This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json) Hash identifier: 1L91VfEUfeUogE9MKmK/mjGvJiljKdGy37/AMbfnYRE= Subject key identifier: C0:8A:73:4C:5E:2C:18:B7:5C:6B:03:89:82:34:DB:3C:66:AE:54:2E Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Certificate serial: 019B39EB29F9E89A4E56440B1061119473DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft Manifest number: 10EC Signing time: Sat 20 Dec 2025 04:01:11 +0000 Manifest this update: Sat 20 Dec 2025 04:01:11 +0000 Manifest next update: Sun 21 Dec 2025 04:01:11 +0000 Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: I5SzMymQsHfvsebMkaMzdO01CHomYygKDaj1HM9qo90=) 2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:29:f9:e8:9a:4e:56:44:0b:10:61:11:94:73:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Validity Not Before: Dec 20 04:01:11 2025 GMT Not After : Dec 21 04:01:11 2025 GMT Subject: CN=c08a734c5e2c18b75c6b03898234db3c66ae542e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:20:bf:c3:82:6a:88:0a:d0:99:1e:a5:e5:c8: f6:18:82:7b:ec:15:1f:fa:18:63:14:74:9c:53:f4: d6:ff:f6:81:91:83:88:27:95:5a:79:52:9d:cb:93: 71:1c:f2:d8:e6:8c:12:b5:98:42:6f:8e:7a:b7:d5: f2:da:89:57:fd:8e:59:93:cb:04:35:fe:8c:8a:68: dc:17:c5:0a:9f:89:21:7d:f4:f0:2f:77:2e:14:35: f3:54:c7:5d:99:33:75:b2:46:1d:23:58:7d:08:de: ef:09:96:5f:8d:5a:bb:8e:e9:c6:b0:78:70:6d:10: d2:3e:e6:9a:d3:e7:db:42:db:48:05:2b:47:01:43: e4:30:4f:61:f7:f4:2b:af:54:47:16:f9:60:0d:13: 4a:c9:f0:aa:97:f9:a8:d6:3c:bf:28:60:eb:25:6b: 85:2b:52:e5:03:0d:85:0e:99:42:72:e4:79:58:95: 29:19:19:6f:a2:3c:85:5b:02:ba:92:84:a3:f2:d1: 49:b2:6b:7f:14:84:6a:e7:ea:3f:52:22:09:bf:e7: 4c:e5:16:3f:83:de:e0:c9:f0:ce:c3:7c:0e:12:66: 35:cb:a2:37:2f:f1:cc:4f:08:bb:b5:ed:70:94:81: eb:86:5a:06:e1:8a:50:3a:f0:8b:c3:ab:8d:40:02: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:73:4C:5E:2C:18:B7:5C:6B:03:89:82:34:DB:3C:66:AE:54:2E X509v3 Authority Key Identifier: keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:e6:10:9c:a4:95:1b:7c:66:9a:e7:02:5f:fa:5f:63:6d: 89:83:4d:e5:b5:a1:00:9b:f6:62:55:f8:f6:4d:41:27:9d:58: 15:ae:8c:e3:d5:f7:11:8a:34:ac:59:69:db:44:70:d2:cd:6f: 65:d4:27:20:31:9c:8d:1a:85:6a:10:06:df:38:9d:59:d7:c3: dc:cb:29:a4:37:22:33:76:69:a5:ef:96:9b:95:d1:a9:bb:ed: 4b:33:b9:7e:f9:36:0d:21:d0:bf:3e:81:4b:b8:ef:b9:05:f5: ce:32:6f:e9:9d:41:7f:ac:30:87:27:9e:a5:1b:28:36:82:48: b7:85:88:42:2c:98:22:02:ee:1c:33:ba:d0:64:86:dc:5e:a3: e9:70:d5:cb:11:29:e7:4d:6d:ab:ea:4b:c5:7c:2a:60:5b:ef: 01:48:f3:2f:7d:c3:01:4c:e2:b0:94:92:47:67:58:bf:11:1d: 73:4a:8a:e0:b4:64:f3:1a:46:72:50:45:96:3c:92:ab:12:71: 79:7f:c5:cd:e5:14:a7:20:8b:fc:1e:c2:56:95:e0:33:e6:05: 51:de:2f:d7:cb:c1:7c:ef:fe:6e:f5:dc:ed:69:e0:2c:8f:11: a8:4b:f1:9d:fb:63:9e:8a:6f:8d:37:50:db:b9:11:64:f7:d8: bd:50:66:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yn56JpOVkQLEGERlHPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll ZTIxNTQwHhcNMjUxMjIwMDQwMTExWhcNMjUxMjIxMDQwMTExWjAzMTEwLwYDVQQD EyhjMDhhNzM0YzVlMmMxOGI3NWM2YjAzODk4MjM0ZGIzYzY2YWU1NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SC/w4JqiArQmR6l5cj2GIJ77BUf +hhjFHScU/TW//aBkYOIJ5VaeVKdy5NxHPLY5owStZhCb456t9Xy2olX/Y5Zk8sE Nf6MimjcF8UKn4khffTwL3cuFDXzVMddmTN1skYdI1h9CN7vCZZfjVq7junGsHhw bRDSPuaa0+fbQttIBStHAUPkME9h9/Qrr1RHFvlgDRNKyfCql/mo1jy/KGDrJWuF K1LlAw2FDplCcuR5WJUpGRlvojyFWwK6koSj8tFJsmt/FIRq5+o/UiIJv+dM5RY/ g97gyfDOw3wOEmY1y6I3L/HMTwi7te1wlIHrhloG4YpQOvCLw6uNQAKi1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCKc0xeLBi3XGsDiYI02zxmrlQuMB8GA1UdIwQY MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWPmEJyk lRt8ZprnAl/6X2NtiYNN5bWhAJv2YlX49k1BJ51YFa6M49X3EYo0rFlp20Rw0s1v ZdQnIDGcjRqFahAG3zidWdfD3MsppDciM3Zppe+Wm5XRqbvtSzO5fvk2DSHQvz6B S7jvuQX1zjJv6Z1Bf6wwhyeepRsoNoJIt4WIQiyYIgLuHDO60GSG3F6j6XDVyxEp 501tq+pLxXwqYFvvAUjzL33DAUzisJSSR2dYvxEdc0qK4LRk8xpGclBFljySqxJx eX/FzeUUpyCL/B7CVpXgM+YFUd4v18vBfO/+bvXc7WngLI8RqEvxnftjnopvjTdQ 27kRZPfYvVBm+w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:41 2025 by rpki-client