This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json) Hash identifier: Y64jMGSec9T0+JIYO2VP2PH9aXq4W3xf0UD/ZdI9veY= Subject key identifier: 74:FB:5B:68:D6:65:33:79:04:ED:7D:5F:A5:6D:C4:DF:E7:C2:D7:16 Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a Certificate serial: 019B3F4886C737BE103C8AD06805ECBE6916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft Manifest number: 0B1A Signing time: Sun 21 Dec 2025 05:01:16 +0000 Manifest this update: Sun 21 Dec 2025 05:01:16 +0000 Manifest next update: Mon 22 Dec 2025 05:01:16 +0000 Files and hashes: 1: 5-5dw7BQUILpSuBDRasWi_TUWvo.roa (hash: hm9ysYElh3sbrH5I7xkNigsOqhpocQkIVZkL8ahr+uU=) 2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: swFflu+4IxVfhnzo/Z80Xt7oM6rsAr1rwdwd/P090mU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:86:c7:37:be:10:3c:8a:d0:68:05:ec:be:69:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a Validity Not Before: Dec 21 05:01:16 2025 GMT Not After : Dec 22 05:01:16 2025 GMT Subject: CN=74fb5b68d665337904ed7d5fa56dc4dfe7c2d716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:bb:4b:ba:f1:b6:59:bc:f6:4f:3c:12:e1: 04:08:8d:ff:1a:40:72:e9:f0:92:22:bc:41:75:64: e0:bb:97:6b:a6:54:c4:8b:cc:fa:c7:af:ef:2f:24: 6f:e1:b5:71:b3:2e:b0:2e:52:94:80:e8:51:db:4f: 1d:64:ae:a5:8f:a4:80:ee:9e:3f:a3:25:90:3b:eb: eb:8b:f1:fd:fb:c3:fc:0b:af:59:ea:05:13:79:f5: 0b:e3:48:b1:f9:48:5f:31:51:bd:70:c2:5f:6e:e4: 9d:1f:ec:aa:81:9d:5e:1c:4a:e1:cd:1b:51:22:9f: ef:0c:e7:39:91:21:2f:fd:bb:8d:90:d1:fe:ff:0f: 7a:6b:fe:0a:32:b7:8c:bb:7d:2b:a8:f8:fd:33:c2: 59:96:79:97:2c:2f:6b:eb:28:84:67:c1:8e:dd:fb: e8:8c:f5:f5:5c:4c:7e:07:21:19:58:02:aa:a3:af: 44:e1:51:6a:db:99:2f:49:4f:c9:fb:a2:93:b9:be: 85:58:29:a3:7a:c2:46:40:33:0a:02:29:55:ae:ad: 23:00:e3:9d:fe:0f:0d:01:5e:99:d9:9f:0f:94:d6: f8:0b:d4:fe:5c:86:a5:e3:c6:7f:af:07:fd:66:54: 9e:6e:e8:e0:0c:46:62:73:f0:89:4f:be:8e:31:9d: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:5B:68:D6:65:33:79:04:ED:7D:5F:A5:6D:C4:DF:E7:C2:D7:16 X509v3 Authority Key Identifier: keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:93:d3:c6:f0:15:16:cd:97:53:47:7c:b1:94:5a:50:33:b5: d4:6e:e7:12:c0:35:39:00:30:13:ad:3b:55:21:d4:ac:58:08: 64:ea:9a:b6:9e:90:82:6f:26:44:0b:49:29:5b:86:c4:08:88: 5b:5c:ab:32:f3:26:37:ca:2c:20:7d:f2:16:74:10:b7:41:d1: a8:6e:82:ea:41:88:0e:62:5b:2a:e8:ca:64:12:bf:3c:08:74: 5d:67:61:20:d5:f3:cd:c8:a2:b0:f7:4d:00:ca:83:a7:af:08: 34:36:e2:12:20:81:a1:16:f4:32:f6:7b:70:89:6b:9c:f3:fa: c0:93:fd:10:7c:5a:0b:10:a4:26:26:73:0a:08:11:74:71:b2: 5d:f0:e0:a9:f7:06:c1:fa:c2:9f:3d:1a:38:e6:fe:d0:b8:55: 6a:aa:c3:63:c7:bf:56:05:5b:8e:ab:56:8d:97:c5:09:ef:84: 13:34:df:74:cd:4b:7a:59:57:ad:30:d8:c8:0a:ba:66:f5:23: c0:3f:05:cd:aa:51:8e:16:19:e1:39:1b:71:3a:21:42:4a:88: 56:e0:9c:f2:4c:80:90:ce:44:a8:be:6b:30:01:17:0c:42:8e: 65:7a:1c:92:08:bf:cd:5b:12:0d:f7:9b:96:86:e0:e1:cd:6c: b6:35:04:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SIbHN74QPIrQaAXsvmkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTNhOThhNzQ5ZTU2OTc0NGExZWRlMmM5NDBmMmU0MzNj NDQwOGEwHhcNMjUxMjIxMDUwMTE2WhcNMjUxMjIyMDUwMTE2WjAzMTEwLwYDVQQD Eyg3NGZiNWI2OGQ2NjUzMzc5MDRlZDdkNWZhNTZkYzRkZmU3YzJkNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNW7S7rxtlm89k88EuEECI3/GkBy 6fCSIrxBdWTgu5drplTEi8z6x6/vLyRv4bVxsy6wLlKUgOhR208dZK6lj6SA7p4/ oyWQO+vri/H9+8P8C69Z6gUTefUL40ix+UhfMVG9cMJfbuSdH+yqgZ1eHErhzRtR Ip/vDOc5kSEv/buNkNH+/w96a/4KMreMu30rqPj9M8JZlnmXLC9r6yiEZ8GO3fvo jPX1XEx+ByEZWAKqo69E4VFq25kvSU/J+6KTub6FWCmjesJGQDMKAilVrq0jAOOd /g8NAV6Z2Z8PlNb4C9T+XIal48Z/rwf9ZlSebujgDEZic/CJT76OMZ3rHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT7W2jWZTN5BO19X6VtxN/nwtcWMB8GA1UdIwQY MBaAFHZTqYp0nlaXRKHt4slA8uQzxECKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEt YjlkYzJmMmIwMDJjLzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEtYjlkYzJmMmIwMDJj LzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5PTxvAV Fs2XU0d8sZRaUDO11G7nEsA1OQAwE607VSHUrFgIZOqatp6Qgm8mRAtJKVuGxAiI W1yrMvMmN8osIH3yFnQQt0HRqG6C6kGIDmJbKujKZBK/PAh0XWdhINXzzciisPdN AMqDp68INDbiEiCBoRb0MvZ7cIlrnPP6wJP9EHxaCxCkJiZzCggRdHGyXfDgqfcG wfrCnz0aOOb+0LhVaqrDY8e/VgVbjqtWjZfFCe+EEzTfdM1LellXrTDYyAq6ZvUj wD8FzapRjhYZ4TkbcTohQkqIVuCc8kyAkM5EqL5rMAEXDEKOZXockgi/zVsSDfeb lobg4c1stjUEoA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:44:33 2025 by rpki-client