This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json) Hash identifier: buQ5CWgv/8Q5ETcRFCOoK0Av06AeC0+scEJ1SRLwYqw= Subject key identifier: BA:7A:F8:3B:5C:77:D8:E6:A5:01:23:AA:D6:B2:13:9C:0F:8B:4D:4B Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1 Certificate serial: 019B44A61686F18B3CA5B523E0599F5460F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft Manifest number: 13B3 Signing time: Mon 22 Dec 2025 06:01:33 +0000 Manifest this update: Mon 22 Dec 2025 06:01:33 +0000 Manifest next update: Tue 23 Dec 2025 06:01:33 +0000 Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=) 2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: 43OTU5y3OIyd1fWSWqH9h7GYWSWhU7Eing50w4b2H50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:16:86:f1:8b:3c:a5:b5:23:e0:59:9f:54:60:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1 Validity Not Before: Dec 22 06:01:33 2025 GMT Not After : Dec 23 06:01:33 2025 GMT Subject: CN=ba7af83b5c77d8e6a50123aad6b2139c0f8b4d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:1e:b6:1a:fa:9e:eb:ef:28:f2:3f:4c:5d: 79:b6:10:d7:4c:5c:2d:75:47:f4:0d:fb:7a:f0:16: 1a:ba:6b:a1:a4:24:7f:a8:25:46:b8:fa:e2:d3:81: 38:48:ef:4b:81:96:06:6d:24:49:10:f4:0e:ed:b5: 17:7d:11:0a:f6:18:8d:7b:25:c9:a4:2d:94:47:f3: ac:44:ed:c2:93:50:30:f1:97:49:fa:99:85:81:60: 6a:cc:4f:67:70:16:50:2f:66:c7:72:df:de:73:9a: 17:7f:94:03:9b:54:80:3c:d3:e2:fa:de:58:72:a9: 3f:38:e2:7e:15:a7:d3:8b:a2:54:29:d7:92:f9:39: 8e:b9:9d:f1:2d:25:ae:9b:b1:69:94:49:1c:63:0a: 07:0a:67:da:04:d2:4a:a4:c2:24:50:d6:6f:13:a2: 5d:12:c2:fa:c8:84:ea:f0:5c:06:93:9f:19:13:ea: 25:6c:c8:35:21:61:a9:67:80:85:5c:f1:c6:02:f5: f1:b2:8c:b6:26:78:62:89:72:8e:a7:84:82:bb:d4: ab:d5:66:6b:b5:5e:e4:be:b0:02:21:b6:0f:19:92: 7c:98:c8:bc:31:52:3f:81:4c:86:c5:17:ff:b9:07: 6a:25:23:bf:72:01:df:43:6d:30:ff:44:58:cc:1e: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:F8:3B:5C:77:D8:E6:A5:01:23:AA:D6:B2:13:9C:0F:8B:4D:4B X509v3 Authority Key Identifier: keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ff:f6:72:c8:84:6c:0f:4c:4e:5d:56:8c:44:4d:3c:a7:f1: d4:97:36:59:69:83:83:a9:da:d4:c9:d0:38:f5:10:9f:13:52: c5:c3:be:f2:a6:3f:03:ee:2e:b8:59:40:e1:d6:5f:9c:74:c4: b1:c9:d5:88:e9:e3:6a:ce:3a:7f:06:6a:29:9c:8c:a8:2b:20: 46:e4:c7:be:0d:b7:0e:eb:eb:e7:fb:84:11:37:3a:c4:89:fd: 0c:75:61:1c:34:e4:c1:6c:56:71:10:e0:af:fb:6e:e1:c9:be: 73:36:fb:78:a4:33:cb:7b:e2:ee:e6:6f:02:81:cc:11:e8:25: 2b:ae:31:fa:c9:ab:1e:eb:4b:7f:6b:6d:92:5a:66:75:a4:4d: 79:ca:3f:50:e4:5c:b4:05:06:b6:85:ea:19:2b:5c:49:54:91: 81:00:c9:6d:56:38:61:f3:b2:45:26:5f:f7:16:46:28:13:1f: 03:56:f6:65:fa:cd:85:ea:df:05:1b:6d:ea:20:04:86:c9:89: 87:14:a6:32:6f:90:39:02:a6:61:b9:7a:ac:96:27:df:4a:bd: 77:e2:5d:10:b2:bc:52:d7:18:cc:1f:5d:b9:2d:6f:0e:f0:6c: 72:c4:35:c5:73:57:18:c7:8f:12:19:70:62:9a:d7:9e:78:51: e1:b6:47:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphaG8Ys8pbUj4FmfVGD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj Yzg4ZDEwHhcNMjUxMjIyMDYwMTMzWhcNMjUxMjIzMDYwMTMzWjAzMTEwLwYDVQQD EyhiYTdhZjgzYjVjNzdkOGU2YTUwMTIzYWFkNmIyMTM5YzBmOGI0ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsAethr6nuvvKPI/TF15thDXTFwt dUf0Dft68BYaumuhpCR/qCVGuPri04E4SO9LgZYGbSRJEPQO7bUXfREK9hiNeyXJ pC2UR/OsRO3Ck1Aw8ZdJ+pmFgWBqzE9ncBZQL2bHct/ec5oXf5QDm1SAPNPi+t5Y cqk/OOJ+FafTi6JUKdeS+TmOuZ3xLSWum7FplEkcYwoHCmfaBNJKpMIkUNZvE6Jd EsL6yITq8FwGk58ZE+olbMg1IWGpZ4CFXPHGAvXxsoy2JnhiiXKOp4SCu9Sr1WZr tV7kvrACIbYPGZJ8mMi8MVI/gUyGxRf/uQdqJSO/cgHfQ20w/0RYzB7aQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp6+Dtcd9jmpQEjqtayE5wPi01LMB8GA1UdIwQY MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5 LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv/2csiE bA9MTl1WjERNPKfx1Jc2WWmDg6na1MnQOPUQnxNSxcO+8qY/A+4uuFlA4dZfnHTE scnViOnjas46fwZqKZyMqCsgRuTHvg23Duvr5/uEETc6xIn9DHVhHDTkwWxWcRDg r/tu4cm+czb7eKQzy3vi7uZvAoHMEeglK64x+smrHutLf2ttklpmdaRNeco/UORc tAUGtoXqGStcSVSRgQDJbVY4YfOyRSZf9xZGKBMfA1b2ZfrNherfBRtt6iAEhsmJ hxSmMm+QOQKmYbl6rJYn30q9d+JdELK8UtcYzB9duS1vDvBscsQ1xXNXGMePEhlw YprXnnhR4bZHGA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:46 2025 by rpki-client