This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json) Hash identifier: 446e8HZCPSdeDNt4VcMZJpYzbownjLpYoTmlgiKSmXU= Subject key identifier: 16:44:6F:13:39:6A:12:70:BB:DF:47:AE:02:8A:F9:60:84:69:B1:46 Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Certificate serial: 019B495E242EBDF9970E7906911E377C0035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft Manifest number: 10F4 Signing time: Tue 23 Dec 2025 04:01:04 +0000 Manifest this update: Tue 23 Dec 2025 04:01:04 +0000 Manifest next update: Wed 24 Dec 2025 04:01:04 +0000 Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: LKkgBExdt6t3C5718Eqh9yINCS+8Mltosg7KW3X4LFY=) 2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:24:2e:bd:f9:97:0e:79:06:91:1e:37:7c:00:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Validity Not Before: Dec 23 04:01:04 2025 GMT Not After : Dec 24 04:01:04 2025 GMT Subject: CN=16446f13396a1270bbdf47ae028af9608469b146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:bd:ea:a2:dd:8b:32:86:ed:22:b1:b6:8c: 43:48:41:81:ad:4d:40:1a:07:68:66:cd:ce:94:1a: 07:4b:8e:3a:70:b4:3d:73:a6:e9:fe:90:90:0b:54: ef:f7:f6:cf:44:6d:59:f9:77:9e:d1:35:bd:29:51: 8f:e0:5c:06:39:7c:b2:a8:62:a4:d2:2b:fc:a3:c3: 95:60:4c:51:45:c1:12:60:00:f8:08:c7:fe:28:8f: d0:4a:d3:08:a7:2a:7c:89:34:ed:52:05:a3:b4:a5: a3:f7:5a:03:75:60:e7:90:74:e5:42:c4:c7:6d:aa: f4:01:6e:99:8c:e6:d0:6c:56:5b:e2:c0:46:1c:5b: a7:71:83:0a:6b:9f:b9:a3:c9:8b:10:57:06:e9:e2: b9:18:91:32:ad:9f:b1:f3:d9:75:57:07:ed:22:c2: 30:0f:0d:b5:59:9c:95:19:19:e5:f1:08:15:81:b7: 67:03:9b:01:d2:65:f9:b5:01:72:44:56:41:0b:ef: 02:d4:e1:97:67:36:44:67:33:c5:0a:67:62:e0:98: 15:fe:9b:05:3e:74:9b:5f:34:f0:8f:be:8d:92:6d: 25:13:a7:0e:a0:97:f8:3d:56:39:eb:6f:2c:97:24: be:19:16:f6:3e:5b:4b:de:2d:e1:de:c9:98:8e:7b: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:6F:13:39:6A:12:70:BB:DF:47:AE:02:8A:F9:60:84:69:B1:46 X509v3 Authority Key Identifier: keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7c:09:3a:06:61:b3:90:5b:19:8e:6a:2c:8f:8e:cc:3d:d7: 34:f8:f9:a8:7e:de:e1:98:fc:41:dd:9a:65:a2:cc:58:71:15: b8:27:95:ea:62:7e:6c:d5:69:09:f9:13:dd:c9:1a:78:49:25: 3b:5c:77:db:2c:26:eb:0d:92:49:a3:eb:f1:63:7f:d5:45:fc: ee:b2:a2:33:64:c8:db:60:a7:c7:ee:ca:f3:35:9c:cf:30:69: c2:a7:e1:f4:42:ab:cf:e9:b8:b2:42:51:37:25:30:d7:f4:46: 19:ad:bc:0d:2b:6d:a5:40:34:00:9c:f1:da:c0:cc:68:cc:4e: 89:74:f6:9e:ae:cb:8b:8e:6a:7e:f8:d2:ed:c7:1a:f7:bd:d0: b4:99:83:80:48:b7:3a:26:ad:b4:5e:d3:80:a4:d6:f3:db:26: 62:53:e7:76:37:bd:bd:b7:d4:53:96:4f:fc:a7:be:30:f0:46: e6:fb:01:49:8b:3f:ac:ba:42:96:1d:1d:5d:e2:19:4b:d6:42: 70:5a:24:1b:b5:40:a9:81:87:70:0e:6d:9a:d4:63:a2:4b:82: 2f:91:d9:bd:f7:18:67:7d:8d:89:03:dd:94:e2:47:db:dc:69: 42:c0:b9:ed:7b:67:93:6b:4c:8c:b5:4c:fc:ca:3c:e2:f5:86: 6b:ba:b9:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXiQuvfmXDnkGkR43fAA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll ZTIxNTQwHhcNMjUxMjIzMDQwMTA0WhcNMjUxMjI0MDQwMTA0WjAzMTEwLwYDVQQD EygxNjQ0NmYxMzM5NmExMjcwYmJkZjQ3YWUwMjhhZjk2MDg0NjliMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjq96qLdizKG7SKxtoxDSEGBrU1A GgdoZs3OlBoHS446cLQ9c6bp/pCQC1Tv9/bPRG1Z+Xee0TW9KVGP4FwGOXyyqGKk 0iv8o8OVYExRRcESYAD4CMf+KI/QStMIpyp8iTTtUgWjtKWj91oDdWDnkHTlQsTH bar0AW6ZjObQbFZb4sBGHFuncYMKa5+5o8mLEFcG6eK5GJEyrZ+x89l1VwftIsIw Dw21WZyVGRnl8QgVgbdnA5sB0mX5tQFyRFZBC+8C1OGXZzZEZzPFCmdi4JgV/psF PnSbXzTwj76Nkm0lE6cOoJf4PVY5628slyS+GRb2PltL3i3h3smYjnvfWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZEbxM5ahJwu99HrgKK+WCEabFGMB8GA1UdIwQY MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXwJOgZh s5BbGY5qLI+OzD3XNPj5qH7e4Zj8Qd2aZaLMWHEVuCeV6mJ+bNVpCfkT3ckaeEkl O1x32ywm6w2SSaPr8WN/1UX87rKiM2TI22Cnx+7K8zWczzBpwqfh9EKrz+m4skJR NyUw1/RGGa28DSttpUA0AJzx2sDMaMxOiXT2nq7Li45qfvjS7cca973QtJmDgEi3 OiattF7TgKTW89smYlPndje9vbfUU5ZP/Ke+MPBG5vsBSYs/rLpClh0dXeIZS9ZC cFokG7VAqYGHcA5tmtRjokuCL5HZvfcYZ32NiQPdlOJH29xpQsC57Xtnk2tMjLVM /Mo84vWGa7q53g== -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:53 2025 by rpki-client