This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json) Hash identifier: QhY7C8Y3YVv3NUrfxuin+1Y0ApuDAwQWX7u0654fy68= Subject key identifier: 89:1C:56:25:09:4D:D5:16:1C:58:D5:7F:14:36:49:F9:3A:EC:00:3C Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d Certificate serial: 019AF276AAABD2178252CD7C88673D94DE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft Manifest number: 0E17 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: nSGQRrQJuyjocbnVPBb/vW7SxxgnU4dIfz8zStISON8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:aa:ab:d2:17:82:52:cd:7c:88:67:3d:94:de:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=891c5625094dd5161c58d57f143649f93aec003c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:f1:c3:02:fa:6a:a4:1d:de:f4:1e:57:53: 8d:0b:4a:5f:48:2c:58:1c:f0:53:6a:74:71:a3:5b: c8:0e:16:e2:dc:93:0d:ed:d0:4a:5e:e0:1d:26:a5: d5:25:50:f0:7c:5d:39:be:20:0b:32:5d:7e:b6:5a: b0:8e:44:f3:06:fb:a6:87:5b:51:a1:58:fc:92:4c: 44:85:44:c3:51:b5:0f:dc:1f:f0:34:df:0f:d4:a6: 94:33:b2:d7:3b:34:ce:e1:5d:23:ca:37:1d:7f:65: 74:39:10:c6:58:fd:57:8c:1f:08:69:60:98:6b:c4: d8:ea:d7:2b:a0:2d:46:98:8d:54:76:0c:21:0a:51: a8:48:2b:4a:d2:a9:23:53:ea:71:c8:ac:60:66:32: 54:93:c7:33:39:b8:8f:5a:3a:c4:98:bb:45:a4:c5: dc:8f:e5:ad:a7:fc:8e:94:2d:aa:62:7a:6d:60:b7: 67:98:8e:6d:d4:65:14:15:14:44:d5:0f:c7:17:e3: b1:b0:c5:aa:ee:03:af:2e:48:38:e3:cf:fb:a9:5f: 0d:eb:51:bf:b5:1e:75:9d:f6:70:4b:4d:64:d3:b7: af:3a:b3:97:57:04:c0:4b:3d:3b:87:f8:a2:5e:39: ab:58:0c:ff:1f:ea:f2:12:e5:dd:9d:d9:90:12:29: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1C:56:25:09:4D:D5:16:1C:58:D5:7F:14:36:49:F9:3A:EC:00:3C X509v3 Authority Key Identifier: keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:da:7f:08:9b:21:2f:6f:90:ce:0a:c9:6e:0e:83:43:e2:8d: ec:26:9e:ef:51:46:f8:e9:8d:69:f1:80:17:f4:2a:ca:ee:70: 60:86:10:e6:91:48:bf:0d:4f:b6:b5:ea:39:ba:6e:8b:01:49: 94:69:e3:88:54:07:8b:3a:b6:87:ce:c2:ed:9f:2b:60:c2:6e: f7:28:d5:7a:85:ff:00:01:54:27:45:f2:33:42:d8:a6:ce:dc: 81:f7:0e:17:0b:29:e2:a8:2e:c3:0e:44:e5:d6:76:9c:ea:ce: 81:9b:e5:37:73:b4:d0:29:93:59:3a:ab:f4:4d:9f:6a:a0:1e: d0:85:33:5b:5f:ac:a2:15:e1:07:62:ab:55:d1:82:6e:64:0f: 39:b4:e8:6c:3c:ef:3e:9a:ac:02:a7:b9:58:ac:d6:b5:f8:44: 35:8c:37:cb:e1:69:d9:2c:43:04:2a:bc:dc:fa:55:9c:df:81: 35:50:12:a3:1d:f8:9c:e4:22:f1:d2:f4:14:30:96:70:5e:6c: f6:97:80:4c:2a:3c:ec:8c:0a:e0:08:96:2a:3d:42:dd:ca:31: 21:97:fe:1f:e0:ca:3f:31:cb:30:f1:74:77:f8:7b:70:0e:0b: 47:7e:0f:94:06:6a:31:d1:a0:1d:3a:9a:85:d3:1d:87:28:87: bf:6d:1d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqqr0heCUs18iGc9lN5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjI0Yzk2ZTZhZGU2MDg4MTBjMzBkOWExMzA3Y2M2OWFm OWZmNGQwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD Eyg4OTFjNTYyNTA5NGRkNTE2MWM1OGQ1N2YxNDM2NDlmOTNhZWMwMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xfxwwL6aqQd3vQeV1ONC0pfSCxY HPBTanRxo1vIDhbi3JMN7dBKXuAdJqXVJVDwfF05viALMl1+tlqwjkTzBvumh1tR oVj8kkxEhUTDUbUP3B/wNN8P1KaUM7LXOzTO4V0jyjcdf2V0ORDGWP1XjB8IaWCY a8TY6tcroC1GmI1UdgwhClGoSCtK0qkjU+pxyKxgZjJUk8czObiPWjrEmLtFpMXc j+Wtp/yOlC2qYnptYLdnmI5t1GUUFRRE1Q/HF+OxsMWq7gOvLkg448/7qV8N61G/ tR51nfZwS01k07evOrOXVwTASz07h/iiXjmrWAz/H+ryEuXdndmQEimy7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkcViUJTdUWHFjVfxQ2Sfk67AA8MB8GA1UdIwQY MBaAFDjyTJbmreYIgQww2aEwfMaa+f9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMt MDRlNGE4NGE3NGFjLzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMtMDRlNGE4NGE3NGFj LzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINp/CJsh L2+QzgrJbg6DQ+KN7Cae71FG+OmNafGAF/Qqyu5wYIYQ5pFIvw1PtrXqObpuiwFJ lGnjiFQHizq2h87C7Z8rYMJu9yjVeoX/AAFUJ0XyM0LYps7cgfcOFwsp4qguww5E 5dZ2nOrOgZvlN3O00CmTWTqr9E2faqAe0IUzW1+sohXhB2KrVdGCbmQPObTobDzv PpqsAqe5WKzWtfhENYw3y+Fp2SxDBCq83PpVnN+BNVASox34nOQi8dL0FDCWcF5s 9peATCo87IwK4AiWKj1C3coxIZf+H+DKPzHLMPF0d/h7cA4LR34PlAZqMdGgHTqa hdMdhyiHv20doQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:34 2025 by rpki-client