This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json) Hash identifier: FdmxpAuS4ncRtv1x9KYl3fGEwh8pFFfIbXjy2uotTtE= Subject key identifier: 2A:EE:F3:0B:EB:6E:6C:BA:AB:12:7F:B9:3A:BF:E0:04:6C:33:7B:97 Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Certificate serial: 019B243ECB36391857E49E0537C87A6E6C10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft Manifest number: 0DB8 Signing time: Mon 15 Dec 2025 23:00:53 +0000 Manifest this update: Mon 15 Dec 2025 23:00:53 +0000 Manifest next update: Tue 16 Dec 2025 23:00:53 +0000 Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: iSc6up1LswdteqbEXr1Znh/5glauuSId8cUL66aaB1U=) 2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:cb:36:39:18:57:e4:9e:05:37:c8:7a:6e:6c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Validity Not Before: Dec 15 23:00:53 2025 GMT Not After : Dec 16 23:00:53 2025 GMT Subject: CN=2aeef30beb6e6cbaab127fb93abfe0046c337b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:7f:3b:e8:a0:83:02:69:97:a9:9b:10:7a: fb:02:4e:b7:60:e1:b8:3d:b4:db:f7:f0:d0:d5:9d: 8b:b0:52:50:73:69:e9:e4:02:44:b2:97:e1:dc:1c: cd:01:73:08:f9:08:0c:a2:09:9e:58:68:0e:f3:cd: cc:ce:c9:d9:cd:ee:51:55:37:ac:f1:26:7e:a5:70: 89:fa:19:bd:85:00:f7:11:cc:c3:79:b6:71:68:16: 01:eb:ab:04:14:44:2f:be:d3:43:ec:64:6b:6d:82: d6:ce:e5:e2:cb:12:16:59:03:ff:80:c6:66:40:f5: 34:91:ed:5a:e1:3e:50:55:ae:96:4c:6d:e4:e9:d6: 68:b7:c2:2c:9d:e1:e7:0b:b9:6a:28:7c:de:f0:58: 7e:ed:5f:d9:32:a8:58:a9:6c:67:09:9c:c2:33:87: bd:65:34:02:7d:b4:74:12:d0:12:2c:54:38:61:68: 1b:47:bb:94:24:0a:a2:78:ea:7e:18:ca:19:bf:ce: 29:d1:ba:9e:3c:92:95:2a:d3:7c:07:f5:dd:47:3a: e8:07:53:e6:7e:04:1a:1b:ff:57:da:e0:cb:31:87: 67:fb:07:51:84:ef:fe:90:50:e9:2d:cf:84:ec:22: 8a:c0:40:66:10:50:a2:f7:01:1a:d6:9e:de:21:47: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:F3:0B:EB:6E:6C:BA:AB:12:7F:B9:3A:BF:E0:04:6C:33:7B:97 X509v3 Authority Key Identifier: keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:93:91:e0:07:39:7c:d4:82:f2:de:0f:2f:40:76:70:21: 1a:60:9a:0a:1d:b2:b9:1a:1f:b1:1b:ac:23:45:dd:9c:dc:d9: fb:a3:f1:8f:3f:7d:7f:2b:15:6d:67:db:fa:7c:fb:d1:0d:b6: d9:2f:13:7c:7a:9e:69:ca:ca:8a:1c:64:67:dc:1d:02:ca:80: 75:82:fe:55:b2:78:1c:d1:f8:b6:27:7a:60:f6:61:ce:b1:60: 55:11:42:d2:fd:2d:98:cc:28:1b:c2:20:6a:c3:e4:ea:4d:03: 95:a0:14:0a:92:a8:7f:83:31:9f:18:00:0a:86:5c:bf:5a:a4: 0a:3a:b3:06:a2:74:0b:61:1c:60:e9:fd:8b:5b:ed:a1:00:dc: 60:ef:9e:cb:72:0d:70:b7:6c:47:38:1d:a8:a0:79:9c:85:0b: de:46:75:c0:e5:aa:e1:97:2d:ba:d9:f5:1b:be:e9:69:fb:55: 58:03:be:a0:11:3d:2f:21:b1:1c:5a:dd:11:bd:4d:6d:05:70: 8f:2d:c8:30:56:76:09:8f:44:80:bc:de:3b:1f:90:55:be:4d: 63:df:0a:8b:df:8e:5c:07:c8:b1:22:fa:85:b7:4a:ab:13:c5: c9:36:7f:df:c4:92:08:9f:8b:af:13:8c:ab:19:15:5d:9f:92: 8a:9e:55:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPss2ORhX5J4FN8h6bmwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3 ZmM4YjQwHhcNMjUxMjE1MjMwMDUzWhcNMjUxMjE2MjMwMDUzWjAzMTEwLwYDVQQD EygyYWVlZjMwYmViNmU2Y2JhYWIxMjdmYjkzYWJmZTAwNDZjMzM3Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki9/O+iggwJpl6mbEHr7Ak63YOG4 PbTb9/DQ1Z2LsFJQc2np5AJEspfh3BzNAXMI+QgMogmeWGgO883MzsnZze5RVTes 8SZ+pXCJ+hm9hQD3EczDebZxaBYB66sEFEQvvtND7GRrbYLWzuXiyxIWWQP/gMZm QPU0ke1a4T5QVa6WTG3k6dZot8IsneHnC7lqKHze8Fh+7V/ZMqhYqWxnCZzCM4e9 ZTQCfbR0EtASLFQ4YWgbR7uUJAqieOp+GMoZv84p0bqePJKVKtN8B/XdRzroB1Pm fgQaG/9X2uDLMYdn+wdRhO/+kFDpLc+E7CKKwEBmEFCi9wEa1p7eIUeODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCru8wvrbmy6qxJ/uTq/4ARsM3uXMB8GA1UdIwQY MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt ZDQ0NmYxZjgzYWU5LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5 LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZqTkeAH OXzUgvLeDy9AdnAhGmCaCh2yuRofsRusI0XdnNzZ+6Pxjz99fysVbWfb+nz70Q22 2S8TfHqeacrKihxkZ9wdAsqAdYL+VbJ4HNH4tid6YPZhzrFgVRFC0v0tmMwoG8Ig asPk6k0DlaAUCpKof4MxnxgACoZcv1qkCjqzBqJ0C2EcYOn9i1vtoQDcYO+ey3IN cLdsRzgdqKB5nIUL3kZ1wOWq4Zctutn1G77paftVWAO+oBE9LyGxHFrdEb1NbQVw jy3IMFZ2CY9EgLzeOx+QVb5NY98Ki9+OXAfIsSL6hbdKqxPFyTZ/38SSCJ+LrxOM qxkVXZ+Sip5Vgg== -----END CERTIFICATE-----Generated at Tue Dec 16 08:59:51 2025 by rpki-client