This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json) Hash identifier: LW8YDFc3Hl26t3X/yj0VflgVc9yhu+9hE9QfZPMfB5A= Subject key identifier: 5B:24:29:E5:63:5B:F0:6C:D1:FB:AA:8B:4E:94:F5:3C:4E:FC:EC:72 Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Certificate serial: 019AF23F6E5D03F8F3D62D4A8AECAA130F7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft Manifest number: 0E55 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: 8vOX1ipnYQZv8oz66fM9uw/oVnKH+Rh84jg4VxfjaFU=) 2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:5d:03:f8:f3:d6:2d:4a:8a:ec:aa:13:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=5b2429e5635bf06cd1fbaa8b4e94f53c4efcec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:65:9f:db:cf:80:b1:ce:8d:e0:12:a7:84: 43:3e:5c:ec:3f:5e:0d:33:d9:b4:e1:27:ad:96:7d: a8:55:42:bf:b5:08:cf:04:e0:45:d0:cd:1c:67:c7: f8:08:f0:17:15:bf:11:e7:2a:ef:9f:f6:ab:4f:ba: 5a:d3:72:c5:e4:13:a7:56:d0:dc:50:32:6f:23:65: 74:9a:4d:0e:d5:e0:8a:80:1d:0e:1c:61:ba:3b:b9: 7f:84:8b:20:e7:27:54:d2:7d:63:65:83:e8:42:26: 2f:dc:a0:37:50:1b:67:76:f8:87:d6:e1:5f:47:42: 73:ca:86:50:f4:c6:c5:ae:f0:0f:ff:56:0c:2b:99: 4b:3f:4f:7a:db:5a:c9:a5:63:8d:26:5b:1f:6f:67: 4c:ca:25:eb:d8:bc:f6:45:dc:5c:c6:2e:73:8c:33: 2b:27:3f:c3:2c:ed:73:15:84:f0:da:01:40:db:6c: 1b:ca:aa:f5:1b:51:66:18:03:66:da:c4:20:e2:b7: c6:c3:14:75:b0:b2:bd:92:14:2c:08:18:60:02:e8: 0e:13:49:97:91:70:7f:2c:28:90:cc:57:d8:8c:01: b1:96:a7:db:b5:b8:2e:2c:94:cc:87:1c:84:f0:42: e7:49:6a:da:aa:56:ca:28:86:0e:b9:c2:69:bd:93: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:24:29:E5:63:5B:F0:6C:D1:FB:AA:8B:4E:94:F5:3C:4E:FC:EC:72 X509v3 Authority Key Identifier: keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:c4:c7:c2:ee:36:55:f9:9b:8a:a6:13:ca:5c:0f:b1:cf: 7e:ca:11:3f:89:fe:08:cc:29:5b:c8:27:3b:92:72:e1:9e:af: 0d:a6:97:03:18:71:19:f8:31:6f:85:b5:2d:e6:88:c6:a0:58: 67:df:1d:35:73:d8:b3:1e:09:45:47:2d:f0:ab:ba:e2:91:f7: df:a5:72:58:e2:33:98:27:20:68:f3:98:76:5d:12:02:33:95: 59:68:b5:d9:9b:98:f9:98:2e:0b:98:d1:37:57:f5:cb:80:d0: 10:27:fc:bd:82:27:10:89:9d:1a:36:cf:56:16:d0:05:e0:da: 70:aa:99:cb:2f:5d:bc:9a:22:a4:89:e1:75:39:2f:a8:f3:d7: 89:de:75:45:fc:90:16:b5:73:70:62:0b:f7:8b:b4:b7:ee:d0: 43:7d:60:31:c8:52:0c:bc:63:83:9b:a2:17:f8:3f:0a:0a:5b: 48:82:d0:b6:bb:e8:68:b7:32:ec:02:ee:cf:ea:64:38:53:8b: 16:f4:e2:04:9a:16:6c:32:7e:1e:3e:19:27:44:a3:ab:d4:5b: f3:cc:7e:fa:3c:8b:e3:52:cd:2b:d5:bf:68:fd:b2:7d:06:36: 1b:26:a7:2e:eb:71:ff:59:e0:b9:e2:4c:00:35:ba:3b:2a:be: a7:db:9b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP25dA/jz1i1KiuyqEw99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3 Y2JkYmYwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD Eyg1YjI0MjllNTYzNWJmMDZjZDFmYmFhOGI0ZTk0ZjUzYzRlZmNlYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2illn9vPgLHOjeASp4RDPlzsP14N M9m04Setln2oVUK/tQjPBOBF0M0cZ8f4CPAXFb8R5yrvn/arT7pa03LF5BOnVtDc UDJvI2V0mk0O1eCKgB0OHGG6O7l/hIsg5ydU0n1jZYPoQiYv3KA3UBtndviH1uFf R0JzyoZQ9MbFrvAP/1YMK5lLP09621rJpWONJlsfb2dMyiXr2Lz2Rdxcxi5zjDMr Jz/DLO1zFYTw2gFA22wbyqr1G1FmGANm2sQg4rfGwxR1sLK9khQsCBhgAugOE0mX kXB/LCiQzFfYjAGxlqfbtbguLJTMhxyE8ELnSWraqlbKKIYOucJpvZN24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFskKeVjW/Bs0fuqi06U9TxO/OxyMB8GA1UdIwQY MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyPEx8Lu NlX5m4qmE8pcD7HPfsoRP4n+CMwpW8gnO5Jy4Z6vDaaXAxhxGfgxb4W1LeaIxqBY Z98dNXPYsx4JRUct8Ku64pH336VyWOIzmCcgaPOYdl0SAjOVWWi12ZuY+ZguC5jR N1f1y4DQECf8vYInEImdGjbPVhbQBeDacKqZyy9dvJoipInhdTkvqPPXid51RfyQ FrVzcGIL94u0t+7QQ31gMchSDLxjg5uiF/g/CgpbSILQtrvoaLcy7ALuz+pkOFOL FvTiBJoWbDJ+Hj4ZJ0Sjq9Rb88x++jyL41LNK9W/aP2yfQY2GyanLutx/1ngueJM ADW6Oyq+p9ubSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:34 2025 by rpki-client