This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json) Hash identifier: SGZOMh6P8PPJPPJOSpXSWWcEvZIzxsZBsuzH5y90nGg= Subject key identifier: DD:1A:C2:40:4A:FE:E1:5A:1A:CA:46:EB:F7:15:83:0C:E3:BE:8F:7F Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Certificate serial: 019B59ACB5D02A457350052AADF3E9A731DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:49 +0000 Manifest this update: Fri 26 Dec 2025 08:00:49 +0000 Manifest next update: Sat 27 Dec 2025 08:00:49 +0000 Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=) 2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: jO9+kpOad9EbL8uUravWXtRVo5wHbC7WXGGLoc8osqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:b5:d0:2a:45:73:50:05:2a:ad:f3:e9:a7:31:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3 Validity Not Before: Dec 26 08:00:49 2025 GMT Not After : Dec 27 08:00:49 2025 GMT Subject: CN=dd1ac2404afee15a1aca46ebf715830ce3be8f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:e5:24:ea:c5:98:2d:35:6e:9b:1f:66:11: 41:01:02:82:44:44:e5:3b:7f:2f:ed:4b:af:4a:cb: 26:66:a9:2c:38:b0:90:55:d5:8c:81:d4:85:39:11: ad:4f:51:03:d5:e6:a0:ea:3c:ad:71:5e:90:a2:3b: 7e:fc:c8:d4:78:07:50:37:7c:23:c3:6b:d5:7a:00: 13:be:e6:14:bf:e8:af:6f:f9:49:82:d3:5d:c8:9c: 33:ba:ee:8c:aa:ff:fe:f2:40:32:4c:89:3f:9f:b9: d0:29:a0:e7:c6:32:94:be:f5:c0:3e:e1:00:a7:d2: 8b:7d:15:f1:4f:4a:ad:ff:20:32:3e:49:4a:8f:90: 4b:a2:0d:31:29:a7:ca:d1:b8:fa:ab:6b:7f:de:bb: 13:3e:a0:ac:93:ae:ae:33:58:51:b9:3c:f6:a4:a5: 37:84:74:d3:2c:91:53:58:dd:89:15:71:42:c8:9a: ed:79:17:2e:7e:e6:10:e3:d1:09:9b:d4:b1:28:86: af:02:55:fe:91:58:8b:ce:22:81:fe:33:cd:de:a2: b8:13:a9:57:e1:80:5d:0d:49:57:89:fd:ae:26:f4: 80:7e:36:7d:a3:68:e6:6e:39:15:85:26:3e:97:c7: e8:ad:27:e6:b1:37:ac:e9:5e:1e:ef:83:36:51:b4: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:C2:40:4A:FE:E1:5A:1A:CA:46:EB:F7:15:83:0C:E3:BE:8F:7F X509v3 Authority Key Identifier: keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:b3:1b:f5:df:ac:0b:bd:bb:77:87:75:e7:5e:60:84:51: d4:68:dd:9b:30:1b:9c:90:bd:5b:aa:8a:bb:3e:8d:20:f0:90: 3e:45:79:86:44:4a:e1:9e:d4:80:bf:19:8a:1c:9c:65:9b:41: b5:93:9f:92:ac:31:31:e7:c2:41:78:87:1a:f2:4c:f6:85:94: 34:ba:0d:3a:3c:3f:c8:d4:0e:e6:c8:3b:d7:ad:45:e6:ca:c8: 67:31:b8:e1:9e:64:f3:b5:aa:7e:d7:a1:2d:34:31:42:f3:b9: 2c:95:ee:ac:57:c7:1a:8b:b6:49:3d:21:63:05:34:a5:ac:d2: 6b:64:01:a8:5d:c0:d1:46:6c:6c:13:37:b7:18:4e:b0:c3:60: 28:15:59:f7:2f:28:fe:9f:ac:2a:19:a1:c6:a9:47:fb:b3:b5: 9b:59:5c:41:39:93:17:0e:59:dc:22:1a:ac:04:4f:3e:a8:00: a3:9d:c6:8b:03:b5:7a:78:9b:59:c1:69:1d:68:7a:fd:6d:84: 8a:f0:e7:b8:d4:1c:95:29:10:13:83:2e:a8:73:64:33:e9:b9: f6:c2:7b:8e:17:32:38:fc:99:4a:80:41:e3:3c:d6:47:5c:01: ec:40:e3:e7:f5:04:93:24:8c:60:dd:ff:3a:07:37:47:e3:da: 01:7e:22:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLXQKkVzUAUqrfPppzHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk NTBmZDMwHhcNMjUxMjI2MDgwMDQ5WhcNMjUxMjI3MDgwMDQ5WjAzMTEwLwYDVQQD EyhkZDFhYzI0MDRhZmVlMTVhMWFjYTQ2ZWJmNzE1ODMwY2UzYmU4ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XHlJOrFmC01bpsfZhFBAQKCRETl O38v7UuvSssmZqksOLCQVdWMgdSFORGtT1ED1eag6jytcV6Qojt+/MjUeAdQN3wj w2vVegATvuYUv+ivb/lJgtNdyJwzuu6Mqv/+8kAyTIk/n7nQKaDnxjKUvvXAPuEA p9KLfRXxT0qt/yAyPklKj5BLog0xKafK0bj6q2t/3rsTPqCsk66uM1hRuTz2pKU3 hHTTLJFTWN2JFXFCyJrteRcufuYQ49EJm9SxKIavAlX+kViLziKB/jPN3qK4E6lX 4YBdDUlXif2uJvSAfjZ9o2jmbjkVhSY+l8forSfmsTes6V4e74M2UbSMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0awkBK/uFaGspG6/cVgwzjvo9/MB8GA1UdIwQY MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxazG/Xf rAu9u3eHdedeYIRR1GjdmzAbnJC9W6qKuz6NIPCQPkV5hkRK4Z7UgL8ZihycZZtB tZOfkqwxMefCQXiHGvJM9oWUNLoNOjw/yNQO5sg7161F5srIZzG44Z5k87Wqfteh LTQxQvO5LJXurFfHGou2ST0hYwU0pazSa2QBqF3A0UZsbBM3txhOsMNgKBVZ9y8o /p+sKhmhxqlH+7O1m1lcQTmTFw5Z3CIarARPPqgAo53GiwO1enibWcFpHWh6/W2E ivDnuNQclSkQE4MuqHNkM+m59sJ7jhcyOPyZSoBB4zzWR1wB7EDj5/UEkySMYN3/ Ogc3R+PaAX4imA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:18 2025 by rpki-client