This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json) Hash identifier: 5wd9B6sjWXnN/dwkTcE4TwLEUjm5n7G4JAY2w96sVlk= Subject key identifier: BD:24:61:24:CF:8C:93:2B:7C:47:F4:6F:5B:27:5B:9F:76:7B:0E:CF Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Certificate serial: 019B4BBA353FFD66CA12A57535BAFCF078DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft Manifest number: 03B5 Signing time: Tue 23 Dec 2025 15:00:52 +0000 Manifest this update: Tue 23 Dec 2025 15:00:52 +0000 Manifest next update: Wed 24 Dec 2025 15:00:52 +0000 Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: MCV+eqmTosRvdce5yUW/isDQ/EnCcTJMRV3XL9zKf1o=) 2: nQ2QOCXNiBhA_oIbltotIC2riD4.roa (hash: 1MmZzBOdKL/dvmTjwcqKsATX+RAPJW/TTlWipI0mLW4=) 3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:ba:35:3f:fd:66:ca:12:a5:75:35:ba:fc:f0:78:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Validity Not Before: Dec 23 15:00:52 2025 GMT Not After : Dec 24 15:00:52 2025 GMT Subject: CN=bd246124cf8c932b7c47f46f5b275b9f767b0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:1d:62:19:db:bd:fc:8a:1e:54:43:8d:40: 82:83:58:a0:45:69:d4:3e:ac:cb:e3:c1:e7:ed:58: d3:0b:7d:ae:1b:19:e9:e8:10:2c:19:8e:36:03:6a: c8:ba:06:57:8e:5a:2c:76:7f:72:2e:4b:83:e0:6a: 5d:d3:a0:0e:2e:a8:70:66:f8:c7:53:0f:b7:19:7e: be:e4:cd:46:cf:68:ed:8b:e5:c0:9b:d4:7f:e1:1e: 8e:a4:7d:1a:bf:db:b9:7a:77:e5:b8:04:23:35:93: b8:28:3d:d1:77:8e:7a:51:9e:69:32:44:96:09:b4: 78:cf:25:d9:e4:c3:71:df:93:e3:91:1c:99:3e:81: fc:6e:64:24:99:2e:61:d7:a3:15:c9:5b:aa:c5:6f: 3e:1e:99:9a:ce:27:9a:93:a6:b9:32:b7:b1:1a:09: 43:5d:09:62:7c:14:8d:88:75:be:07:42:19:52:3d: 03:7c:1a:9b:d0:91:81:2c:b4:93:16:18:5e:3c:61: 41:c4:9b:4a:aa:7c:a8:9b:fb:b4:28:17:05:c8:27: 2b:5d:f9:ff:5a:b2:ad:61:a1:c4:36:4c:da:90:71: d2:79:a9:b6:47:b4:81:06:1e:64:8c:34:27:f8:a9: ff:28:f4:8e:4d:31:11:aa:09:a4:6a:b3:0f:c4:ae: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:61:24:CF:8C:93:2B:7C:47:F4:6F:5B:27:5B:9F:76:7B:0E:CF X509v3 Authority Key Identifier: keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:18:be:5e:7b:bd:e0:29:31:84:9d:e7:0e:14:32:e3:e0: bd:94:d2:d1:22:c5:40:da:af:0e:f8:0a:c8:da:a5:16:82:8b: 5a:a6:1e:9e:4f:97:95:a2:d0:d7:9b:eb:2c:a1:f2:ec:a2:ca: 94:4e:21:d1:df:1f:86:dd:18:c0:40:3d:b2:d9:05:bd:b8:63: 3d:e4:e9:5b:c4:58:db:c5:18:4f:23:d1:57:65:3b:f7:af:20: fb:c1:95:46:b7:71:92:a4:d4:f8:94:8a:74:20:e9:f7:bd:06: 69:67:aa:cf:86:ac:9b:2d:9a:f1:3e:91:93:38:54:bc:a4:c7: 5a:fd:17:af:41:fc:46:14:14:2f:b2:12:3c:ac:57:38:c8:03: c5:e0:3a:6c:5e:71:ef:78:41:a9:5f:3f:fc:96:4a:8c:b7:4c: 42:17:6c:bd:65:a2:7b:cc:8e:d0:70:87:3c:93:de:15:53:cc: c7:76:2b:4e:db:14:e3:c7:9f:a3:01:b0:8f:a3:5a:2c:1e:80: cc:10:7f:b2:e6:b8:50:cf:e1:14:d7:eb:cf:57:40:71:d7:c3: b3:44:f0:5a:ed:9d:eb:bd:b2:e9:c3:16:e5:65:35:3c:7a:34: c8:2a:ac:ad:bc:38:13:64:a2:ce:a7:d5:14:42:89:d9:e9:de: cf:21:c5:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLujU//WbKEqV1Nbr88HjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey YTlkNjQwHhcNMjUxMjIzMTUwMDUyWhcNMjUxMjI0MTUwMDUyWjAzMTEwLwYDVQQD EyhiZDI0NjEyNGNmOGM5MzJiN2M0N2Y0NmY1YjI3NWI5Zjc2N2IwZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FMdYhnbvfyKHlRDjUCCg1igRWnU PqzL48Hn7VjTC32uGxnp6BAsGY42A2rIugZXjlosdn9yLkuD4Gpd06AOLqhwZvjH Uw+3GX6+5M1Gz2jti+XAm9R/4R6OpH0av9u5enfluAQjNZO4KD3Rd456UZ5pMkSW CbR4zyXZ5MNx35PjkRyZPoH8bmQkmS5h16MVyVuqxW8+Hpmazieak6a5MrexGglD XQlifBSNiHW+B0IZUj0DfBqb0JGBLLSTFhhePGFBxJtKqnyom/u0KBcFyCcrXfn/ WrKtYaHENkzakHHSeam2R7SBBh5kjDQn+Kn/KPSOTTERqgmkarMPxK7YSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0kYSTPjJMrfEf0b1snW592ew7PMB8GA1UdIwQY MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt MWQ2N2MzMjQ1MDFmLzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZEYvl57 veApMYSd5w4UMuPgvZTS0SLFQNqvDvgKyNqlFoKLWqYenk+XlaLQ15vrLKHy7KLK lE4h0d8fht0YwEA9stkFvbhjPeTpW8RY28UYTyPRV2U7968g+8GVRrdxkqTU+JSK dCDp970GaWeqz4asmy2a8T6RkzhUvKTHWv0Xr0H8RhQUL7ISPKxXOMgDxeA6bF5x 73hBqV8//JZKjLdMQhdsvWWie8yO0HCHPJPeFVPMx3YrTtsU48efowGwj6NaLB6A zBB/sua4UM/hFNfrz1dAcdfDs0TwWu2d672y6cMW5WU1PHo0yCqsrbw4E2SizqfV FEKJ2enezyHFYA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:43:05 2025 by rpki-client