This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json) Hash identifier: kBUrEmXcMmt2jxzhe+OSZTXCQ61UlOSpKe/wfkzy1Ko= Subject key identifier: C7:D1:BA:D8:1F:64:BA:9E:27:D9:D1:92:99:34:25:81:67:01:A1:2A Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Certificate serial: 019B5A88F717DD121CEBDAE3B595F2221DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft Manifest number: 0EAB Signing time: Fri 26 Dec 2025 12:01:24 +0000 Manifest this update: Fri 26 Dec 2025 12:01:24 +0000 Manifest next update: Sat 27 Dec 2025 12:01:24 +0000 Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: GZGAOiyG3kDx3Jwjcn5QJpFOspTIh6CAVINVwGH4Hvg=) 2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=) 3: _DDyWE_6qVEDbwKdTSOKXXWZzhc.asa (hash: WJa84hCJWVripI8IQcJ6DuU9yIGH2uiiGIsBWDQ40Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:f7:17:dd:12:1c:eb:da:e3:b5:95:f2:22:1d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Validity Not Before: Dec 26 12:01:24 2025 GMT Not After : Dec 27 12:01:24 2025 GMT Subject: CN=c7d1bad81f64ba9e27d9d192993425816701a12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:11:ca:8d:66:61:df:3e:c2:73:43:15:92:16: 1e:b8:e6:cb:6d:bf:68:68:d3:b2:45:46:29:b9:b8: b6:91:7d:e9:19:f7:c1:c3:f7:6c:56:96:33:99:25: e6:55:35:39:d1:35:0e:1b:e3:38:ff:b0:5d:0c:32: 16:ac:91:30:33:54:1a:b3:5e:f3:43:9d:13:a2:88: 07:03:49:19:30:04:23:33:2a:03:f3:12:4e:fb:94: 63:c8:2d:9e:aa:9c:ea:d3:af:e8:2a:0c:32:57:3b: 1a:83:c9:88:50:09:f1:ac:b4:cd:f6:1e:59:1a:36: e5:0f:6e:95:a6:fe:b8:fb:59:58:99:1f:65:52:d2: 99:1e:3a:0d:e1:b3:54:20:c4:3b:78:78:a9:a0:80: c9:18:0e:31:f1:ea:b9:16:84:71:e8:aa:a5:f8:3e: 6f:32:e6:50:31:5d:4c:55:23:c9:f1:77:53:d4:24: 72:79:5e:c3:94:33:04:7c:f8:ca:2f:c9:4a:24:7c: d3:32:1e:d4:c5:55:ae:b9:7d:84:dc:e5:05:16:7f: 52:5c:34:ab:25:45:4f:27:cd:9b:67:33:5e:54:19: 9a:3a:f7:74:07:61:e5:28:5c:a0:8d:70:09:3c:8b: 5d:e9:47:dd:5b:76:62:ac:8e:1c:8b:0d:44:7a:fa: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:BA:D8:1F:64:BA:9E:27:D9:D1:92:99:34:25:81:67:01:A1:2A X509v3 Authority Key Identifier: keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b4:e1:89:d5:03:61:67:d4:7f:43:23:11:0d:c3:19:00:f4: 24:3a:6c:f1:49:ad:05:ae:13:05:f0:c7:64:f4:f6:86:0b:76: 13:f3:99:8f:54:e0:64:c6:28:15:74:a6:aa:a9:f7:89:ce:d2: d7:52:d8:71:d2:a4:15:71:cc:75:be:13:d3:eb:86:6e:1a:fc: fd:a1:36:4e:2d:94:16:42:68:70:61:4c:ea:d6:9b:07:82:86: 7c:6a:f1:17:83:91:3c:81:02:75:80:13:0e:a3:35:c4:a2:0d: fb:24:54:a2:b4:72:e2:c7:4f:4c:19:4f:8c:4a:e8:e0:f6:0e: e0:f6:d9:08:93:7e:ba:7f:a5:91:71:79:89:cb:a9:23:7e:82: f0:50:b4:bf:ca:7e:e3:80:43:36:19:c9:88:9c:a3:26:aa:f2: 84:ac:05:f6:78:97:7d:49:e3:ed:82:ba:c3:97:ce:e1:b4:67: 5d:4c:b1:fd:7f:5f:68:87:4f:2f:ed:cd:ea:20:fa:43:65:1e: f4:ff:b4:00:a9:fc:8f:c0:f3:58:c2:c1:99:a0:9d:99:36:05: d9:4e:15:32:ae:28:ae:63:d0:9c:bc:d1:c9:ed:a9:4f:85:e5: fb:a1:35:49:74:a7:d2:39:b9:4f:64:d5:28:1a:1a:a2:8a:5b: 38:d9:50:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiPcX3RIc69rjtZXyIh3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw MGRkZjUwHhcNMjUxMjI2MTIwMTI0WhcNMjUxMjI3MTIwMTI0WjAzMTEwLwYDVQQD EyhjN2QxYmFkODFmNjRiYTllMjdkOWQxOTI5OTM0MjU4MTY3MDFhMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hHKjWZh3z7Cc0MVkhYeuObLbb9o aNOyRUYpubi2kX3pGffBw/dsVpYzmSXmVTU50TUOG+M4/7BdDDIWrJEwM1Qas17z Q50ToogHA0kZMAQjMyoD8xJO+5RjyC2eqpzq06/oKgwyVzsag8mIUAnxrLTN9h5Z GjblD26Vpv64+1lYmR9lUtKZHjoN4bNUIMQ7eHipoIDJGA4x8eq5FoRx6Kql+D5v MuZQMV1MVSPJ8XdT1CRyeV7DlDMEfPjKL8lKJHzTMh7UxVWuuX2E3OUFFn9SXDSr JUVPJ82bZzNeVBmaOvd0B2HlKFygjXAJPItd6UfdW3ZirI4ciw1EevrUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfRutgfZLqeJ9nRkpk0JYFnAaEqMB8GA1UdIwQY MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrThidUD YWfUf0MjEQ3DGQD0JDps8UmtBa4TBfDHZPT2hgt2E/OZj1TgZMYoFXSmqqn3ic7S 11LYcdKkFXHMdb4T0+uGbhr8/aE2Ti2UFkJocGFM6tabB4KGfGrxF4ORPIECdYAT DqM1xKIN+yRUorRy4sdPTBlPjEro4PYO4PbZCJN+un+lkXF5icupI36C8FC0v8p+ 44BDNhnJiJyjJqryhKwF9niXfUnj7YK6w5fO4bRnXUyx/X9faIdPL+3N6iD6Q2Ue 9P+0AKn8j8DzWMLBmaCdmTYF2U4VMq4ormPQnLzRye2pT4Xl+6E1SXSn0jm5T2TV KBoaoopbONlQ/g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:41 2025 by rpki-client