92:E0:6F:45:E7:F2:A9 X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:35:7e:23:3a:90:2e:79:cc:1a:38:f5:c1:28:69:38:1b:a1: e8:50:47:e7:9d:5d:f1:d7:07:c2:80:17:7b:3e:69:18:63:d2: 99:74:ed:16:75:5b:60:4f:aa:35:c7:c3:f8:fb:04:c8:bd:88: 48:a8:a2:78:58:26:c7:ca:ad:ad:2f:5c:f8:2c:5c:72:3d:78: e5:a8:b5:68:8e:fe:c4:7f:a7:b1:d0:2e:e8:46:23:34:be:b3: 4a:8e:ee:62:e8:da:b1:7d:e4:10:64:38:54:dd:6c:8a:31:6f: 44:d8:a3:a8:23:44:44:51:1a:cb:d1:95:ad:04:1b:0d:b6:67: 12:f1:8f:c2:e2:81:6b:72:a3:17:9e:7c:d8:24:b9:55:41:ad: bd:40:4c:71:72:00:93:85:43:01:b6:b7:f1:34:fa:cc:22:72: 45:95:5b:ab:15:87:85:32:8f:56:46:4c:16:6c:de:92:75:e5: 77:3d:34:53:ab:b0:ad:35:e6:37:03:b7:a7:3e:35:42:e4:c0: b8:b9:6a:a7:2c:a4:2f:3f:5d:24:c6:4c:39:41:1d:8b:18:27: de:07:6e:ea:26:50:b9:3c:ed:94:60:44:86:2b:7c:a3:42:32: 6a:e5:3a:9e:93:7a:1a:99:d6:10:71:32:c8:92:4a:43:99:8d: c8:a9:5d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuYDaRT6gcHe62JU+V4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD EyhiMDJlNGZlYzkxZDAyNjAzMmRiODRkZWNjZTkyZTA2ZjQ1ZTdmMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbCr8QJNJMWlNjoVBESgj+Ry3ZGL XRiJxND3EltU8R1iDj8V9H5vo4a9vGOR5RK3UPyvAswY/7KOQGepp/clafI2qeAK y0yxGkw9BImBkKESpx2ThU47nNb6z3Tp5mIQ1vh6WwM+g8VHDfIXT6kJ36RblWmE eQElUk4poNilflB8nvKx3rhmVhzbLA4UhMsz1PY8rgrkEuwW2FiWqTnSQcl1HGTk +tI79XizQZKLMsCFM8bD5e8pmwqPaW5iMCVl5lw8c7CMcnui6N7Ipisg95PUkegF ok9GMmyIMmHi0EIB2TylF5OImikDRfgxREQxrLRciKPr+5rgCbLgAFBEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAuT+yR0CYDLbhN7M6S4G9F5/KpMB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzV+IzqQ LnnMGjj1wShpOBuh6FBH551d8dcHwoAXez5pGGPSmXTtFnVbYE+qNcfD+PsEyL2I SKiieFgmx8qtrS9c+Cxccj145ai1aI7+xH+nsdAu6EYjNL6zSo7uYujasX3kEGQ4 VN1sijFvRNijqCNERFEay9GVrQQbDbZnEvGPwuKBa3KjF5582CS5VUGtvUBMcXIA k4VDAba38TT6zCJyRZVbqxWHhTKPVkZMFmzeknXldz00U6uwrTXmNwO3pz41QuTA uLlqpyykLz9dJMZMOUEdixgn3gdu6iZQuTztlGBEhit8o0IyauU6npN6GpnWEHEy yJJKQ5mNyKldTw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:36 2025 by rpki-client