This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json) Hash identifier: DL+aXDTd2RLUevU7TVlsvOXfwy29DAKrYA/ZtqNPD8U= Subject key identifier: 18:76:CA:2B:3E:D0:FF:1E:9C:53:B1:17:5C:9D:B8:0E:FE:1D:0B:2F Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Certificate serial: 019B047D2EA6F822589376F9210BF49C7650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft Manifest number: 0C8E Signing time: Tue 09 Dec 2025 19:01:11 +0000 Manifest this update: Tue 09 Dec 2025 19:01:11 +0000 Manifest next update: Wed 10 Dec 2025 19:01:11 +0000 Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: fHDOKy8un7tPB4GXBpgqV8OI/ayfbhWvqZFzAbu+YeI=) 2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=) 3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7d:2e:a6:f8:22:58:93:76:f9:21:0b:f4:9c:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Validity Not Before: Dec 9 19:01:11 2025 GMT Not After : Dec 10 19:01:11 2025 GMT Subject: CN=1876ca2b3ed0ff1e9c53b1175c9db80efe1d0b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:f9:2f:cd:af:7a:99:3b:3a:a6:7b:a3:f5: 22:e0:d3:66:f8:b0:6b:ea:1b:49:18:fa:2a:c2:b9: 85:ef:24:b8:bd:e5:73:a9:d4:ec:8d:38:23:f3:c4: cf:60:7a:84:ee:09:da:c1:0d:c4:a8:f5:c0:60:dc: ee:b6:6d:a7:92:67:ab:d3:23:55:56:c8:e3:d4:61: a7:d7:4e:4c:a6:1c:6d:f1:15:85:be:8e:3d:9f:86: 29:4c:00:77:9e:cc:d5:e8:80:de:59:8d:1d:da:ef: 08:81:01:f5:6f:c6:9a:a9:3f:7d:a5:aa:05:ed:96: 87:0d:a0:b9:c1:34:43:cd:8b:63:a9:24:b2:ad:88: 93:a4:1d:74:b0:cb:17:88:3a:80:ff:44:60:3e:57: c8:3b:d8:82:c6:9f:4f:6f:f9:5d:58:f8:e4:49:32: ab:5f:9a:21:a3:8e:da:7b:7b:ac:b4:ee:af:6f:dd: 84:fc:16:a4:ba:34:24:45:7b:36:46:22:bd:06:e7: 8d:be:ec:d9:24:e2:e1:67:b5:1a:70:23:90:08:5f: 83:09:da:08:b5:13:c0:1d:9f:af:a6:0d:75:c9:38: 51:2e:ef:c5:d7:b7:21:50:2a:bd:cb:c8:74:0a:8a: 23:87:ac:a4:e6:7b:3e:cd:2e:33:9f:e2:33:73:65: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:76:CA:2B:3E:D0:FF:1E:9C:53:B1:17:5C:9D:B8:0E:FE:1D:0B:2F X509v3 Authority Key Identifier: keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:32:23:d7:87:01:e0:58:3f:3b:ef:2f:71:dc:2b:e0:fd: 37:64:a0:d1:95:88:3d:69:37:1a:e8:f6:2c:31:48:96:ff:3e: da:e0:b6:13:95:4f:0d:56:ba:18:f5:b5:f9:c8:5a:a2:43:c4: 88:da:41:63:98:48:9a:9a:a3:0b:e1:1d:5c:9d:a1:37:15:66: 45:d0:79:21:88:f5:4c:f4:c7:dd:9b:52:47:eb:4f:9f:61:b3: 54:e1:05:0f:c7:aa:05:aa:11:1d:fb:c4:30:e4:3b:f9:e9:7b: ee:82:01:76:ba:a9:29:e5:69:88:c2:7e:0f:d7:c1:d8:e8:07: f7:10:ea:2e:5e:2b:1c:09:04:0c:67:ef:13:56:e7:bc:62:06: d1:ce:89:0b:0d:a1:ff:5e:6e:c6:4c:fd:19:d6:91:ab:ad:c4: d4:4f:15:d9:c3:53:c8:25:da:0a:8a:80:5b:8d:23:54:c3:48: 59:5b:52:01:d2:80:2d:9f:6d:c5:87:13:42:e2:bd:ea:ac:4a: f7:39:d7:3d:22:98:25:be:44:40:8a:5f:d9:ad:24:6a:0b:6a: ec:e2:be:f1:96:89:c3:90:5a:4d:f9:17:9b:53:fe:b0:97:1b: a9:83:7f:b4:c6:3a:60:54:04:0a:32:bb:20:32:5b:81:3c:53: c8:20:59:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfS6m+CJYk3b5IQv0nHZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2 ZGJmMDQwHhcNMjUxMjA5MTkwMTExWhcNMjUxMjEwMTkwMTExWjAzMTEwLwYDVQQD EygxODc2Y2EyYjNlZDBmZjFlOWM1M2IxMTc1YzlkYjgwZWZlMWQwYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsb5L82vepk7OqZ7o/Ui4NNm+LBr 6htJGPoqwrmF7yS4veVzqdTsjTgj88TPYHqE7gnawQ3EqPXAYNzutm2nkmer0yNV Vsjj1GGn105Mphxt8RWFvo49n4YpTAB3nszV6IDeWY0d2u8IgQH1b8aaqT99paoF 7ZaHDaC5wTRDzYtjqSSyrYiTpB10sMsXiDqA/0RgPlfIO9iCxp9Pb/ldWPjkSTKr X5oho47ae3ustO6vb92E/BakujQkRXs2RiK9BueNvuzZJOLhZ7UacCOQCF+DCdoI tRPAHZ+vpg11yThRLu/F17chUCq9y8h0Coojh6yk5ns+zS4zn+Izc2XFpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh2yis+0P8enFOxF1yduA7+HQsvMB8GA1UdIwQY MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2MyI9eH AeBYPzvvL3HcK+D9N2Sg0ZWIPWk3Guj2LDFIlv8+2uC2E5VPDVa6GPW1+chaokPE iNpBY5hImpqjC+EdXJ2hNxVmRdB5IYj1TPTH3ZtSR+tPn2GzVOEFD8eqBaoRHfvE MOQ7+el77oIBdrqpKeVpiMJ+D9fB2OgH9xDqLl4rHAkEDGfvE1bnvGIG0c6JCw2h /15uxkz9GdaRq63E1E8V2cNTyCXaCoqAW40jVMNIWVtSAdKALZ9txYcTQuK96qxK 9znXPSKYJb5EQIpf2a0kagtq7OK+8ZaJw5BaTfkXm1P+sJcbqYN/tMY6YFQECjK7 IDJbgTxTyCBZtw== -----END CERTIFICATE-----Generated at Wed Dec 10 01:00:31 2025 by rpki-client