This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json) Hash identifier: ZiLuXlP3HR2ftIKjiREX8W2ehP1SnIegUCMb9YzV9A0= Subject key identifier: 38:14:E8:9E:C6:C2:E9:5D:9F:68:60:25:9D:F3:79:7E:C8:6D:AC:D1 Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Certificate serial: 019B0E24FC47FEF611A2640EE56D1552A5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft Manifest number: 0ACA Signing time: Thu 11 Dec 2025 16:01:03 +0000 Manifest this update: Thu 11 Dec 2025 16:01:03 +0000 Manifest next update: Fri 12 Dec 2025 16:01:03 +0000 Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=) 2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: nmu9dfDMtKNTQHCBl5Kgu1LgIyLsHYSv0KYGDiACOZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:fc:47:fe:f6:11:a2:64:0e:e5:6d:15:52:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Validity Not Before: Dec 11 16:01:03 2025 GMT Not After : Dec 12 16:01:03 2025 GMT Subject: CN=3814e89ec6c2e95d9f6860259df3797ec86dacd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:6f:ae:f6:33:2b:af:69:ec:d3:49:95:7f: 5c:6b:65:50:98:e0:0b:d5:e5:fb:28:73:ee:da:f9: 8a:6c:cb:d4:4e:03:17:84:71:11:ca:f6:79:8e:a5: 1a:eb:82:52:81:18:2f:f6:5d:b6:9c:b6:3c:d8:14: 0c:7a:64:66:ed:25:a5:4c:9f:06:68:8a:24:bd:e0: 2a:5b:e3:9d:43:8b:f3:f3:a3:77:0b:c1:7d:f2:28: 7a:87:91:66:48:28:28:d9:e4:d5:35:ff:7e:51:02: aa:3d:2b:97:d4:3e:62:8c:43:1a:39:97:f8:5c:9c: bb:cf:9f:76:db:cb:91:d7:8e:9c:7d:72:e4:84:b0: 89:49:bf:bd:1d:10:ef:17:68:3f:af:bd:b9:0c:d1: b3:e0:a3:22:06:6b:1f:19:46:94:38:7f:25:3f:6e: e3:d5:20:ab:09:54:c8:40:f1:22:c7:fc:5a:5b:ae: cb:93:ef:0d:45:bd:87:a8:47:2c:ac:aa:ea:e9:07: b5:37:d0:ba:0b:8b:ff:d9:17:31:a7:a6:c7:73:39: 6a:de:83:c7:57:36:5f:00:2f:c7:96:34:66:1f:48: 56:c3:c0:63:f2:b4:a0:87:e3:74:a5:c9:f6:26:74: 85:35:37:88:88:8e:5b:f3:ac:48:96:6e:12:fd:9d: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:14:E8:9E:C6:C2:E9:5D:9F:68:60:25:9D:F3:79:7E:C8:6D:AC:D1 X509v3 Authority Key Identifier: keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:83:35:d0:fb:79:61:c7:97:60:df:93:58:ab:66:b5:a0:e0: fb:f6:c7:b7:6d:54:0c:b0:ac:a9:51:bc:bb:71:14:ad:9f:c4: be:bd:33:29:52:5c:cf:d3:f1:4f:df:41:18:3a:23:ff:1e:f1: 4d:e6:3e:53:32:d4:26:66:f1:9e:08:e9:21:95:10:e2:b5:52: 9d:c0:7f:13:53:33:ff:a5:a9:89:3a:04:a6:45:c2:99:fe:d2: 07:6a:b2:67:c6:99:51:ec:81:a3:aa:5e:91:ef:e9:36:80:52: e0:2d:7a:bc:12:96:6f:11:d1:3d:1c:5c:9c:71:20:87:df:fc: b3:5f:e2:39:d7:c4:13:56:17:cf:13:5b:41:65:b7:48:78:a7: 8a:73:ab:3e:f5:1f:84:6f:7e:cc:86:4c:32:b6:1f:b6:d7:58: 46:7b:24:79:31:89:ff:c5:bf:c8:77:04:b8:a2:31:58:a9:76: 34:61:f2:ed:62:db:4f:9d:71:bd:b1:db:dd:25:fd:87:0c:08: b9:4c:0b:25:80:8b:5d:a3:aa:56:45:c3:67:9a:cd:dc:39:16: 4b:3a:3f:26:72:26:29:c0:fd:81:0b:ef:17:7c:32:f4:80:2e: 82:33:6f:d3:2e:90:d4:03:1b:b8:a2:82:14:12:64:18:6a:a9: 39:96:d9:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJPxH/vYRomQO5W0VUqWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWM3MWRjM2Q2OGNkZThmOTA3N2QzYWY2Njc1MWMyOWZj ZWVhNGMwHhcNMjUxMjExMTYwMTAzWhcNMjUxMjEyMTYwMTAzWjAzMTEwLwYDVQQD EygzODE0ZTg5ZWM2YzJlOTVkOWY2ODYwMjU5ZGYzNzk3ZWM4NmRhY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jVvrvYzK69p7NNJlX9ca2VQmOAL 1eX7KHPu2vmKbMvUTgMXhHERyvZ5jqUa64JSgRgv9l22nLY82BQMemRm7SWlTJ8G aIokveAqW+OdQ4vz86N3C8F98ih6h5FmSCgo2eTVNf9+UQKqPSuX1D5ijEMaOZf4 XJy7z59228uR146cfXLkhLCJSb+9HRDvF2g/r725DNGz4KMiBmsfGUaUOH8lP27j 1SCrCVTIQPEix/xaW67Lk+8NRb2HqEcsrKrq6Qe1N9C6C4v/2Rcxp6bHczlq3oPH VzZfAC/HljRmH0hWw8Bj8rSgh+N0pcn2JnSFNTeIiI5b86xIlm4S/Z00dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgU6J7Gwuldn2hgJZ3zeX7IbazRMB8GA1UdIwQY MBaAFDnscdw9aM3o+Qd9OvZnUcKfzupMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5Yzct ZGIzZjIyNzA1ZGQ2LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5YzctZGIzZjIyNzA1ZGQ2 LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIM10Pt5 YceXYN+TWKtmtaDg+/bHt21UDLCsqVG8u3EUrZ/Evr0zKVJcz9PxT99BGDoj/x7x TeY+UzLUJmbxngjpIZUQ4rVSncB/E1Mz/6WpiToEpkXCmf7SB2qyZ8aZUeyBo6pe ke/pNoBS4C16vBKWbxHRPRxcnHEgh9/8s1/iOdfEE1YXzxNbQWW3SHininOrPvUf hG9+zIZMMrYfttdYRnskeTGJ/8W/yHcEuKIxWKl2NGHy7WLbT51xvbHb3SX9hwwI uUwLJYCLXaOqVkXDZ5rN3DkWSzo/JnImKcD9gQvvF3wy9IAugjNv0y6Q1AMbuKKC FBJkGGqpOZbZIg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:26 2025 by rpki-client