This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json) Hash identifier: dNMDQ76SjoHShSloL2lKmX6/6q0GNOFCWYf3tvoDNhE= Subject key identifier: 39:1B:C2:C9:CC:24:12:1A:88:99:B2:F0:47:34:F9:1E:54:AE:41:11 Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Certificate serial: 019AF31D3AEAB146FB0DF7D24DE56517A541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft Manifest number: 0D65 Signing time: Sat 06 Dec 2025 10:02:50 +0000 Manifest this update: Sat 06 Dec 2025 10:02:50 +0000 Manifest next update: Sun 07 Dec 2025 10:02:50 +0000 Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=) 2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: qROrF3v8qlhnX0gsgsGUFIRhpXz0YIBnAcvU2Ili1Cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:3a:ea:b1:46:fb:0d:f7:d2:4d:e5:65:17:a5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Validity Not Before: Dec 6 10:02:50 2025 GMT Not After : Dec 7 10:02:50 2025 GMT Subject: CN=391bc2c9cc24121a8899b2f04734f91e54ae4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:01:1c:bf:cb:86:66:98:14:dc:8b:11:88: e8:9a:7e:ac:91:92:91:9f:18:9f:3f:12:ce:cc:e3: b1:35:b5:36:60:6b:9b:dd:9f:c3:d9:73:1e:d6:75: 84:47:f5:65:c8:da:ff:5e:8f:e5:ed:64:02:63:6b: d2:39:3b:a8:2d:0f:58:b1:c9:3d:11:e1:f8:a5:51: 4c:49:62:14:0b:d0:4d:5e:ca:74:48:8b:9f:9f:96: df:95:3a:2a:e1:fe:55:69:8a:14:f7:4e:94:2c:85: b7:bb:f2:35:83:20:e5:d1:c4:70:1f:f1:0c:ac:9b: 24:e5:30:b0:0c:d0:82:98:80:4d:bc:06:a5:12:35: f0:ff:85:ea:a0:1c:c3:71:44:4b:bb:ec:6a:d0:60: 59:dc:cb:83:6d:a4:03:48:8f:0c:87:a2:06:08:6c: 78:67:df:91:cb:0d:69:ea:aa:ae:28:f0:9a:97:a5: ad:51:b3:59:09:3a:51:69:3f:3a:83:db:d3:6c:d0: 71:c6:a9:b0:4d:79:45:6e:63:b1:59:02:44:c4:79: 66:05:9f:9e:e5:47:c2:e6:ab:21:e0:13:ee:83:63: 9d:1a:12:76:90:29:e0:3f:93:70:f3:99:96:bf:e3: 0f:88:e5:77:83:55:7d:75:4c:2c:3d:81:04:28:82: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1B:C2:C9:CC:24:12:1A:88:99:B2:F0:47:34:F9:1E:54:AE:41:11 X509v3 Authority Key Identifier: keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:51:2b:4c:16:85:d4:f3:70:ad:e5:19:e4:dc:15:5d:d1:b5: e9:b5:6f:4b:85:99:b0:a2:c8:e0:4b:b7:2c:6e:1f:9f:49:3c: c2:56:07:ca:81:87:44:10:3a:49:13:3e:71:09:5c:a3:2e:0c: c1:53:79:a7:bb:b5:c2:f7:24:b1:09:a9:3a:82:0e:ed:ef:a9: 17:6a:68:5f:a5:95:0a:32:81:6e:45:3f:c9:cf:95:9c:b4:94: 97:e3:4c:81:f8:a8:73:a7:06:62:3d:e9:ef:27:ed:6e:fc:be: 6e:e7:e1:d5:23:78:2d:7b:93:43:2a:9c:09:33:75:39:f0:b9: 27:74:8f:0d:8f:0d:78:41:b2:41:e2:3c:65:8b:65:07:30:47: af:56:4e:43:f3:f4:b1:eb:31:a8:2b:bd:03:5c:4e:bb:8c:ac: 12:d3:21:e4:b0:05:02:e7:d6:9e:f5:d1:dc:38:b6:24:67:d4: db:ac:bf:a8:4a:e6:93:1e:95:4b:e3:5b:f4:d2:fb:0f:d5:ba: 0a:ee:fe:34:02:63:b4:59:bb:a6:cd:f3:e6:4e:dd:17:72:32: 72:67:fc:22:b6:6b:54:60:74:ac:26:a8:a1:11:e9:d1:1a:88: 5d:ec:34:21:3e:a5:9e:8c:3a:33:c8:1b:0f:3d:08:9c:7c:d5: 4e:6a:98:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTrqsUb7DffSTeVlF6VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx M2RhNWIwHhcNMjUxMjA2MTAwMjUwWhcNMjUxMjA3MTAwMjUwWjAzMTEwLwYDVQQD EygzOTFiYzJjOWNjMjQxMjFhODg5OWIyZjA0NzM0ZjkxZTU0YWU0MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+EBHL/LhmaYFNyLEYjomn6skZKR nxifPxLOzOOxNbU2YGub3Z/D2XMe1nWER/VlyNr/Xo/l7WQCY2vSOTuoLQ9Ysck9 EeH4pVFMSWIUC9BNXsp0SIufn5bflToq4f5VaYoU906ULIW3u/I1gyDl0cRwH/EM rJsk5TCwDNCCmIBNvAalEjXw/4XqoBzDcURLu+xq0GBZ3MuDbaQDSI8Mh6IGCGx4 Z9+Ryw1p6qquKPCal6WtUbNZCTpRaT86g9vTbNBxxqmwTXlFbmOxWQJExHlmBZ+e 5UfC5qsh4BPug2OdGhJ2kCngP5Nw85mWv+MPiOV3g1V9dUwsPYEEKILfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkbwsnMJBIaiJmy8Ec0+R5UrkERMB8GA1UdIwQY MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0 LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVErTBaF 1PNwreUZ5NwVXdG16bVvS4WZsKLI4Eu3LG4fn0k8wlYHyoGHRBA6SRM+cQlcoy4M wVN5p7u1wvcksQmpOoIO7e+pF2poX6WVCjKBbkU/yc+VnLSUl+NMgfioc6cGYj3p 7yftbvy+bufh1SN4LXuTQyqcCTN1OfC5J3SPDY8NeEGyQeI8ZYtlBzBHr1ZOQ/P0 sesxqCu9A1xOu4ysEtMh5LAFAufWnvXR3Di2JGfU26y/qErmkx6VS+Nb9NL7D9W6 Cu7+NAJjtFm7ps3z5k7dF3Iycmf8IrZrVGB0rCaooRHp0RqIXew0IT6lnow6M8gb Dz0InHzVTmqYsA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:45 2025 by rpki-client