This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json) Hash identifier: E4pIKAjhXJbiAK1tea7ATE3FhdHmjRlGL0Geqro1dxs= Subject key identifier: 4F:61:13:B0:11:C9:8E:32:2A:DB:5A:29:45:FA:76:BE:1A:F7:6E:45 Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Certificate serial: 019B38D863A38222D61DC08866AF1046F24D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft Manifest number: 0F75 Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: u0vgS9I1YAJvcSXvTPjyiWambGDgc9IWWIsSwaOmYlI=) 2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:63:a3:82:22:d6:1d:c0:88:66:af:10:46:f2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=4f6113b011c98e322adb5a2945fa76be1af76e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:08:4b:ef:ff:1c:62:c2:96:8b:46:7e:86: 40:ad:35:f4:80:59:b4:a6:55:51:e3:76:93:ce:13: c7:a4:d7:ce:c8:b0:2b:9c:e1:7d:7b:13:19:ab:d9: 9d:3d:62:d0:3d:2b:f5:e8:6d:9f:bd:07:eb:c3:e2: 42:44:10:d6:cd:70:8c:c6:37:f0:2c:bc:11:64:39: f8:d8:96:e3:69:c7:7e:87:69:27:47:b3:14:b5:a7: 2c:d9:72:22:41:51:4e:d0:11:a7:25:98:e1:bf:91: eb:63:1d:94:db:e2:ac:1c:2c:44:66:bc:bd:19:14: 0d:84:5e:76:36:b4:39:26:48:ec:fa:d6:96:76:07: dc:3c:36:ae:05:56:44:c1:78:26:e8:6e:dc:ff:d5: 6f:d7:8f:ad:33:bb:21:c5:57:e3:02:33:82:6b:12: 9b:77:e8:97:5b:a6:92:60:55:9a:1d:ae:80:23:a1: 5b:44:18:fe:61:7e:63:67:b8:de:e7:af:fb:10:90: b6:77:27:9c:54:b3:34:b4:4f:5c:73:55:48:b0:7b: e8:66:23:bf:ff:13:ac:c8:3e:9a:1b:4c:e0:05:82: a0:0e:f3:4d:e9:71:45:81:5c:55:c5:0a:ba:99:35: e8:ce:2b:30:a2:0e:58:f1:1b:9d:ca:70:38:a3:71: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:61:13:B0:11:C9:8E:32:2A:DB:5A:29:45:FA:76:BE:1A:F7:6E:45 X509v3 Authority Key Identifier: keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:d3:46:e1:0a:68:c1:d1:f3:67:99:11:a5:2f:52:0c:e7: 1c:31:c3:08:3a:8d:27:9b:88:1f:5e:03:24:4b:19:9f:cc:5e: 62:18:6a:0e:1c:a6:98:d6:78:57:ed:85:0a:08:df:86:e2:a9: bc:77:d8:46:f2:56:3b:c3:56:6b:b5:94:04:cb:8f:95:14:62: 25:0b:df:cf:e5:47:0c:7e:d3:d6:20:6a:a7:6b:26:4e:14:1b: 14:57:2f:eb:76:11:cb:98:68:b8:89:d3:80:cd:42:cc:c3:9f: 84:7c:47:7e:ae:6c:ee:30:fe:f8:43:62:60:4a:3b:9f:fa:af: b1:a8:9b:45:02:df:67:3d:63:5f:80:1c:2b:3b:9d:c6:6c:c4: e5:9d:a4:df:a1:be:cf:1b:6e:32:0f:4a:c9:6f:2d:45:c3:99: 93:2d:ab:0a:9a:40:30:23:04:46:7c:22:5b:8c:02:6d:af:ac: e9:f5:d7:72:bf:71:ce:83:de:7a:cf:c0:a2:12:e8:eb:be:ba: 8e:e1:89:01:ef:2a:8d:69:6d:df:3b:ff:e6:04:91:77:d3:4d: 68:b8:35:0a:31:2c:6a:f6:d3:98:bd:e3:80:3a:a9:dd:1b:5d: d6:8e:2d:98:20:f4:26:99:2e:6f:bf:3e:c1:24:38:a4:0e:1d: c7:4f:db:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GOjgiLWHcCIZq8QRvJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx NTkzNzgwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD Eyg0ZjYxMTNiMDExYzk4ZTMyMmFkYjVhMjk0NWZhNzZiZTFhZjc2ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqkIS+//HGLClotGfoZArTX0gFm0 plVR43aTzhPHpNfOyLArnOF9exMZq9mdPWLQPSv16G2fvQfrw+JCRBDWzXCMxjfw LLwRZDn42Jbjacd+h2knR7MUtacs2XIiQVFO0BGnJZjhv5HrYx2U2+KsHCxEZry9 GRQNhF52NrQ5Jkjs+taWdgfcPDauBVZEwXgm6G7c/9Vv14+tM7shxVfjAjOCaxKb d+iXW6aSYFWaHa6AI6FbRBj+YX5jZ7je56/7EJC2dyecVLM0tE9cc1VIsHvoZiO/ /xOsyD6aG0zgBYKgDvNN6XFFgVxVxQq6mTXoziswog5Y8RudynA4o3Fx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9hE7ARyY4yKttaKUX6dr4a925FMB8GA1UdIwQY MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5 LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdLTRuEK aMHR82eZEaUvUgznHDHDCDqNJ5uIH14DJEsZn8xeYhhqDhymmNZ4V+2FCgjfhuKp vHfYRvJWO8NWa7WUBMuPlRRiJQvfz+VHDH7T1iBqp2smThQbFFcv63YRy5houInT gM1CzMOfhHxHfq5s7jD++ENiYEo7n/qvsaibRQLfZz1jX4AcKzudxmzE5Z2k36G+ zxtuMg9KyW8tRcOZky2rCppAMCMERnwiW4wCba+s6fXXcr9xzoPees/AohLo6766 juGJAe8qjWlt3zv/5gSRd9NNaLg1CjEsavbTmL3jgDqp3Rtd1o4tmCD0Jpkub78+ wSQ4pA4dx0/bMg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:27 2025 by rpki-client