This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json) Hash identifier: pn1tc/g3DhbA1/aGr+Ln2qGG67S0fJtOR1TeVFUxrRw= Subject key identifier: 20:15:47:CA:38:90:6B:AD:38:33:92:F9:92:48:C6:14:D0:9F:AA:46 Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Certificate serial: 019B5A51B6395D0EC02E27B67D2762BEA533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:03 +0000 Manifest this update: Fri 26 Dec 2025 11:01:03 +0000 Manifest next update: Sat 27 Dec 2025 11:01:03 +0000 Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: VWBjVpeSrXKTyc06e8Q8aOTJsOEvXl2NlcfmRyX3mhw=) 2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:b6:39:5d:0e:c0:2e:27:b6:7d:27:62:be:a5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611 Validity Not Before: Dec 26 11:01:03 2025 GMT Not After : Dec 27 11:01:03 2025 GMT Subject: CN=201547ca38906bad383392f99248c614d09faa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:fd:d6:2c:a0:d1:77:99:b6:b2:dd:f7:3d: 6e:74:96:0d:73:6d:67:59:ea:40:94:08:64:a3:b6: 26:c7:13:d4:70:4c:6f:34:d7:c7:5a:98:9d:0e:78: 5b:6b:3f:96:b2:7e:03:9f:33:4a:be:92:5e:59:df: b1:08:4d:d2:47:70:08:40:d4:30:61:d5:ed:73:4f: 04:43:94:5e:b5:8f:6d:95:72:70:25:1e:78:0c:01: aa:41:aa:ff:df:0e:59:f7:c2:65:77:fd:2b:16:cd: 5e:ec:95:94:ea:1b:40:49:7e:29:fa:cb:8b:7a:7d: 83:ea:cc:de:93:09:48:21:9a:3d:e6:2c:3d:0d:c8: a3:3c:81:c9:87:85:8c:d4:6c:89:56:b0:1b:30:e8: 87:f5:d5:89:9c:28:9b:12:fd:f5:a5:35:92:23:27: 06:02:86:95:19:3f:f3:0e:d5:d2:a3:fb:64:c9:0a: 96:bf:eb:b6:d4:da:01:83:95:54:2f:2e:ff:97:36: 7a:7d:53:a0:4d:c2:25:91:77:54:e4:9f:72:c8:c2: fa:ea:9f:b8:34:92:3d:34:9e:f7:01:9c:f7:98:a7: 48:08:c5:0a:f4:ae:02:4c:6c:80:69:a2:8e:9a:04: 92:a6:03:6c:88:7c:87:47:7e:86:c9:a8:56:03:d6: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:47:CA:38:90:6B:AD:38:33:92:F9:92:48:C6:14:D0:9F:AA:46 X509v3 Authority Key Identifier: keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4a:57:7c:24:c7:38:3e:9b:93:db:50:85:5b:62:9c:6d:85: 28:30:9f:47:bf:1f:b1:36:f7:f6:38:05:05:3e:e2:5c:93:29: 13:e7:7e:5a:00:06:41:70:2c:02:2d:de:33:34:b1:d2:dd:b5: dc:6a:d3:5c:14:71:dd:58:8f:53:4c:95:f9:83:28:31:d5:f7: c1:61:33:5b:d6:06:4f:a8:1d:0e:ae:53:7a:9f:9b:c5:c7:96: 54:c7:1d:29:19:f3:b9:fb:07:51:6f:69:24:25:de:8a:5e:ef: 5f:3e:36:9c:8a:0b:5e:66:11:1a:bb:82:bc:62:b2:ff:b7:29: cc:f7:64:3e:8a:1c:f4:5a:eb:00:36:2d:be:e8:b1:2d:af:7b: b1:ff:5f:5b:84:a0:37:02:82:bd:36:ef:27:df:cf:5b:4c:9d: 0d:7f:d5:b0:4d:e1:e2:1b:28:07:0a:a5:c7:57:51:5d:8c:a6: 6c:8e:ec:06:42:30:f4:e2:2a:4f:e5:f4:d8:f1:8f:86:7d:b9: c9:26:23:e7:24:00:b5:02:a2:1e:4d:33:8b:41:1f:86:c2:c6: 7d:e5:eb:41:ad:d6:49:e0:22:45:ff:c9:89:f4:fb:32:23:c2: 0a:3d:e5:c7:73:a4:18:34:70:c1:0b:f2:e6:4f:92:10:97:ae: 1d:e5:64:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbY5XQ7ALie2fSdivqUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh MmQ2MTEwHhcNMjUxMjI2MTEwMTAzWhcNMjUxMjI3MTEwMTAzWjAzMTEwLwYDVQQD EygyMDE1NDdjYTM4OTA2YmFkMzgzMzkyZjk5MjQ4YzYxNGQwOWZhYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkD91iyg0XeZtrLd9z1udJYNc21n WepAlAhko7YmxxPUcExvNNfHWpidDnhbaz+Wsn4DnzNKvpJeWd+xCE3SR3AIQNQw YdXtc08EQ5RetY9tlXJwJR54DAGqQar/3w5Z98Jld/0rFs1e7JWU6htASX4p+suL en2D6szekwlIIZo95iw9DcijPIHJh4WM1GyJVrAbMOiH9dWJnCibEv31pTWSIycG AoaVGT/zDtXSo/tkyQqWv+u21NoBg5VULy7/lzZ6fVOgTcIlkXdU5J9yyML66p+4 NJI9NJ73AZz3mKdICMUK9K4CTGyAaaKOmgSSpgNsiHyHR36GyahWA9Y9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAVR8o4kGutODOS+ZJIxhTQn6pGMB8GA1UdIwQY MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkpXfCTH OD6bk9tQhVtinG2FKDCfR78fsTb39jgFBT7iXJMpE+d+WgAGQXAsAi3eMzSx0t21 3GrTXBRx3ViPU0yV+YMoMdX3wWEzW9YGT6gdDq5Tep+bxceWVMcdKRnzufsHUW9p JCXeil7vXz42nIoLXmYRGruCvGKy/7cpzPdkPooc9FrrADYtvuixLa97sf9fW4Sg NwKCvTbvJ9/PW0ydDX/VsE3h4hsoBwqlx1dRXYymbI7sBkIw9OIqT+X02PGPhn25 ySYj5yQAtQKiHk0zi0EfhsLGfeXrQa3WSeAiRf/JifT7MiPCCj3lx3OkGDRwwQvy 5k+SEJeuHeVkNg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client