This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json) Hash identifier: CrBLXOivQ9ykMJfumajYaXVbwmNPoTQr5eGUIr9pvyU= Subject key identifier: B7:3B:1F:D4:F5:53:3E:4C:69:49:30:A3:1A:FF:A5:2F:4F:4D:85:CE Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0 Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0 Certificate serial: 019AF31CFF44B2520E452081C427F52CDF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft Manifest number: 0654 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: OmDwyc2tpvLuQj+ceJ/0bJeL0DFiw6EUctYEpndyogs=) 2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ff:44:b2:52:0e:45:20:81:c4:27:f5:2c:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=b73b1fd4f5533e4c694930a31affa52f4f4d85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:af:db:9b:ba:13:da:54:85:b0:63:8b:d1: db:06:54:64:02:25:35:61:a2:84:84:8e:73:40:a9: d6:a9:4d:a2:a4:4b:fd:76:f6:cf:3a:5a:75:1b:7e: 36:5b:a8:5c:8a:9c:80:4e:c8:41:c9:bb:ce:16:ee: 45:d7:3f:99:9b:46:ac:63:05:eb:af:11:b4:69:0d: b8:67:42:0f:34:ff:c6:36:8e:4d:a3:e4:24:41:f4: 0f:9e:4d:a8:a7:9b:89:f3:9b:e8:e8:ff:e4:9b:a4: f4:46:14:2e:59:1c:1f:fc:f0:ef:f7:57:1f:50:f7: da:49:ea:97:e0:a0:56:a0:a4:fc:d5:1a:28:e0:3e: 07:83:c5:3d:0c:71:15:ac:82:29:4c:1b:fb:54:9a: 80:29:81:e1:9d:38:27:8d:17:30:43:0f:3d:df:9b: 3b:ca:a1:2b:1f:00:eb:d0:12:c7:50:d6:c7:ec:71: e4:b8:69:cb:a7:5c:fd:fd:e9:d8:07:89:9b:90:94: 2f:ec:2d:1f:bd:7d:34:da:bc:46:35:be:69:b2:c5: 56:93:cc:16:0a:d6:5f:da:c1:b1:9f:e3:e6:f9:a3: 66:47:4d:01:f6:e6:fd:76:cf:75:43:0a:2b:aa:ef: dc:78:c1:0d:57:8e:2d:44:a5:61:63:7d:71:ef:e8: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:1F:D4:F5:53:3E:4C:69:49:30:A3:1A:FF:A5:2F:4F:4D:85:CE X509v3 Authority Key Identifier: keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b0:e2:59:b3:7e:1a:31:50:37:74:97:5e:49:be:89:da:d3: 2b:dd:0e:9a:74:37:a2:ea:16:28:04:c7:44:74:86:89:93:1a: 03:05:c8:99:bf:9c:f9:d0:b3:80:f7:b0:c0:7b:be:26:e0:76: de:fc:3f:1a:44:9f:5e:eb:8d:09:fe:4e:cc:a1:86:96:08:84: cb:23:e5:85:a6:6e:37:49:08:23:63:28:44:0a:59:d7:0b:1e: 0a:59:a4:de:3c:32:c0:2f:95:f2:67:db:f0:46:99:17:f8:74: 94:3a:d3:52:59:66:84:7a:7b:54:84:5b:b8:89:28:9e:b3:68: dc:65:31:d5:fa:c3:29:5b:d5:b5:c0:f8:b6:7a:e2:51:b4:fd: b1:e2:ce:ae:0e:8c:f6:80:fd:e2:60:e7:5f:85:ee:6a:01:95: 97:65:a8:d1:99:ae:25:da:ba:c7:d5:08:a5:43:63:53:98:34: aa:79:15:0b:f2:ec:9d:42:51:d9:c8:cd:0e:64:fb:57:35:61: 3b:9d:85:5c:e8:58:65:c6:6b:2c:48:d9:93:51:5d:1c:7d:79: 47:57:a4:32:2b:95:af:91:27:33:48:6f:54:16:55:68:f5:06: d3:28:61:e6:9e:65:b0:a5:ed:8c:1a:6d:88:93:93:65:8f:a8: be:70:64:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHP9EslIORSCBxCf1LN+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzE0OWRhMGExMmJkYmYxYmVmNTk4YjA0NjMwOTA3ODAy MDZjZTAwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD EyhiNzNiMWZkNGY1NTMzZTRjNjk0OTMwYTMxYWZmYTUyZjRmNGQ4NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg2v25u6E9pUhbBji9HbBlRkAiU1 YaKEhI5zQKnWqU2ipEv9dvbPOlp1G342W6hcipyATshBybvOFu5F1z+Zm0asYwXr rxG0aQ24Z0IPNP/GNo5No+QkQfQPnk2op5uJ85vo6P/km6T0RhQuWRwf/PDv91cf UPfaSeqX4KBWoKT81Roo4D4Hg8U9DHEVrIIpTBv7VJqAKYHhnTgnjRcwQw8935s7 yqErHwDr0BLHUNbH7HHkuGnLp1z9/enYB4mbkJQv7C0fvX002rxGNb5pssVWk8wW CtZf2sGxn+Pm+aNmR00B9ub9ds91Qworqu/ceMENV44tRKVhY31x7+i3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc7H9T1Uz5MaUkwoxr/pS9PTYXOMB8GA1UdIwQY MBaAFDoxSdoKEr2/G+9ZiwRjCQeAIGzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEt MDdlODNjZDViNjBkLzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEtMDdlODNjZDViNjBk LzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubDiWbN+ GjFQN3SXXkm+idrTK90OmnQ3ouoWKATHRHSGiZMaAwXImb+c+dCzgPewwHu+JuB2 3vw/GkSfXuuNCf5OzKGGlgiEyyPlhaZuN0kII2MoRApZ1wseClmk3jwywC+V8mfb 8EaZF/h0lDrTUllmhHp7VIRbuIkonrNo3GUx1frDKVvVtcD4tnriUbT9seLOrg6M 9oD94mDnX4XuagGVl2Wo0ZmuJdq6x9UIpUNjU5g0qnkVC/LsnUJR2cjNDmT7VzVh O52FXOhYZcZrLEjZk1FdHH15R1ekMiuVr5EnM0hvVBZVaPUG0yhh5p5lsKXtjBpt iJOTZY+ovnBkKg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:56 2025 by rpki-client